$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa File: 1a24eb8c-763e-3fe5-9854-4c755677df1e.roa (raw, json) Hash identifier: MVFuUOxVQxuoluap/u6fAQjyIRzzd88Di580+kLLclY= Subject key identifier: 9C:56:EE:CF:B2:82:19:A5:D0:5A:11:C4:50:B0:9A:70:99:FA:03:3E Certificate issuer: /CN=943895ce-649a-4937-9d38-a57b20ee748f Certificate serial: 010D0C9F4328584949FE96D30FDF1EC269A276E0 Authority key identifier: E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 16824 IP address blocks: 149.20.232.0/24 maxlen: 24 149.20.233.0/24 maxlen: 24 149.20.234.0/24 maxlen: 24 149.20.235.0/24 maxlen: 24 149.20.236.0/24 maxlen: 24 149.20.237.0/24 maxlen: 24 149.20.238.0/24 maxlen: 24 149.20.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:96:d3:0f:df:1e:c2:69:a2:76:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943895ce-649a-4937-9d38-a57b20ee748f Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=c0b76d01-a420-4fff-a6c1-87866193c5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2c:ea:a6:bd:6e:b1:3d:c4:25:1d:92:70:59: d5:4d:94:81:5f:57:f4:05:7c:5a:aa:bc:1e:96:54: 1f:2f:02:16:01:d4:b2:c3:e1:eb:6e:64:0a:f0:bf: 37:41:a2:03:b9:72:14:82:29:fb:aa:da:37:df:1b: 14:89:0d:b7:a3:a2:22:b0:3a:6b:a5:0a:e6:ee:c1: dc:f2:79:6e:54:a9:fa:08:c0:96:bd:df:43:b9:96: 71:a0:9a:ab:90:b2:b1:59:97:3c:23:9a:7c:70:1b: cc:74:08:69:f9:ce:a3:4a:25:ff:d1:89:ae:a3:80: f5:8d:da:5b:f2:33:c9:18:81:9c:06:9f:2a:71:f0: 41:fe:2e:9d:6f:c3:83:ff:24:65:17:6d:b2:c8:d3: 09:e4:cb:be:8d:c0:20:6f:ac:32:29:ed:7e:32:49: b6:09:91:02:70:a8:8c:4f:9a:6a:ef:1b:62:d1:93: c8:6a:e1:80:4f:a2:f4:86:c1:c3:91:ea:70:46:b3: d1:29:a8:86:8e:cd:8c:99:c8:93:ef:5d:3a:49:74: 9f:6d:54:bb:ad:3c:27:96:28:97:29:40:2e:0b:42: c8:32:4b:26:85:e3:3b:cc:c7:a8:c3:cb:d1:3f:27: 5f:57:4b:a9:34:70:b6:3b:89:ea:1b:7c:1d:60:7d: 93:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:56:EE:CF:B2:82:19:A5:D0:5A:11:C4:50:B0:9A:70:99:FA:03:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.crl X509v3 Authority Key Identifier: keyid:E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer sbgp-ipAddrBlock: critical IPv4: 149.20.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:0b:cf:88:c6:05:63:44:f8:01:41:f3:98:44:32:ed:d7:8b: 24:15:54:e7:45:49:ae:ab:91:70:bc:c3:36:53:13:ff:4e:2b: 0f:93:4e:c8:d2:fc:d5:89:9f:63:71:4f:cb:b1:6c:7b:30:97: 2d:71:7b:14:0b:e9:7a:ba:f0:a5:b9:b6:03:23:5f:2f:99:2b: 47:22:68:61:37:e6:9b:cf:22:1d:28:21:94:17:bd:cf:c3:2d: 05:48:d5:de:14:4b:57:23:47:43:24:ff:4b:dd:30:90:22:7a: 9e:02:25:d9:c5:5c:2b:91:cc:93:7e:7c:29:6c:ce:be:1e:7e: f1:eb:18:d1:d1:c1:15:6f:ea:87:2f:45:55:44:1f:c2:a1:10: 74:6c:b8:3c:38:ea:ca:6c:c6:be:61:17:fc:8a:d3:56:48:3a: ab:1c:eb:91:7b:1d:3a:c0:6e:1f:ff:ba:cd:ea:9f:9e:81:08: 8b:b4:62:42:ee:02:56:43:9f:22:81:2d:d0:e9:d1:7f:ff:57: bb:b0:aa:2a:66:6d:e0:41:4b:13:1b:d0:19:a4:8b:18:44:b4: ce:1d:65:1c:22:d8:c3:74:bc:8e:2b:0a:37:73:f5:a4:b6:d8: 71:32:a7:57:b3:14:6d:14:f2:1f:46:98:8a:37:7a:aa:c7:42: 50:39:bd:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pbTD98ewmmiduAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQzODk1Y2UtNjQ5YS00OTM3LTlkMzgtYTU3YjIwZWU3 NDhmMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk YzBiNzZkMDEtYTQyMC00ZmZmLWE2YzEtODc4NjYxOTNjNWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhizqpr1usT3EJR2ScFnVTZSBX1f0BXxaqrwe llQfLwIWAdSyw+HrbmQK8L83QaIDuXIUgin7qto33xsUiQ23o6IisDprpQrm7sHc 8nluVKn6CMCWvd9DuZZxoJqrkLKxWZc8I5p8cBvMdAhp+c6jSiX/0Ymuo4D1jdpb 8jPJGIGcBp8qcfBB/i6db8OD/yRlF22yyNMJ5Mu+jcAgb6wyKe1+Mkm2CZECcKiM T5pq7xti0ZPIauGAT6L0hsHDkepwRrPRKaiGjs2MmciT7106SXSfbVS7rTwnliiX KUAuC0LIMksmheM7zMeow8vRPydfV0upNHC2O4nqG3wdYH2TdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxW7s+yghml0FoRxFCwmnCZ+gM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85NDM4 OTVjZS02NDlhLTQ5MzctOWQzOC1hNTdiMjBlZTc0OGYvMWEyNGViOGMtNzYzZS0z ZmU1LTk4NTQtNGM3NTU2NzdkZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTQzODk1Y2UtNjQ5YS00OTM3LTlk MzgtYTU3YjIwZWU3NDhmLzk0Mzg5NWNlLTY0OWEtNDkzNy05ZDM4LWE1N2IyMGVl NzQ4Zi5jcmwwHwYDVR0jBBgwFoAU6SQM4RQvHB0Xd/sQjKTKGzJNiQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85NDM4OTVjZS02NDlhLTQ5MzctOWQzOC1hNTdi MjBlZTc0OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABILz4jGBWNE+AFB85hEMu3XiyQVVOdFSa6rkXC8wzZTE/9OKw+TTsjS /NWJn2NxT8uxbHswly1xexQL6Xq68KW5tgMjXy+ZK0ciaGE35pvPIh0oIZQXvc/D LQVI1d4US1cjR0Mk/0vdMJAiep4CJdnFXCuRzJN+fClszr4efvHrGNHRwRVv6ocv RVVEH8KhEHRsuDw46spsxr5hF/yK01ZIOqsc65F7HTrAbh//us3qn56BCIu0YkLu AlZDnyKBLdDp0X//V7uwqipmbeBBSxMb0BmkixhEtM4dZRwi2MN0vI4rCjdz9aS2 2HEyp1ezFG0U8h9GmIo3eqrHQlA5vcU= -----END CERTIFICATE-----Generated at Fri Apr 4 16:11:20 2025 by rpki-client