$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa File: a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa (raw, json) Hash identifier: wzdRETtmF/jb3pCsON+Yz/ECrX+KAuwGbd4WoFP5fEM= Subject key identifier: 22:37:FF:C9:21:A6:90:42:FF:34:4F:9A:12:C6:7D:A7:69:20:FE:F8 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F43285848F926A0857C30B60225E78100 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 11377 IP address blocks: 149.72.100.0/23 maxlen: 23 149.72.102.0/23 maxlen: 23 149.72.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a0:85:7c:30:b6:02:25:e7:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=99d03a64-35a8-402e-9df4-1039017132bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e3:80:eb:a4:ba:88:8c:f7:9d:12:69:7e:9b: 8c:3e:27:aa:1c:f3:55:70:a8:6d:5a:f0:7d:e7:ff: f6:12:48:f2:f6:b6:11:bd:73:21:d7:a4:d8:69:71: 80:32:64:09:c1:9c:a1:e3:87:f7:c8:86:dc:de:ef: 78:88:5c:f4:d4:8a:80:31:31:83:b9:c0:50:d6:4a: 91:2e:ff:c4:2f:71:b2:82:c9:14:5a:24:d9:db:5e: 3d:1a:8a:ce:8c:e2:08:b1:a5:a1:ac:3c:6e:31:28: ff:45:e9:32:f2:85:5e:b2:af:e8:4b:d0:a1:37:ec: 09:b8:cc:8b:79:b1:ac:0b:27:e9:6e:5b:e9:56:b6: 10:13:e1:83:4b:3d:ab:59:b7:23:4c:bd:3e:0f:1a: 9c:11:6a:59:02:24:e3:52:07:8c:06:2a:ec:2e:f6: fa:9e:c1:32:77:55:78:1b:70:23:73:f8:67:ac:d9: de:40:5e:91:e6:cc:fc:6a:94:0c:13:09:22:1b:31: 12:32:08:0d:98:43:c5:1d:b4:66:4f:18:d6:02:3b: a2:74:ae:03:d9:28:f7:c9:8e:0a:73:78:2c:85:8a: fc:72:df:af:6e:dc:06:04:10:1f:85:cf:83:2f:e4: 3b:72:a9:30:7f:54:bc:d2:55:11:65:57:eb:2f:34: bd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:37:FF:C9:21:A6:90:42:FF:34:4F:9A:12:C6:7D:A7:69:20:FE:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.100.0-149.72.105.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:01:40:9a:c9:77:68:49:92:62:c1:c5:66:24:ad:ab:b4:86: 2e:61:14:ee:4b:f1:82:ee:63:6a:26:58:2d:1d:bc:c1:b7:e0: 70:41:a1:0a:34:07:8e:69:84:bd:22:6b:a0:37:f7:26:7f:a8: 35:c9:9e:e7:8f:c5:a1:d1:97:6f:63:6a:71:4f:65:72:99:8a: 6d:7b:58:39:88:8b:ef:95:a1:2e:d8:8e:1f:d3:c7:49:c6:ee: 84:11:d5:fb:c9:bb:e6:7e:34:02:40:d1:b9:47:c3:b2:e9:c8: cd:64:5c:dc:a4:71:d7:a0:ae:23:13:90:fd:7f:97:9a:9f:11: 2e:5e:bc:c0:bc:9d:b6:34:34:b8:2d:c0:4c:51:45:35:20:61: 12:84:71:af:09:29:5f:47:5d:eb:1e:13:2d:f8:13:0e:da:a0: 12:64:8f:8c:ca:0f:01:bc:ae:35:56:fe:4b:b9:7d:66:8c:d7: 69:54:9d:dd:17:c5:2a:bc:fd:cc:70:8f:6f:42:e6:84:85:10: 17:99:5b:f7:82:60:85:58:08:c6:e2:93:49:7d:a3:d9:89:0c: e7:a4:eb:d7:22:67:8b:7e:b0:36:81:dc:77:21:86:0a:a5:09: 52:82:81:a0:ec:73:8f:d4:db:84:d8:29:1f:6c:75:9f:4f:b7: 43:d6:48:f9 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEj5JqCFfDC2AiXngQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk OTlkMDNhNjQtMzVhOC00MDJlLTlkZjQtMTAzOTAxNzEzMmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOOA66S6iIz3nRJpfpuMPieqHPNVcKhtWvB9 5//2Ekjy9rYRvXMh16TYaXGAMmQJwZyh44f3yIbc3u94iFz01IqAMTGDucBQ1kqR Lv/EL3GygskUWiTZ2149GorOjOIIsaWhrDxuMSj/Reky8oVesq/oS9ChN+wJuMyL ebGsCyfpblvpVrYQE+GDSz2rWbcjTL0+DxqcEWpZAiTjUgeMBirsLvb6nsEyd1V4 G3Ajc/hnrNneQF6R5sz8apQMEwkiGzESMggNmEPFHbRmTxjWAjuidK4D2Sj3yY4K c3gshYr8ct+vbtwGBBAfhc+DL+Q7cqkwf1S80lURZVfrLzS9vQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCI3/8khppBC/zRPmhLGfadpIP74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvYTQ1Zjc0YzAtOWZlOS0z OWExLThlYzEtODZjMjhkNWI1YzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKVSGQD BAGVSGgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAMgFAmsl3aEmSYsHFZiStq7SGLmEU7kvxgu5jaiZYLR28 wbfgcEGhCjQHjmmEvSJroDf3Jn+oNcme54/FodGXb2NqcU9lcpmKbXtYOYiL75Wh LtiOH9PHScbuhBHV+8m75n40AkDRuUfDsunIzWRc3KRx16CuIxOQ/X+Xmp8RLl68 wLydtjQ0uC3ATFFFNSBhEoRxrwkpX0dd6x4TLfgTDtqgEmSPjMoPAbyuNVb+S7l9 ZozXaVSd3RfFKrz9zHCPb0LmhIUQF5lb94JghVgIxuKTSX2j2YkM56Tr1yJni36w NoHcdyGGCqUJUoKBoOxzj9TbhNgpH2x1n0+3Q9ZI+Q== -----END CERTIFICATE-----Generated at Fri Mar 14 11:15:21 2025 by rpki-client