$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/120d1dc0-4f5e-3c15-805b-514c3a3c278f.roa File: 120d1dc0-4f5e-3c15-805b-514c3a3c278f.roa (raw, json) Hash identifier: gtuIZwc2deAal90YztTu5SvgALAZOiL9F0wYLlMQnWw= Subject key identifier: 14:35:C5:73:2E:27:27:B1:D1:63:06:23:C0:9C:C2:19:50:99:F4:3A Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F432858496484416A3FCECD5C569D2980 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/120d1dc0-4f5e-3c15-805b-514c3a3c278f.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 55195 IP address blocks: 149.112.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:41:6a:3f:ce:cd:5c:56:9d:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=5b473c36-2134-4aef-8c4d-26529109e302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:35:f8:bb:a4:91:d4:95:42:13:0b:e6:9f:78: 73:b3:22:cc:14:87:e6:42:36:53:54:d2:43:b6:c3: 05:58:b8:78:a7:1f:de:55:90:38:dc:86:de:4a:99: a1:92:f2:14:95:0c:84:51:4f:f2:73:fb:f9:39:cd: 48:c3:43:52:36:73:77:fb:37:b4:47:4b:1d:96:29: 62:2a:74:46:29:1c:34:e7:7e:87:9c:6d:10:d5:c3: 2a:4f:94:f7:c3:30:74:fc:2c:65:8e:6d:f4:b2:7a: c3:18:f1:5c:16:5f:fd:ec:ff:d7:9e:b6:fd:5d:63: 70:c1:c1:9d:cc:5a:3e:a9:4d:2e:1f:92:5b:1a:14: 85:6c:18:3b:4d:6a:18:94:6f:28:8f:b6:a7:4f:8b: a4:0f:d3:bd:24:76:2c:88:8a:ee:4d:d4:43:21:d1: 21:9a:56:5d:1a:f5:b9:1a:a2:a3:8a:23:76:0e:0c: 1c:9e:fc:85:47:ea:79:6e:9c:76:8a:32:c8:a2:c4: f4:c4:d8:28:4d:c3:2a:92:1d:23:eb:4f:f4:7c:92: cd:ab:31:d8:59:ce:fa:45:d0:f7:d6:96:9a:41:d4: 9b:9f:8b:8a:68:f0:ff:9c:23:95:2a:c6:d4:73:92: 9c:b4:91:d1:1b:dc:af:16:b6:b9:1f:3c:80:fa:b0: cd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:35:C5:73:2E:27:27:B1:D1:63:06:23:C0:9C:C2:19:50:99:F4:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/120d1dc0-4f5e-3c15-805b-514c3a3c278f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv4: 149.112.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:0b:48:63:fe:cf:b9:07:a7:63:95:99:ad:39:45:cb:b9:4f: 6e:15:09:ab:6f:94:11:fe:74:96:53:54:71:15:7a:ca:50:fd: 9b:39:94:47:2b:dc:62:dc:9b:6e:5a:f9:ca:55:3c:9d:07:35: 21:ed:f9:10:a1:54:ed:98:1e:d7:d1:ef:e2:00:20:65:b8:90: 1a:c4:73:5f:d2:b2:21:6c:3c:06:53:d2:e2:18:e1:c7:c0:58: 9a:83:a8:c6:dc:72:83:1b:81:ba:cc:ea:c5:8f:81:c9:0d:0f: 3d:d5:da:ab:7a:3b:cd:d5:4d:59:3a:2d:d4:1e:ad:60:56:33: 45:bc:ec:72:3d:4a:db:fb:45:8c:5a:a6:67:45:42:3a:27:17: 6c:d6:50:07:cf:bd:c7:24:91:ab:32:15:d6:65:12:47:b7:90: 04:07:e1:8a:64:fa:2c:1d:5e:25:20:8a:a0:84:a6:06:eb:c8: e0:43:47:d3:af:39:22:83:90:60:3b:34:5b:9f:9b:f8:73:f7: 66:ba:33:b6:c3:b9:c8:68:85:65:f2:8e:ab:a6:50:2f:4f:ac: 6d:a0:be:35:88:80:0f:4a:c5:98:1d:80:ca:2b:f1:2e:b9:79: ea:04:07:9c:bd:b3:2c:57:c5:48:8e:41:28:76:ee:c0:e0:a4: db:92:9d:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEFqP87NXFadKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk NWI0NzNjMzYtMjEzNC00YWVmLThjNGQtMjY1MjkxMDllMzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzX4u6SR1JVCEwvmn3hzsyLMFIfmQjZTVNJD tsMFWLh4px/eVZA43IbeSpmhkvIUlQyEUU/yc/v5Oc1Iw0NSNnN3+ze0R0sdlili KnRGKRw0536HnG0Q1cMqT5T3wzB0/Cxljm30snrDGPFcFl/97P/Xnrb9XWNwwcGd zFo+qU0uH5JbGhSFbBg7TWoYlG8oj7anT4ukD9O9JHYsiIruTdRDIdEhmlZdGvW5 GqKjiiN2DgwcnvyFR+p5bpx2ijLIosT0xNgoTcMqkh0j60/0fJLNqzHYWc76RdD3 1paaQdSbn4uKaPD/nCOVKsbUc5KctJHRG9yvFra5HzyA+rDNIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQ1xXMuJyex0WMGI8CcwhlQmfQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvMTIwZDFkYzAtNGY1ZS0z YzE1LTgwNWItNTE0YzNhM2MyNzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXB+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoLSGP+z7kHp2OVma05Rcu5T24VCatvlBH+dJZTVHEVespQ/Zs5lEcr 3GLcm25a+cpVPJ0HNSHt+RChVO2YHtfR7+IAIGW4kBrEc1/SsiFsPAZT0uIY4cfA WJqDqMbccoMbgbrM6sWPgckNDz3V2qt6O83VTVk6LdQerWBWM0W87HI9Stv7RYxa pmdFQjonF2zWUAfPvcckkasyFdZlEke3kAQH4Ypk+iwdXiUgiqCEpgbryOBDR9Ov OSKDkGA7NFufm/hz92a6M7bDuchohWXyjqumUC9PrG2gvjWIgA9KxZgdgMor8S65 eeoEB5y9syxXxUiOQSh27sDgpNuSnb0= -----END CERTIFICATE-----Generated at Mon Apr 28 11:13:34 2025 by rpki-client