$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa File: e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa (raw, json) Hash identifier: zYQfczJVblYUabdenCj/hFMKKrshGO4epBzhypPcUgE= Subject key identifier: 65:B6:91:46:F3:65:27:B5:80:09:F2:FE:BE:E9:51:A2:D0:56:AE:31 Certificate issuer: /CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8 Certificate serial: 010D0C9F432858498E6489D53A1D47EF17E06680 Authority key identifier: 0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 14618 IP address blocks: 149.48.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:89:d5:3a:1d:47:ef:17:e0:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=9e57bea3-6ff8-4d2a-9a91-4b4f957bbd58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:0f:6e:af:49:4f:25:b7:5d:06:8e:da:39: 98:78:90:52:20:5f:fc:bd:27:24:87:54:13:de:5d: f4:32:e5:3d:8f:93:c1:f2:ad:74:69:34:5b:20:b7: 86:93:86:11:0f:fd:b3:06:c7:6a:a2:68:87:71:12: 3e:3b:a3:03:81:0c:2a:a4:8b:e3:0a:9d:ed:5a:46: fa:88:1b:13:01:5b:b7:bb:2c:2a:31:67:18:c1:c9: ca:b6:89:c7:aa:42:9c:ec:ab:c9:4e:e7:dd:7f:d0: 93:74:6d:cf:4a:7b:be:69:72:2f:bc:0b:88:f9:31: 83:c4:ab:3e:5e:6f:a3:de:ee:c9:1b:d3:72:e4:0b: 77:1a:4a:03:13:9d:79:96:a1:3d:c9:df:6a:44:7f: f7:3b:c9:d2:f5:2f:a7:5d:1f:8c:f0:1f:ff:5e:a3: 13:60:81:ba:24:1f:ed:c2:f3:66:f3:a5:de:a7:7a: 48:9b:75:9b:79:88:91:ac:de:c5:a7:3f:fc:fb:7d: b5:6f:1b:56:2d:6a:0a:c7:2a:40:a1:cc:40:22:23: 97:ad:28:7d:1b:2c:08:68:f7:0c:b3:e6:f4:ff:74: 44:3d:90:61:aa:e1:db:9a:db:19:da:83:b4:bd:82: 4d:f1:dc:f6:19:20:0e:d6:63:6b:a6:f2:0c:b7:d6: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B6:91:46:F3:65:27:B5:80:09:F2:FE:BE:E9:51:A2:D0:56:AE:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl X509v3 Authority Key Identifier: keyid:0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer sbgp-ipAddrBlock: critical IPv4: 149.48.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c3:9b:3a:c2:ca:08:d9:bb:39:f1:2c:f0:0b:09:71:5f:b9: 51:cd:0c:e6:c9:91:ba:68:5e:d4:bc:40:c9:ac:33:93:5c:60: c2:d4:d0:33:ae:a3:9e:1d:db:e1:89:0d:49:d1:8b:b3:a7:83: ab:52:fd:c2:d5:a7:07:72:e1:6b:f0:a5:06:e9:a2:d0:96:be: bb:3c:7b:5d:64:70:39:41:d9:f7:c3:eb:24:87:d6:21:3c:47: 96:ae:02:4e:60:81:35:51:07:f8:7d:37:d6:6c:fe:19:52:d2: ce:23:8f:4c:2a:9f:94:a3:60:46:63:f5:6c:17:30:20:ac:81: cc:67:bf:c2:d6:57:48:6a:1b:d3:84:89:d5:45:de:5b:e4:60: de:f0:40:ce:b8:4b:73:cc:1d:03:30:f6:9c:11:db:e6:85:bb: 3b:59:c5:56:3b:2a:e9:44:1f:72:fb:e0:fb:26:48:8d:fc:35: 23:87:b0:61:48:ef:93:2a:93:a3:e9:5d:b4:7c:03:6d:44:bb: f2:82:01:9d:5c:a6:d6:f3:06:a7:e7:41:ed:5a:bc:9f:6e:98: a9:0d:90:e2:35:2e:15:78:40:c0:bb:44:6a:74:f9:0d:8b:0d: 7a:07:31:00:ca:d8:b0:b2:bb:16:2e:dd:0b:50:8c:cc:9f:77: cc:70:57:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZInVOh1H7xfgZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzliMWZlN2EtZWNhOS00MjJmLTkwNDMtNWE5M2NhNTE0 NWM4MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk OWU1N2JlYTMtNmZmOC00ZDJhLTlhOTEtNGI0Zjk1N2JiZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvUPbq9JTyW3XQaO2jmYeJBSIF/8vSckh1QT 3l30MuU9j5PB8q10aTRbILeGk4YRD/2zBsdqomiHcRI+O6MDgQwqpIvjCp3tWkb6 iBsTAVu3uywqMWcYwcnKtonHqkKc7KvJTufdf9CTdG3PSnu+aXIvvAuI+TGDxKs+ Xm+j3u7JG9Ny5At3GkoDE515lqE9yd9qRH/3O8nS9S+nXR+M8B//XqMTYIG6JB/t wvNm86Xep3pIm3WbeYiRrN7Fpz/8+321bxtWLWoKxypAocxAIiOXrSh9GywIaPcM s+b0/3REPZBhquHbmtsZ2oO0vYJN8dz2GSAO1mNrpvIMt9bT3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGW2kUbzZSe1gAny/r7pUaLQVq4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83OWIx ZmU3YS1lY2E5LTQyMmYtOTA0My01YTkzY2E1MTQ1YzgvZThjODNlNWUtMzE2MC0z ZGEzLTk1MDgtNWRlY2Y1ZTNjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzliMWZlN2EtZWNhOS00MjJmLTkw NDMtNWE5M2NhNTE0NWM4Lzc5YjFmZTdhLWVjYTktNDIyZi05MDQzLTVhOTNjYTUx NDVjOC5jcmwwHwYDVR0jBBgwFoAUDGGhk2pEPOIRMfpAQmj3puc0hBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83OWIxZmU3YS1lY2E5LTQyMmYtOTA0My01YTkz Y2E1MTQ1YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlTCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITDmzrCygjZuznxLPALCXFfuVHNDObJkbpoXtS8QMmsM5NcYMLU0DOu o54d2+GJDUnRi7Ong6tS/cLVpwdy4WvwpQbpotCWvrs8e11kcDlB2ffD6ySH1iE8 R5auAk5ggTVRB/h9N9Zs/hlS0s4jj0wqn5SjYEZj9WwXMCCsgcxnv8LWV0hqG9OE idVF3lvkYN7wQM64S3PMHQMw9pwR2+aFuztZxVY7KulEH3L74PsmSI38NSOHsGFI 75Mqk6PpXbR8A21Eu/KCAZ1cptbzBqfnQe1avJ9umKkNkOI1LhV4QMC7RGp0+Q2L DXoHMQDK2LCyuxYu3QtQjMyfd8xwVyI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:40 2025 by rpki-client