$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1e0ca83f-24c8-35be-be76-db572c9a7dab.roa File: 1e0ca83f-24c8-35be-be76-db572c9a7dab.roa (raw, json) Hash identifier: uw4yScGqWADMm1pebelknoixIJ8Tdzt0aSU1x8C3r9A= Subject key identifier: 19:6A:E3:85:9F:87:72:BC:61:13:B6:E7:81:33:4C:31:42:EE:C5:42 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F43285848E2D117A0566693B38B1EAA80 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1e0ca83f-24c8-35be-be76-db572c9a7dab.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 149.72.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:17:a0:56:66:93:b3:8b:1e:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=ec387bd7-df0f-4c3d-bbac-8a01bb10978d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a6:7b:0f:d4:f2:c3:d1:e4:bf:d9:fb:d6:ed: 4f:ed:45:07:03:0a:ba:86:0c:6f:bc:57:01:6a:12: ef:a2:87:5c:59:ee:a0:3c:1c:c0:a5:db:08:47:ab: f6:17:3b:b2:99:40:84:14:87:2c:51:cb:4a:48:5f: cc:60:6e:ed:09:d1:cf:d9:0e:31:06:3e:6e:15:db: 3e:c9:5e:a0:d7:05:7f:48:8c:49:55:2d:2f:35:6a: be:00:c4:5a:89:7a:69:30:0e:c0:71:69:e9:87:69: 69:da:13:fe:d1:19:58:d9:d9:69:30:90:5e:9f:d2: 5f:75:80:4e:df:0e:c2:3f:11:8d:81:e7:20:b5:2f: c8:bf:6a:d8:b3:87:2b:c5:b5:da:b4:09:a0:83:1a: b6:0b:25:56:35:85:19:2f:83:f0:d8:2c:6d:fa:98: 51:4d:23:56:83:47:06:56:76:85:88:55:48:09:18: 71:5e:45:f5:16:a0:36:7f:94:7a:0a:6e:84:86:f7: 5f:ee:1d:2a:a0:f7:31:b5:c8:ba:07:08:b1:27:e4: 49:df:ee:f6:4f:10:ea:07:fa:28:8e:b4:6a:10:dc: e1:54:b9:a7:ce:c4:d0:ba:ea:98:58:b4:86:a6:32: c6:26:a8:1a:12:7c:61:1b:ca:50:b3:3f:ba:17:c8: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6A:E3:85:9F:87:72:BC:61:13:B6:E7:81:33:4C:31:42:EE:C5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1e0ca83f-24c8-35be-be76-db572c9a7dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:08:e3:13:52:8c:a8:31:b9:c4:07:d0:ae:e5:64:3c:39:ce: dd:98:82:7d:bd:0c:26:ad:52:24:53:9f:55:14:9b:14:6b:43: 59:08:29:41:4e:d4:81:7d:81:bd:38:8c:ad:e6:88:a3:ea:c3: 1e:39:8a:00:e0:d8:5b:b2:fb:a2:b6:33:45:00:51:c7:88:9e: d2:d1:1d:c1:17:2d:53:81:d6:c8:b4:85:3d:30:21:dd:78:87: ce:22:04:b1:71:24:7e:f9:2d:54:aa:52:9a:11:aa:b8:4a:81: 1e:31:23:20:f2:88:20:83:d5:80:4f:63:00:f8:a6:05:a5:cb: d6:42:4d:b0:e5:35:78:21:d6:7f:0f:f5:81:19:dd:56:d2:4e: 93:d1:2f:e2:22:fc:17:b8:8d:16:57:22:b3:a1:91:69:b4:04: 86:99:ea:9a:f1:5f:a8:87:6d:88:e2:20:8f:91:03:4a:43:57: 40:fb:bd:3c:f0:fd:5d:f4:73:8c:55:d4:55:c2:20:5b:65:49: eb:1c:4a:da:e7:e6:5f:9b:9b:3e:0b:9a:c7:58:f7:56:ad:34: cc:c1:b0:65:f3:77:d6:dd:4c:e2:64:92:24:7c:18:76:f5:17: e4:56:53:6e:4f:f2:0b:3a:12:90:4a:cf:4a:8f:8c:13:11:c2: 40:31:b1:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0RegVmaTs4seqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZWMzODdiZDctZGYwZi00YzNkLWJiYWMtOGEwMWJiMTA5NzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKZ7D9Tyw9Hkv9n71u1P7UUHAwq6hgxvvFcB ahLvoodcWe6gPBzApdsIR6v2FzuymUCEFIcsUctKSF/MYG7tCdHP2Q4xBj5uFds+ yV6g1wV/SIxJVS0vNWq+AMRaiXppMA7AcWnph2lp2hP+0RlY2dlpMJBen9JfdYBO 3w7CPxGNgecgtS/Iv2rYs4crxbXatAmggxq2CyVWNYUZL4Pw2Cxt+phRTSNWg0cG VnaFiFVICRhxXkX1FqA2f5R6Cm6Ehvdf7h0qoPcxtci6BwixJ+RJ3+72TxDqB/oo jrRqENzhVLmnzsTQuuqYWLSGpjLGJqgaEnxhG8pQsz+6F8ggfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlq44Wfh3K8YRO254EzTDFC7sVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvMWUwY2E4M2YtMjRjOC0z NWJlLWJlNzYtZGI1NzJjOWE3ZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlUhqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoI4xNSjKgxucQH0K7lZDw5zt2Ygn29DCatUiRTn1UUmxRrQ1kIKUFO 1IF9gb04jK3miKPqwx45igDg2Fuy+6K2M0UAUceIntLRHcEXLVOB1si0hT0wId14 h84iBLFxJH75LVSqUpoRqrhKgR4xIyDyiCCD1YBPYwD4pgWly9ZCTbDlNXgh1n8P 9YEZ3VbSTpPRL+Ii/Be4jRZXIrOhkWm0BIaZ6prxX6iHbYjiII+RA0pDV0D7vTzw /V30c4xV1FXCIFtlSescStrn5l+bmz4LmsdY91atNMzBsGXzd9bdTOJkkiR8GHb1 F+RWU25P8gs6EpBKz0qPjBMRwkAxses= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:44 2025 by rpki-client