$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa File: d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa (raw, json) Hash identifier: AViOneIB0UJ9pqq9RWeZEEc/CWUD60fAVXhoj7reNxE= Subject key identifier: C1:7A:08:1B:91:93:B0:16:1A:AD:32:AA:86:DA:24:50:AA:8C:D7:45 Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F43285848FBF12B40F6DAFCD4C937F2C0 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa Signing time: Mon 24 Feb 2025 02:00:38 +0000 ROA not before: Mon 24 Feb 2025 02:00:38 +0000 ROA not after: Sun 25 May 2025 01:00:38 +0000 asID: 11260 IP address blocks: 149.19.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fb:f1:2b:40:f6:da:fc:d4:c9:37:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Feb 24 02:00:38 2025 GMT Not After : May 25 01:00:38 2025 GMT Subject: CN=6283ee8d-c6b2-4421-831c-9f144415201f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:92:2b:be:13:eb:c6:d2:3c:98:e0:d6:db:98: ae:ff:98:f5:5a:ef:64:f9:12:aa:02:d7:34:2f:91: e5:93:c9:b4:4d:d7:a9:d8:df:d3:0a:2b:d6:b9:c3: 85:ea:5c:1d:3b:e0:2a:23:98:d1:8d:cc:4c:6a:9d: c5:6b:6f:e4:64:7a:28:26:2b:ff:ba:81:0f:55:c3: cd:bd:e7:ef:d3:d3:f6:58:a8:b3:10:b2:ff:b8:1c: aa:38:a5:8e:d7:27:74:69:10:a1:e4:13:49:81:fc: 66:50:8b:e1:00:50:de:d8:e1:ec:29:fd:3c:7f:5f: e9:d7:7f:3f:ad:29:d2:9d:0a:29:90:3a:2b:f9:e7: 0d:0d:1a:44:5f:6a:8e:e7:3d:55:9a:19:9e:5a:9c: 78:8d:59:24:59:bd:d8:d0:e4:4f:55:7c:c3:3d:50: 28:48:84:7c:ab:b7:18:7f:cf:6a:34:e4:a8:10:5a: 5c:07:87:2d:c2:39:07:08:62:b6:5d:33:12:fb:f5: 73:e2:55:73:96:9e:49:e1:4a:bd:16:95:1d:ae:c2: 7a:3a:9e:20:9d:fc:15:8c:a4:a7:45:a2:6f:9d:37: b9:f0:ee:00:26:2e:cc:1c:7b:3e:f4:fc:20:87:e7: a4:58:ad:a1:14:e9:75:b9:ec:28:a8:8d:78:17:3a: 42:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7A:08:1B:91:93:B0:16:1A:AD:32:AA:86:DA:24:50:AA:8C:D7:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 149.19.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:a3:be:0b:f2:c3:18:39:71:51:2c:76:03:34:80:01:0f:2e: d2:16:f9:0c:f1:a2:b5:52:42:ba:9f:cf:ae:a8:bf:db:ea:5e: f5:f1:bb:86:91:c8:fa:c0:9e:5c:12:78:43:1b:da:23:f0:88: b7:fd:93:81:03:95:16:46:ca:d0:3e:24:56:ca:01:ca:95:0a: 92:1c:bd:c9:5e:a4:8f:6e:b6:d0:c7:b1:a7:0f:33:9b:fc:d8: b9:d4:c0:7d:22:3a:9d:47:0c:54:37:8b:14:17:84:a6:58:68: 73:d9:fa:9d:cb:f5:43:09:1c:1a:0e:70:49:e0:03:fd:bb:52: a1:10:de:44:85:1b:52:d2:bd:41:37:76:01:91:d2:a9:ec:06: 8d:ea:c0:ae:e8:8e:23:67:5c:45:bd:0b:47:50:53:14:c6:23: f3:10:0c:32:cb:ad:d6:91:88:73:05:ec:1f:eb:95:5e:52:89: 51:73:c1:32:49:1f:11:71:b0:13:b4:ef:4f:4e:29:93:22:4e: aa:6b:c0:d6:e6:22:01:47:3c:2e:15:33:23:40:86:7f:7c:18: b7:61:2b:30:ad:c4:a3:e0:4a:7e:43:cc:07:d0:40:70:d6:d4: 65:23:31:75:5d:b8:27:81:e4:12:5d:1a:6f:30:bf:c2:b2:34: 0e:9f:0e:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj78StA9tr81Mk38sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MDIyNDAyMDAzOFoXDTI1MDUyNTAxMDAzOFowLzEtMCsGA1UEAxMk NjI4M2VlOGQtYzZiMi00NDIxLTgzMWMtOWYxNDQ0MTUyMDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpIrvhPrxtI8mODW25iu/5j1Wu9k+RKqAtc0 L5Hlk8m0Tdep2N/TCivWucOF6lwdO+AqI5jRjcxMap3Fa2/kZHooJiv/uoEPVcPN vefv09P2WKizELL/uByqOKWO1yd0aRCh5BNJgfxmUIvhAFDe2OHsKf08f1/p138/ rSnSnQopkDor+ecNDRpEX2qO5z1VmhmeWpx4jVkkWb3Y0ORPVXzDPVAoSIR8q7cY f89qNOSoEFpcB4ctwjkHCGK2XTMS+/Vz4lVzlp5J4Uq9FpUdrsJ6Op4gnfwVjKSn RaJvnTe58O4AJi7MHHs+9Pwgh+ekWK2hFOl1uewoqI14FzpCPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF6CBuRk7AWGq0yqobaJFCqjNdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvZDhiZjY2OWUtYmM3OS0z YzZmLWE4YzQtZjQxNmYyZDRjNDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyjvgvywxg5cVEsdgM0gAEPLtIW+QzxorVSQrqfz66ov9vqXvXxu4aR yPrAnlwSeEMb2iPwiLf9k4EDlRZGytA+JFbKAcqVCpIcvclepI9uttDHsacPM5v8 2LnUwH0iOp1HDFQ3ixQXhKZYaHPZ+p3L9UMJHBoOcEngA/27UqEQ3kSFG1LSvUE3 dgGR0qnsBo3qwK7ojiNnXEW9C0dQUxTGI/MQDDLLrdaRiHMF7B/rlV5SiVFzwTJJ HxFxsBO0709OKZMiTqprwNbmIgFHPC4VMyNAhn98GLdhKzCtxKPgSn5DzAfQQHDW 1GUjMXVduCeB5BJdGm8wv8KyNA6fDjs= -----END CERTIFICATE-----Generated at Fri Apr 4 18:53:50 2025 by rpki-client