$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1ff2d823-777c-3db0-b8d2-ce56f99f9c98.roa File: 1ff2d823-777c-3db0-b8d2-ce56f99f9c98.roa (raw, json) Hash identifier: j6KPtEEOa0SebSE5HgoV4lwIUJ9hdsMYfa+DM7OLQOA= Subject key identifier: AE:68:B8:05:DF:51:8A:D8:F7:10:AA:84:E2:91:90:36:BB:83:92:65 Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F432858496484415B125D5AD9425C3180 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1ff2d823-777c-3db0-b8d2-ce56f99f9c98.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 394354 IP address blocks: 149.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:41:5b:12:5d:5a:d9:42:5c:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=d7dd21da-411b-445f-a6bd-d078bde945d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8c:22:50:57:7b:8a:81:5f:7b:81:69:5e:c2: b0:ca:d7:be:e4:82:fc:13:24:37:d2:46:40:2f:e5: 80:c6:50:08:35:77:ae:3f:ae:89:c9:8e:62:79:fd: fe:e1:1d:f1:60:17:f3:60:da:cf:49:5b:65:eb:e2: e3:61:1a:33:44:76:8f:bd:2e:a0:fc:b5:8d:d1:6b: 55:76:02:00:c1:03:f9:a3:15:91:d7:dc:b3:62:6d: 05:ce:0f:1d:83:2e:0b:3c:d4:15:0e:97:cd:7c:d2: f3:b7:c2:81:2a:17:51:8c:98:64:e6:39:f4:cb:2b: da:8c:7f:fd:0a:a1:58:14:0a:2e:05:54:4c:99:99: 31:44:9f:4e:b5:e6:8a:1a:27:a5:7f:32:78:a9:54: de:4d:78:46:22:c7:47:32:8d:85:54:3f:d0:90:49: 6f:b7:80:e7:37:96:a0:47:bc:40:cc:54:30:90:39: 73:d8:0e:88:69:c1:e7:2d:02:6b:65:38:e3:48:f1: f4:83:22:a2:e9:5a:cf:51:67:73:f1:40:2d:e8:51: 56:29:b1:4d:56:59:21:b6:2e:2f:62:05:ba:11:67: 4a:89:f5:6f:b6:ea:f4:4c:33:a9:43:fa:2c:56:bf: 8f:71:a0:be:14:6c:80:14:80:32:ce:0d:58:8f:fa: 1e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:68:B8:05:DF:51:8A:D8:F7:10:AA:84:E2:91:90:36:BB:83:92:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1ff2d823-777c-3db0-b8d2-ce56f99f9c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv4: 149.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:32:19:d4:c2:46:1c:ef:8f:80:47:1f:52:05:ab:55:84:6e: 41:6a:41:da:38:60:13:47:b9:bd:41:1f:73:0c:31:91:bf:41: b9:a2:b0:51:67:2f:a5:79:ff:95:f7:18:46:9e:40:60:17:a2: a5:cc:de:65:94:6f:2e:2e:30:5a:67:ca:ae:aa:96:3a:4b:1c: d6:b7:9a:c1:7f:c5:9f:a5:29:9d:e7:e5:6b:7f:e1:29:61:83: ff:5e:d8:39:98:8f:83:e8:a2:24:d8:69:ed:3c:48:62:ec:30: 99:50:3e:3a:69:38:24:61:fe:93:f2:86:fc:33:99:aa:ea:b0: 2e:2b:97:45:cb:d0:2d:79:8e:a8:99:6c:98:ed:00:ed:fd:13: 01:3f:8e:e3:97:ef:63:87:e1:e8:4e:dd:27:8b:19:a0:da:c1: fb:a0:e2:64:a7:60:49:0c:7a:ad:c7:e8:fd:f5:fd:b7:16:59: ea:33:1f:22:f9:62:cf:74:cf:80:42:a0:f7:c3:cb:0b:8c:f9: 34:2f:b7:d8:80:ec:f9:2c:43:e8:bb:bd:73:f8:2b:96:63:8c: 6b:b2:1d:ce:7b:6f:e2:9f:4a:37:05:76:0e:4a:46:c1:5d:2f: 52:5f:f8:4f:19:18:1d:58:f4:1e:55:b1:aa:82:41:3c:53:b7: 0b:f2:f5:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEFbEl1a2UJcMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk ZDdkZDIxZGEtNDExYi00NDVmLWE2YmQtZDA3OGJkZTk0NWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkowiUFd7ioFfe4FpXsKwyte+5IL8EyQ30kZA L+WAxlAINXeuP66JyY5ief3+4R3xYBfzYNrPSVtl6+LjYRozRHaPvS6g/LWN0WtV dgIAwQP5oxWR19yzYm0Fzg8dgy4LPNQVDpfNfNLzt8KBKhdRjJhk5jn0yyvajH/9 CqFYFAouBVRMmZkxRJ9OteaKGielfzJ4qVTeTXhGIsdHMo2FVD/QkElvt4DnN5ag R7xAzFQwkDlz2A6IacHnLQJrZTjjSPH0gyKi6VrPUWdz8UAt6FFWKbFNVlkhti4v YgW6EWdKifVvtur0TDOpQ/osVr+PcaC+FGyAFIAyzg1Yj/oeAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5ouAXfUYrY9xCqhOKRkDa7g5JlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvMWZmMmQ4MjMtNzc3Yy0z ZGIwLWI4ZDItY2U1NmY5OWY5Yzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMyGdTCRhzvj4BHH1IFq1WEbkFqQdo4YBNHub1BH3MMMZG/QbmisFFn L6V5/5X3GEaeQGAXoqXM3mWUby4uMFpnyq6qljpLHNa3msF/xZ+lKZ3n5Wt/4Slh g/9e2DmYj4PooiTYae08SGLsMJlQPjppOCRh/pPyhvwzmarqsC4rl0XL0C15jqiZ bJjtAO39EwE/juOX72OH4ehO3SeLGaDawfug4mSnYEkMeq3H6P31/bcWWeozHyL5 Ys90z4BCoPfDywuM+TQvt9iA7PksQ+i7vXP4K5ZjjGuyHc57b+KfSjcFdg5KRsFd L1Jf+E8ZGB1Y9B5VsaqCQTxTtwvy9Tc= -----END CERTIFICATE-----Generated at Tue May 6 00:53:22 2025 by rpki-client