$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61b43dc6-923a-309c-82be-50a0e60faeb2.roa File: 61b43dc6-923a-309c-82be-50a0e60faeb2.roa (raw, json) Hash identifier: Qw6KgYynlyJ1kXXmxc/UCk71pIGHCIdtevz2ogt6HDE= Subject key identifier: 3A:92:80:97:99:A7:08:10:07:E5:79:6C:19:CA:90:A9:F1:3A:88:66 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849ABB4A310DC3BDC7CD6A1BD80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61b43dc6-923a-309c-82be-50a0e60faeb2.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 64267 IP address blocks: 149.20.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a3:10:dc:3b:dc:7c:d6:a1:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=50f63e9a-73ab-409b-952a-6d8f0eb3c09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:36:de:fa:27:02:50:c8:70:a7:3f:4a:ac:b9: 07:28:dc:81:14:da:b4:e9:b1:0c:f0:3a:43:4b:b2: 7d:ae:f7:fb:fc:1e:59:2c:6b:e3:75:4b:94:20:e6: 0c:23:41:e4:6a:82:28:c7:a1:44:26:d0:d4:85:3e: c9:41:a8:51:5c:79:a4:4d:ae:a7:dd:b4:e7:85:50: b8:5d:53:fa:35:a5:fe:49:68:9e:18:dd:fa:68:06: cc:78:2e:35:95:03:4b:5b:e7:23:19:aa:85:ec:77: 24:0c:a5:96:47:2f:47:53:79:4f:99:04:56:99:28: 11:51:fa:1d:fd:ba:b9:90:5d:6b:50:d4:16:38:ef: 59:77:ce:9d:3e:96:2a:dd:69:05:6b:22:16:d6:7d: 5b:d7:43:73:be:77:1e:13:44:b7:3a:6b:ee:75:d8: 96:00:c7:9e:00:5d:d3:15:2c:38:be:50:bd:ac:0b: 65:6a:c1:ab:ce:99:1d:56:dc:3d:b8:8a:bc:e2:24: 99:7d:de:27:f9:91:36:a8:87:f5:e8:bd:54:af:dd: 4b:16:d7:44:b2:e8:99:0a:d0:67:3e:f3:e8:61:d8: 2d:b1:b5:f9:44:09:0d:69:c3:ca:7a:80:bf:fd:cd: 1d:69:80:e5:4e:76:09:f3:6d:c4:2e:e1:71:50:67: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:92:80:97:99:A7:08:10:07:E5:79:6C:19:CA:90:A9:F1:3A:88:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61b43dc6-923a-309c-82be-50a0e60faeb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:e6:7e:48:83:f6:35:f7:0c:af:7c:26:bb:dc:fd:f9:35:50: 0c:45:a8:48:41:0e:6c:dd:90:a4:87:33:16:83:c0:0e:d4:6a: 6c:4e:34:17:a0:d9:b2:d6:c8:fb:1f:d5:52:ed:e5:7f:63:d0: dc:25:1f:4d:8a:d9:3c:c1:c9:cd:7a:ca:a8:2c:74:4c:56:15: f6:15:cc:ea:7d:66:f7:20:ce:8b:34:7b:70:61:e7:8c:ad:ea: 15:d2:5e:86:a5:3e:91:1e:57:21:64:b9:69:62:46:a1:45:a5: 8f:62:d6:c7:dc:ea:7e:99:4d:f9:44:75:55:1d:2f:71:73:1c: eb:ff:5b:52:f0:1c:18:6b:21:cf:7c:83:06:b2:dc:8a:3b:e4: e0:51:3b:01:b8:56:d5:ec:b7:13:f3:5e:ca:db:24:7d:8e:c5: 2b:5d:27:c7:75:83:41:c4:dc:3e:d3:c4:bd:45:e6:0f:6b:4b: 96:44:50:89:21:8b:32:42:74:15:4b:c2:f8:54:0c:78:c7:50: aa:60:1b:3a:d9:2b:09:12:b3:43:63:01:54:3c:cd:fa:0d:1c: 0a:66:0e:fb:89:ef:21:b6:d3:67:de:8a:8f:a5:f9:ad:7f:30: c1:ff:6a:ef:90:27:90:ee:43:37:b2:d5:4b:65:bc:cc:44:6e: 15:fc:7f:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKMQ3DvcfNahvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NTBmNjNlOWEtNzNhYi00MDliLTk1MmEtNmQ4ZjBlYjNjMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zbe+icCUMhwpz9KrLkHKNyBFNq06bEM8DpD S7J9rvf7/B5ZLGvjdUuUIOYMI0HkaoIox6FEJtDUhT7JQahRXHmkTa6n3bTnhVC4 XVP6NaX+SWieGN36aAbMeC41lQNLW+cjGaqF7HckDKWWRy9HU3lPmQRWmSgRUfod /bq5kF1rUNQWOO9Zd86dPpYq3WkFayIW1n1b10NzvnceE0S3OmvuddiWAMeeAF3T FSw4vlC9rAtlasGrzpkdVtw9uIq84iSZfd4n+ZE2qIf16L1Ur91LFtdEsuiZCtBn PvPoYdgtsbX5RAkNacPKeoC//c0daYDlTnYJ823ELuFxUGdKtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqSgJeZpwgQB+V5bBnKkKnxOohmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjFiNDNkYzYtOTIzYS0z MDljLTgyYmUtNTBhMGU2MGZhZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALrmfkiD9jX3DK98Jrvc/fk1UAxFqEhBDmzdkKSHMxaDwA7UamxONBeg 2bLWyPsf1VLt5X9j0NwlH02K2TzByc16yqgsdExWFfYVzOp9Zvcgzos0e3Bh54yt 6hXSXoalPpEeVyFkuWliRqFFpY9i1sfc6n6ZTflEdVUdL3FzHOv/W1LwHBhrIc98 gway3Io75OBROwG4VtXstxPzXsrbJH2OxStdJ8d1g0HE3D7TxL1F5g9rS5ZEUIkh izJCdBVLwvhUDHjHUKpgGzrZKwkSs0NjAVQ8zfoNHApmDvuJ7yG202feio+l+a1/ MMH/au+QJ5DuQzey1UtlvMxEbhX8f7w= -----END CERTIFICATE-----Generated at Tue Apr 29 07:56:10 2025 by rpki-client