$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa File: 21975138-cf92-36b8-8d76-cc6b2ac602dd.roa (raw, json) Hash identifier: blIYhwxdi6JqUTwaZZy6970Q5i7NFDDaoHiRsgmSaLw= Subject key identifier: 8A:2D:32:B3:1F:77:0D:0C:0C:73:A9:19:2E:AC:F1:D6:D5:AC:70:42 Certificate issuer: /CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Certificate serial: 010D0C9F432858489340B49BE6F00452A4C70D80 Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 40401 IP address blocks: 149.137.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:b4:9b:e6:f0:04:52:a4:c7:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=2cf6710c-127b-49a0-a980-55836479f434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:18:4a:b0:8a:70:42:6a:b1:50:84:6c:2f:34: e9:15:a2:06:0c:90:1d:bf:bd:13:55:78:3c:33:c0: b9:0e:0f:97:d6:20:41:ac:a1:07:79:67:c6:fd:aa: 7f:08:f6:82:1f:e6:21:d9:4a:5a:8b:2c:1c:db:af: 86:da:36:2c:59:8b:46:d4:b1:3d:d8:f3:a5:96:3a: 6b:96:b5:00:f1:0a:da:70:62:75:d0:e8:58:97:5d: 75:ec:38:31:7a:54:3f:0e:f2:7d:87:81:7c:7b:25: b7:51:29:c7:92:8a:a4:3b:0d:86:5c:e1:bd:7a:b5: 16:98:40:15:92:ad:e2:64:5a:06:de:62:cf:5e:18: bf:8b:a5:71:19:0b:62:5b:5d:37:00:1f:d7:e2:d1: 42:2d:46:29:27:d9:a7:fa:f4:f6:38:69:ac:73:de: 24:c6:a0:db:5b:36:96:e0:fd:ac:98:18:13:b9:9d: 37:7c:34:ea:53:7f:43:3c:c0:7e:5b:d4:30:60:1f: 5e:db:3f:99:6c:ea:77:87:a0:7b:6b:30:5e:cc:fa: 8d:a7:58:e5:24:0f:82:0d:73:e6:59:c0:69:f1:d2: e5:65:31:7a:4a:d4:52:47:02:51:fd:70:59:0d:d7: 4d:25:b1:5c:18:0b:9e:ec:81:04:1b:9d:86:83:6f: 57:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2D:32:B3:1F:77:0D:0C:0C:73:A9:19:2E:AC:F1:D6:D5:AC:70:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl X509v3 Authority Key Identifier: keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer sbgp-ipAddrBlock: critical IPv4: 149.137.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:51:2c:06:2a:a5:5a:f0:c9:02:95:ff:49:72:8f:f4:31:c4: d2:44:05:41:de:42:1e:67:63:de:81:21:e3:cf:04:50:b4:dd: a0:d3:cc:8f:6f:e8:03:76:cc:57:34:74:47:a9:61:2a:f1:f0: 83:ed:69:44:20:a3:73:40:ff:a3:bc:7a:83:86:ac:e9:bf:ed: f6:b4:bd:8e:9a:57:4c:27:5b:46:8c:a4:16:e0:3a:8d:80:dd: eb:54:3a:f8:79:ed:77:59:f4:01:dd:ce:76:5c:b8:e9:cb:d2: 83:31:d5:d8:2b:90:36:74:4f:1b:43:c5:d1:8e:67:4b:7f:0c: 79:77:3a:78:89:d1:a7:47:0c:9f:f5:ab:c3:4a:57:21:7b:3a: 99:64:a3:d8:31:6f:dc:81:8c:79:1f:41:d8:f2:ee:80:04:be: b2:16:cf:b2:1b:0e:af:a5:98:88:6e:3e:d8:a6:95:ac:d6:64: f6:80:1d:2a:f4:fb:21:1b:a6:72:17:4a:d0:e2:80:d7:ab:f9: 59:a2:01:64:98:f4:a6:2b:96:5a:c4:4c:a3:78:a3:f0:2f:c9: a6:44:d1:fe:fd:13:00:34:04:23:ba:22:78:a7:99:54:f8:92: 04:fa:a4:7e:50:64:50:49:9b:6b:9e:7c:26:12:b0:c4:8a:1b: d0:4d:dc:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLSb5vAEUqTHDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MzMTNlMzktOTFmMS00MWZjLWJjNWMtZDIxM2E0Mjll Mjg3MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk MmNmNjcxMGMtMTI3Yi00OWEwLWE5ODAtNTU4MzY0NzlmNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphhKsIpwQmqxUIRsLzTpFaIGDJAdv70TVXg8 M8C5Dg+X1iBBrKEHeWfG/ap/CPaCH+Yh2Upaiywc26+G2jYsWYtG1LE92POlljpr lrUA8QracGJ10OhYl1117DgxelQ/DvJ9h4F8eyW3USnHkoqkOw2GXOG9erUWmEAV kq3iZFoG3mLPXhi/i6VxGQtiW103AB/X4tFCLUYpJ9mn+vT2OGmsc94kxqDbWzaW 4P2smBgTuZ03fDTqU39DPMB+W9QwYB9e2z+ZbOp3h6B7azBezPqNp1jlJA+CDXPm WcBp8dLlZTF6StRSRwJR/XBZDddNJbFcGAue7IEEG52Gg29X5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIotMrMfdw0MDHOpGS6s8dbVrHBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMx M2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEzYTQyOWUyODcvMjE5NzUxMzgtY2Y5Mi0z NmI4LThkNzYtY2M2YjJhYzYwMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2MzMTNlMzktOTFmMS00MWZjLWJj NWMtZDIxM2E0MjllMjg3LzdjMzEzZTM5LTkxZjEtNDFmYy1iYzVjLWQyMTNhNDI5 ZTI4Ny5jcmwwHwYDVR0jBBgwFoAUfZc5aNgWxyYUfpq5JQWS6V07FCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMxM2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEz YTQyOWUyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElYmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNRLAYqpVrwyQKV/0lyj/QxxNJEBUHeQh5nY96BIePPBFC03aDTzI9v 6AN2zFc0dEepYSrx8IPtaUQgo3NA/6O8eoOGrOm/7fa0vY6aV0wnW0aMpBbgOo2A 3etUOvh57XdZ9AHdznZcuOnL0oMx1dgrkDZ0TxtDxdGOZ0t/DHl3OniJ0adHDJ/1 q8NKVyF7Oplko9gxb9yBjHkfQdjy7oAEvrIWz7IbDq+lmIhuPtimlazWZPaAHSr0 +yEbpnIXStDigNer+VmiAWSY9KYrllrETKN4o/AvyaZE0f79EwA0BCO6IninmVT4 kgT6pH5QZFBJm2uefCYSsMSKG9BN3EA= -----END CERTIFICATE-----Generated at Fri Apr 4 16:06:59 2025 by rpki-client