$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/90308f7e-154a-30dc-9271-d2453cae8834.roa File: 90308f7e-154a-30dc-9271-d2453cae8834.roa (raw, json) Hash identifier: jdPo0To4XmhBV8R+rCdDiNm/BqLCyxPlMNuHw4XFVVE= Subject key identifier: 04:E1:2F:28:D4:FF:1D:2E:BC:9E:08:15:26:30:3D:A9:82:B5:E9:F1 Certificate issuer: /CN=5c891caa-7dc8-455b-a5e8-5c0370d25b9c Certificate serial: 010D0C9F4328584913AC3870F0DAF621744FC8A0 Authority key identifier: 55:94:ED:4B:E2:93:CF:29:8C:7A:7C:3D:45:3F:40:8B:12:8D:DA:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/90308f7e-154a-30dc-9271-d2453cae8834.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 31748 IP address blocks: 149.112.8.0/24 maxlen: 24 2001:504:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:38:70:f0:da:f6:21:74:4f:c8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c891caa-7dc8-455b-a5e8-5c0370d25b9c Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=2bbb3d47-9e32-4fc7-b3d5-4009d093e6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f9:e9:a8:56:ed:b7:8d:81:cf:aa:14:ac:2e: b0:f3:3d:69:10:34:8a:13:6c:e3:86:aa:f1:e7:44: dd:06:69:c0:bc:b4:1e:85:77:93:96:17:86:bd:92: fe:ae:49:2c:61:9c:16:94:79:c4:1c:7f:5c:e9:a1: df:e6:3d:44:dd:9e:77:2c:16:9f:24:bc:6a:63:2d: d4:15:50:25:63:e7:1b:28:79:b2:99:fc:cb:6f:e1: 90:18:29:6f:94:a8:5d:9a:ed:ad:cd:40:27:cb:9a: 79:9c:38:9f:c5:55:f4:e9:ea:ad:67:0c:5d:12:a0: 90:23:d4:6a:c8:d5:b9:93:38:2d:f1:93:f1:1f:e3: 89:d4:7d:96:a2:77:39:92:16:73:21:d0:74:ca:e9: 55:08:94:16:ce:97:20:ac:46:40:10:44:91:aa:28: 98:d0:e2:4e:ac:70:8c:dd:90:9a:34:62:2f:ad:e1: cb:d7:2f:fc:a4:6d:1d:fd:30:84:be:6f:4d:9c:36: 91:4c:e6:c5:cf:69:06:8b:3c:9d:2f:ad:71:30:ac: 38:f3:da:9b:f2:76:b6:2e:8b:9b:cb:9a:f7:98:9d: fa:2d:dc:2d:b7:bb:39:c3:77:65:77:7d:23:dd:42: 4a:fb:63:c0:84:8a:0b:cb:3f:99:fb:a2:5f:29:a2: 5b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E1:2F:28:D4:FF:1D:2E:BC:9E:08:15:26:30:3D:A9:82:B5:E9:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/90308f7e-154a-30dc-9271-d2453cae8834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.crl X509v3 Authority Key Identifier: keyid:55:94:ED:4B:E2:93:CF:29:8C:7A:7C:3D:45:3F:40:8B:12:8D:DA:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.cer sbgp-ipAddrBlock: critical IPv4: 149.112.8.0/24 IPv6: 2001:504:101::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b5:2e:c6:1d:16:b0:f5:52:88:cf:9a:24:7e:a1:56:76:10: 40:09:43:d5:9d:b8:bb:0f:fa:b3:db:70:19:68:85:3c:ec:75: e2:41:f2:ca:b0:68:48:d8:d5:f7:e8:b9:d6:7a:83:99:bc:9d: c9:f6:6c:b6:3b:f7:69:b6:b1:95:98:b7:1b:25:53:cf:54:b1: b3:70:68:72:71:db:67:57:08:29:c2:06:eb:a2:b8:0e:21:42: 48:71:b5:98:bf:58:25:9a:80:f3:ac:a2:10:28:6e:9a:bd:29: 55:f7:67:38:6d:f4:68:2e:ce:57:2b:08:6c:32:49:f8:20:cd: f3:a1:ec:68:46:f9:23:1b:90:88:3f:7d:44:49:ac:61:7a:74: c8:36:32:ed:3e:05:15:74:83:23:24:9d:5a:c4:69:17:12:b1: 71:77:04:e4:6b:db:30:21:fd:89:99:43:65:28:4c:0f:1a:69: a3:9e:e5:98:bf:0e:7d:60:02:dd:26:7c:6a:b8:f1:1b:73:c9: 20:64:23:a8:fc:a8:2f:f3:13:5b:65:7e:51:ce:46:56:22:6a: a8:e3:6f:5f:82:55:fa:3e:3a:b5:0e:ed:d8:de:4e:ac:91:ce: e1:df:f0:92:d2:5e:e4:a9:da:5f:05:0a:6a:34:00:93:aa:9d: 94:09:6c:79 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkTrDhw8Nr2IXRPyKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4OTFjYWEtN2RjOC00NTViLWE1ZTgtNWMwMzcwZDI1 YjljMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MmJiYjNkNDctOWUzMi00ZmM3LWIzZDUtNDAwOWQwOTNlNmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfnpqFbtt42Bz6oUrC6w8z1pEDSKE2zjhqrx 50TdBmnAvLQehXeTlheGvZL+rkksYZwWlHnEHH9c6aHf5j1E3Z53LBafJLxqYy3U FVAlY+cbKHmymfzLb+GQGClvlKhdmu2tzUAny5p5nDifxVX06eqtZwxdEqCQI9Rq yNW5kzgt8ZPxH+OJ1H2Wonc5khZzIdB0yulVCJQWzpcgrEZAEESRqiiY0OJOrHCM 3ZCaNGIvreHL1y/8pG0d/TCEvm9NnDaRTObFz2kGizydL61xMKw489qb8na2Loub y5r3mJ36Ldwtt7s5w3dld30j3UJK+2PAhIoLyz+Z+6JfKaJbPwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAThLyjU/x0uvJ4IFSYwPamCtenxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Yzg5 MWNhYS03ZGM4LTQ1NWItYTVlOC01YzAzNzBkMjViOWMvOTAzMDhmN2UtMTU0YS0z MGRjLTkyNzEtZDI0NTNjYWU4ODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWM4OTFjYWEtN2RjOC00NTViLWE1 ZTgtNWMwMzcwZDI1YjljLzVjODkxY2FhLTdkYzgtNDU1Yi1hNWU4LTVjMDM3MGQy NWI5Yy5jcmwwHwYDVR0jBBgwFoAUVZTtS+KTzymMenw9RT9AixKN2pQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Yzg5MWNhYS03ZGM4LTQ1NWItYTVlOC01YzAz NzBkMjViOWMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAlXAIMA8E AgACMAkDBwAgAQUEAQEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYrUuxh0WsPVSiM+aJH6hVnYQQAlD1Z24 uw/6s9twGWiFPOx14kHyyrBoSNjV9+i51nqDmbydyfZstjv3abaxlZi3GyVTz1Sx s3BocnHbZ1cIKcIG66K4DiFCSHG1mL9YJZqA86yiEChumr0pVfdnOG30aC7OVysI bDJJ+CDN86HsaEb5IxuQiD99REmsYXp0yDYy7T4FFXSDIySdWsRpFxKxcXcE5Gvb MCH9iZlDZShMDxppo57lmL8OfWAC3SZ8arjxG3PJIGQjqPyoL/MTW2V+Uc5GViJq qONvX4JV+j46tQ7t2N5OrJHO4d/wktJe5KnaXwUKajQAk6qdlAlseQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:16:57 2025 by rpki-client