$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/f9734849-7012-30a9-be2d-be64e3d02034.roa File: f9734849-7012-30a9-be2d-be64e3d02034.roa (raw, json) Hash identifier: GKbgi+oWHh/D1P/zViiOeeMjIT2ET747XZfF1ZebZQk= Subject key identifier: 8A:AA:DD:AA:BD:3F:BB:00:13:C5:A1:D4:11:B3:34:1D:60:C0:94:21 Certificate issuer: /CN=0605680b-ca76-43b6-81d9-2ac50993c59e Certificate serial: 010D0C9F4328584973DEE720DB9B32F3F4530A00 Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/f9734849-7012-30a9-be2d-be64e3d02034.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 11758 IP address blocks: 204.29.12.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e7:20:db:9b:32:f3:f4:53:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=d8e54e99-c4d2-4b93-93a7-ac561ee37955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:97:11:5e:6c:03:59:59:a0:c6:e1:af:56: 93:81:5f:30:30:83:70:90:d7:04:b9:b6:8c:3a:eb: 40:d5:34:64:aa:51:15:55:ca:46:72:c2:e5:3c:2e: 96:31:0a:ba:b6:cd:95:e0:1d:93:80:0c:f5:26:de: 0c:80:a6:17:4c:45:ac:ba:8d:47:36:82:da:8b:20: 78:47:bc:67:3c:bc:b9:a2:aa:08:56:7f:eb:98:14: f2:96:69:03:a6:22:e9:c5:87:71:5d:0d:72:65:5e: b0:2e:2d:9c:54:48:0e:65:84:49:55:45:62:36:da: 2e:23:68:f1:62:11:f3:ad:fc:77:a9:bb:a0:83:2f: ec:c1:bd:43:73:20:2c:a1:72:39:c5:20:a4:84:0f: 2c:a6:e5:36:74:c1:44:85:1e:84:4e:b5:ef:26:a3: 9c:46:ed:d1:44:a7:fe:be:6d:72:30:13:91:49:cb: 2b:d0:f9:80:80:69:76:f3:00:a1:f0:59:47:b1:f6: 4d:18:ea:8a:08:fa:e2:a5:f3:c0:18:e9:db:7c:e2: c0:9e:98:d2:eb:c2:51:e9:94:f5:22:90:cb:e3:ac: cc:dc:72:7c:55:5c:a5:25:bf:58:a5:e6:db:dd:be: bf:f0:b2:14:fd:cf:e2:45:ef:16:9b:19:57:3c:36: e0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AA:DD:AA:BD:3F:BB:00:13:C5:A1:D4:11:B3:34:1D:60:C0:94:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/f9734849-7012-30a9-be2d-be64e3d02034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl X509v3 Authority Key Identifier: keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer sbgp-ipAddrBlock: critical IPv4: 204.29.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:3c:a5:91:4f:60:60:e4:fc:ac:86:c7:3d:00:00:16:d5:01: 8f:b1:ef:5b:0e:01:b6:0b:db:d5:ab:4c:d2:8c:ba:40:e6:66: 44:71:45:dd:8f:13:aa:98:aa:b8:37:6b:f6:9c:05:d2:98:ff: 1e:40:1c:8b:e4:9d:45:84:62:c7:3e:ac:a5:8c:9f:11:a0:61: bb:81:bd:c6:31:cd:01:87:ca:4b:dc:93:ce:98:8e:f0:3e:ac: b0:1a:ce:0b:71:ac:91:b9:86:d7:b0:47:f6:c0:8c:83:e3:63: 73:37:a4:71:6a:c5:9a:da:c9:ee:ac:42:66:f5:74:18:46:4d: 43:dd:c3:bd:54:1f:ba:65:da:84:5c:87:98:10:75:7c:da:54: 33:62:89:af:a8:2a:61:85:9c:13:ec:17:32:f8:20:6c:2a:94: 3c:91:a1:02:5b:df:72:ee:30:f1:2b:9c:48:33:a5:d3:b1:62: e5:49:4d:c6:d3:92:f0:d8:4e:39:93:ac:fd:6c:4c:99:b8:b8: b4:64:ff:a0:39:3a:77:af:1b:f0:e7:23:8c:20:3b:72:97:f3: 54:67:9e:cd:f5:3b:c7:2a:75:f3:df:df:a5:cb:2f:64:ca:1b: 45:1e:6a:60:8c:9f:a8:8c:cf:bc:ff:43:b0:4c:e6:b7:82:c3: 04:cf:6d:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3ucg25sy8/RTCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYwNTY4MGItY2E3Ni00M2I2LTgxZDktMmFjNTA5OTNj NTllMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk ZDhlNTRlOTktYzRkMi00YjkzLTkzYTctYWM1NjFlZTM3OTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ2XEV5sA1lZoMbhr1aTgV8wMINwkNcEubaM OutA1TRkqlEVVcpGcsLlPC6WMQq6ts2V4B2TgAz1Jt4MgKYXTEWsuo1HNoLaiyB4 R7xnPLy5oqoIVn/rmBTylmkDpiLpxYdxXQ1yZV6wLi2cVEgOZYRJVUViNtouI2jx YhHzrfx3qbuggy/swb1DcyAsoXI5xSCkhA8spuU2dMFEhR6ETrXvJqOcRu3RRKf+ vm1yMBORScsr0PmAgGl28wCh8FlHsfZNGOqKCPripfPAGOnbfOLAnpjS68JR6ZT1 IpDL46zM3HJ8VVylJb9Ypebb3b6/8LIU/c/iRe8WmxlXPDbg9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqq3aq9P7sAE8Wh1BGzNB1gwJQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1 NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5M2M1OWUvZjk3MzQ4NDktNzAxMi0z MGE5LWJlMmQtYmU2NGUzZDAyMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDYwNTY4MGItY2E3Ni00M2I2LTgx ZDktMmFjNTA5OTNjNTllLzA2MDU2ODBiLWNhNzYtNDNiNi04MWQ5LTJhYzUwOTkz YzU5ZS5jcmwwHwYDVR0jBBgwFoAUSUhmydhN2RQ18NBnqAdbMJX69FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1 MDk5M2M1OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzB0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF48pZFPYGDk/KyGxz0AABbVAY+x71sOAbYL29WrTNKMukDmZkRxRd2P E6qYqrg3a/acBdKY/x5AHIvknUWEYsc+rKWMnxGgYbuBvcYxzQGHykvck86YjvA+ rLAazgtxrJG5htewR/bAjIPjY3M3pHFqxZraye6sQmb1dBhGTUPdw71UH7pl2oRc h5gQdXzaVDNiia+oKmGFnBPsFzL4IGwqlDyRoQJb33LuMPErnEgzpdOxYuVJTcbT kvDYTjmTrP1sTJm4uLRk/6A5OnevG/DnI4wgO3KX81Rnns31O8cqdfPf36XLL2TK G0UeamCMn6iMz7z/Q7BM5reCwwTPbU0= -----END CERTIFICATE-----Generated at Sat Apr 12 13:07:10 2025 by rpki-client