$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61a15f13-b133-38fa-abd3-60c0e22d97ce.roa File: 61a15f13-b133-38fa-abd3-60c0e22d97ce.roa (raw, json) Hash identifier: auShHWtCJ7lNk8IfDMhJh2/dwmzOKbKIPQodeOhJxwg= Subject key identifier: 11:B5:0E:C9:12:A3:8E:68:B6:3D:39:D0:72:85:5C:04:34:AF:8F:DD Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849ABB4A2A61116D15C27DA0140 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61a15f13-b133-38fa-abd3-60c0e22d97ce.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 64267 IP address blocks: 149.20.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a2:a6:11:16:d1:5c:27:da:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=aa45e960-ba53-462b-abbe-721411dfe3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:05:2f:03:ad:db:e0:d2:f6:67:b3:97:0e: 34:0e:7c:d1:38:fa:1a:3e:82:65:21:8e:be:47:60: 15:c7:f7:4d:c8:29:c4:65:67:4d:3d:a7:f9:11:7c: 88:5f:07:84:82:e8:89:13:88:92:51:28:bb:b4:86: cf:c0:12:4b:8f:a1:ba:f7:59:da:aa:c0:de:57:0f: fb:4a:5d:26:e9:29:40:1c:c1:07:25:d0:7f:1c:8f: bb:d7:4a:26:db:5f:b6:5d:eb:53:0f:6d:64:fd:1b: 11:48:b4:0e:a0:7e:8d:08:57:c8:f4:e3:b9:02:59: 01:1b:66:de:20:af:41:e7:24:30:ab:09:38:53:07: b8:15:b7:70:2c:fd:65:80:86:53:7d:31:35:a5:ac: 83:d4:9f:3c:dc:7e:b9:f0:83:55:17:93:52:87:91: d7:fb:be:34:20:01:26:ac:d4:95:7b:19:0b:f0:77: 75:9e:3a:fc:75:c7:91:db:12:ea:80:e9:8c:d4:77: 0d:4b:51:06:bf:6a:46:36:0b:fc:fd:c5:af:34:4d: d3:9c:ba:68:be:b3:fe:0c:42:30:87:3e:00:54:fa: b4:a4:2f:3a:3d:01:4b:10:df:15:e1:e9:14:18:05: ae:be:23:4a:85:21:7d:c2:f7:17:6e:b7:a3:f3:df: 8a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B5:0E:C9:12:A3:8E:68:B6:3D:39:D0:72:85:5C:04:34:AF:8F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61a15f13-b133-38fa-abd3-60c0e22d97ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e4:c1:be:82:69:ff:ff:e8:d3:1a:a3:cc:c8:a9:03:9e:5e: 7b:7f:15:b5:ec:4e:86:80:de:79:51:77:9e:e9:2e:64:a5:15: 75:c4:9d:5b:e5:c8:e9:af:64:f7:a2:a4:ba:10:11:ee:d8:19: dc:aa:a5:58:79:07:8e:01:ab:b8:24:68:09:28:71:84:89:61: e3:31:90:9b:24:23:b3:c9:a3:fc:f5:43:b0:a8:1c:57:d7:7d: b3:11:54:56:d1:70:5e:5c:6c:c6:96:72:a6:7b:d8:0c:fa:ac: 97:d7:4f:4a:5c:f4:fe:23:d1:31:6e:b5:35:f7:9d:5a:6f:ba: cd:b1:1d:0e:be:09:99:2b:26:60:19:cc:db:8b:aa:08:40:b7: 83:41:49:39:c1:11:3c:bf:8a:78:7e:52:6f:6d:f5:b9:e5:2a: ea:c4:ff:56:4e:8f:2c:a4:ff:07:1a:32:84:31:1f:8b:2e:cb: ea:68:67:d7:8f:51:26:29:13:67:72:07:9b:45:91:88:2c:17: 6a:e5:90:95:11:39:f9:e9:9c:ab:9f:4d:2d:e6:b7:1e:35:47: 9c:a3:27:57:07:4c:1f:94:92:17:27:8c:c3:d1:bc:d4:5b:b4: c1:75:5b:56:b5:98:44:9d:8a:a9:db:d7:2c:31:13:d8:eb:51: 46:b0:46:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKKmERbRXCfaAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YWE0NWU5NjAtYmE1My00NjJiLWFiYmUtNzIxNDExZGZlM2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphcFLwOt2+DS9mezlw40DnzROPoaPoJlIY6+ R2AVx/dNyCnEZWdNPaf5EXyIXweEguiJE4iSUSi7tIbPwBJLj6G691naqsDeVw/7 Sl0m6SlAHMEHJdB/HI+710om21+2XetTD21k/RsRSLQOoH6NCFfI9OO5AlkBG2be IK9B5yQwqwk4Uwe4FbdwLP1lgIZTfTE1payD1J883H658INVF5NSh5HX+740IAEm rNSVexkL8Hd1njr8dceR2xLqgOmM1HcNS1EGv2pGNgv8/cWvNE3TnLpovrP+DEIw hz4AVPq0pC86PQFLEN8V4ekUGAWuviNKhSF9wvcXbrej89+K7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBG1DskSo45otj050HKFXAQ0r4/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjFhMTVmMTMtYjEzMy0z OGZhLWFiZDMtNjBjMGUyMmQ5N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXkwb6Caf//6NMao8zIqQOeXnt/FbXsToaA3nlRd57pLmSlFXXEnVvl yOmvZPeipLoQEe7YGdyqpVh5B44Bq7gkaAkocYSJYeMxkJskI7PJo/z1Q7CoHFfX fbMRVFbRcF5cbMaWcqZ72Az6rJfXT0pc9P4j0TFutTX3nVpvus2xHQ6+CZkrJmAZ zNuLqghAt4NBSTnBETy/inh+Um9t9bnlKurE/1ZOjyyk/wcaMoQxH4suy+poZ9eP USYpE2dyB5tFkYgsF2rlkJUROfnpnKufTS3mtx41R5yjJ1cHTB+UkhcnjMPRvNRb tMF1W1a1mESdiqnb1ywxE9jrUUawRto= -----END CERTIFICATE-----Generated at Sun May 11 04:29:59 2025 by rpki-client