$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa File: ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa (raw, json) Hash identifier: +7msf1nvgIeRIvwuKSuRcEAdhr1qVk/nMEsZJ0z4wmc= Subject key identifier: 71:F2:2D:3E:A7:46:F1:6C:53:54:D4:E5:67:70:76:40:81:25:5F:E7 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F43285848CB1656791050931977364800 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 149.72.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:56:79:10:50:93:19:77:36:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=cd4545de-da6a-4224-8237-3da9ad02105d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a8:fc:15:e5:bf:77:26:90:98:c3:48:81:92: f7:22:b2:80:91:d9:a1:ac:37:c3:e5:2a:f3:f7:76: d9:1d:58:c3:34:23:e3:ff:4b:8d:bc:55:72:da:a0: db:ae:63:36:f9:41:1f:40:46:41:37:75:56:32:d4: da:4e:f8:59:77:4a:9c:90:a1:fb:6a:0e:6a:34:4f: 49:7e:16:b4:04:20:1c:ce:07:6d:be:bd:d3:4e:80: ca:42:65:79:16:c1:35:b5:fe:cd:5e:6d:ea:63:a6: 97:40:5d:45:da:ec:82:13:f4:db:a4:68:8f:d5:98: 72:0d:c5:95:75:6d:f9:13:9f:a0:31:2b:6d:37:2a: d6:09:12:6c:df:b7:75:c3:66:45:f7:b7:82:49:76: 3d:ae:b1:00:a9:17:ba:cf:b1:ed:f7:81:26:25:f5: ee:73:69:98:45:49:32:2e:a8:a9:97:79:84:d1:8c: c9:06:e8:32:ee:e3:dd:bb:d0:55:a8:6a:4e:00:f0: 9b:db:36:ff:95:0d:66:51:22:59:4f:eb:bc:03:a2: 38:59:6b:af:6a:4d:bd:7f:17:84:7f:0d:29:6b:2d: 0d:b0:f9:9e:38:c6:a7:b8:0f:ed:51:63:c8:e1:bd: 01:13:03:49:b9:cd:56:a2:f2:a3:28:76:0b:2e:50: a9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F2:2D:3E:A7:46:F1:6C:53:54:D4:E5:67:70:76:40:81:25:5F:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fb:04:88:a6:e0:dc:11:47:2d:6c:97:5c:72:f5:60:6b:dd: 57:1a:0a:f5:59:a3:92:08:b8:9f:90:2c:a7:b2:8e:d3:3d:01: a5:ba:d8:c3:d8:a8:18:e5:d5:2d:80:54:63:86:05:0c:71:8a: c1:a1:89:54:39:15:0b:61:40:19:be:2f:d1:57:dc:9d:19:ac: aa:bb:ab:b3:a9:ee:7f:d6:31:f5:75:72:da:34:3c:2d:80:b5: 7a:e0:d2:e7:6e:16:ce:58:ec:4d:78:01:ad:48:f7:29:18:ac: bb:65:67:6f:ef:78:bf:58:62:88:d8:01:85:79:fc:d1:53:20: 8b:eb:53:6a:22:c2:76:a4:05:38:da:34:d3:95:a0:34:05:60: 7d:a8:b4:07:ee:ff:4c:86:6b:5b:22:53:bc:14:b7:57:90:7d: f7:43:00:15:54:c3:b0:be:76:d3:38:48:ba:fc:5a:95:fc:e1: e4:69:4f:66:d7:fe:6c:dc:5b:f1:cb:e5:ad:18:a5:20:c5:6e: ae:bd:d3:7a:54:53:fd:4e:86:ac:53:31:b9:18:7d:a9:9a:b1: fd:b6:f0:1e:94:86:a0:14:b5:b9:92:44:09:ed:93:68:cf:ca: 95:b9:91:86:08:6f:6c:e4:62:c3:20:d4:e0:ba:1a:cc:6d:94: ad:1f:05:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFlZ5EFCTGXc2SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk Y2Q0NTQ1ZGUtZGE2YS00MjI0LTgyMzctM2RhOWFkMDIxMDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Kj8FeW/dyaQmMNIgZL3IrKAkdmhrDfD5Srz 93bZHVjDNCPj/0uNvFVy2qDbrmM2+UEfQEZBN3VWMtTaTvhZd0qckKH7ag5qNE9J fha0BCAczgdtvr3TToDKQmV5FsE1tf7NXm3qY6aXQF1F2uyCE/TbpGiP1ZhyDcWV dW35E5+gMSttNyrWCRJs37d1w2ZF97eCSXY9rrEAqRe6z7Ht94EmJfXuc2mYRUky Lqipl3mE0YzJBugy7uPdu9BVqGpOAPCb2zb/lQ1mUSJZT+u8A6I4WWuvak29fxeE fw0pay0NsPmeOManuA/tUWPI4b0BEwNJuc1WovKjKHYLLlCpIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHyLT6nRvFsU1TU5WdwdkCBJV/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvZmZhNTJjNjAtZGE5NS0z MWIxLWJmZTktYWNiZDRlNTk4NWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlUgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH7BIim4NwRRy1sl1xy9WBr3VcaCvVZo5IIuJ+QLKeyjtM9AaW62MPY qBjl1S2AVGOGBQxxisGhiVQ5FQthQBm+L9FX3J0ZrKq7q7Op7n/WMfV1cto0PC2A tXrg0uduFs5Y7E14Aa1I9ykYrLtlZ2/veL9YYojYAYV5/NFTIIvrU2oiwnakBTja NNOVoDQFYH2otAfu/0yGa1siU7wUt1eQffdDABVUw7C+dtM4SLr8WpX84eRpT2bX /mzcW/HL5a0YpSDFbq6903pUU/1OhqxTMbkYfamasf228B6UhqAUtbmSRAntk2jP ypW5kYYIb2zkYsMg1OC6GsxtlK0fBTU= -----END CERTIFICATE-----Generated at Sat Apr 26 13:17:53 2025 by rpki-client