$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa File: ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa (raw, json) Hash identifier: tEeyPK8OdG1EgM1+w//zP9ufpmtv6kVDEqkSsT3oXls= Subject key identifier: 42:56:3D:65:ED:6C:F5:C7:F1:25:8B:06:DB:48:BF:E8:B9:F1:DF:77 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F43285849AA4F6DCA014F312FE8DE0140 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 149.72.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:6d:ca:01:4f:31:2f:e8:de:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=a2cd3b5a-9013-4c42-8caa-feb3bf266547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7a:d5:96:f7:20:e3:36:e5:b3:48:6a:a2:49: 40:e3:e7:66:5b:fe:98:28:47:7e:de:8a:66:39:5b: 48:af:31:07:dc:1f:c6:f1:33:1e:df:b6:ee:60:f3: 06:15:6c:a7:4e:b7:c0:d4:d9:14:e4:81:0a:8c:c5: e7:c6:20:7d:cb:d6:f6:82:83:4d:04:31:49:80:37: 9c:b5:e6:a7:15:a5:e6:68:6e:6c:f2:fc:99:31:94: be:5c:0d:5f:4c:e7:9d:4b:c7:f3:a3:1f:3e:63:a6: 86:0a:92:74:35:91:ca:9a:29:07:e1:08:f1:08:9d: 80:68:4d:81:41:88:0f:04:0d:88:3d:38:0e:31:76: cf:0d:a6:99:78:dd:48:b0:e9:87:e9:6f:18:53:eb: 70:2a:62:b6:12:c1:af:04:87:c6:09:f8:b4:bf:b6: fb:d6:f5:7d:41:de:79:b6:64:fd:ae:37:af:97:cf: 06:4f:b0:72:96:9a:e7:ea:f2:f6:d0:20:a8:e2:1e: 38:80:8f:01:10:b8:73:67:1e:d9:e6:77:8b:dd:7a: 19:17:aa:64:b0:62:d6:8a:ea:71:11:b2:20:05:bf: 33:d4:3c:e1:55:39:46:90:ff:16:ff:28:8a:7e:fc: c0:31:19:82:32:ce:d8:8d:02:a1:95:70:66:fb:aa: 8a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:56:3D:65:ED:6C:F5:C7:F1:25:8B:06:DB:48:BF:E8:B9:F1:DF:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d2:43:0e:a7:3c:73:a4:fe:5f:11:ed:bc:a8:aa:18:81:e5: ce:a5:54:75:5f:c3:83:87:7e:44:a4:10:01:22:f8:77:65:86: bb:79:19:10:e0:78:1c:88:2d:66:7b:d8:5c:b7:d8:e6:5c:46: 59:78:fe:d9:cc:70:c2:75:24:22:7b:8b:c8:51:7d:18:49:2f: 5a:26:c3:d4:6b:33:68:d7:f7:04:fa:e5:ac:ca:3b:79:89:4c: 22:88:49:ff:e4:c1:0b:3c:ab:e7:85:59:98:7b:8d:07:69:80: b8:a5:65:c6:f1:b9:76:a5:1e:ca:2f:2f:ce:35:52:b6:6f:a5: 52:c3:bd:67:7e:7f:cd:dc:94:e2:e7:54:ec:d3:d5:16:f8:5a: 77:69:c6:9f:31:f9:d7:79:7a:0c:54:bf:88:19:8b:64:92:19: 63:37:b8:11:de:ad:8b:db:1e:93:b5:72:8b:6a:a9:a3:df:b4: bf:11:f2:13:50:1e:f2:43:89:e1:36:69:c2:c9:a8:f8:96:40: ad:ce:20:af:dc:0c:67:6d:b2:02:7d:12:cb:11:b5:66:cb:2e: 05:3b:5f:10:91:9e:ea:82:4e:7b:a7:e3:a0:0f:74:37:e8:95: b7:24:ff:6f:44:c4:0b:48:d9:41:af:7a:2f:c1:64:81:d8:db: 7d:67:91:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT23KAU8xL+jeAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk YTJjZDNiNWEtOTAxMy00YzQyLThjYWEtZmViM2JmMjY2NTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63rVlvcg4zbls0hqoklA4+dmW/6YKEd+3opm OVtIrzEH3B/G8TMe37buYPMGFWynTrfA1NkU5IEKjMXnxiB9y9b2goNNBDFJgDec teanFaXmaG5s8vyZMZS+XA1fTOedS8fzox8+Y6aGCpJ0NZHKmikH4QjxCJ2AaE2B QYgPBA2IPTgOMXbPDaaZeN1IsOmH6W8YU+twKmK2EsGvBIfGCfi0v7b71vV9Qd55 tmT9rjevl88GT7Bylprn6vL20CCo4h44gI8BELhzZx7Z5neL3XoZF6pksGLWiupx EbIgBb8z1DzhVTlGkP8W/yiKfvzAMRmCMs7YjQKhlXBm+6qKtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJWPWXtbPXH8SWLBttIv+i58d93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvZmZhNTJjNjAtZGE5NS0z MWIxLWJmZTktYWNiZDRlNTk4NWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlUgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnSQw6nPHOk/l8R7byoqhiB5c6lVHVfw4OHfkSkEAEi+Hdlhrt5GRDg eByILWZ72Fy32OZcRll4/tnMcMJ1JCJ7i8hRfRhJL1omw9RrM2jX9wT65azKO3mJ TCKISf/kwQs8q+eFWZh7jQdpgLilZcbxuXalHsovL841UrZvpVLDvWd+f83clOLn VOzT1Rb4Wndpxp8x+dd5egxUv4gZi2SSGWM3uBHerYvbHpO1cotqqaPftL8R8hNQ HvJDieE2acLJqPiWQK3OIK/cDGdtsgJ9EssRtWbLLgU7XxCRnuqCTnun46APdDfo lbck/29ExAtI2UGvei/BZIHY231nkdQ= -----END CERTIFICATE-----Generated at Mon May 5 09:37:02 2025 by rpki-client