$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa File: 4a99249e-6e25-30fa-8e16-0fa2326d6959.roa (raw, json) Hash identifier: YHgoKQNOgegL6RKSG+FXpU6U4Xyj7QvtLZqVMdw9G8M= Subject key identifier: 3F:2D:39:5C:87:AB:6C:B9:9B:3C:EA:E7:4B:A8:97:C9:D1:12:41:49 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F43285849B57A1087F8A221B36FFDF8C0 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 209854 IP address blocks: 172.102.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:10:87:f8:a2:21:b3:6f:fd:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=0c5a9233-b41b-49d7-9810-53b4fa2e127e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5a:3c:20:2f:3e:48:25:7e:2b:1a:d0:8c:5c: cf:1b:bc:3b:b9:ff:80:49:09:44:75:80:6d:a8:30: 31:a3:f3:73:af:1f:c5:c3:cb:5f:f1:4a:90:de:15: 01:4b:e4:49:d7:0e:3e:bb:cd:02:e0:39:8a:60:4f: 3f:67:e7:82:8f:d0:87:7e:e7:0e:dd:f1:90:c1:a3: 7c:e8:00:d6:eb:e9:c2:c2:96:49:39:fc:20:99:e2: 6a:0e:08:6e:fd:a9:33:57:26:d2:e3:74:b0:78:ab: 93:5f:cd:21:bb:7a:96:34:e6:07:c8:df:40:83:87: c1:63:fe:36:96:7e:28:76:7e:e1:35:10:9e:28:1e: e7:84:6e:96:7a:aa:5c:6c:cb:a2:a8:0f:cb:a0:93: 81:e9:fa:08:78:b5:e4:67:ac:5c:59:50:4b:3f:ff: 0b:b9:52:74:cc:e7:2c:62:eb:75:fe:ee:48:6e:50: de:36:50:c2:a1:19:bd:db:49:d0:ff:02:2c:ce:67: 19:10:b3:ea:e9:9a:67:f4:7e:73:c1:a6:f1:15:0a: 74:8a:3c:fe:a9:9b:42:e5:6b:08:87:e2:15:f7:3e: 77:0a:68:aa:36:52:3b:b8:8c:96:c9:06:a2:0e:de: 5f:a5:39:14:72:0f:05:0d:2c:e3:00:42:5e:ca:58: b7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2D:39:5C:87:AB:6C:B9:9B:3C:EA:E7:4B:A8:97:C9:D1:12:41:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d4:af:63:b3:ed:be:30:0d:da:01:51:e8:84:22:e7:ab:a1: 30:02:6b:54:79:99:90:51:7b:cb:7f:76:f8:90:d5:57:5e:43: d1:18:e4:2c:8b:46:9b:a8:7b:dd:c2:db:b1:fc:58:1b:24:6d: c0:a6:4e:63:a4:a9:cc:6c:e0:be:80:b1:8a:7e:b7:cb:4f:ad: 2d:68:91:82:ea:1a:0a:fe:c0:72:9f:57:20:c5:c0:4f:19:c9: 27:b6:1c:e5:a7:1f:b4:54:88:8d:bd:38:3b:65:10:fd:36:a6: 6a:81:86:e9:cb:9a:0c:b1:91:ae:fe:73:95:be:ec:f8:42:fd: c4:6b:0d:9e:99:39:3f:39:f4:b6:98:23:81:3a:0b:58:de:1e: 1f:9c:25:44:64:f0:06:17:dd:d4:08:f1:fc:4c:a8:fa:6a:2e: 51:ce:5b:63:f7:37:0a:ba:c2:7b:55:53:ce:1e:7f:d8:94:b2: 56:32:2e:20:a1:52:dc:69:37:d0:74:98:d3:38:3f:85:20:e3: ac:70:d0:2c:b3:27:3a:64:20:3a:35:7f:c1:af:d9:df:49:b6: e3:00:63:40:7c:8d:7d:4a:06:99:5c:6d:a3:2d:48:27:60:a2: 08:40:da:a3:e5:af:07:44:a0:4b:df:0b:80:f1:c7:96:1f:dc: 4a:53:ba:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ehCH+KIhs2/9+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk MGM1YTkyMzMtYjQxYi00OWQ3LTk4MTAtNTNiNGZhMmUxMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglo8IC8+SCV+KxrQjFzPG7w7uf+ASQlEdYBt qDAxo/Nzrx/Fw8tf8UqQ3hUBS+RJ1w4+u80C4DmKYE8/Z+eCj9CHfucO3fGQwaN8 6ADW6+nCwpZJOfwgmeJqDghu/akzVybS43SweKuTX80hu3qWNOYHyN9Ag4fBY/42 ln4odn7hNRCeKB7nhG6WeqpcbMuiqA/LoJOB6foIeLXkZ6xcWVBLP/8LuVJ0zOcs Yut1/u5IblDeNlDCoRm920nQ/wIszmcZELPq6Zpn9H5zwabxFQp0ijz+qZtC5WsI h+IV9z53CmiqNlI7uIyWyQaiDt5fpTkUcg8FDSzjAEJeyli3AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8tOVyHq2y5mzzq50uol8nREkFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvNGE5OTI0OWUtNmUyNS0z MGZhLThlMTYtMGZhMjMyNmQ2OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHUr2Oz7b4wDdoBUeiEIueroTACa1R5mZBRe8t/dviQ1VdeQ9EY5CyL Rpuoe93C27H8WBskbcCmTmOkqcxs4L6AsYp+t8tPrS1okYLqGgr+wHKfVyDFwE8Z ySe2HOWnH7RUiI29ODtlEP02pmqBhunLmgyxka7+c5W+7PhC/cRrDZ6ZOT859LaY I4E6C1jeHh+cJURk8AYX3dQI8fxMqPpqLlHOW2P3Nwq6wntVU84ef9iUslYyLiCh UtxpN9B0mNM4P4Ug46xw0CyzJzpkIDo1f8Gv2d9JtuMAY0B8jX1KBplcbaMtSCdg oghA2qPlrwdEoEvfC4Dxx5Yf3EpTuuk= -----END CERTIFICATE-----Generated at Sun May 11 10:07:42 2025 by rpki-client