$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4e8c3eea-5290-39c2-8a92-9b920877b78a.roa File: 4e8c3eea-5290-39c2-8a92-9b920877b78a.roa (raw, json) Hash identifier: 1yPm8wzZccswjsxTp8DuDUkr1YAAe3OtEhDBM4htHJc= Subject key identifier: 59:B1:58:9D:8C:49:E8:B1:0C:A7:F3:A3:81:CD:2F:3D:AB:BA:A9:70 Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F43285849806F1D36DDA150065AF0FC00 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4e8c3eea-5290-39c2-8a92-9b920877b78a.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 394354 IP address blocks: 149.112.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:1d:36:dd:a1:50:06:5a:f0:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=c4ac05a2-2145-4d70-90e0-d04d65ec201f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9d:09:79:31:49:81:ee:6d:26:8a:54:e5:66: 42:23:08:78:36:ee:31:6f:3c:63:01:a6:50:34:62: fd:73:57:ba:ae:ce:1a:59:ec:04:fb:72:22:9a:b4: 82:bf:8e:6a:14:7c:97:55:38:0d:0c:1f:e7:7a:9f: e5:e7:04:65:5c:38:7c:4b:0e:0d:62:7e:13:45:70: 9d:fb:d5:00:8d:a7:58:6c:6f:dd:79:96:95:28:f3: 54:d3:03:c6:2e:43:bf:b4:27:57:b9:26:2f:06:20: db:1d:26:11:87:80:05:c6:29:bf:1a:83:48:88:51: 14:02:d1:4f:97:40:b1:3f:f0:9f:53:61:f3:d2:40: b4:cc:5b:c1:d2:0a:81:74:05:81:e8:46:76:dc:6b: fa:16:71:19:de:03:36:61:a3:7f:7c:a8:62:e7:85: e1:6e:7e:6e:27:2c:93:a3:95:b3:82:8e:6a:53:06: cc:09:ea:f1:03:89:c4:8f:de:64:72:0a:bd:40:0b: 7a:ce:c8:ee:ec:e6:f9:dd:b0:ec:fe:b3:f0:8e:4e: 13:d0:00:a0:63:3a:d8:bf:95:0a:3b:08:98:5b:3b: a1:04:5f:d0:be:8e:09:0f:45:19:0e:c6:af:1a:e1: d9:fc:57:19:26:72:07:7b:ab:55:5a:7f:62:64:34: 57:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B1:58:9D:8C:49:E8:B1:0C:A7:F3:A3:81:CD:2F:3D:AB:BA:A9:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4e8c3eea-5290-39c2-8a92-9b920877b78a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv4: 149.112.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f6:07:2b:9d:7e:41:51:95:66:0d:0d:ee:3c:30:42:da:9b: a4:98:da:8a:ce:d7:05:11:87:2b:90:31:0a:aa:90:39:0b:1f: b0:e0:bd:cf:02:8f:13:12:4d:39:76:19:2d:5b:91:eb:86:9e: 5f:a8:10:d8:1c:e6:4f:f6:cc:ed:bb:00:33:9c:de:44:2d:2d: 61:c1:e5:2c:74:3f:a8:8e:f0:85:0a:25:f0:8d:c7:d6:c6:32: a2:58:f2:ce:a9:17:52:4e:be:6b:2a:b3:23:49:98:a6:ba:4c: 96:ff:4b:6f:75:4a:ae:97:21:ae:39:29:d9:ad:f9:32:a1:a8: f7:bb:59:29:d9:f6:c1:66:b0:14:03:38:e5:ff:03:52:1e:a9: 74:20:d3:74:aa:b2:7c:1b:62:84:48:68:d4:fb:18:4c:41:e0: c6:0b:f4:69:9f:54:ee:07:fa:5b:c9:ae:79:f5:0f:bd:f0:1f: e4:1d:84:e1:c7:2c:15:1b:31:85:64:bd:28:f4:81:a8:67:0e: b5:78:7e:06:de:e8:f8:03:58:63:8f:4a:22:b6:1a:a5:5d:29: a6:42:c1:62:2a:30:2b:5c:52:93:4f:68:35:d0:5c:ca:0f:4d: 2f:34:11:5a:ee:78:92:21:b9:50:0d:1f:7b:31:29:49:3f:1d: 83:ba:6c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbx023aFQBlrw/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk YzRhYzA1YTItMjE0NS00ZDcwLTkwZTAtZDA0ZDY1ZWMyMDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ0JeTFJge5tJopU5WZCIwh4Nu4xbzxjAaZQ NGL9c1e6rs4aWewE+3IimrSCv45qFHyXVTgNDB/nep/l5wRlXDh8Sw4NYn4TRXCd +9UAjadYbG/deZaVKPNU0wPGLkO/tCdXuSYvBiDbHSYRh4AFxim/GoNIiFEUAtFP l0CxP/CfU2Hz0kC0zFvB0gqBdAWB6EZ23Gv6FnEZ3gM2YaN/fKhi54Xhbn5uJyyT o5Wzgo5qUwbMCerxA4nEj95kcgq9QAt6zsju7Ob53bDs/rPwjk4T0ACgYzrYv5UK OwiYWzuhBF/Qvo4JD0UZDsavGuHZ/FcZJnIHe6tVWn9iZDRXkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmxWJ2MSeixDKfzo4HNLz2ruqlwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvNGU4YzNlZWEtNTI5MC0z OWMyLThhOTItOWI5MjA4NzdiNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIr2ByudfkFRlWYNDe48MELam6SY2orO1wURhyuQMQqqkDkLH7Dgvc8C jxMSTTl2GS1bkeuGnl+oENgc5k/2zO27ADOc3kQtLWHB5Sx0P6iO8IUKJfCNx9bG MqJY8s6pF1JOvmsqsyNJmKa6TJb/S291Sq6XIa45Kdmt+TKhqPe7WSnZ9sFmsBQD OOX/A1IeqXQg03SqsnwbYoRIaNT7GExB4MYL9GmfVO4H+lvJrnn1D73wH+QdhOHH LBUbMYVkvSj0gahnDrV4fgbe6PgDWGOPSiK2GqVdKaZCwWIqMCtcUpNPaDXQXMoP TS80EVrueJIhuVANH3sxKUk/HYO6bDE= -----END CERTIFICATE-----Generated at Sun Apr 20 12:57:29 2025 by rpki-client