$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/28e253dd-d9af-340f-9c53-36fda0651ce5.roa File: 28e253dd-d9af-340f-9c53-36fda0651ce5.roa (raw, json) Hash identifier: RRuIlQoS3/k/RPxrwnR+c9Nx4vk00lvSyNtT44/sqfM= Subject key identifier: 32:10:E4:98:05:EE:50:0C:99:28:AA:9A:E6:86:D1:E5:D8:76:99:DB Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F43285848E2D117B1AA0F7D535E661130 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/28e253dd-d9af-340f-9c53-36fda0651ce5.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 149.72.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:17:b1:aa:0f:7d:53:5e:66:11:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=1eb831a9-b25e-4677-bd9d-28f6678a3105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:41:8f:40:80:dc:3b:2d:49:80:27:9e:c2:7e: 54:6c:87:ec:c4:cd:d7:71:ab:fe:59:ff:33:1c:7d: 6f:09:75:f3:ec:19:0e:8c:1b:f5:a8:4e:25:12:09: d4:ae:fd:de:b8:54:36:02:bf:2a:6b:1f:ef:1f:55: dd:c4:e5:19:e7:aa:4f:42:ba:48:86:e9:78:9f:9d: 8d:58:c8:ce:03:84:5c:04:f1:ee:af:9a:ed:4f:87: 6f:7b:37:ce:f7:4d:78:6c:bb:b2:42:25:db:e2:55: d4:03:f3:a7:29:8a:f4:71:80:bb:43:16:13:87:f1: 82:e6:09:52:ee:f2:8d:d2:f7:16:ad:eb:13:a9:c5: 34:f4:ce:59:f0:03:4f:e9:63:1f:84:b5:00:74:94: 11:80:e5:01:32:67:64:39:46:43:dc:0b:3a:fb:11: b7:fc:f6:cb:5e:e2:7d:5d:9c:5e:d9:7c:c1:68:3a: d5:1d:d7:ba:b9:2a:fb:2c:1c:e1:5e:d5:57:e4:4a: 28:c8:9c:b1:0b:cb:42:7b:22:68:b5:6c:bc:d6:d1: db:e2:36:ab:22:c4:c4:4e:77:cb:a9:fc:b5:d1:40: 5a:8d:80:5f:34:52:da:b5:bc:ab:c0:c8:e1:2a:2a: 3a:ab:6f:4f:9c:4b:da:94:d4:c1:b8:2f:bc:aa:db: 8b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:10:E4:98:05:EE:50:0C:99:28:AA:9A:E6:86:D1:E5:D8:76:99:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/28e253dd-d9af-340f-9c53-36fda0651ce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:1a:5c:35:20:d1:99:70:50:5c:53:97:4e:53:70:44:2f:62: 3f:24:39:83:ef:0e:cc:f9:64:52:3a:83:c1:02:5c:07:31:04: 69:83:d3:1f:2f:d4:b8:e8:8c:c7:86:6f:32:d4:14:de:0e:c8: 1b:84:52:17:21:c1:bc:2f:8b:80:0a:64:ef:48:08:8a:7d:38: 73:14:03:45:95:c3:58:e7:4f:5c:a6:10:5b:2f:72:70:80:38: 77:20:d0:77:a5:b1:e6:6d:3e:c9:4f:0b:fa:3b:ce:33:8f:b3: fa:8b:7c:a6:6d:ef:5a:27:75:f7:e0:33:89:5b:5c:8c:4a:fc: 32:d0:a1:56:03:a1:4b:68:67:5f:ff:99:d1:11:0b:a6:3d:33: ee:74:de:8f:e1:2c:7c:a7:b6:77:56:6d:03:62:68:4c:f7:aa: 23:27:06:43:22:09:cb:e6:6e:e3:89:ca:d8:d0:c8:fd:44:2c: d2:7d:0b:cf:89:97:aa:6f:df:d0:51:dc:d7:a2:68:00:31:b8: 58:63:3b:58:69:30:0b:36:d9:b0:65:3f:e7:6d:a8:c2:f2:8b: 9b:48:c8:e1:fc:04:a4:f0:55:16:cd:7d:a5:58:e2:86:9f:11: 0c:e8:1a:df:69:0f:8e:76:56:4b:38:1f:3d:9f:16:28:d8:f5: 31:c0:03:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Rexqg99U15mETAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk MWViODMxYTktYjI1ZS00Njc3LWJkOWQtMjhmNjY3OGEzMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUGPQIDcOy1JgCeewn5UbIfsxM3Xcav+Wf8z HH1vCXXz7BkOjBv1qE4lEgnUrv3euFQ2Ar8qax/vH1XdxOUZ56pPQrpIhul4n52N WMjOA4RcBPHur5rtT4dvezfO9014bLuyQiXb4lXUA/OnKYr0cYC7QxYTh/GC5glS 7vKN0vcWresTqcU09M5Z8ANP6WMfhLUAdJQRgOUBMmdkOUZD3As6+xG3/PbLXuJ9 XZxe2XzBaDrVHde6uSr7LBzhXtVX5EooyJyxC8tCeyJotWy81tHb4jarIsTETnfL qfy10UBajYBfNFLatbyrwMjhKio6q29PnEvalNTBuC+8qtuLxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIQ5JgF7lAMmSiqmuaG0eXYdpnbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvMjhlMjUzZGQtZDlhZi0z NDBmLTljNTMtMzZmZGEwNjUxY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlUhqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgaXDUg0ZlwUFxTl05TcEQvYj8kOYPvDsz5ZFI6g8ECXAcxBGmD0x8v 1LjojMeGbzLUFN4OyBuEUhchwbwvi4AKZO9ICIp9OHMUA0WVw1jnT1ymEFsvcnCA OHcg0HelseZtPslPC/o7zjOPs/qLfKZt71ondffgM4lbXIxK/DLQoVYDoUtoZ1// mdERC6Y9M+503o/hLHyntndWbQNiaEz3qiMnBkMiCcvmbuOJytjQyP1ELNJ9C8+J l6pv39BR3NeiaAAxuFhjO1hpMAs22bBlP+dtqMLyi5tIyOH8BKTwVRbNfaVY4oaf EQzoGt9pD452Vks4Hz2fFijY9THAA5A= -----END CERTIFICATE-----Generated at Fri Mar 14 11:07:10 2025 by rpki-client