$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa File: 24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa (raw, json) Hash identifier: w99ff/FubnsZzeG89IacIwgEmZipitndvVcmKB8hvIg= Subject key identifier: 33:20:2F:C0:30:18:CD:C8:EC:D4:6C:CA:12:AE:87:A5:C8:90:C1:F6 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285848D0ABAF7FB3A1A5298C68FDA0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 202276 IP address blocks: 149.19.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:af:7f:b3:a1:a5:29:8c:68:fd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=c7cd0c8f-f493-4720-bb0f-9ea8eb39c4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c8:45:f2:b9:0a:04:67:9c:01:35:d2:b2:68: 52:90:28:27:c5:f2:f1:44:f7:16:ab:f0:c1:6f:26: db:b6:38:9e:7b:8e:ca:69:5e:6a:21:01:b8:70:1d: ea:49:83:be:06:ca:21:03:65:63:bc:11:93:5c:cf: 8e:0b:45:11:5a:43:d4:e0:d6:92:83:f2:22:71:24: 04:f1:01:09:77:09:3d:7a:7e:e0:c2:67:d5:94:5a: aa:03:66:ed:43:d5:05:e6:94:24:53:21:76:06:81: 0d:fd:06:7b:3a:1b:79:f5:92:38:6f:ab:eb:5f:bf: d3:cf:2a:7a:ae:52:35:90:3b:86:5d:04:b9:3c:92: d8:e7:eb:9b:d0:67:e0:dd:c3:bf:da:ac:c0:b2:e9: ab:9d:28:5b:7f:07:8e:49:d5:3b:6f:a6:2d:80:44: 76:5f:a2:ae:e5:19:34:d2:6a:1c:56:f7:f9:d7:3a: 00:f6:c2:c4:8e:b0:3d:da:5a:f4:f4:d0:8f:1b:20: 33:24:ed:2e:04:f1:e0:f4:68:7f:12:89:80:e5:38: 20:98:99:2e:5e:0f:a7:c6:9e:62:e5:8b:b3:53:34: 26:5a:cc:b9:29:14:cf:5b:48:26:e3:65:8f:c3:54: 26:03:98:3d:5b:18:e2:cc:31:b3:6b:0a:b1:47:eb: da:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:20:2F:C0:30:18:CD:C8:EC:D4:6C:CA:12:AE:87:A5:C8:90:C1:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f7:8c:50:86:8b:69:f9:3e:f8:95:8b:83:e8:ba:58:07:97: 8f:bb:c0:42:94:2c:72:2d:63:8e:4f:8f:f7:6e:03:0e:da:0e: 4c:2d:5e:a3:32:74:32:46:ac:8b:e3:15:12:be:b8:03:7b:04: 08:18:a2:6f:cb:25:1e:a2:91:36:ad:2b:65:96:ed:26:dc:75: 1c:d4:f9:f0:66:3e:69:38:31:06:71:e9:d1:fd:5d:32:b9:e0: 09:11:6d:e4:eb:43:a2:5d:37:dc:9e:be:ea:7c:06:e1:d0:c4: d1:4d:a8:40:1f:a0:ec:65:f1:b8:b6:e6:cd:b1:95:7b:13:79: 31:53:2e:f5:d5:6e:29:9b:57:29:ff:71:6a:a0:ff:4e:36:8c: 1d:91:47:b1:5b:10:d2:25:cb:95:81:d4:8d:b3:7d:2a:15:4e: 37:ba:74:fe:aa:8a:fb:bc:79:0f:99:42:4d:e8:55:72:fc:fa: c6:a6:bd:f9:c6:34:77:b4:93:58:88:ce:35:a5:6e:2d:42:f2: da:b8:19:57:1d:de:32:8e:43:cc:a1:dc:a5:88:b4:81:e9:11: 2e:2f:4a:31:30:d9:d5:10:0a:da:91:04:c3:af:bd:3b:35:5c: bc:2d:a5:f8:de:ed:69:e6:a5:18:ea:2d:a9:bc:b1:09:5c:ff: 3f:44:44:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq69/s6GlKYxo/aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk YzdjZDBjOGYtZjQ5My00NzIwLWJiMGYtOWVhOGViMzljNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38hF8rkKBGecATXSsmhSkCgnxfLxRPcWq/DB bybbtjiee47KaV5qIQG4cB3qSYO+BsohA2VjvBGTXM+OC0URWkPU4NaSg/IicSQE 8QEJdwk9en7gwmfVlFqqA2btQ9UF5pQkUyF2BoEN/QZ7Oht59ZI4b6vrX7/Tzyp6 rlI1kDuGXQS5PJLY5+ub0Gfg3cO/2qzAsumrnShbfweOSdU7b6YtgER2X6Ku5Rk0 0mocVvf51zoA9sLEjrA92lr09NCPGyAzJO0uBPHg9Gh/EomA5TggmJkuXg+nxp5i 5YuzUzQmWsy5KRTPW0gm42WPw1QmA5g9WxjizDGzawqxR+va9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMgL8AwGM3I7NRsyhKuh6XIkMH2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMjRhNjhmMzItZGFhNy0z YWFkLTgxODgtMmU5ZjQxNmNkMGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/3jFCGi2n5PviVi4PoulgHl4+7wEKULHItY45Pj/duAw7aDkwtXqMy dDJGrIvjFRK+uAN7BAgYom/LJR6ikTatK2WW7SbcdRzU+fBmPmk4MQZx6dH9XTK5 4AkRbeTrQ6JdN9yevup8BuHQxNFNqEAfoOxl8bi25s2xlXsTeTFTLvXVbimbVyn/ cWqg/042jB2RR7FbENIly5WB1I2zfSoVTje6dP6qivu8eQ+ZQk3oVXL8+samvfnG NHe0k1iIzjWlbi1C8tq4GVcd3jKOQ8yh3KWItIHpES4vSjEw2dUQCtqRBMOvvTs1 XLwtpfje7WnmpRjqLam8sQlc/z9EROo= -----END CERTIFICATE-----Generated at Mon Apr 28 18:42:37 2025 by rpki-client