$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa File: c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa (raw, json) Hash identifier: ewDoegae5jL69aDoA2BwZYKmw7Ra8qChrTDsWQF2FRI= Subject key identifier: B0:70:83:2D:82:37:D6:49:7D:63:BE:EE:D8:32:4C:09:83:A5:EE:60 Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d Certificate serial: 010D0C9F43285848D37656D07CE012C4A08F7F00 Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 153371 IP address blocks: 149.112.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:56:d0:7c:e0:12:c4:a0:8f:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=e6bcd063-f760-4c81-b9bf-d130dc20bd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fc:55:02:0e:59:a7:7c:a2:ac:95:e6:6a:8c: e4:2d:6b:10:05:ca:7d:6e:5c:25:2d:2a:23:a9:62: c0:77:e4:e7:2d:17:a7:66:28:e5:63:72:7e:82:a6: 18:6c:8c:ff:d9:fd:8d:86:4b:a6:b5:59:80:86:49: bc:36:3c:50:5b:c2:5a:e6:08:9d:bf:6c:64:25:81: d9:c2:b1:99:80:65:e7:34:45:58:41:b1:85:5e:78: 23:59:7f:61:74:34:5c:e0:b3:69:8f:b9:bc:6b:b8: 83:5f:46:78:dd:d6:85:07:ea:de:73:c0:6a:c4:ff: 41:74:d9:24:fc:99:87:ec:0d:d2:56:70:f0:4a:de: d5:82:75:ee:bd:09:37:31:4f:64:84:44:92:5d:6f: b6:28:99:02:b5:4b:0e:06:37:69:69:47:7c:17:75: bb:af:28:86:19:68:19:73:92:69:d9:5f:33:09:e7: 7a:c9:4f:7b:98:5c:5a:56:30:8c:c6:66:a0:24:1e: 4d:28:df:0d:c8:46:67:b5:b7:27:b2:de:c9:f9:c8: 74:1e:d9:d4:7f:0c:a0:9b:8b:a5:0a:20:70:3d:a7: 5a:2a:a1:c4:43:ee:ef:19:82:50:d9:ee:8d:4a:ba: ea:ce:10:cd:0a:3e:2a:08:52:6c:97:29:af:46:9d: 1a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:70:83:2D:82:37:D6:49:7D:63:BE:EE:D8:32:4C:09:83:A5:EE:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl X509v3 Authority Key Identifier: keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer sbgp-ipAddrBlock: critical IPv4: 149.112.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:f2:a7:a6:71:1f:9e:06:a8:c4:1c:42:e0:eb:88:0f:ad:90: 10:a0:58:7d:e8:de:92:9d:df:e4:93:ed:17:0e:c7:6d:c1:f5: a5:42:dc:68:ba:84:21:f6:e2:06:3f:2d:fb:7a:93:16:8f:9d: 2c:f4:39:ca:cc:e3:6c:36:f9:a8:99:72:78:c2:d3:ca:6c:21: 3a:78:44:8e:67:41:7e:03:59:c3:fe:31:31:4d:d2:03:4f:3c: fd:e2:f7:37:e2:f3:d0:48:ac:44:04:d8:c5:76:e2:0c:ce:8a: f1:2c:2b:cc:ca:65:81:4a:7e:72:74:11:0b:73:cb:00:2f:df: 36:e5:b3:8d:cb:c6:65:f9:69:a3:04:89:66:7e:b4:fb:68:0e: 14:1a:29:a8:95:b6:3d:80:d9:31:a5:91:6e:9d:42:92:52:2b: 4c:3f:10:78:c9:97:7a:80:6a:ff:eb:2c:93:bd:63:79:6f:99: 71:e5:7a:d9:29:d8:23:5c:c3:9e:22:88:4d:e3:bb:1c:90:66: bc:27:40:18:9e:b5:ce:b9:75:b3:3f:24:21:b5:aa:8d:b8:89: 8e:93:9a:07:ea:9d:27:a2:d5:5f:d1:76:c0:5e:c9:65:e9:fc: f1:1b:71:02:58:8b:e2:7a:84:f6:c8:2e:c4:a5:62:5a:81:fc: 55:57:2d:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdlbQfOASxKCPfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3 MTFkMB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk ZTZiY2QwNjMtZjc2MC00YzgxLWI5YmYtZDEzMGRjMjBiZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfxVAg5Zp3yirJXmaozkLWsQBcp9blwlLSoj qWLAd+TnLRenZijlY3J+gqYYbIz/2f2NhkumtVmAhkm8NjxQW8Ja5gidv2xkJYHZ wrGZgGXnNEVYQbGFXngjWX9hdDRc4LNpj7m8a7iDX0Z43daFB+rec8BqxP9BdNkk /JmH7A3SVnDwSt7VgnXuvQk3MU9khESSXW+2KJkCtUsOBjdpaUd8F3W7ryiGGWgZ c5Jp2V8zCed6yU97mFxaVjCMxmagJB5NKN8NyEZntbcnst7J+ch0HtnUfwygm4ul CiBwPadaKqHEQ+7vGYJQ2e6NSrrqzhDNCj4qCFJslymvRp0anQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBwgy2CN9ZJfWO+7tgyTAmDpe5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvYzEwZDRiOWItYzc4Zi0z NmUxLWEyMDAtZTMwZTNhYjc3MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0 NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm MmM5NDcxMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXB1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLyp6ZxH54GqMQcQuDriA+tkBCgWH3o3pKd3+ST7RcOx23B9aVC3Gi6 hCH24gY/Lft6kxaPnSz0OcrM42w2+aiZcnjC08psITp4RI5nQX4DWcP+MTFN0gNP PP3i9zfi89BIrEQE2MV24gzOivEsK8zKZYFKfnJ0EQtzywAv3zbls43LxmX5aaME iWZ+tPtoDhQaKaiVtj2A2TGlkW6dQpJSK0w/EHjJl3qAav/rLJO9Y3lvmXHletkp 2CNcw54iiE3juxyQZrwnQBietc65dbM/JCG1qo24iY6TmgfqnSei1V/RdsBeyWXp /PEbcQJYi+J6hPbILsSlYlqB/FVXLdg= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:17 2025 by rpki-client