$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa File: 3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa (raw, json) Hash identifier: +0AXDrOgg/YOAmwZIBFVLLVPumTUlHNUc/IkFw4c4JY= Subject key identifier: 07:C6:2C:E9:B8:A5:9E:B1:9C:38:3A:C5:09:9C:F4:47:F0:DA:27:1F Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F432858488DAB4CE993094C855E21BA00 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 30103 IP address blocks: 149.137.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:4c:e9:93:09:4c:85:5e:21:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=3d7b769d-b8cf-467f-b0d8-293dcd4c58a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:11:5b:24:d7:0e:9e:11:26:9f:5f:62:5c:3f: d2:3a:9a:9d:36:39:68:59:06:67:2b:b4:76:97:e1: 24:d5:90:9a:5b:f8:86:65:86:b3:1b:c0:6f:7f:9a: 2e:9e:ee:03:54:ec:e5:28:03:6b:66:ac:3c:02:26: e6:7c:93:d6:0c:13:96:ee:16:0a:97:19:3b:5e:da: 82:6b:41:59:18:06:80:56:cf:38:84:93:c9:73:62: 04:e6:c8:a9:c8:c3:4f:66:d6:6a:e0:81:a9:f6:ba: 74:60:5d:e9:c6:96:7e:cc:8e:d0:36:78:1b:90:01: 20:cc:30:bb:43:ee:ff:4d:8e:5d:d9:04:50:db:ff: e2:ed:18:4b:c3:99:9a:9b:63:f9:99:83:37:9d:ae: c0:5e:ec:00:72:ea:77:ce:d7:54:6e:a4:e7:36:55: a9:a9:a1:05:d6:da:c4:9d:ef:41:5f:d4:96:c3:a8: b1:ab:0d:79:6d:de:09:a5:ba:b4:76:a6:fb:72:a1: fc:84:95:81:3e:f1:7f:6a:7c:18:2c:91:28:16:89: c7:e0:36:21:87:f9:ef:f4:7f:fd:ae:c3:66:f4:1a: 80:d8:76:ff:e7:ab:fa:58:d9:87:dc:b9:00:c4:2f: df:9b:55:e5:32:ba:1a:70:9c:ed:e7:dc:12:24:f3: 86:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C6:2C:E9:B8:A5:9E:B1:9C:38:3A:C5:09:9C:F4:47:F0:DA:27:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3eb00bed-be48-37ec-b3f2-15cc2b5e3427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 149.137.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:80:d8:b9:bf:1c:6d:79:d8:de:99:3f:c0:a8:36:2c:2d:f5: 93:4e:82:83:70:5c:eb:af:aa:08:25:7e:ae:ec:df:f0:3a:de: a6:94:10:da:de:29:e2:9d:7c:0d:12:93:bc:76:c4:da:c7:54: e4:69:c2:b1:50:ae:19:30:40:de:08:76:ad:fa:63:a0:b9:47: 41:f5:c6:91:7b:a7:f6:56:74:4a:dd:17:0a:25:81:08:94:cb: b9:64:98:17:9b:bf:c8:4b:a8:21:38:5a:43:da:63:40:28:6f: 3a:74:ef:e9:d7:24:b4:9a:8b:a2:3b:b2:b1:98:9b:99:e0:e3: e3:6f:a1:99:5d:b2:ba:3d:3b:b9:8a:04:a3:f8:8f:f0:00:20: 85:47:06:f3:d2:95:19:c4:cf:29:84:2a:a7:9a:44:84:dc:86: ed:5a:90:d8:e5:2c:3b:a1:05:50:3b:2a:48:ee:45:dd:06:18: 2d:cb:b1:84:5d:12:ae:e8:87:76:c9:0f:28:07:a9:03:a8:9b: 12:43:ec:46:7a:ac:a9:39:b4:09:e3:a6:74:4d:51:80:3d:5e: 6f:2d:e5:7b:a8:92:a9:94:47:99:e6:95:3b:63:9d:c8:39:02: 44:54:35:a1:63:ad:32:8e:a9:9a:12:ed:46:aa:f0:6e:0d:a2: 73:e6:69:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq0zpkwlMhV4hugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk M2Q3Yjc2OWQtYjhjZi00NjdmLWIwZDgtMjkzZGNkNGM1OGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxFbJNcOnhEmn19iXD/SOpqdNjloWQZnK7R2 l+Ek1ZCaW/iGZYazG8Bvf5ounu4DVOzlKANrZqw8AibmfJPWDBOW7hYKlxk7XtqC a0FZGAaAVs84hJPJc2IE5sipyMNPZtZq4IGp9rp0YF3pxpZ+zI7QNngbkAEgzDC7 Q+7/TY5d2QRQ2//i7RhLw5mam2P5mYM3na7AXuwAcup3ztdUbqTnNlWpqaEF1trE ne9BX9SWw6ixqw15bd4Jpbq0dqb7cqH8hJWBPvF/anwYLJEoFonH4DYhh/nv9H/9 rsNm9BqA2Hb/56v6WNmH3LkAxC/fm1XlMroacJzt59wSJPOGFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfGLOm4pZ6xnDg6xQmc9Efw2icfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvM2ViMDBiZWQtYmU0OC0z N2VjLWIzZjItMTVjYzJiNWUzNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlYkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmA2Lm/HG152N6ZP8CoNiwt9ZNOgoNwXOuvqgglfq7s3/A63qaUENre KeKdfA0Sk7x2xNrHVORpwrFQrhkwQN4Idq36Y6C5R0H1xpF7p/ZWdErdFwolgQiU y7lkmBebv8hLqCE4WkPaY0Aobzp07+nXJLSai6I7srGYm5ng4+NvoZldsro9O7mK BKP4j/AAIIVHBvPSlRnEzymEKqeaRITchu1akNjlLDuhBVA7KkjuRd0GGC3LsYRd Eq7oh3bJDygHqQOomxJD7EZ6rKk5tAnjpnRNUYA9Xm8t5XuokqmUR5nmlTtjncg5 AkRUNaFjrTKOqZoS7Uaq8G4NonPmaX0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:37 2025 by rpki-client