$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/8b8e5674-db36-3436-8904-c0f1d0b4de91.roa File: 8b8e5674-db36-3436-8904-c0f1d0b4de91.roa (raw, json) Hash identifier: nSGdfhaukMBeUNeIsD6CUhQUfWXMDjgTsHo3uLTbNbQ= Subject key identifier: 96:3A:67:EF:E7:21:B3:67:5E:69:2C:55:98:56:90:74:DD:67:E4:76 Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F43285849B14A0CC40EE2E150E74E0600 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/8b8e5674-db36-3436-8904-c0f1d0b4de91.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 27299 IP address blocks: 149.112.123.0/24 maxlen: 24 149.112.124.0/24 maxlen: 24 149.112.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0c:c4:0e:e2:e1:50:e7:4e:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a3142f1c-19c0-4d32-9d83-fc7db23486e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:a2:94:37:cf:f1:9c:62:c4:0b:ea:b0:63: f4:18:7b:e0:f9:00:a1:b1:6a:b7:6f:70:e6:dd:e0: 4d:7e:02:5f:ea:fe:aa:03:d6:0e:fa:5f:39:31:59: fc:97:3e:da:1b:bf:05:a4:11:6b:00:9f:69:4c:a9: e6:07:86:1e:70:81:7a:55:44:05:bb:0a:32:83:3d: 46:11:9b:21:16:b5:26:a4:6d:f5:7d:dc:12:ed:93: 70:dc:56:d0:2f:07:af:71:13:3e:70:47:6f:d4:66: 0d:df:bf:f2:4d:dd:60:1c:8b:ac:c7:61:98:6b:f3: e1:28:a9:6b:ae:e9:2b:dd:43:5e:50:02:3c:b8:e5: 52:c2:92:d8:8e:c2:97:31:87:47:74:3b:df:91:ca: 53:68:f0:96:4b:d1:ab:b4:ba:b0:d5:d0:eb:0c:73: 98:da:42:2d:a8:e9:b6:4c:a3:e5:13:1c:28:ba:6e: cc:da:24:34:30:2a:26:85:8b:ed:49:3a:4f:bb:ee: 19:51:41:16:d8:55:34:80:0d:f5:29:d3:a8:e1:36: b6:7b:18:9d:7a:8a:2d:6d:5d:f9:24:87:f1:c2:09: 06:a4:47:ce:a3:85:53:c1:a5:41:6f:be:73:fa:3d: a8:40:c5:bb:42:ef:d6:83:e9:43:c4:33:1c:38:8f: 70:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3A:67:EF:E7:21:B3:67:5E:69:2C:55:98:56:90:74:DD:67:E4:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/8b8e5674-db36-3436-8904-c0f1d0b4de91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv4: 149.112.123.0-149.112.125.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e0:5d:63:61:5d:3d:eb:8c:ce:dc:3a:0a:85:55:2c:43:14: ea:5d:89:96:ee:be:f2:11:ba:b1:95:d5:b2:b9:32:37:0e:59: 9b:e4:4b:87:9e:b7:5e:09:17:e1:15:28:4b:78:bf:0f:19:ae: 02:50:fc:e2:3f:f3:51:21:b4:e8:ea:08:40:da:12:15:ec:3c: 0e:8a:72:4f:20:2c:e8:5b:3c:8a:70:f6:ba:01:cd:48:4b:f0: 51:d5:11:45:6e:f3:00:29:5a:e9:4c:d7:89:03:41:f2:3f:25: 50:82:95:22:47:ea:96:35:52:a7:0f:9e:ef:d6:81:2e:83:83: 3d:5d:87:74:44:ab:3b:b8:7f:2a:9c:64:ab:2b:3a:7c:a6:c2: 0e:b6:67:4a:8b:39:19:de:29:7a:4c:bb:84:2e:d2:b1:b4:d8: 32:97:28:e0:35:c6:e7:13:7f:26:7c:d4:47:10:4a:77:f7:0e: 9c:19:5a:bb:c5:02:e6:34:f6:a7:63:bd:ca:fd:c5:e0:9b:e8: 9e:e6:9e:a0:04:de:67:9c:75:7d:5e:9c:64:db:60:5f:52:e4: a7:fd:ec:ae:66:aa:ef:fa:ff:a8:dc:9a:8c:01:6b:3e:25:31: f8:8f:84:57:92:23:c5:6f:2d:13:3b:f7:51:51:e6:cb:d1:72: 25:19:d9:44 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEmxSgzEDuLhUOdOBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTMxNDJmMWMtMTljMC00ZDMyLTlkODMtZmM3ZGIyMzQ4NmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1milDfP8ZxixAvqsGP0GHvg+QChsWq3b3Dm 3eBNfgJf6v6qA9YO+l85MVn8lz7aG78FpBFrAJ9pTKnmB4YecIF6VUQFuwoygz1G EZshFrUmpG31fdwS7ZNw3FbQLwevcRM+cEdv1GYN37/yTd1gHIusx2GYa/PhKKlr rukr3UNeUAI8uOVSwpLYjsKXMYdHdDvfkcpTaPCWS9GrtLqw1dDrDHOY2kItqOm2 TKPlExwoum7M2iQ0MComhYvtSTpPu+4ZUUEW2FU0gA31KdOo4Ta2exideootbV35 JIfxwgkGpEfOo4VTwaVBb75z+j2oQMW7Qu/Wg+lDxDMcOI9wzwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJY6Z+/nIbNnXmksVZhWkHTdZ+R2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvOGI4ZTU2NzQtZGIzNi0z NDM2LTg5MDQtYzBmMWQwYjRkZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACVcHsD BAGVcHwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAW+BdY2FdPeuMztw6CoVVLEMU6l2Jlu6+8hG6sZXVsrky Nw5Zm+RLh563XgkX4RUoS3i/DxmuAlD84j/zUSG06OoIQNoSFew8DopyTyAs6Fs8 inD2ugHNSEvwUdURRW7zACla6UzXiQNB8j8lUIKVIkfqljVSpw+e79aBLoODPV2H dESrO7h/Kpxkqys6fKbCDrZnSos5Gd4peky7hC7SsbTYMpco4DXG5xN/JnzURxBK d/cOnBlau8UC5jT2p2O9yv3F4JvonuaeoATeZ5x1fV6cZNtgX1Lkp/3srmaq7/r/ qNyajAFrPiUx+I+EV5IjxW8tEzv3UVHmy9FyJRnZRA== -----END CERTIFICATE-----Generated at Sun Jun 8 16:28:40 2025 by rpki-client