$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/caa0ee7f-b319-3ec0-9a6e-a65798f4673d.roa File: caa0ee7f-b319-3ec0-9a6e-a65798f4673d.roa (raw, json) Hash identifier: 5mJjmexEbKBBvsf54kUJhzQAbENMSxrU1bgyGJMxom0= Subject key identifier: E0:4D:13:85:AC:7D:46:A8:B0:0E:F6:B5:23:15:19:74:5B:06:06:A8 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F432858493C093D7AEAD327528F6C6B10 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/caa0ee7f-b319-3ec0-9a6e-a65798f4673d.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 6939 IP address blocks: 149.19.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:3d:7a:ea:d3:27:52:8f:6c:6b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=d3d441c4-6c5d-4028-8b1f-f6a2bff993eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a8:f2:6c:d1:d7:1a:9d:59:5a:f5:67:6a:40: 6d:a1:90:0d:83:00:d9:b2:fe:4c:21:e0:71:45:fb: c6:ac:71:55:a9:5b:f6:58:ed:72:df:41:55:73:74: 0c:15:99:aa:85:84:97:91:c8:e2:b1:54:dc:22:31: 09:0a:0f:38:91:a9:5f:5a:8b:f2:3a:6f:54:74:39: 53:97:0f:d3:03:3f:f0:e7:8f:0c:64:36:42:9f:7d: f9:99:8b:ad:4c:18:cc:cd:b6:77:31:4d:8a:c4:2f: c5:b6:3d:5a:4e:89:53:b4:4a:95:4f:ad:60:27:b1: 41:5e:8d:b6:68:01:b6:a9:9b:8d:b3:c3:d8:3b:c3: f8:0e:00:ea:c7:7b:d2:4f:86:8d:59:a7:24:bf:86: 55:1f:aa:3a:8f:59:6a:7e:bb:79:4b:7b:52:e8:38: 84:0f:d6:48:f0:46:b3:90:81:57:2f:b3:fc:c0:17: 23:19:2e:d5:ba:b5:54:56:5d:d4:2e:eb:83:fe:19: 6b:c0:82:22:70:b0:fa:67:fc:db:1c:49:55:b2:7b: 6f:b2:0c:df:03:c0:4c:11:76:d9:29:ec:8f:98:40: 27:cc:38:b6:c2:4b:df:19:25:55:44:b0:6a:ab:d7: 96:f8:27:92:8d:ce:fe:9d:bf:82:cf:ef:72:e1:51: 5d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4D:13:85:AC:7D:46:A8:B0:0E:F6:B5:23:15:19:74:5B:06:06:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/caa0ee7f-b319-3ec0-9a6e-a65798f4673d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 149.19.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f4:63:56:84:f0:df:f2:c8:28:a4:47:70:46:0c:ee:9e:dc: 96:f4:1b:46:f2:f9:8e:c7:32:5a:df:3d:f3:a7:47:42:c1:33: 8c:da:81:94:b0:0d:7e:cf:65:e4:80:b7:53:76:9d:14:ee:2e: 23:bc:63:46:29:cb:c0:98:bc:5f:86:8b:b5:7a:f9:62:8b:c6: 01:5e:5e:98:ba:5a:7f:cf:6a:67:9c:58:9d:18:05:55:53:18: 07:bd:4e:c0:ef:96:7f:64:f3:40:11:d7:d0:f2:da:50:58:6e: e7:ff:0c:26:07:4f:d8:98:d0:95:1b:5f:d1:32:8e:6d:f6:81: 7b:50:36:a1:e2:fb:93:4e:41:8a:7f:71:0a:cd:03:c8:e9:90: f1:cd:48:af:27:25:3b:ef:98:80:ab:72:f7:df:46:94:0c:43: 20:17:17:33:90:7a:7d:da:5b:e9:c8:c5:5c:65:05:8d:82:19: 3a:65:79:5b:c1:70:93:5f:be:04:e6:14:6d:22:03:d1:a8:30: 6b:73:2d:57:9d:d4:ef:5d:10:27:bd:49:3e:87:be:eb:b8:9b: 34:78:21:f7:31:71:0e:81:58:5a:d4:fd:2f:d8:5f:0c:e9:48: 72:24:1a:01:ea:85:f6:27:15:c2:45:60:eb:86:6b:15:99:13: 0f:49:7a:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CT166tMnUo9saxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZDNkNDQxYzQtNmM1ZC00MDI4LThiMWYtZjZhMmJmZjk5M2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqjybNHXGp1ZWvVnakBtoZANgwDZsv5MIeBx RfvGrHFVqVv2WO1y30FVc3QMFZmqhYSXkcjisVTcIjEJCg84kalfWovyOm9UdDlT lw/TAz/w548MZDZCn335mYutTBjMzbZ3MU2KxC/Ftj1aTolTtEqVT61gJ7FBXo22 aAG2qZuNs8PYO8P4DgDqx3vST4aNWackv4ZVH6o6j1lqfrt5S3tS6DiED9ZI8Eaz kIFXL7P8wBcjGS7VurVUVl3ULuuD/hlrwIIicLD6Z/zbHElVsntvsgzfA8BMEXbZ KeyPmEAnzDi2wkvfGSVVRLBqq9eW+CeSjc7+nb+Cz+9y4VFdqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBNE4WsfUaosA72tSMVGXRbBgaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvY2FhMGVlN2YtYjMxOS0z ZWMwLTlhNmUtYTY1Nzk4ZjQ2NzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRPFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn0Y1aE8N/yyCikR3BGDO6e3Jb0G0by+Y7HMlrfPfOnR0LBM4zagZSw DX7PZeSAt1N2nRTuLiO8Y0Ypy8CYvF+Gi7V6+WKLxgFeXpi6Wn/PamecWJ0YBVVT GAe9TsDvln9k80AR19Dy2lBYbuf/DCYHT9iY0JUbX9Eyjm32gXtQNqHi+5NOQYp/ cQrNA8jpkPHNSK8nJTvvmICrcvffRpQMQyAXFzOQen3aW+nIxVxlBY2CGTpleVvB cJNfvgTmFG0iA9GoMGtzLVed1O9dECe9ST6Hvuu4mzR4IfcxcQ6BWFrU/S/YXwzp SHIkGgHqhfYnFcJFYOuGaxWZEw9JerQ= -----END CERTIFICATE-----Generated at Sat Apr 26 23:46:32 2025 by rpki-client