$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa File: 3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa (raw, json) Hash identifier: a6BEq4w4muyDjChCF1iUHpheZY+NXPX3IxI5v/bxDr0= Subject key identifier: 6B:7C:31:FD:D7:EA:F6:D6:88:D6:DA:5E:55:C5:23:B5:5E:36:BF:B5 Certificate issuer: /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Certificate serial: 010D0C9F43285849631EC7F32B000FA430701F40 Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 153371 IP address blocks: 149.112.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:c7:f3:2b:00:0f:a4:30:70:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=07ce791d-7a09-4182-8abc-83aa39c5768f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:2b:5c:be:d3:02:7f:c5:ac:e3:29:55:89: 8e:ec:1b:2f:47:8f:b4:20:c6:9b:5a:63:44:cb:07: 31:18:5c:cf:9d:49:12:d8:63:3e:a8:0c:2b:9f:e6: 26:d6:e3:f2:50:a5:1a:cd:58:7e:b7:5e:f0:2f:ef: ad:9a:c5:e2:a9:b7:17:94:c8:63:c5:b9:57:06:ed: af:99:4b:66:78:84:84:27:b4:2e:4c:a5:54:7c:16: 54:b0:77:d2:71:e9:ce:92:86:40:3b:e6:5d:3e:69: 50:4a:96:4e:83:d6:8a:7d:43:f4:c1:e6:69:77:f9: 1e:55:d8:0e:c2:9d:24:0d:b8:e8:3c:5e:46:ac:15: d9:6f:46:c5:34:2b:17:7a:16:03:c5:3f:a3:19:a9: 3c:8c:8f:53:49:08:79:c3:d1:9c:ca:ce:cd:36:9c: 1b:99:34:a3:ba:88:8e:f8:cd:d9:50:46:1a:7f:1b: 1d:8d:63:df:b3:22:28:d6:48:c9:cd:9c:8c:cd:45: e0:35:7f:e8:59:ba:33:62:33:b5:d7:65:de:ca:4e: df:00:78:86:60:42:21:cb:67:10:29:ce:af:be:80: f2:2b:3f:9d:a2:ef:c1:87:e4:ac:a8:9e:be:39:0f: 8a:12:62:5a:3d:38:f2:3a:81:4f:6b:cb:a5:0c:15: 2a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7C:31:FD:D7:EA:F6:D6:88:D6:DA:5E:55:C5:23:B5:5E:36:BF:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl X509v3 Authority Key Identifier: keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer sbgp-ipAddrBlock: critical IPv4: 149.112.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:95:ee:76:3f:31:46:40:a9:f3:f9:4f:65:79:a2:c3:a0:ac: bd:c6:16:a1:57:c1:41:2d:1b:ec:88:5f:f3:d9:af:40:7b:cf: 55:8f:9b:21:2a:d7:bb:d9:01:a8:13:ef:fc:01:22:47:20:23: f1:ef:49:8b:96:5e:10:0c:2c:12:20:df:22:40:b8:57:a7:fb: a7:e6:6a:ad:6a:77:55:c3:33:8c:d8:e9:24:c3:09:14:17:4a: 92:fe:f8:71:df:5a:1d:09:b3:8e:bd:19:bf:86:61:ae:a8:67: b1:0f:1d:c7:22:d7:3f:3e:ea:04:a9:c0:27:e1:aa:cd:d0:6e: 7e:99:ab:54:4d:eb:f6:8d:5a:2d:58:f5:96:97:21:dc:57:7d: e7:f8:40:fe:eb:27:9b:9b:dc:62:af:80:c2:16:7c:12:34:31: 25:4a:4e:84:aa:83:61:1e:d1:cc:21:96:1c:3c:e4:b1:b8:ad: 69:a6:7a:5b:29:83:73:e1:42:66:73:d4:9f:b1:d7:17:16:0a: 74:e5:64:e5:4a:aa:3f:37:6c:ef:54:75:04:27:2a:e5:5c:ab: 5b:1f:12:a9:5e:7f:81:1b:ed:07:17:56:20:89:92:85:3d:4a: c1:41:97:e6:1e:36:5b:dc:98:64:e7:22:4b:31:f4:c4:4c:1c: 3e:de:bb:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsfzKwAPpDBwH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU0YTFkZmEtODg2Ny00YWVmLWEyZTYtMTMxZTkzYWRk OWY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk MDdjZTc5MWQtN2EwOS00MTgyLThhYmMtODNhYTM5YzU3NjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTQrXL7TAn/FrOMpVYmO7BsvR4+0IMabWmNE ywcxGFzPnUkS2GM+qAwrn+Ym1uPyUKUazVh+t17wL++tmsXiqbcXlMhjxblXBu2v mUtmeISEJ7QuTKVUfBZUsHfScenOkoZAO+ZdPmlQSpZOg9aKfUP0weZpd/keVdgO wp0kDbjoPF5GrBXZb0bFNCsXehYDxT+jGak8jI9TSQh5w9Gcys7NNpwbmTSjuoiO +M3ZUEYafxsdjWPfsyIo1kjJzZyMzUXgNX/oWbozYjO112Xeyk7fAHiGYEIhy2cQ Kc6vvoDyKz+dou/Bh+SsqJ6+OQ+KEmJaPTjyOoFPa8ulDBUqowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGt8Mf3X6vbWiNbaXlXFI7VeNr+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRh MWRmYS04ODY3LTRhZWYtYTJlNi0xMzFlOTNhZGQ5ZjkvM2QzZjg4ODYtOWM5YS0z YzI2LThjMDktOTk1NjlmNWJmNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU0YTFkZmEtODg2Ny00YWVmLWEy ZTYtMTMxZTkzYWRkOWY5L2RlNGExZGZhLTg4NjctNGFlZi1hMmU2LTEzMWU5M2Fk ZDlmOS5jcmwwHwYDVR0jBBgwFoAUvthWMuuMpErA6gOYoNHxLymRA8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRhMWRmYS04ODY3LTRhZWYtYTJlNi0xMzFl OTNhZGQ5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyV7nY/MUZAqfP5T2V5osOgrL3GFqFXwUEtG+yIX/PZr0B7z1WPmyEq 17vZAagT7/wBIkcgI/HvSYuWXhAMLBIg3yJAuFen+6fmaq1qd1XDM4zY6STDCRQX SpL++HHfWh0Js469Gb+GYa6oZ7EPHcci1z8+6gSpwCfhqs3Qbn6Zq1RN6/aNWi1Y 9ZaXIdxXfef4QP7rJ5ub3GKvgMIWfBI0MSVKToSqg2Ee0cwhlhw85LG4rWmmelsp g3PhQmZz1J+x1xcWCnTlZOVKqj83bO9UdQQnKuVcq1sfEqlef4Eb7QcXViCJkoU9 SsFBl+YeNlvcmGTnIksx9MRMHD7eu7A= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:38 2025 by rpki-client