$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/7020b128-2446-34bc-8f79-c0c5fe39062f.roa File: 7020b128-2446-34bc-8f79-c0c5fe39062f.roa (raw, json) Hash identifier: 0BJ1REmgnd979IhucIZZI024/7KWmZXIpFUWdNR2v70= Subject key identifier: DE:DF:02:80:FD:53:10:5C:85:25:92:60:C8:A6:4A:D2:88:F7:B0:29 Certificate issuer: /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Certificate serial: 010D0C9F43285849C20A0A2CC9E37354E350DF20 Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/7020b128-2446-34bc-8f79-c0c5fe39062f.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 27198 IP address blocks: 149.159.128.0/18 maxlen: 18 149.159.192.0/18 maxlen: 18 192.68.133.0/24 maxlen: 24 198.49.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:0a:2c:c9:e3:73:54:e3:50:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=7735548c-9407-4b5e-9b4c-e9fa87853fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:66:ce:82:9b:04:5e:d4:e1:23:4d:25:e8:23: 77:df:b1:f4:dc:29:03:96:61:e6:22:05:22:3f:b5: c8:54:07:ac:46:c9:59:aa:c6:8f:81:ea:0e:e2:0b: 61:28:c9:c9:cb:fe:85:c6:40:ad:2d:ff:75:14:e7: 6a:69:78:3c:68:5e:56:07:7d:58:66:c2:03:4e:f6: 29:57:23:9b:b3:49:88:99:12:7e:3f:c3:06:6a:d4: 4e:61:f5:b9:40:2b:a4:2a:ff:e8:37:53:c5:b2:6f: 8b:4f:c1:d1:22:36:60:96:4a:7b:4a:7e:9d:cb:4f: c6:da:70:d7:3d:6e:a7:17:a5:fe:9b:ef:26:2f:b6: 46:07:62:ba:64:c8:e1:9b:21:a8:72:d9:70:ea:a9: b6:b9:53:66:88:d2:2c:47:73:48:ac:1c:79:0e:6a: 58:71:40:fc:17:e4:f1:58:73:d9:d0:1f:0e:ba:31: 59:29:48:61:af:ea:df:09:d8:53:c0:6c:b2:c9:3d: 16:98:79:e5:72:48:7e:11:61:7a:8a:0e:ca:82:ee: f8:2a:78:29:16:f5:76:a5:85:b4:4e:fe:cb:c6:6d: 0a:70:26:16:13:76:d8:ed:a7:05:e7:07:fe:66:a8: 2a:71:af:50:90:4f:b3:da:c7:44:55:f8:ff:98:4f: 19:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DF:02:80:FD:53:10:5C:85:25:92:60:C8:A6:4A:D2:88:F7:B0:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/7020b128-2446-34bc-8f79-c0c5fe39062f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl X509v3 Authority Key Identifier: keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer sbgp-ipAddrBlock: critical IPv4: 149.159.128.0/17 192.68.133.0/24 198.49.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e4:a5:3c:1a:18:91:b2:f1:9a:93:2c:fc:37:56:e0:0d:62: 3e:c5:d3:1b:69:7c:8b:f1:26:49:a0:c7:70:1e:6b:e7:4a:31: 88:ae:fa:b1:6b:79:ba:d2:db:53:c1:f2:46:49:28:3a:64:ec: 82:81:73:9d:29:76:b1:e4:82:b4:18:ae:24:cb:be:10:94:9d: 27:d3:73:b6:0b:8f:a0:c8:a0:1a:b2:f0:57:49:8f:91:da:b4: 76:f2:c4:95:0b:7d:de:e5:f5:56:a2:6d:d8:b1:3b:34:34:b4: 71:e1:98:34:dc:89:55:4b:c7:fa:6a:a3:3a:2b:ed:22:0f:95: 7c:b1:62:a6:b6:0d:85:35:a7:55:e8:2d:7c:e5:53:e4:d5:66: a4:00:d0:4b:4f:e9:a2:68:ad:98:fd:0e:eb:05:39:f0:b4:46: cb:ef:a7:e0:f9:fe:34:0f:89:22:0b:2a:24:95:e9:5d:20:be: a8:a3:c7:f8:84:c4:35:24:5b:f2:a1:73:1e:38:3c:9f:25:30: 80:36:74:f5:f4:4f:52:e4:c9:5e:b1:0c:2e:11:44:6e:4b:75: b1:dc:5e:c3:6b:85:8a:65:28:8a:54:ab:31:9c:6b:f2:cb:f7: 64:57:13:9d:92:1e:fe:e5:3b:48:51:11:34:00:bb:fb:81:56: e2:8c:d7:b1 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEnCCgosyeNzVONQ3yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk1ZmNlN2UtNjVjMi00NjZmLWFlMzQtZWFkYjhjNzIx NTZiMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NzczNTU0OGMtOTQwNy00YjVlLTliNGMtZTlmYTg3ODUzZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmbOgpsEXtThI00l6CN337H03CkDlmHmIgUi P7XIVAesRslZqsaPgeoO4gthKMnJy/6FxkCtLf91FOdqaXg8aF5WB31YZsIDTvYp VyObs0mImRJ+P8MGatROYfW5QCukKv/oN1PFsm+LT8HRIjZglkp7Sn6dy0/G2nDX PW6nF6X+m+8mL7ZGB2K6ZMjhmyGoctlw6qm2uVNmiNIsR3NIrBx5DmpYcUD8F+Tx WHPZ0B8OujFZKUhhr+rfCdhTwGyyyT0WmHnlckh+EWF6ig7Kgu74KngpFvV2pYW0 Tv7Lxm0KcCYWE3bY7acF5wf+Zqgqca9QkE+z2sdEVfj/mE8ZXQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFN7fAoD9UxBchSWSYMimStKI97ApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVm Y2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRiOGM3MjE1NmIvNzAyMGIxMjgtMjQ0Ni0z NGJjLThmNzktYzBjNWZlMzkwNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTk1ZmNlN2UtNjVjMi00NjZmLWFl MzQtZWFkYjhjNzIxNTZiL2E5NWZjZTdlLTY1YzItNDY2Zi1hZTM0LWVhZGI4Yzcy MTU2Yi5jcmwwHwYDVR0jBBgwFoAUX4ym4YQPov69jdqDmIEh38vgZc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVmY2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRi OGM3MjE1NmIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQHlZ+AAwQA wESFAwQAxjHWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADnkpTwaGJGy8ZqTLPw3VuANYj7F0xtpfIvxJkmg x3Aea+dKMYiu+rFrebrS21PB8kZJKDpk7IKBc50pdrHkgrQYriTLvhCUnSfTc7YL j6DIoBqy8FdJj5HatHbyxJULfd7l9VaibdixOzQ0tHHhmDTciVVLx/pqozor7SIP lXyxYqa2DYU1p1XoLXzlU+TVZqQA0EtP6aJorZj9DusFOfC0Rsvvp+D5/jQPiSIL KiSV6V0gvqijx/iExDUkW/Khcx44PJ8lMIA2dPX0T1LkyV6xDC4RRG5LdbHcXsNr hYplKIpUqzGca/LL92RXE52SHv7lO0hRETQAu/uBVuKM17E= -----END CERTIFICATE-----Generated at Sun May 11 10:19:22 2025 by rpki-client