$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/af6d1abb-ec33-3d38-a843-92fd2e5b8379.roa File: af6d1abb-ec33-3d38-a843-92fd2e5b8379.roa (raw, json) Hash identifier: YcwnUnnzYEoKejsmwWg0v0uUCKOni9Qb3Wov0bCpsPE= Subject key identifier: CF:51:9C:CD:A1:7E:78:59:92:CD:9B:40:A8:21:E3:56:4A:D5:EB:7C Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F43285849BF3F599DCFB39C64F5B1CC80 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/af6d1abb-ec33-3d38-a843-92fd2e5b8379.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 212238 IP address blocks: 149.19.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:59:9d:cf:b3:9c:64:f5:b1:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=2dd303c9-4c77-4898-b2b5-9bf8993e4f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1e:09:2a:66:9c:42:7e:b1:a9:e1:65:0d:a9: e0:db:9c:a3:63:19:54:1c:af:4c:75:55:21:72:37: 36:45:47:88:ff:0a:47:72:78:1d:cc:13:dd:39:fa: 5f:94:ba:e5:ac:db:63:06:79:f3:28:ba:1b:2c:07: d8:ae:42:5a:ec:34:bb:b0:f2:58:d6:17:4d:42:89: 39:34:37:8c:33:b0:e9:f7:60:68:99:f6:be:b5:8d: de:78:cd:b2:e4:b5:93:bb:0d:e1:a1:45:d5:3a:ef: 64:26:46:fd:7c:fe:a9:de:25:fd:3b:63:72:84:af: c5:2d:a1:c9:4d:73:47:e7:3b:25:87:cd:5e:92:af: 0e:d6:70:f8:c9:bc:32:4d:5f:86:aa:2a:ee:a4:c7: 8d:02:d9:50:d8:db:e1:0a:48:24:fc:83:12:1b:4c: 72:e3:e1:40:4d:ed:3e:4a:a3:da:00:8a:9e:a4:8b: 8f:f9:6a:e0:da:44:2b:ec:32:81:30:7c:e4:12:fc: 43:63:37:af:01:8a:5e:b8:a1:32:4a:62:4f:e0:03: c1:1d:94:67:9f:b2:c2:94:b0:7b:c5:6f:d9:a0:35: 31:9a:28:99:14:44:b0:46:28:34:02:58:2a:eb:eb: 1f:63:55:59:3b:9b:38:0f:c3:9f:e1:be:67:a0:57: 5c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:51:9C:CD:A1:7E:78:59:92:CD:9B:40:A8:21:E3:56:4A:D5:EB:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/af6d1abb-ec33-3d38-a843-92fd2e5b8379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 149.19.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d0:d4:3d:8b:97:fd:98:dc:db:8f:eb:07:53:cd:27:31:80: 30:14:f8:e8:51:e3:8b:cd:18:d3:e7:fa:19:c4:ae:3b:4f:5b: 72:15:96:f5:5b:9d:9f:9b:b9:c1:7e:51:a7:cb:21:6b:24:4e: ae:ee:db:f1:94:4b:e7:77:11:0a:83:dc:87:19:24:e7:8b:b8: 6f:f7:b8:88:f7:dd:92:ed:0c:79:15:f6:99:46:c8:f6:53:6c: 80:70:6c:61:a5:e7:93:c9:86:c8:0f:9b:ca:f4:7b:78:66:1a: d9:40:41:14:69:ed:2a:cd:3b:4b:6c:e8:88:b6:27:32:33:fa: f0:5f:db:d7:8b:01:0b:2a:bb:8d:59:04:b1:dd:c2:b2:1b:bf: eb:62:74:cc:47:d6:3c:14:70:af:32:02:92:07:32:9f:17:f2: d5:3f:7f:70:2f:f4:1b:69:a9:d7:02:80:d3:3b:d6:9d:aa:45: 2e:9d:b2:42:62:f5:48:2f:ea:1b:db:c8:16:5e:4b:8e:72:34: 2d:b4:dd:e7:fa:6d:84:98:8a:c2:4e:06:a4:ce:be:eb:5c:0f: 2c:b4:58:04:90:63:d2:9a:a4:24:74:b5:51:a5:2b:b7:bd:ee: 5b:85:d5:02:9a:90:14:58:f9:3e:79:bb:9a:ba:4d:6e:16:a2: ad:45:43:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P1mdz7OcZPWxzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MmRkMzAzYzktNGM3Ny00ODk4LWIyYjUtOWJmODk5M2U0ZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR4JKmacQn6xqeFlDang25yjYxlUHK9MdVUh cjc2RUeI/wpHcngdzBPdOfpflLrlrNtjBnnzKLobLAfYrkJa7DS7sPJY1hdNQok5 NDeMM7Dp92Bomfa+tY3eeM2y5LWTuw3hoUXVOu9kJkb9fP6p3iX9O2NyhK/FLaHJ TXNH5zslh81ekq8O1nD4ybwyTV+GqirupMeNAtlQ2NvhCkgk/IMSG0xy4+FATe0+ SqPaAIqepIuP+Wrg2kQr7DKBMHzkEvxDYzevAYpeuKEySmJP4APBHZRnn7LClLB7 xW/ZoDUxmiiZFESwRig0Algq6+sfY1VZO5s4D8Of4b5noFdchwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9RnM2hfnhZks2bQKgh41ZK1et8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYWY2ZDFhYmItZWMzMy0z ZDM4LWE4NDMtOTJmZDJlNWI4Mzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADQ1D2Ll/2Y3NuP6wdTzScxgDAU+OhR44vNGNPn+hnErjtPW3IVlvVb nZ+bucF+UafLIWskTq7u2/GUS+d3EQqD3IcZJOeLuG/3uIj33ZLtDHkV9plGyPZT bIBwbGGl55PJhsgPm8r0e3hmGtlAQRRp7SrNO0ts6Ii2JzIz+vBf29eLAQsqu41Z BLHdwrIbv+tidMxH1jwUcK8yApIHMp8X8tU/f3Av9BtpqdcCgNM71p2qRS6dskJi 9Ugv6hvbyBZeS45yNC203ef6bYSYisJOBqTOvutcDyy0WASQY9KapCR0tVGlK7e9 7luF1QKakBRY+T55u5q6TW4Woq1FQ80= -----END CERTIFICATE-----Generated at Tue May 6 21:01:08 2025 by rpki-client