$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/44e6412a-ad9a-3379-a2fe-2eda7500f614.roa File: 44e6412a-ad9a-3379-a2fe-2eda7500f614.roa (raw, json) Hash identifier: iZO4hAPfbpFGZ2TeoYliSa8cKubl440HCmDv4jRGMrU= Subject key identifier: 25:46:86:D0:FF:E3:46:C4:66:06:59:28:19:59:09:6A:46:36:4F:0B Certificate issuer: /CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Certificate serial: 010D0C9F432858491246AC154A5ADC9DE156EE00 Authority key identifier: C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/44e6412a-ad9a-3379-a2fe-2eda7500f614.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 14618 IP address blocks: 193.149.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ac:15:4a:5a:dc:9d:e1:56:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=05cef050-735d-49fa-b8d2-0d711b2237a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:16:92:94:aa:57:45:c4:78:64:4f:98:7c:ba: 12:d2:1c:05:70:d1:46:09:79:38:7f:ae:3f:61:e5: 12:59:8c:16:92:bc:98:27:b6:a2:75:af:10:e3:29: 5e:b0:fd:c8:d0:c8:6d:5a:4d:46:09:cc:aa:3e:ec: 61:ef:7b:f5:fb:0f:fb:c9:ec:0f:67:60:dc:b6:9d: 56:02:06:99:bd:0c:ce:70:b4:d0:b6:ac:9a:16:b0: c0:e6:e4:9f:b7:b3:04:1b:63:f4:f3:15:4f:02:c7: 3b:38:9a:46:f0:47:88:8d:64:09:de:b5:74:42:a4: d2:30:25:0a:cb:11:72:be:55:52:fa:26:de:65:eb: 78:a2:eb:97:67:f0:54:28:5a:54:0c:b4:fa:81:66: 99:d3:cf:aa:a4:b2:e0:79:26:71:00:47:ca:9c:1b: ae:b2:17:87:46:86:66:fc:e8:4a:81:6e:02:4f:ff: 24:4a:8d:ab:24:b1:da:b8:93:16:89:e1:e7:ae:3e: 7e:d8:0b:16:df:d7:c6:9d:df:d6:2a:3f:84:bb:79: 74:2e:4b:7b:62:7a:e8:7c:b6:a3:a8:be:03:f1:ff: d2:61:be:d8:d0:65:15:14:66:5c:35:74:15:6d:68: 61:fc:0e:89:80:97:2d:d2:23:cc:42:dc:e3:a5:eb: c9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:46:86:D0:FF:E3:46:C4:66:06:59:28:19:59:09:6A:46:36:4F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/44e6412a-ad9a-3379-a2fe-2eda7500f614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl X509v3 Authority Key Identifier: keyid:C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer sbgp-ipAddrBlock: critical IPv4: 193.149.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f3:3d:75:bc:f1:15:11:2b:4f:1b:68:39:00:db:25:ed:a2: 8b:04:53:22:2b:96:5e:17:79:2e:d4:a5:c0:21:a6:e6:5d:4f: 12:db:5c:d7:3d:70:8d:b0:2f:fe:91:9a:95:9c:c9:b8:72:f8: 9a:53:89:4d:7e:a1:4d:82:b4:37:e3:8a:9f:99:94:af:2e:7d: 73:3d:4a:c3:45:ea:54:e0:00:e6:90:01:c9:8e:a9:15:c0:2b: 3f:3e:ea:3f:bf:aa:34:9f:65:08:30:92:01:57:c7:8c:ce:dd: 76:5a:a7:af:4a:41:b6:ea:4e:04:49:da:90:7a:29:ff:0b:a7: 23:b8:b3:b0:06:da:c1:18:5a:b2:8c:b3:c7:ad:73:7b:e8:db: b0:2c:83:87:66:24:ef:1b:82:af:85:5e:00:71:00:82:f3:8e: 07:a6:2e:cf:d9:59:fd:a6:c2:71:f8:6c:a4:15:9b:55:6c:39: f2:96:29:68:ad:48:81:4f:01:05:4c:6d:1c:42:e6:3c:55:e7: 13:48:b2:3c:80:0e:91:c3:53:62:bb:df:7a:e0:20:52:c3:95: f7:e0:72:4c:1b:b8:f5:38:bd:a2:91:37:b1:17:ff:3b:8d:db: a8:78:de:18:de:5b:c6:36:1d:a2:7d:9c:e6:4d:ca:51:2a:88: b3:ba:a9:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqwVSlrcneFW7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyOGI2MmMtN2M1MC00Y2NmLWJhYzUtYTZjZWQ5YzUx MGFlMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MDVjZWYwNTAtNzM1ZC00OWZhLWI4ZDItMGQ3MTFiMjIzN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4haSlKpXRcR4ZE+YfLoS0hwFcNFGCXk4f64/ YeUSWYwWkryYJ7aida8Q4ylesP3I0MhtWk1GCcyqPuxh73v1+w/7yewPZ2Dctp1W AgaZvQzOcLTQtqyaFrDA5uSft7MEG2P08xVPAsc7OJpG8EeIjWQJ3rV0QqTSMCUK yxFyvlVS+ibeZet4ouuXZ/BUKFpUDLT6gWaZ08+qpLLgeSZxAEfKnBuusheHRoZm /OhKgW4CT/8kSo2rJLHauJMWieHnrj5+2AsW39fGnd/WKj+Eu3l0Lkt7YnrofLaj qL4D8f/SYb7Y0GUVFGZcNXQVbWhh/A6JgJct0iPMQtzjpevJWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVGhtD/40bEZgZZKBlZCWpGNk8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4 YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNlZDljNTEwYWUvNDRlNjQxMmEtYWQ5YS0z Mzc5LWEyZmUtMmVkYTc1MDBmNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2YyOGI2MmMtN2M1MC00Y2NmLWJh YzUtYTZjZWQ5YzUxMGFlLzNmMjhiNjJjLTdjNTAtNGNjZi1iYWM1LWE2Y2VkOWM1 MTBhZS5jcmwwHwYDVR0jBBgwFoAUx41gkQp7ujkifr5s5i8FjtJm/YYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNl ZDljNTEwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZWRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnzPXW88RURK08baDkA2yXtoosEUyIrll4XeS7UpcAhpuZdTxLbXNc9 cI2wL/6RmpWcybhy+JpTiU1+oU2CtDfjip+ZlK8ufXM9SsNF6lTgAOaQAcmOqRXA Kz8+6j+/qjSfZQgwkgFXx4zO3XZap69KQbbqTgRJ2pB6Kf8LpyO4s7AG2sEYWrKM s8etc3vo27Asg4dmJO8bgq+FXgBxAILzjgemLs/ZWf2mwnH4bKQVm1VsOfKWKWit SIFPAQVMbRxC5jxV5xNIsjyADpHDU2K733rgIFLDlffgckwbuPU4vaKRN7EX/zuN 26h43hjeW8Y2HaJ9nOZNylEqiLO6qdE= -----END CERTIFICATE-----Generated at Fri Apr 4 23:41:02 2025 by rpki-client