$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/cbb2c72a-5a95-3031-937b-c397988bc507.roa File: cbb2c72a-5a95-3031-937b-c397988bc507.roa (raw, json) Hash identifier: gy5KT880yAcZNmmlf7x7To+lOXMK98O0Coe4QQ+kdIw= Subject key identifier: 7D:56:03:24:62:3A:81:1C:E2:40:33:99:5D:F6:34:92:2B:65:49:21 Certificate issuer: /CN=004321a8-393d-4f7f-add9-dddc07a1320d Certificate serial: 010D0C9F43285849C43076574888D0E4F842BD80 Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/cbb2c72a-5a95-3031-937b-c397988bc507.roa Signing time: Tue 06 May 2025 19:29:54 +0000 ROA not before: Tue 06 May 2025 19:29:54 +0000 ROA not after: Mon 04 Aug 2025 19:29:54 +0000 asID: 399970 IP address blocks: 149.112.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:30:76:57:48:88:d0:e4:f8:42:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d Validity Not Before: May 6 19:29:54 2025 GMT Not After : Aug 4 19:29:54 2025 GMT Subject: CN=e055f035-a73a-451b-9018-bc6dd1eb2c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b7:2b:cd:59:52:26:91:19:7c:6c:ca:d8:01: f9:da:99:35:a3:0a:c2:46:5b:88:80:f3:d3:2e:2b: a1:f3:b5:1d:51:e5:7c:75:bd:a1:40:27:45:b4:5d: 23:5f:e2:22:11:de:0e:4f:6b:f4:d9:11:2d:f8:07: cd:39:e2:eb:91:30:f6:82:62:17:45:0b:b6:27:78: 7b:ff:a5:a2:b2:2a:e0:5f:df:4d:23:c1:62:93:cf: ac:0f:02:4a:b6:91:a4:6b:e4:81:17:6f:dc:9a:0c: fa:42:a6:26:ae:ba:2c:cb:2e:ad:62:09:b6:4d:84: 87:73:90:f8:32:44:98:51:b1:2b:35:79:56:6c:28: 38:c7:ec:ca:18:14:fa:52:20:fb:d3:c1:bb:91:41: af:cb:43:32:87:eb:fb:12:4c:51:02:d7:f2:88:44: cb:ca:a4:63:0a:f2:cb:2f:13:3f:11:ac:6f:79:7e: 69:4d:11:f7:b0:54:2f:ca:1a:22:c7:ff:bb:1c:a2: 41:e5:1a:b8:6d:62:e3:77:20:f9:58:bf:06:71:40: 11:4b:7d:9d:de:dd:2d:74:e3:dc:3b:a7:98:6d:f5: 77:df:83:e8:22:57:71:21:f8:ac:93:cd:2f:e9:22: d4:e6:de:72:a4:36:6a:2b:85:fe:9c:03:b0:2b:4f: 68:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:56:03:24:62:3A:81:1C:E2:40:33:99:5D:F6:34:92:2B:65:49:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/cbb2c72a-5a95-3031-937b-c397988bc507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl X509v3 Authority Key Identifier: keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer sbgp-ipAddrBlock: critical IPv4: 149.112.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:77:b6:7d:da:17:b8:c9:d8:3b:00:02:4a:3b:9d:52:03:f8: a6:4e:12:74:d9:8e:e2:ea:17:77:e9:73:ad:f7:5e:90:5b:0e: e0:d1:86:e8:ac:5b:5a:ed:2c:9f:54:9f:fe:25:d0:5b:27:e0: d5:e7:1e:23:b2:d2:83:15:87:35:c4:0f:77:78:c0:67:23:f7: c3:2b:e1:03:d9:69:b0:d6:f7:31:d6:81:e5:1a:01:62:f4:c0: 9e:79:a9:09:ee:e8:fb:9b:28:fb:43:36:7d:35:ac:e6:30:7a: 78:c9:05:44:ab:c4:e0:7a:b3:49:d8:b4:55:a7:82:b4:be:2e: 9d:47:54:10:cd:83:e8:a9:ca:1b:c5:08:69:a9:86:ca:27:12: 18:e3:31:0f:05:8c:db:7b:8f:80:5b:ea:76:31:03:e6:d5:44: aa:54:22:6d:2d:e2:36:42:2c:6f:c2:2f:95:7c:a3:33:dd:0e: f2:62:91:84:ab:9c:61:e2:24:3e:2e:d3:e3:00:d5:4d:20:aa: 43:2c:52:f6:26:2c:ff:43:d9:1a:19:ce:4c:60:26:e4:6d:45: f2:98:e7:79:c8:d5:97:6b:3b:80:24:eb:92:79:61:39:a2:a2: ab:e9:4a:11:92:23:35:48:16:32:f4:22:c5:0b:74:dd:1e:44: 0e:88:f5:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnEMHZXSIjQ5PhCvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0MzIxYTgtMzkzZC00ZjdmLWFkZDktZGRkYzA3YTEz MjBkMB4XDTI1MDUwNjE5Mjk1NFoXDTI1MDgwNDE5Mjk1NFowLzEtMCsGA1UEAxMk ZTA1NWYwMzUtYTczYS00NTFiLTkwMTgtYmM2ZGQxZWIyYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbcrzVlSJpEZfGzK2AH52pk1owrCRluIgPPT Liuh87UdUeV8db2hQCdFtF0jX+IiEd4OT2v02REt+AfNOeLrkTD2gmIXRQu2J3h7 /6WisirgX99NI8Fik8+sDwJKtpGka+SBF2/cmgz6QqYmrrosyy6tYgm2TYSHc5D4 MkSYUbErNXlWbCg4x+zKGBT6UiD708G7kUGvy0Myh+v7EkxRAtfyiETLyqRjCvLL LxM/EaxveX5pTRH3sFQvyhoix/+7HKJB5Rq4bWLjdyD5WL8GcUARS32d3t0tdOPc O6eYbfV334PoIldxIfisk80v6SLU5t5ypDZqK4X+nAOwK09oFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1WAyRiOoEc4kAzmV32NJIrZUkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wMDQz MjFhOC0zOTNkLTRmN2YtYWRkOS1kZGRjMDdhMTMyMGQvY2JiMmM3MmEtNWE5NS0z MDMxLTkzN2ItYzM5Nzk4OGJjNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDA0MzIxYTgtMzkzZC00ZjdmLWFk ZDktZGRkYzA3YTEzMjBkLzAwNDMyMWE4LTM5M2QtNGY3Zi1hZGQ5LWRkZGMwN2Ex MzIwZC5jcmwwHwYDVR0jBBgwFoAU/tjhWyPOsJsuhIeb/2cWXdrV/fUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wMDQzMjFhOC0zOTNkLTRmN2YtYWRkOS1kZGRj MDdhMTMyMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ3tn3aF7jJ2DsAAko7nVID+KZOEnTZjuLqF3fpc633XpBbDuDRhuis W1rtLJ9Un/4l0Fsn4NXnHiOy0oMVhzXED3d4wGcj98Mr4QPZabDW9zHWgeUaAWL0 wJ55qQnu6PubKPtDNn01rOYwenjJBUSrxOB6s0nYtFWngrS+Lp1HVBDNg+ipyhvF CGmphsonEhjjMQ8FjNt7j4Bb6nYxA+bVRKpUIm0t4jZCLG/CL5V8ozPdDvJikYSr nGHiJD4u0+MA1U0gqkMsUvYmLP9D2RoZzkxgJuRtRfKY53nI1ZdrO4Ak65J5YTmi oqvpShGSIzVIFjL0IsULdN0eRA6I9Tg= -----END CERTIFICATE-----Generated at Sat May 10 23:04:09 2025 by rpki-client