$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa File: 4acda3a4-e641-396a-9a6f-a18db1280ee8.roa (raw, json) Hash identifier: 95XJ8L2CTRbtEQEXpx6Xz+mpK/bvlNvBWvitYxU8vVk= Subject key identifier: 63:25:87:FF:29:94:99:3A:8B:E1:68:31:7B:E7:63:85:C5:BA:06:F2 Certificate issuer: /CN=dccebd00-21a5-4af6-b51a-e1f651e635f7 Certificate serial: 010D0C9F4328584902EC2DF53EC7260E52C64340 Authority key identifier: F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 0 IP address blocks: 149.112.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:2d:f5:3e:c7:26:0e:52:c6:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dccebd00-21a5-4af6-b51a-e1f651e635f7 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=48528e7c-abc9-41fa-8199-3439233164b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e7:66:9a:c2:9a:aa:d4:cf:9e:09:ac:14:80: 42:6f:bd:54:64:a3:f2:14:4e:e5:79:65:94:71:a0: 02:4d:42:02:68:10:1b:a6:9d:ae:b0:c1:c1:3b:5e: 7e:c9:8b:b5:f1:be:52:86:cb:e2:d3:fe:61:94:81: d6:2d:14:b5:13:65:bd:bb:ca:87:c3:22:99:91:ab: 2c:17:68:1e:0d:cd:08:a0:a6:3c:24:fb:6f:52:5b: 73:58:73:65:40:11:14:26:f4:6e:88:c8:0b:73:df: 18:9b:e9:6a:c7:e9:1e:20:a8:bc:75:d6:b1:5e:c0: d0:1a:86:4e:d6:9c:e1:38:39:4b:41:f5:44:d2:c9: 55:71:37:71:8c:24:6c:ae:b6:e9:a5:cf:c4:fc:4e: 77:65:cc:cd:6e:74:99:7a:ed:bd:37:00:27:7f:35: 4a:72:d8:6d:f4:39:18:fa:f8:57:f5:6b:fc:ac:72: 87:ab:50:58:56:49:ca:36:4b:84:98:c7:01:06:3d: f2:08:f2:7d:73:e6:86:ed:9a:41:d9:bd:d7:57:4c: c8:00:9f:be:4c:4d:4d:49:48:0e:39:e9:f5:0e:ad: b7:54:36:be:9a:42:b4:70:d1:43:4b:fb:6d:0d:a3: 99:93:ba:c0:5a:8a:22:7d:08:b7:47:83:5c:b9:c3: 63:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:25:87:FF:29:94:99:3A:8B:E1:68:31:7B:E7:63:85:C5:BA:06:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl X509v3 Authority Key Identifier: keyid:F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer sbgp-ipAddrBlock: critical IPv4: 149.112.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:47:22:fe:ad:6b:36:99:27:d0:97:fe:3e:38:e8:f1:fc:73: a0:66:30:18:c7:da:f2:ca:77:2e:d3:fb:a9:dc:5d:61:43:5f: 2c:20:ef:9e:80:5b:73:02:6e:4a:aa:fb:9f:4f:9d:51:72:14: 12:d4:9b:7e:49:33:74:a8:e2:4c:d2:61:9c:4a:3a:65:b3:f7: cf:fe:e9:22:46:87:a3:37:67:8c:11:47:f2:2c:94:fc:44:4a: 8c:c1:95:10:1a:af:f1:ec:0b:2a:20:8d:87:22:26:e8:5b:02: 0c:53:e1:c6:71:82:d1:39:e3:6f:c2:4d:6b:e5:d2:90:91:aa: 6d:5c:7b:86:5d:12:6b:0c:f4:04:32:f3:ea:73:0f:2d:80:d9: e1:3f:31:67:b7:14:b2:6c:57:77:93:d8:40:68:0e:a7:b8:2a: 75:b4:67:b6:7d:58:c8:81:41:65:05:78:a0:c6:e2:54:6f:11: 87:d4:09:d9:99:3a:ce:55:a9:b9:f4:69:97:72:1b:9a:43:bb: 98:b5:2e:70:9b:b2:22:44:45:50:85:64:f9:66:03:d3:94:f9: 6e:3f:27:89:6d:7b:8c:78:5d:0f:5c:37:ff:65:35:8e:87:cc: 4d:3f:ae:bb:b9:b6:c1:36:14:85:66:15:01:0e:32:f2:9a:52: 3a:25:a0:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7C31PscmDlLGQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNjZWJkMDAtMjFhNS00YWY2LWI1MWEtZTFmNjUxZTYz NWY3MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NDg1MjhlN2MtYWJjOS00MWZhLTgxOTktMzQzOTIzMzE2NGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiudmmsKaqtTPngmsFIBCb71UZKPyFE7leWWU caACTUICaBAbpp2usMHBO15+yYu18b5Shsvi0/5hlIHWLRS1E2W9u8qHwyKZkass F2geDc0IoKY8JPtvUltzWHNlQBEUJvRuiMgLc98Ym+lqx+keIKi8ddaxXsDQGoZO 1pzhODlLQfVE0slVcTdxjCRsrrbppc/E/E53ZczNbnSZeu29NwAnfzVKctht9DkY +vhX9Wv8rHKHq1BYVknKNkuEmMcBBj3yCPJ9c+aG7ZpB2b3XV0zIAJ++TE1NSUgO Oen1Dq23VDa+mkK0cNFDS/ttDaOZk7rAWooifQi3R4NcucNjPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMlh/8plJk6i+FoMXvnY4XFugbyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kY2Nl YmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2NTFlNjM1ZjcvNGFjZGEzYTQtZTY0MS0z OTZhLTlhNmYtYTE4ZGIxMjgwZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGNjZWJkMDAtMjFhNS00YWY2LWI1 MWEtZTFmNjUxZTYzNWY3L2RjY2ViZDAwLTIxYTUtNGFmNi1iNTFhLWUxZjY1MWU2 MzVmNy5jcmwwHwYDVR0jBBgwFoAU9IpUS8vYmgeJky6Dr29fBOHaqy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kY2NlYmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2 NTFlNjM1ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXByMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlHIv6tazaZJ9CX/j446PH8c6BmMBjH2vLKdy7T+6ncXWFDXywg756A W3MCbkqq+59PnVFyFBLUm35JM3So4kzSYZxKOmWz98/+6SJGh6M3Z4wRR/IslPxE SozBlRAar/HsCyogjYciJuhbAgxT4cZxgtE542/CTWvl0pCRqm1ce4ZdEmsM9AQy 8+pzDy2A2eE/MWe3FLJsV3eT2EBoDqe4KnW0Z7Z9WMiBQWUFeKDG4lRvEYfUCdmZ Os5Vqbn0aZdyG5pDu5i1LnCbsiJERVCFZPlmA9OU+W4/J4lte4x4XQ9cN/9lNY6H zE0/rru5tsE2FIVmFQEOMvKaUjoloPo= -----END CERTIFICATE-----Generated at Sat Apr 26 12:51:52 2025 by rpki-client