$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa File: c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa (raw, json) Hash identifier: O6xEDH4A7gKQr6aFD+r8rQLKcWtAPg/pWGXIxXGDLrs= Subject key identifier: 5B:03:BF:68:84:39:8F:5E:ED:6B:3D:E5:A2:CF:87:3D:1E:52:46:7F Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d Certificate serial: 010D0C9F43285849B2AF634AF230DE78FCFD4CF0 Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 153371 IP address blocks: 149.112.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:63:4a:f2:30:de:78:fc:fd:4c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=7d9ad725-a52c-4903-a898-e2d4acb6a536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c4:50:02:8a:40:a0:e0:78:c2:11:d1:a4:5c: 06:4e:0d:dd:89:b5:e7:d3:d7:9f:08:5d:0c:4c:8e: f5:66:39:f0:96:74:f2:3a:e6:cd:ff:d1:05:fc:8a: 25:fb:bd:66:12:fb:cc:08:80:7c:c6:b2:c6:4a:fe: 81:72:26:3c:fd:18:62:99:72:18:2b:3d:68:ed:39: 2a:da:a5:63:22:54:20:e7:f5:a7:af:f9:24:a0:34: 54:79:a7:a4:85:63:45:e0:e4:93:db:bf:78:4a:8b: 05:66:8d:19:5c:7f:63:f7:9e:c9:2f:42:af:70:b8: f8:b8:d6:f4:e5:45:86:f1:70:e7:dc:41:25:96:8a: 8d:a9:de:76:0e:7a:12:c4:e4:4e:d0:1c:f2:3c:bb: 2d:aa:f4:e0:7f:60:e7:7b:12:84:50:65:08:17:4e: d2:24:92:6f:2d:0a:6e:05:c4:71:d2:67:42:1a:3a: a8:68:19:13:9d:f9:59:25:36:d7:d1:eb:d2:8e:ed: 65:8f:1b:b1:25:b9:dd:11:7e:a5:43:72:16:e0:43: 88:55:c3:e5:85:a3:9c:e9:0c:d3:24:c3:ca:e0:86: 94:71:a4:31:1c:2d:86:16:69:9e:04:57:ba:0d:81: bd:b4:25:97:99:81:65:05:0c:68:22:24:97:8b:86: fd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:03:BF:68:84:39:8F:5E:ED:6B:3D:E5:A2:CF:87:3D:1E:52:46:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl X509v3 Authority Key Identifier: keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer sbgp-ipAddrBlock: critical IPv4: 149.112.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ff:26:4d:73:f8:7a:95:2c:e8:b6:24:19:c7:79:78:96:0a: e4:74:ba:4a:cb:5d:40:dd:8d:4c:b6:79:51:be:61:db:eb:87: 9e:c0:3e:db:af:5f:69:94:e7:d0:54:e8:2b:bc:7f:11:d2:76: 37:fc:c0:17:aa:99:ba:b6:72:fd:7c:26:db:80:fd:e1:2f:0c: 92:cf:f6:62:19:60:b6:85:d3:96:91:40:fa:d9:cc:bf:06:44: 5e:37:b1:21:01:e0:f7:9b:0e:79:c8:e3:a6:c9:b9:3b:e9:d3: 29:0f:13:ab:be:06:3e:e3:02:2b:70:76:16:cc:00:ac:42:26: d6:7a:57:7a:d9:a4:88:d5:4d:24:ef:50:e3:a8:4e:ae:1f:12: 08:c6:53:83:75:f5:93:8b:15:c8:6d:44:33:30:90:36:19:e2: 6c:b5:40:00:d8:ed:d5:91:82:d9:20:b9:ee:ae:40:5b:84:bc: 96:01:bd:6e:20:43:2c:86:eb:a2:3e:50:05:5b:84:b6:b0:4e: 9d:de:9c:d2:a6:1a:58:97:16:ca:bd:73:d6:5a:ec:fa:7f:0b: b9:d3:08:a3:62:ee:3e:24:09:ce:b2:71:3e:0a:9b:b6:1b:31: 2d:43:82:f5:82:1e:1c:68:d4:e7:4e:c7:71:97:60:fd:81:8c: 32:ea:4a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2NK8jDeePz9TPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3 MTFkMB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk N2Q5YWQ3MjUtYTUyYy00OTAzLWE4OTgtZTJkNGFjYjZhNTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcRQAopAoOB4whHRpFwGTg3dibXn09efCF0M TI71ZjnwlnTyOubN/9EF/Iol+71mEvvMCIB8xrLGSv6BciY8/RhimXIYKz1o7Tkq 2qVjIlQg5/Wnr/kkoDRUeaekhWNF4OST2794SosFZo0ZXH9j957JL0KvcLj4uNb0 5UWG8XDn3EElloqNqd52DnoSxORO0BzyPLstqvTgf2DnexKEUGUIF07SJJJvLQpu BcRx0mdCGjqoaBkTnflZJTbX0evSju1ljxuxJbndEX6lQ3IW4EOIVcPlhaOc6QzT JMPK4IaUcaQxHC2GFmmeBFe6DYG9tCWXmYFlBQxoIiSXi4b9RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsDv2iEOY9e7Ws95aLPhz0eUkZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvYzEwZDRiOWItYzc4Zi0z NmUxLWEyMDAtZTMwZTNhYjc3MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0 NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm MmM5NDcxMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXB1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGP/Jk1z+HqVLOi2JBnHeXiWCuR0ukrLXUDdjUy2eVG+Ydvrh57APtuv X2mU59BU6Cu8fxHSdjf8wBeqmbq2cv18JtuA/eEvDJLP9mIZYLaF05aRQPrZzL8G RF43sSEB4PebDnnI46bJuTvp0ykPE6u+Bj7jAitwdhbMAKxCJtZ6V3rZpIjVTSTv UOOoTq4fEgjGU4N19ZOLFchtRDMwkDYZ4my1QADY7dWRgtkgue6uQFuEvJYBvW4g QyyG66I+UAVbhLawTp3enNKmGliXFsq9c9Za7Pp/C7nTCKNi7j4kCc6ycT4Km7Yb MS1DgvWCHhxo1OdOx3GXYP2BjDLqSnA= -----END CERTIFICATE-----Generated at Fri May 9 15:11:59 2025 by rpki-client