$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/8b8e5674-db36-3436-8904-c0f1d0b4de91.roa File: 8b8e5674-db36-3436-8904-c0f1d0b4de91.roa (raw, json) Hash identifier: Uk9fQomDOGuoa4FTjqfOb9yJnArcj+VGiE7cGJIxIos= Subject key identifier: 40:03:86:CE:57:68:2C:48:57:C5:74:11:37:94:98:3C:65:E0:F8:E2 Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F43285848D21141D283D0562E405A3A00 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/8b8e5674-db36-3436-8904-c0f1d0b4de91.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 27299 IP address blocks: 149.112.123.0/24 maxlen: 24 149.112.124.0/24 maxlen: 24 149.112.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:41:d2:83:d0:56:2e:40:5a:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=860ccc02-b76e-44da-9779-a2e8d3ac5327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:a6:b1:68:2b:8e:a3:68:77:06:16:8b:e5: 0b:3f:5c:08:0b:81:16:06:db:3e:c0:bf:6b:d6:fe: f8:8d:3a:94:94:b3:8d:d0:e5:30:4e:cb:14:69:ea: 4f:f0:03:30:db:63:0a:3e:35:90:2f:1e:69:45:8e: 12:97:00:83:20:05:d4:6b:d1:96:98:de:05:2e:5d: 4d:27:b7:ce:12:4b:2f:17:74:28:f1:e0:aa:1f:7c: af:8d:7f:39:53:01:21:71:24:06:68:c8:2d:8e:bc: 03:db:16:03:7a:f7:00:fc:4b:69:a8:93:a1:c1:ef: f4:d6:38:33:6a:ff:12:ad:a8:5f:4b:50:2b:f9:64: c4:ff:6d:a0:50:71:5b:ec:22:6a:ec:e2:d7:4b:13: 66:c2:a7:30:45:a0:e1:5c:01:c9:cb:9b:38:3e:fa: eb:d6:2f:65:33:28:ea:90:32:e3:f8:68:05:44:59: aa:93:8d:0c:8b:6d:ea:0f:40:58:0c:5d:be:d0:6e: a2:c4:a9:63:44:de:6a:f0:1a:b0:cd:36:a4:9b:3e: b7:78:3c:21:bd:8a:7a:6a:45:2e:31:62:5d:34:58: 8d:0b:ea:00:37:f7:ff:dd:ce:72:94:d3:c1:3d:63: b5:ba:d7:1f:fa:9c:4b:47:d6:08:80:f4:9e:fb:b2: d4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:03:86:CE:57:68:2C:48:57:C5:74:11:37:94:98:3C:65:E0:F8:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/8b8e5674-db36-3436-8904-c0f1d0b4de91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv4: 149.112.123.0-149.112.125.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:70:6d:25:6b:a5:94:56:a0:8f:f7:df:6c:6a:75:cb:5b:96: b3:64:f0:85:0e:c9:a5:1d:55:75:2c:fc:a7:0c:c6:ee:eb:85: 3d:14:8e:7c:68:c0:11:34:8e:8a:96:60:d4:30:a4:d3:c1:13: 8d:90:33:4a:10:16:89:e9:7f:75:d1:aa:bc:5e:9b:c8:a6:af: 81:39:45:7b:2f:0e:03:27:46:33:cd:31:4b:34:c2:27:72:d9: b1:7e:56:1c:e7:d0:bd:78:c0:e9:55:2d:41:90:7d:51:3f:c8: 10:b1:cf:65:7d:ab:9c:11:7c:30:4c:72:10:f3:a0:c9:65:9a: 18:4b:79:6d:3e:1c:3c:1f:c4:c1:7d:46:56:54:ac:8c:e6:56: 99:79:33:9c:bb:de:82:31:e0:4c:56:f3:03:eb:9e:ff:ab:88: c8:47:71:c1:ce:31:01:31:c6:6a:d0:8a:77:f5:18:d2:4c:b4: ae:4d:ba:e3:9f:ed:bc:14:3f:af:90:24:4c:db:d2:ad:44:41: ae:f7:0c:9c:5c:8a:80:08:9f:dc:0a:6b:57:98:13:51:b0:9f: ad:f3:d5:24:c4:11:1e:1f:43:e2:98:75:83:03:4e:01:14:93: 1b:4d:b7:b2:2d:30:c2:ab:14:d5:62:c5:89:fe:8b:0c:40:e7: 10:83:ed:65 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEjSEUHSg9BWLkBaOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ODYwY2NjMDItYjc2ZS00NGRhLTk3NzktYTJlOGQzYWM1MzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0OmsWgrjqNodwYWi+ULP1wIC4EWBts+wL9r 1v74jTqUlLON0OUwTssUaepP8AMw22MKPjWQLx5pRY4SlwCDIAXUa9GWmN4FLl1N J7fOEksvF3Qo8eCqH3yvjX85UwEhcSQGaMgtjrwD2xYDevcA/EtpqJOhwe/01jgz av8SrahfS1Ar+WTE/22gUHFb7CJq7OLXSxNmwqcwRaDhXAHJy5s4Pvrr1i9lMyjq kDLj+GgFRFmqk40Mi23qD0BYDF2+0G6ixKljRN5q8BqwzTakmz63eDwhvYp6akUu MWJdNFiNC+oAN/f/3c5ylNPBPWO1utcf+pxLR9YIgPSe+7LU8wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFEADhs5XaCxIV8V0ETeUmDxl4PjiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvOGI4ZTU2NzQtZGIzNi0z NDM2LTg5MDQtYzBmMWQwYjRkZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACVcHsD BAGVcHwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAq3BtJWullFagj/ffbGp1y1uWs2TwhQ7JpR1VdSz8pwzG 7uuFPRSOfGjAETSOipZg1DCk08ETjZAzShAWiel/ddGqvF6byKavgTlFey8OAydG M80xSzTCJ3LZsX5WHOfQvXjA6VUtQZB9UT/IELHPZX2rnBF8MExyEPOgyWWaGEt5 bT4cPB/EwX1GVlSsjOZWmXkznLvegjHgTFbzA+ue/6uIyEdxwc4xATHGatCKd/UY 0ky0rk2645/tvBQ/r5AkTNvSrURBrvcMnFyKgAif3AprV5gTUbCfrfPVJMQRHh9D 4ph1gwNOARSTG023si0wwqsU1WLFif6LDEDnEIPtZQ== -----END CERTIFICATE-----Generated at Fri Mar 14 10:21:09 2025 by rpki-client