$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8ecb86e6-8311-3057-8829-f64fb18d5879.roa File: 8ecb86e6-8311-3057-8829-f64fb18d5879.roa (raw, json) Hash identifier: 2d6Fb0tx6vXdl/Hnii6M7iTdBJKqxq5PcQCwtF+ZMPw= Subject key identifier: 8F:9A:18:4F:44:4C:B9:7A:9F:34:DF:88:97:4F:C2:8D:82:2B:61:E9 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F43285849B14A058725742B2B7BB1DB00 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8ecb86e6-8311-3057-8829-f64fb18d5879.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 33442 IP address blocks: 149.23.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:05:87:25:74:2b:2b:7b:b1:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=60ce02b7-46ad-4d7b-9ae6-a2966df6dbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:11:38:4f:83:ba:ab:2e:c9:96:d2:27:e9:2c: fd:08:f7:ae:b2:26:c1:8d:1c:52:83:66:25:e3:cb: 07:6f:92:8a:00:e9:76:a4:73:33:c1:58:51:07:54: 88:13:3a:1b:13:9c:c4:b7:f2:c5:20:54:2a:0c:ad: 26:49:56:aa:92:d8:ae:29:24:06:b7:b9:0a:6a:aa: 30:31:23:ca:8d:f5:23:64:e3:3a:60:30:a9:f9:0b: 52:30:56:2e:6b:e7:98:7a:05:8f:b5:d9:7d:3b:cb: 38:ed:cb:71:7d:1a:79:12:fa:44:3e:f0:7d:54:10: cb:1a:b5:df:c0:ff:4d:2b:da:3a:b8:b0:f1:fe:e1: f5:2a:fb:90:37:3f:ca:9d:cf:9f:cf:72:09:8d:c9: 77:5e:83:64:7c:80:3a:30:79:de:28:c1:ea:61:3b: 1b:b4:ee:9e:ac:4c:61:2e:28:38:c6:7e:a5:43:cd: 93:a5:f4:64:3e:8f:60:38:da:f3:bf:02:69:bf:2b: c3:7b:d1:39:5d:8b:15:79:b2:cc:46:b3:df:db:bc: 9e:d1:05:62:53:1d:71:de:d1:0b:1e:6b:90:56:5f: ea:c9:3c:79:07:21:5f:33:08:26:66:e1:2b:81:37: db:30:37:b7:61:71:d2:ac:1b:a1:3e:6b:8d:db:d0: 89:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9A:18:4F:44:4C:B9:7A:9F:34:DF:88:97:4F:C2:8D:82:2B:61:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8ecb86e6-8311-3057-8829-f64fb18d5879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:3e:4f:f9:8f:88:4c:ae:46:27:fa:bb:5b:f6:20:51:8c:91: 47:fa:1b:6d:4e:67:f9:a8:a6:7f:6d:cb:43:9b:fd:82:8d:e1: 6d:56:8c:0b:09:c1:25:f7:7c:d8:be:89:8e:98:72:a3:25:f8: ef:20:72:7c:1b:5b:8b:a8:e2:89:37:9f:3f:47:37:b1:18:54: 68:59:32:16:dd:bd:56:e4:74:60:3d:31:8c:62:f0:e0:8a:b8: 1f:6e:ba:d0:c9:8a:66:61:42:ff:92:01:d4:ba:2e:3d:96:45: ff:f3:9e:17:e3:ba:75:c8:21:c1:c5:20:1c:6a:22:67:4e:ba: af:0b:15:51:78:8d:9e:f8:bb:4f:8a:9c:5a:17:0c:5a:48:f6: fb:3a:67:55:8e:f0:e6:bc:8e:d6:9b:f1:7a:54:e7:73:d1:a3: ed:00:9a:cf:42:d5:e7:68:4b:4b:62:57:a5:24:d2:48:e6:4e: 5c:52:a2:c0:0b:50:b8:13:61:8f:4f:8a:8e:76:ad:c2:ef:18: 31:ce:85:45:94:c2:f9:e6:be:22:1e:21:d9:f2:b8:59:b7:1b: de:96:97:1c:a0:95:c4:43:5c:11:46:8d:b5:0e:96:10:58:c9: ef:c4:e7:dc:36:83:a0:5f:fe:23:e2:b6:bf:27:53:d0:d9:82: 9a:f4:8f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgWHJXQrK3ux2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NjBjZTAyYjctNDZhZC00ZDdiLTlhZTYtYTI5NjZkZjZkYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxE4T4O6qy7JltIn6Sz9CPeusibBjRxSg2Yl 48sHb5KKAOl2pHMzwVhRB1SIEzobE5zEt/LFIFQqDK0mSVaqktiuKSQGt7kKaqow MSPKjfUjZOM6YDCp+QtSMFYua+eYegWPtdl9O8s47ctxfRp5EvpEPvB9VBDLGrXf wP9NK9o6uLDx/uH1KvuQNz/Knc+fz3IJjcl3XoNkfIA6MHneKMHqYTsbtO6erExh Lig4xn6lQ82TpfRkPo9gONrzvwJpvyvDe9E5XYsVebLMRrPf27ye0QViUx1x3tEL HmuQVl/qyTx5ByFfMwgmZuErgTfbMDe3YXHSrBuhPmuN29CJTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+aGE9ETLl6nzTfiJdPwo2CK2HpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvOGVjYjg2ZTYtODMxMS0z MDU3LTg4MjktZjY0ZmIxOGQ1ODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo+T/mPiEyuRif6u1v2IFGMkUf6G21OZ/mopn9ty0Ob/YKN4W1WjAsJ wSX3fNi+iY6YcqMl+O8gcnwbW4uo4ok3nz9HN7EYVGhZMhbdvVbkdGA9MYxi8OCK uB9uutDJimZhQv+SAdS6Lj2WRf/znhfjunXIIcHFIBxqImdOuq8LFVF4jZ74u0+K nFoXDFpI9vs6Z1WO8Oa8jtab8XpU53PRo+0Ams9C1edoS0tiV6Uk0kjmTlxSosAL ULgTYY9Pio52rcLvGDHOhUWUwvnmviIeIdnyuFm3G96WlxyglcRDXBFGjbUOlhBY ye/E59w2g6Bf/iPitr8nU9DZgpr0j6g= -----END CERTIFICATE-----Generated at Sat May 10 10:02:14 2025 by rpki-client