$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa File: c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa (raw, json) Hash identifier: zhpiNJCoMh6YSJhEq10atZ3hrR9moprtyyCWDnJSdlo= Subject key identifier: FC:5B:DF:B4:96:AB:C0:AA:94:A5:40:8F:2F:78:72:94:DC:03:04:09 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584965E97AC86AA4D41F9A42FD40 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 11377 IP address blocks: 149.72.2.0/23 maxlen: 23 149.72.96.0/23 maxlen: 23 149.72.98.0/23 maxlen: 23 167.89.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:7a:c8:6a:a4:d4:1f:9a:42:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=e1be9499-66a8-459d-9ca5-3d71e15dc1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:a7:e5:36:9c:b2:92:b1:95:f1:4e:cc:d3: 99:cb:8d:1e:70:a5:d8:f2:67:ed:00:36:b1:98:9f: a9:8d:3c:32:71:01:f0:56:7e:1e:42:87:a2:55:c5: a6:00:22:33:b1:70:67:e2:f4:32:a3:09:bf:37:2b: 4b:ee:31:98:ce:a4:ef:cf:70:ad:7f:70:32:31:e5: 1f:82:aa:08:62:af:4b:7a:43:dc:c1:be:41:5b:78: 6a:05:4d:bf:d6:f1:fa:bc:dd:58:81:d9:12:2b:59: be:f4:6a:6c:40:b0:8b:a8:a7:d0:31:cc:26:b7:fe: 63:ce:d3:a2:40:01:f4:c6:19:d1:88:d7:9f:20:91: e9:7a:6a:09:a2:89:be:4e:74:f3:84:e8:c9:73:1b: 38:be:be:e0:85:2d:08:93:34:c6:d5:8a:ff:48:8a: e7:d6:bd:f2:09:c6:e5:50:4c:b9:23:cb:76:f0:20: 12:cb:71:b6:5b:fb:97:64:02:7b:c3:e0:27:03:80: 79:5c:05:9e:73:30:4e:a0:da:e2:f1:dc:e3:27:3c: e9:3a:db:ce:1a:5f:fa:f4:7f:8a:69:1f:25:f3:7d: 15:30:01:cc:bd:6f:d3:18:48:76:f9:c8:4b:1c:60: 54:54:59:a0:9b:84:ed:77:09:d4:ab:c9:54:76:83: 79:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5B:DF:B4:96:AB:C0:AA:94:A5:40:8F:2F:78:72:94:DC:03:04:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.2.0/23 149.72.96.0/22 167.89.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:e1:35:c3:d2:de:7b:e2:ef:fd:59:38:7d:af:a4:91:7a:5d: d5:60:bb:8b:af:3d:aa:9e:5e:33:c9:b2:19:ea:72:a0:49:a5: 6c:c1:42:8e:7d:88:86:40:99:33:89:61:9b:ce:82:a6:e0:49: dd:0f:a8:bd:5b:e3:df:df:20:d3:d3:29:c7:3d:c1:e7:ff:41: 94:67:6d:ff:35:49:9f:4b:0f:19:06:9e:c0:e9:51:14:26:ee: f5:c5:5c:b1:40:49:66:20:39:07:e6:2d:15:dc:26:d1:e8:0d: 7f:62:47:1a:fd:62:2d:04:79:ae:22:98:86:e5:39:9b:e8:63: f5:7f:68:db:e3:0e:7f:ff:7c:a9:d2:fc:65:b8:82:4c:21:4a: dc:2a:23:96:75:20:ca:cf:5b:db:d6:1c:d0:60:01:94:20:13: 26:5c:8e:6d:82:ec:ed:93:ba:88:e0:0e:ab:c6:9d:cc:00:f0: 09:4f:89:0d:c2:8d:fe:37:49:3a:d8:33:34:dd:b9:dc:47:4d: 63:c5:fa:0b:84:90:4c:e9:d8:2d:ec:b5:a1:84:b2:03:26:24: 30:09:bc:6a:04:d0:2d:39:fa:82:83:d9:e7:79:32:b6:29:c0: ab:e6:1a:15:a8:43:53:6a:e6:b8:c8:29:5f:7f:cf:6f:3e:f8: 68:7f:fb:cb -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEll6XrIaqTUH5pC/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk ZTFiZTk0OTktNjZhOC00NTlkLTljYTUtM2Q3MWUxNWRjMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi6n5TacspKxlfFOzNOZy40ecKXY8mftADax mJ+pjTwycQHwVn4eQoeiVcWmACIzsXBn4vQyowm/NytL7jGYzqTvz3Ctf3AyMeUf gqoIYq9LekPcwb5BW3hqBU2/1vH6vN1YgdkSK1m+9GpsQLCLqKfQMcwmt/5jztOi QAH0xhnRiNefIJHpemoJoom+TnTzhOjJcxs4vr7ghS0IkzTG1Yr/SIrn1r3yCcbl UEy5I8t28CASy3G2W/uXZAJ7w+AnA4B5XAWeczBOoNri8dzjJzzpOtvOGl/69H+K aR8l830VMAHMvW/TGEh2+chLHGBUVFmgm4TtdwnUq8lUdoN5MwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFPxb37SWq8CqlKVAjy94cpTcAwQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvYzgyOGY5ZTMtYjA0Yy0z NDUxLWFlMTUtYjRkYzExMmNmMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBlUgCAwQC lUhgAwQAp1lxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABLhNcPS3nvi7/1ZOH2vpJF6XdVgu4uvPaqeXjPJ shnqcqBJpWzBQo59iIZAmTOJYZvOgqbgSd0PqL1b49/fINPTKcc9wef/QZRnbf81 SZ9LDxkGnsDpURQm7vXFXLFASWYgOQfmLRXcJtHoDX9iRxr9Yi0Eea4imIblOZvo Y/V/aNvjDn//fKnS/GW4gkwhStwqI5Z1IMrPW9vWHNBgAZQgEyZcjm2C7O2Tuojg DqvGncwA8AlPiQ3Cjf43STrYMzTdudxHTWPF+guEkEzp2C3staGEsgMmJDAJvGoE 0C05+oKD2ed5MrYpwKvmGhWoQ1Nq5rjIKV9/z28++Gh/+8s= -----END CERTIFICATE-----Generated at Sat Apr 12 10:08:22 2025 by rpki-client