$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa File: 21975138-cf92-36b8-8d76-cc6b2ac602dd.roa (raw, json) Hash identifier: nBchybjlDxIguSkm4UrgrQJuodIENRCwnlApixjIBcI= Subject key identifier: 58:2D:62:F1:79:C9:37:C4:58:98:15:1A:C7:FF:58:0B:61:FE:73:E1 Certificate issuer: /CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Certificate serial: 010D0C9F432858497279BBEA0A3405A5D94721C0 Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 40401 IP address blocks: 149.137.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:bb:ea:0a:34:05:a5:d9:47:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=1bf3f91d-0f07-46ff-9373-a6c020389e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:3c:5f:54:ae:91:ea:a0:38:e4:ab:97:da: 38:1e:68:2c:b8:13:27:ca:18:e0:c0:ce:e1:4d:5e: 09:e9:e0:63:29:72:75:df:a9:6f:73:34:0e:92:10: 6d:c5:3d:45:ea:a1:79:e8:ca:da:ad:70:31:70:a5: c2:52:13:09:9e:12:77:a6:a1:39:56:2c:9f:00:b9: 35:f9:d4:36:8f:4f:ce:ea:68:93:6b:88:f2:55:80: 37:8d:7a:29:fa:c3:dd:e6:37:74:d4:b5:80:67:81: 7c:ac:6c:6d:fa:62:de:cd:fe:c5:04:ba:5a:7a:f1: dc:b7:a4:09:0e:3b:e1:56:97:49:bf:6f:ca:42:d2: ff:f5:3a:a6:e1:7f:66:0f:d7:e6:ec:ef:28:86:ee: 52:13:1c:6c:00:0f:b6:52:c5:28:2e:b5:71:d9:0c: 55:78:42:41:f0:43:c0:55:3c:09:1b:66:f0:9b:b4: 89:86:4c:0c:b1:40:09:1e:77:52:91:62:40:ea:49: dc:15:85:5e:48:60:6e:13:8b:52:45:30:42:93:39: a7:a6:ad:5a:6d:68:0e:5c:ae:db:e9:8e:b3:54:a9: f0:8e:20:fd:1f:63:ee:b9:c5:eb:19:7a:9c:43:a8: ab:af:2e:58:ad:65:3d:29:20:95:f3:22:68:af:f1: 17:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2D:62:F1:79:C9:37:C4:58:98:15:1A:C7:FF:58:0B:61:FE:73:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl X509v3 Authority Key Identifier: keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer sbgp-ipAddrBlock: critical IPv4: 149.137.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a4:b1:37:be:4b:a4:b3:fa:08:99:9e:15:24:82:22:31:a0: d6:da:5d:4d:41:d0:5d:1e:30:53:f6:56:85:c6:e1:be:18:c5: 30:d1:75:03:52:3a:c7:79:bc:5e:5e:e6:c7:fb:70:51:cb:4e: a1:7c:07:26:7c:b2:44:25:de:ff:60:4d:0d:ec:9f:e9:e5:ab: ce:95:52:ee:4d:82:78:84:48:42:40:0e:fd:d9:26:ac:92:4e: 69:7e:ea:f7:cc:af:62:d3:88:fc:f4:15:49:29:7e:64:70:c2: aa:6f:3b:64:f7:f8:d9:c4:14:ec:7d:e9:86:08:b1:3d:f0:84: ec:04:b0:97:28:58:f0:e6:ba:dc:87:0f:54:72:8d:45:5a:73: 8e:3a:9f:fe:91:ed:92:c2:e8:07:6c:bc:a9:d9:ba:1d:9d:bf: 8b:76:1f:5d:b3:74:0c:04:5b:69:c0:03:46:6d:cc:2e:f7:84: 47:b0:d3:43:de:53:0a:40:3f:58:f7:f1:1f:f4:19:a7:3e:0b: c2:71:bf:ce:ec:5e:b0:bb:26:4e:c6:2f:1d:41:d7:e1:a7:52: b5:67:29:c3:73:cf:ad:7b:51:fe:7a:68:f1:dd:7c:fa:8d:45: 8e:64:81:8c:bd:a5:66:2f:56:59:f7:cc:2c:1c:c4:4b:79:6b: 66:38:e6:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyebvqCjQFpdlHIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MzMTNlMzktOTFmMS00MWZjLWJjNWMtZDIxM2E0Mjll Mjg3MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk MWJmM2Y5MWQtMGYwNy00NmZmLTkzNzMtYTZjMDIwMzg5ZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGQ8X1SukeqgOOSrl9o4HmgsuBMnyhjgwM7h TV4J6eBjKXJ136lvczQOkhBtxT1F6qF56MrarXAxcKXCUhMJnhJ3pqE5ViyfALk1 +dQ2j0/O6miTa4jyVYA3jXop+sPd5jd01LWAZ4F8rGxt+mLezf7FBLpaevHct6QJ DjvhVpdJv2/KQtL/9Tqm4X9mD9fm7O8ohu5SExxsAA+2UsUoLrVx2QxVeEJB8EPA VTwJG2bwm7SJhkwMsUAJHndSkWJA6kncFYVeSGBuE4tSRTBCkzmnpq1abWgOXK7b 6Y6zVKnwjiD9H2PuucXrGXqcQ6irry5YrWU9KSCV8yJor/EXywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgtYvF5yTfEWJgVGsf/WAth/nPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMx M2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEzYTQyOWUyODcvMjE5NzUxMzgtY2Y5Mi0z NmI4LThkNzYtY2M2YjJhYzYwMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2MzMTNlMzktOTFmMS00MWZjLWJj NWMtZDIxM2E0MjllMjg3LzdjMzEzZTM5LTkxZjEtNDFmYy1iYzVjLWQyMTNhNDI5 ZTI4Ny5jcmwwHwYDVR0jBBgwFoAUfZc5aNgWxyYUfpq5JQWS6V07FCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMxM2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEz YTQyOWUyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElYmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeksTe+S6Sz+giZnhUkgiIxoNbaXU1B0F0eMFP2VoXG4b4YxTDRdQNS Osd5vF5e5sf7cFHLTqF8ByZ8skQl3v9gTQ3sn+nlq86VUu5NgniESEJADv3ZJqyS Tml+6vfMr2LTiPz0FUkpfmRwwqpvO2T3+NnEFOx96YYIsT3whOwEsJcoWPDmutyH D1RyjUVac446n/6R7ZLC6AdsvKnZuh2dv4t2H12zdAwEW2nAA0ZtzC73hEew00Pe UwpAP1j38R/0Gac+C8Jxv87sXrC7Jk7GLx1B1+GnUrVnKcNzz617Uf56aPHdfPqN RY5kgYy9pWYvVln3zCwcxEt5a2Y45vs= -----END CERTIFICATE-----Generated at Mon Apr 28 08:24:10 2025 by rpki-client