$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/a21f29a1-e715-3d1f-bd89-c419d22db812.roa File: a21f29a1-e715-3d1f-bd89-c419d22db812.roa (raw, json) Hash identifier: Uev9IY2N6c2X5QdB9QjV/Fo19CKaekBvfCnx0MckCEQ= Subject key identifier: 03:E7:C1:A6:69:82:18:BD:E6:69:C8:BF:2C:7E:BE:40:9B:8B:BA:A1 Certificate issuer: /CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c Certificate serial: 010D0C9F432858494B640CB45A586D811D2078C0 Authority key identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/a21f29a1-e715-3d1f-bd89-c419d22db812.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 985 IP address blocks: 149.112.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:0c:b4:5a:58:6d:81:1d:20:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=d059b056-efc3-4939-8a11-b251bdb03804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8e:12:c0:5f:84:29:71:df:71:65:40:c3:df: e6:d0:e7:38:dc:65:28:3d:33:21:dd:1f:8c:cd:90: 5e:4b:99:90:76:bc:5e:7d:d2:9d:3f:06:86:ba:ae: bd:98:da:73:72:47:33:6e:0f:22:47:fa:19:70:ca: fb:08:38:bc:41:e4:48:ac:ac:d1:ae:c4:85:be:c1: 9e:a7:ca:4a:f6:fe:48:d9:30:df:1c:a4:f3:a5:c2: 64:c8:7b:eb:cc:63:58:11:1f:e0:bf:ce:53:50:4e: e1:39:87:36:37:60:3c:ad:1b:c2:3d:76:fb:46:a6: e8:78:41:c0:e8:a6:18:16:f2:39:d4:ec:98:af:14: d8:5f:dd:81:d3:1f:80:da:59:85:3b:bf:6f:4f:a2: 9b:53:88:e8:7b:59:e5:01:e4:6b:1a:4b:07:b1:97: 6f:ce:bd:99:d8:15:04:73:f2:1f:05:d3:49:85:09: f8:5a:69:3c:75:54:12:46:70:fa:70:5a:b1:5e:dc: 69:98:26:9c:ed:5d:f9:b8:a2:8f:ea:9b:88:cb:96: af:13:ac:90:57:ae:8c:fb:28:63:94:5a:7b:49:5d: ea:02:9f:f7:88:92:2b:ef:e1:82:ba:21:ce:ec:fa: da:95:3b:38:e3:0f:93:aa:bf:4f:40:87:98:d0:72: fa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E7:C1:A6:69:82:18:BD:E6:69:C8:BF:2C:7E:BE:40:9B:8B:BA:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/a21f29a1-e715-3d1f-bd89-c419d22db812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl X509v3 Authority Key Identifier: keyid:06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer sbgp-ipAddrBlock: critical IPv4: 149.112.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:56:6a:8a:19:ee:48:b5:f3:3d:bc:4d:41:25:ae:aa:e2:7d: 50:a1:d8:a8:ce:5d:13:f9:a4:94:44:f2:11:c9:e2:1c:bc:44: ff:33:6d:4d:81:1a:af:08:8f:f4:ec:cb:89:05:00:e4:f8:b9: 6b:71:be:a6:e1:82:9f:96:29:33:40:ab:b4:c2:cd:d5:f8:a9: 08:d6:54:10:0a:06:e8:6d:0a:f5:42:d7:1a:4e:38:7d:56:2a: ab:db:b5:46:36:81:69:75:ed:8a:1f:7c:07:e7:30:94:b0:57: d8:f3:02:b1:ea:f0:ce:7b:0b:fe:b7:a3:c8:2b:d4:8e:73:fd: 30:5b:1c:42:43:d5:a7:3c:17:1f:e0:84:1c:f8:be:ce:44:d5: b2:2b:fe:7d:4c:08:01:b0:18:e1:d1:65:5c:dc:68:58:4d:99: 6a:28:f1:35:6d:3b:d7:41:17:26:4a:ef:9f:fe:1f:2d:40:77: d1:62:09:28:29:db:c2:11:d9:75:a0:da:b3:88:ce:ac:43:93: 17:43:57:3b:d6:7b:fe:18:e2:01:de:33:18:2d:00:dd:05:77: fb:bb:6d:56:50:9d:83:26:ce:67:ec:38:9a:84:11:c9:b8:72: 0e:c6:8f:32:a3:62:b2:be:85:b6:08:98:2e:68:7f:d4:56:35: 14:31:c9:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAy0WlhtgR0geMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhOGIwNjgtOTdiMi00YzUyLTkwNGYtZDc4YzRlNDZm YjhjMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZDA1OWIwNTYtZWZjMy00OTM5LThhMTEtYjI1MWJkYjAzODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI4SwF+EKXHfcWVAw9/m0Oc43GUoPTMh3R+M zZBeS5mQdrxefdKdPwaGuq69mNpzckczbg8iR/oZcMr7CDi8QeRIrKzRrsSFvsGe p8pK9v5I2TDfHKTzpcJkyHvrzGNYER/gv85TUE7hOYc2N2A8rRvCPXb7RqboeEHA 6KYYFvI51OyYrxTYX92B0x+A2lmFO79vT6KbU4joe1nlAeRrGksHsZdvzr2Z2BUE c/IfBdNJhQn4Wmk8dVQSRnD6cFqxXtxpmCac7V35uKKP6puIy5avE6yQV66M+yhj lFp7SV3qAp/3iJIr7+GCuiHO7PralTs44w+Tqr9PQIeY0HL6twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPnwaZpghi95mnIvyx+vkCbi7qhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4 YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhjNGU0NmZiOGMvYTIxZjI5YTEtZTcxNS0z ZDFmLWJkODktYzQxOWQyMmRiODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhOGIwNjgtOTdiMi00YzUyLTkw NGYtZDc4YzRlNDZmYjhjL2FmYThiMDY4LTk3YjItNGM1Mi05MDRmLWQ3OGM0ZTQ2 ZmI4Yy5jcmwwHwYDVR0jBBgwFoAUBopEEXaNaepCVQwVrXi7rafxYlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhj NGU0NmZiOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXAvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1WaooZ7ki18z28TUElrqrifVCh2KjOXRP5pJRE8hHJ4hy8RP8zbU2B Gq8Ij/Tsy4kFAOT4uWtxvqbhgp+WKTNAq7TCzdX4qQjWVBAKBuhtCvVC1xpOOH1W KqvbtUY2gWl17YoffAfnMJSwV9jzArHq8M57C/63o8gr1I5z/TBbHEJD1ac8Fx/g hBz4vs5E1bIr/n1MCAGwGOHRZVzcaFhNmWoo8TVtO9dBFyZK75/+Hy1Ad9FiCSgp 28IR2XWg2rOIzqxDkxdDVzvWe/4Y4gHeMxgtAN0Fd/u7bVZQnYMmzmfsOJqEEcm4 cg7GjzKjYrK+hbYImC5of9RWNRQxybs= -----END CERTIFICATE-----Generated at Fri Apr 11 21:06:49 2025 by rpki-client