$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/45c7db36-5de1-3f50-9626-45153f78d7e4.roa File: 45c7db36-5de1-3f50-9626-45153f78d7e4.roa (raw, json) Hash identifier: Lw0t1LSiLu/Sq/vyqRQfBDG22vjU7G9/8d6N5jKSreg= Subject key identifier: A6:F5:F3:B9:34:E0:D7:BD:38:C6:76:2E:22:0E:CF:A4:1F:7F:5C:BA Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858489E47F68B58B1EE795B81BCCC Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/45c7db36-5de1-3f50-9626-45153f78d7e4.roa Signing time: Tue 21 Jan 2025 12:49:36 +0000 ROA not before: Tue 21 Jan 2025 12:49:36 +0000 ROA not after: Mon 21 Apr 2025 11:49:36 +0000 asID: 40509 IP address blocks: 149.248.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:47:f6:8b:58:b1:ee:79:5b:81:bc:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jan 21 12:49:36 2025 GMT Not After : Apr 21 11:49:36 2025 GMT Subject: CN=4a6fd11d-bd07-415d-9348-ccd7781e40d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:fa:a0:d7:5f:0f:d5:7a:d2:08:6c:f2:3f: 08:f7:a9:48:92:37:71:49:08:5c:14:98:ab:52:dd: f0:7b:92:49:e0:dc:d1:fb:2d:8e:65:b3:ad:3e:34: d4:84:19:a3:7d:f5:51:e9:e6:c5:bc:c7:1c:fb:32: 76:2b:99:27:17:ce:e5:85:70:2e:56:0d:cc:d7:bd: 5e:6e:0d:2c:ad:ea:80:df:85:dd:f5:cd:ba:1b:eb: c6:af:53:13:7f:70:e5:ae:ab:ce:41:b9:3d:ac:57: c2:d4:da:c8:ff:15:e4:71:45:09:14:20:2f:65:01: d3:83:73:fc:6a:dd:f1:da:b1:e3:ff:61:6e:cd:5f: 81:32:88:bb:c9:55:03:43:9e:9e:2f:a0:8e:93:29: c9:75:eb:ae:98:5b:a8:28:d3:d3:a0:a8:3f:8e:8f: 18:2c:27:d1:85:3e:d2:f2:68:ed:b3:93:61:46:66: 40:62:6d:d3:e1:90:35:a8:6f:3b:9b:f6:bc:34:4e: ac:71:a6:58:8e:7e:31:f7:b4:78:76:91:98:df:95: f5:98:f2:66:2d:ff:f7:f6:f0:97:9e:bc:19:c0:bf: 40:1f:3d:2e:ce:3b:c1:04:dd:56:fa:e7:ba:8f:25: 2d:ea:2e:f0:4e:be:bd:0e:3c:5c:84:fc:c6:12:90: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F5:F3:B9:34:E0:D7:BD:38:C6:76:2E:22:0E:CF:A4:1F:7F:5C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/45c7db36-5de1-3f50-9626-45153f78d7e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 149.248.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:38:54:cd:e3:33:17:a2:6d:26:7d:20:28:73:ca:18:e1:9c: 8e:7a:6f:91:f3:c1:c8:02:9a:67:fd:d0:ff:8b:47:7a:05:0a: 8d:3e:f5:e0:9e:f8:00:16:fd:c9:72:89:50:11:61:9d:08:8d: bd:3c:f2:7f:7f:b5:5b:b8:07:e2:4d:e0:9b:40:9d:8d:2a:97: ce:76:91:a6:0c:ed:f0:50:c3:1f:ec:b1:c0:dc:40:54:04:09: 36:54:be:ca:04:f3:67:04:72:a4:7e:50:75:36:ec:85:2f:75: c8:7e:07:41:ea:59:36:e0:c8:09:ae:ff:09:a5:22:d8:a7:8a: b1:d4:18:50:d0:85:35:ad:e8:58:c5:f4:85:bf:16:45:ee:00: 9c:af:a0:e0:62:18:2a:12:f8:a8:30:3b:83:07:4b:33:53:65: 65:ca:37:9d:fa:cf:36:df:a2:5a:48:41:71:a3:3a:d4:58:37: 86:e8:87:7f:7b:be:ee:34:fb:9c:aa:87:22:da:94:fa:0c:cd: ff:7d:a1:16:88:79:d2:59:90:de:7c:1f:3d:8d:8d:12:0a:6f: fd:40:b7:71:cd:00:28:64:a4:6a:0d:1b:07:07:14:19:02:04: 21:ef:d7:53:aa:9f:1f:fb:43:c4:53:66:2b:78:e9:c0:22:4b: 85:46:1d:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEieR/aLWLHueVuBvMwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDEyMTEyNDkzNloXDTI1MDQyMTExNDkzNlowLzEtMCsGA1UEAxMk NGE2ZmQxMWQtYmQwNy00MTVkLTkzNDgtY2NkNzc4MWU0MGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrL6oNdfD9V60ghs8j8I96lIkjdxSQhcFJir Ut3we5JJ4NzR+y2OZbOtPjTUhBmjffVR6ebFvMcc+zJ2K5knF87lhXAuVg3M171e bg0sreqA34Xd9c26G+vGr1MTf3DlrqvOQbk9rFfC1NrI/xXkcUUJFCAvZQHTg3P8 at3x2rHj/2FuzV+BMoi7yVUDQ56eL6COkynJdeuumFuoKNPToKg/jo8YLCfRhT7S 8mjts5NhRmZAYm3T4ZA1qG87m/a8NE6scaZYjn4x97R4dpGY35X1mPJmLf/39vCX nrwZwL9AHz0uzjvBBN1W+ue6jyUt6i7wTr69DjxchPzGEpA9BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb187k04Ne9OMZ2LiIOz6Qff1y6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvNDVjN2RiMzYtNWRlMS0z ZjUwLTk2MjYtNDUxNTNmNzhkN2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlfjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF84VM3jMxeibSZ9IChzyhjhnI56b5HzwcgCmmf90P+LR3oFCo0+9eCe +AAW/clyiVARYZ0Ijb088n9/tVu4B+JN4JtAnY0ql852kaYM7fBQwx/sscDcQFQE CTZUvsoE82cEcqR+UHU27IUvdch+B0HqWTbgyAmu/wmlItinirHUGFDQhTWt6FjF 9IW/FkXuAJyvoOBiGCoS+KgwO4MHSzNTZWXKN536zzbfolpIQXGjOtRYN4boh397 vu40+5yqhyLalPoMzf99oRaIedJZkN58Hz2NjRIKb/1At3HNAChkpGoNGwcHFBkC BCHv11Oqnx/7Q8RTZit46cAiS4VGHWc= -----END CERTIFICATE-----Generated at Sun Feb 2 15:54:22 2025 by rpki-client