$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/7bf02df4-bf0d-32ef-a2f2-166f51a97bab.roa File: 7bf02df4-bf0d-32ef-a2f2-166f51a97bab.roa (raw, json) Hash identifier: uTO2dBlwjui5TvCkrJFeM2sp0ZzBXEF9eaxNaTuje4g= Subject key identifier: 3B:CA:46:1B:A9:18:5E:A4:29:54:A4:AD:32:7D:5C:99:3E:88:0A:07 Certificate issuer: /CN=004321a8-393d-4f7f-add9-dddc07a1320d Certificate serial: 010D0C9F43285849C430A42FC533ECFF3F421280 Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/7bf02df4-bf0d-32ef-a2f2-166f51a97bab.roa Signing time: Tue 06 May 2025 19:30:16 +0000 ROA not before: Tue 06 May 2025 19:30:16 +0000 ROA not after: Mon 04 Aug 2025 19:30:16 +0000 asID: 399970 IP address blocks: 149.112.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:30:a4:2f:c5:33:ec:ff:3f:42:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d Validity Not Before: May 6 19:30:16 2025 GMT Not After : Aug 4 19:30:16 2025 GMT Subject: CN=0f5ee9f4-e4bb-431a-9bd9-e24ec32763e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:7a:24:43:a1:74:7f:f7:11:4d:58:48:ce: fc:01:4d:c2:0e:b6:ea:9c:4e:1a:0a:3f:92:cc:cf: ad:5f:b5:f0:d9:28:91:76:1e:03:51:33:aa:43:a3: 76:de:d1:b8:d0:a3:15:4a:9c:e5:55:25:d1:d0:bb: 19:ca:80:f7:40:58:aa:5d:93:cb:6b:4a:b4:55:72: 30:e9:79:4a:93:4c:82:cf:58:2e:ad:50:e9:27:10: d6:83:d7:bc:c5:bb:b1:dd:fa:52:cf:8f:9c:ca:0d: c1:9b:32:e9:86:33:5f:c2:e3:5a:f9:31:da:92:c3: 45:bd:e1:47:fc:a1:8a:99:b2:8e:6c:ce:1c:c7:f4: 41:04:a9:65:b3:77:ab:bb:fc:fb:c0:3f:81:f4:1c: 77:dd:72:f7:35:3a:d6:dd:bb:09:76:9c:b2:6f:2e: e3:c0:f1:be:e2:47:cb:80:c0:e7:b4:51:a0:0f:8e: 37:70:ed:3a:96:16:86:57:67:39:af:d4:41:4c:62: 9a:28:b8:6f:81:79:77:b4:1d:9a:de:df:56:fb:b6: e7:f7:7f:4f:62:ce:2b:07:1f:d4:95:db:9f:a3:0d: 21:98:e5:e8:cf:e1:3e:58:94:35:9f:fe:02:06:0e: 0f:4e:90:2e:eb:9c:01:9e:71:2d:e5:c1:2d:ec:13: 17:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CA:46:1B:A9:18:5E:A4:29:54:A4:AD:32:7D:5C:99:3E:88:0A:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/7bf02df4-bf0d-32ef-a2f2-166f51a97bab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl X509v3 Authority Key Identifier: keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer sbgp-ipAddrBlock: critical IPv4: 149.112.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:9c:a5:ff:39:51:55:36:35:af:3b:78:a6:81:24:54:fc:b3: 97:7f:0c:0c:e1:f0:4c:2d:04:ae:f1:01:95:04:1f:de:e0:0e: 52:3b:6b:3f:e1:82:ad:ce:64:68:0f:f3:63:e2:b4:3c:77:fa: f8:c2:0f:8c:5a:f6:4e:77:13:c8:0d:39:52:9e:85:d6:74:9d: 03:00:30:eb:88:5e:35:23:c2:81:54:61:30:e4:02:3e:d7:aa: 69:f5:47:3b:3f:b2:76:ad:d4:f3:ca:c2:d6:06:e8:4e:b0:23: d3:ee:97:dd:c3:9e:f7:81:0a:1b:bc:9a:7d:f1:94:0f:f4:42: bc:ff:4b:ac:25:83:b4:d7:37:77:bd:ac:ea:9d:43:e5:c5:b0: f3:05:22:68:4d:37:e4:67:74:27:64:4f:6f:da:03:be:4a:e3: bf:c4:5c:01:17:36:d6:a1:d9:58:d4:95:76:c6:96:51:1a:2f: f7:39:76:eb:22:6a:57:98:72:10:af:c3:8c:15:ac:51:60:4f: ea:15:22:08:d8:33:02:49:be:f7:e2:67:3e:cb:a8:b3:bc:ae: dc:83:df:85:15:d8:69:9a:7b:c6:fd:01:78:27:0e:5f:20:d2: cd:2d:c9:52:02:94:9a:d2:cb:e2:6d:f1:79:dc:af:39:b8:20: e1:2e:46:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnEMKQvxTPs/z9CEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0MzIxYTgtMzkzZC00ZjdmLWFkZDktZGRkYzA3YTEz MjBkMB4XDTI1MDUwNjE5MzAxNloXDTI1MDgwNDE5MzAxNlowLzEtMCsGA1UEAxMk MGY1ZWU5ZjQtZTRiYi00MzFhLTliZDktZTI0ZWMzMjc2M2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMl6JEOhdH/3EU1YSM78AU3CDrbqnE4aCj+S zM+tX7Xw2SiRdh4DUTOqQ6N23tG40KMVSpzlVSXR0LsZyoD3QFiqXZPLa0q0VXIw 6XlKk0yCz1gurVDpJxDWg9e8xbux3fpSz4+cyg3BmzLphjNfwuNa+THaksNFveFH /KGKmbKObM4cx/RBBKlls3eru/z7wD+B9Bx33XL3NTrW3bsJdpyyby7jwPG+4kfL gMDntFGgD443cO06lhaGV2c5r9RBTGKaKLhvgXl3tB2a3t9W+7bn939PYs4rBx/U ldufow0hmOXoz+E+WJQ1n/4CBg4PTpAu65wBnnEt5cEt7BMXYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvKRhupGF6kKVSkrTJ9XJk+iAoHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wMDQz MjFhOC0zOTNkLTRmN2YtYWRkOS1kZGRjMDdhMTMyMGQvN2JmMDJkZjQtYmYwZC0z MmVmLWEyZjItMTY2ZjUxYTk3YmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDA0MzIxYTgtMzkzZC00ZjdmLWFk ZDktZGRkYzA3YTEzMjBkLzAwNDMyMWE4LTM5M2QtNGY3Zi1hZGQ5LWRkZGMwN2Ex MzIwZC5jcmwwHwYDVR0jBBgwFoAU/tjhWyPOsJsuhIeb/2cWXdrV/fUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wMDQzMjFhOC0zOTNkLTRmN2YtYWRkOS1kZGRj MDdhMTMyMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqcpf85UVU2Na87eKaBJFT8s5d/DAzh8EwtBK7xAZUEH97gDlI7az/h gq3OZGgP82PitDx3+vjCD4xa9k53E8gNOVKehdZ0nQMAMOuIXjUjwoFUYTDkAj7X qmn1Rzs/snat1PPKwtYG6E6wI9Pul93DnveBChu8mn3xlA/0Qrz/S6wlg7TXN3e9 rOqdQ+XFsPMFImhNN+RndCdkT2/aA75K47/EXAEXNtah2VjUlXbGllEaL/c5dusi aleYchCvw4wVrFFgT+oVIgjYMwJJvvfiZz7LqLO8rtyD34UV2Gmae8b9AXgnDl8g 0s0tyVIClJrSy+Jt8Xncrzm4IOEuRnk= -----END CERTIFICATE-----Generated at Sun May 11 02:16:29 2025 by rpki-client