$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/3bf2dba4-6dde-34e7-8040-bd9c86deb027.roa File: 3bf2dba4-6dde-34e7-8040-bd9c86deb027.roa (raw, json) Hash identifier: LLCMjt9boCKL6qrvj+2Nb5fdT6e97snoZlCHxT7LLTI= Subject key identifier: 35:2A:E0:61:72:C5:42:17:28:A7:DB:59:6B:55:96:1E:45:D0:C9:BD Certificate issuer: /CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe Certificate serial: 010D0C9F43285849BB0F7499BC01816C64C29700 Authority key identifier: 5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/3bf2dba4-6dde-34e7-8040-bd9c86deb027.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 20206 IP address blocks: 149.112.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:74:99:bc:01:81:6c:64:c2:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9d2aef-2dd9-4387-b47c-98bb910e52fe Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=5425665c-8d37-4ba7-a3bb-325603076cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:84:28:82:4c:7b:af:cc:33:5a:50:69:da:98: fc:8f:98:e4:80:c3:16:a9:c7:85:22:35:90:16:23: 47:07:e6:89:2c:b8:3d:b9:56:73:ec:24:1b:b2:2b: 60:2d:dd:30:83:72:40:3f:33:3d:cc:bc:9c:d8:3e: 62:90:97:7c:62:66:ce:ed:e9:d0:73:72:db:5d:6b: 6a:40:34:bf:b9:9a:c4:49:05:e6:34:07:ff:c9:d9: b7:a1:5a:be:f6:ef:61:ac:6b:31:4c:4d:3e:b0:fb: dd:45:93:d6:7d:26:98:10:ce:04:b6:53:94:4c:17: cf:79:e0:ac:30:43:49:10:7a:21:1d:bc:0e:c3:b2: 60:15:96:11:d5:43:b6:2a:38:7a:60:d1:9c:91:fd: 1d:5c:ba:26:e2:1a:27:7f:21:e7:fe:22:46:bb:bf: a0:25:f0:c3:05:7a:23:4f:eb:11:04:7b:de:5b:5a: b6:9c:05:99:69:55:df:cf:47:80:d0:cf:f0:f8:31: 73:ec:0c:97:e4:98:d3:ca:4e:76:e7:ea:92:ef:26: 1e:6d:1f:75:c1:b1:3e:0a:c5:a8:4f:cf:34:99:cf: f5:14:37:5f:e9:cf:f7:1b:59:3b:27:36:d5:ed:43: 51:d8:14:41:60:8b:2d:42:f2:14:04:27:35:51:d6: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2A:E0:61:72:C5:42:17:28:A7:DB:59:6B:55:96:1E:45:D0:C9:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/3bf2dba4-6dde-34e7-8040-bd9c86deb027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.crl X509v3 Authority Key Identifier: keyid:5F:0C:BB:1B:2F:ED:25:26:3B:25:9E:EF:CB:2B:49:E2:EB:09:40:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc9d2aef-2dd9-4387-b47c-98bb910e52fe.cer sbgp-ipAddrBlock: critical IPv4: 149.112.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:bc:f8:da:30:80:c7:e3:8b:83:4f:13:33:66:31:57:10:00: e4:ff:16:a4:ae:23:c3:f1:91:a0:51:ca:54:db:3a:d0:05:92: 4a:be:6b:59:64:e9:f7:57:a3:74:94:69:ec:91:bc:7b:3f:b4: d8:a0:c0:86:82:55:a9:9a:b9:a1:c7:2b:3f:69:6a:f4:d3:32: 25:f1:b3:3d:b8:2d:0a:a6:ef:59:c6:a8:68:0d:df:74:e6:29: 3d:65:bd:c1:ac:09:d7:b1:fc:83:9b:8b:90:ed:d7:e7:99:ed: 79:95:8c:a9:5c:6e:1c:b0:99:6f:82:5b:aa:df:b8:1a:97:31: f1:e6:de:14:9b:f4:af:d2:24:56:30:df:9e:e8:a2:78:89:f7: 64:df:4e:64:4c:06:5c:fb:90:7e:56:b4:96:08:99:ae:07:7b: 91:37:54:3f:56:2d:af:93:68:20:f7:ea:c0:52:e1:f5:55:b6: ec:83:cf:8c:f5:9e:8d:2f:ef:23:8e:e9:fe:fe:93:2c:75:29: ea:d6:c2:46:fd:83:69:df:64:07:bc:44:7d:62:11:e4:34:a5: 83:2e:49:be:8c:a8:e1:2f:13:74:b1:f7:d8:d9:88:e4:8c:7d: ab:39:27:8b:e8:eb:cc:34:89:fb:fd:b5:72:81:9e:a4:9f:b4: a7:fc:45:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D3SZvAGBbGTClwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM5ZDJhZWYtMmRkOS00Mzg3LWI0N2MtOThiYjkxMGU1 MmZlMB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk NTQyNTY2NWMtOGQzNy00YmE3LWEzYmItMzI1NjAzMDc2Y2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYQogkx7r8wzWlBp2pj8j5jkgMMWqceFIjWQ FiNHB+aJLLg9uVZz7CQbsitgLd0wg3JAPzM9zLyc2D5ikJd8YmbO7enQc3LbXWtq QDS/uZrESQXmNAf/ydm3oVq+9u9hrGsxTE0+sPvdRZPWfSaYEM4EtlOUTBfPeeCs MENJEHohHbwOw7JgFZYR1UO2Kjh6YNGckf0dXLom4honfyHn/iJGu7+gJfDDBXoj T+sRBHveW1q2nAWZaVXfz0eA0M/w+DFz7AyX5JjTyk525+qS7yYebR91wbE+CsWo T880mc/1FDdf6c/3G1k7JzbV7UNR2BRBYIstQvIUBCc1UdZpsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUq4GFyxUIXKKfbWWtVlh5F0Mm9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYzlk MmFlZi0yZGQ5LTQzODctYjQ3Yy05OGJiOTEwZTUyZmUvM2JmMmRiYTQtNmRkZS0z NGU3LTgwNDAtYmQ5Yzg2ZGViMDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmM5ZDJhZWYtMmRkOS00Mzg3LWI0 N2MtOThiYjkxMGU1MmZlL2JjOWQyYWVmLTJkZDktNDM4Ny1iNDdjLTk4YmI5MTBl NTJmZS5jcmwwHwYDVR0jBBgwFoAUXwy7Gy/tJSY7JZ7vyytJ4usJQNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYzlkMmFlZi0yZGQ5LTQzODctYjQ3Yy05OGJi OTEwZTUyZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXBZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC28+NowgMfji4NPEzNmMVcQAOT/FqSuI8PxkaBRylTbOtAFkkq+a1lk 6fdXo3SUaeyRvHs/tNigwIaCVamauaHHKz9pavTTMiXxsz24LQqm71nGqGgN33Tm KT1lvcGsCdex/IObi5Dt1+eZ7XmVjKlcbhywmW+CW6rfuBqXMfHm3hSb9K/SJFYw 357ooniJ92TfTmRMBlz7kH5WtJYIma4He5E3VD9WLa+TaCD36sBS4fVVtuyDz4z1 no0v7yOO6f7+kyx1KerWwkb9g2nfZAe8RH1iEeQ0pYMuSb6MqOEvE3Sx99jZiOSM fas5J4vo68w0ifv9tXKBnqSftKf8Rf8= -----END CERTIFICATE-----Generated at Fri May 9 08:27:21 2025 by rpki-client