$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/13b87a3b-b027-35b1-83fb-fd66e92f0e65.roa File: 13b87a3b-b027-35b1-83fb-fd66e92f0e65.roa (raw, json) Hash identifier: 4zSCfbZI1GnDRVcGxcJ1mbQnrBGmi4iWJn1VYVmXhKs= Subject key identifier: 59:B5:CF:94:28:46:BF:4F:3D:9B:C4:E1:64:9B:2E:99:25:EC:E8:96 Certificate issuer: /CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c Certificate serial: 010D0C9F432858494B640CC758ECD8854127E980 Authority key identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/13b87a3b-b027-35b1-83fb-fd66e92f0e65.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 1007 IP address blocks: 149.112.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:0c:c7:58:ec:d8:85:41:27:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=1b1b712e-7dc5-4b20-9916-8dce615394a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:51:38:2b:22:bf:55:d5:aa:7b:3e:6e:ce: 1c:ee:a9:1d:41:28:66:a9:f3:c8:24:af:41:b4:a9: 49:60:0e:9a:8e:77:b6:83:02:55:a5:ca:9a:43:21: f7:e1:46:93:04:9c:67:fd:5a:47:ef:36:9a:c9:b4: 19:85:71:34:9d:21:ce:de:21:5c:2b:97:ed:97:cc: de:99:cb:e7:08:7b:f0:c4:22:d3:94:b0:ba:bd:06: d6:76:37:e2:dd:37:d1:87:62:6b:b5:43:c0:62:f2: a2:8c:40:a3:3e:cf:a9:e1:ee:18:ca:66:70:c4:fb: 12:bc:c1:9a:1b:6b:c1:f2:ba:e1:63:8f:5a:66:92: af:15:53:37:95:28:c0:14:da:03:1b:e8:0c:fd:4e: fa:38:30:a7:32:79:07:c7:6c:50:f3:43:09:2e:ff: 32:4f:8d:77:c4:da:6c:9c:ff:d3:91:95:74:26:5d: ff:b8:bb:c7:dd:fc:0e:ae:a4:dc:5b:e5:5b:c0:6c: 04:54:89:40:8d:99:4c:b6:1f:aa:0e:ef:83:cb:ba: 04:36:0f:8f:11:b7:13:1c:44:73:4c:25:51:51:68: 61:ae:4e:9a:92:09:72:27:05:5b:ff:cd:7e:bc:73: 11:b8:f9:09:27:d3:7e:b3:7a:9d:b5:a6:ff:87:d5: 36:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B5:CF:94:28:46:BF:4F:3D:9B:C4:E1:64:9B:2E:99:25:EC:E8:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/13b87a3b-b027-35b1-83fb-fd66e92f0e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl X509v3 Authority Key Identifier: keyid:06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer sbgp-ipAddrBlock: critical IPv4: 149.112.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:31:f4:bb:e8:4e:9d:7d:32:ea:05:da:6c:0d:eb:6d:c7:d8: ef:29:32:fc:ea:ac:81:f7:96:cf:40:68:8d:ac:74:d1:ba:81: 9b:dc:f8:1f:d1:5b:5b:62:82:f7:fe:8f:3e:b0:ee:6e:59:5b: 55:ee:ba:ab:20:f2:1f:85:f9:76:32:56:2a:33:2b:ff:79:61: 04:a0:1c:00:ae:b4:d2:14:1f:34:72:d5:a9:e7:81:1c:91:80: 48:d9:97:52:d4:fb:aa:90:83:c6:e1:22:4c:15:f0:46:6f:88: 1b:6b:9c:5c:dc:8d:43:5f:3e:bc:70:15:75:01:42:61:56:30: dc:89:40:24:7c:02:d5:14:e1:21:d2:49:cf:80:3e:24:83:ce: 23:0c:1f:c6:62:5c:2f:4e:6e:ce:5c:cc:1c:8e:69:73:4b:c4: a5:96:94:43:30:b3:a8:29:1a:8e:dd:f0:a6:c8:6c:cd:e9:c9: 67:98:89:8c:70:cb:22:71:37:22:41:3f:d7:16:a9:8a:1b:cd: 77:26:c0:b0:97:59:2b:bf:d1:b2:41:45:96:3f:1d:cf:1d:53: 47:8a:8f:37:5f:4e:68:c6:d0:72:4a:0f:34:07:f9:f9:95:bc: 57:65:ff:71:01:9f:72:0d:14:0d:a9:78:87:57:e7:41:bc:4c: 65:7f:7d:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAzHWOzYhUEn6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhOGIwNjgtOTdiMi00YzUyLTkwNGYtZDc4YzRlNDZm YjhjMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MWIxYjcxMmUtN2RjNS00YjIwLTk5MTYtOGRjZTYxNTM5NGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxtROCsiv1XVqns+bs4c7qkdQShmqfPIJK9B tKlJYA6ajne2gwJVpcqaQyH34UaTBJxn/VpH7zaaybQZhXE0nSHO3iFcK5ftl8ze mcvnCHvwxCLTlLC6vQbWdjfi3TfRh2JrtUPAYvKijECjPs+p4e4YymZwxPsSvMGa G2vB8rrhY49aZpKvFVM3lSjAFNoDG+gM/U76ODCnMnkHx2xQ80MJLv8yT413xNps nP/TkZV0Jl3/uLvH3fwOrqTcW+VbwGwEVIlAjZlMth+qDu+Dy7oENg+PEbcTHERz TCVRUWhhrk6akglyJwVb/81+vHMRuPkJJ9N+s3qdtab/h9U2NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFm1z5QoRr9PPZvE4WSbLpkl7OiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4 YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhjNGU0NmZiOGMvMTNiODdhM2ItYjAyNy0z NWIxLTgzZmItZmQ2NmU5MmYwZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhOGIwNjgtOTdiMi00YzUyLTkw NGYtZDc4YzRlNDZmYjhjL2FmYThiMDY4LTk3YjItNGM1Mi05MDRmLWQ3OGM0ZTQ2 ZmI4Yy5jcmwwHwYDVR0jBBgwFoAUBopEEXaNaepCVQwVrXi7rafxYlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhj NGU0NmZiOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXAuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAox9LvoTp19MuoF2mwN623H2O8pMvzqrIH3ls9AaI2sdNG6gZvc+B/R W1tigvf+jz6w7m5ZW1Xuuqsg8h+F+XYyViozK/95YQSgHACutNIUHzRy1anngRyR gEjZl1LU+6qQg8bhIkwV8EZviBtrnFzcjUNfPrxwFXUBQmFWMNyJQCR8AtUU4SHS Sc+APiSDziMMH8ZiXC9Obs5czByOaXNLxKWWlEMws6gpGo7d8KbIbM3pyWeYiYxw yyJxNyJBP9cWqYobzXcmwLCXWSu/0bJBRZY/Hc8dU0eKjzdfTmjG0HJKDzQH+fmV vFdl/3EBn3INFA2peIdX50G8TGV/fe8= -----END CERTIFICATE-----Generated at Fri Apr 11 21:10:10 2025 by rpki-client