$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/911d192a-8add-325c-a5eb-88bbefdeee71.roa File: 911d192a-8add-325c-a5eb-88bbefdeee71.roa (raw, json) Hash identifier: nXte5EyE4QQStLOUg/ddGKbxW1CDLc01IEkn/jVFK30= Subject key identifier: 1C:9B:73:C3:3D:0E:1A:E8:8C:FA:57:9C:C3:3B:83:FB:6F:B8:39:DF Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F43285849D594D9E40DC7597D971A8300 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/911d192a-8add-325c-a5eb-88bbefdeee71.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 11377 IP address blocks: 149.72.128.0/19 maxlen: 19 149.72.160.0/19 maxlen: 19 149.72.192.0/19 maxlen: 19 149.72.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:d9:e4:0d:c7:59:7d:97:1a:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=3b5588aa-7d62-49a7-8591-eaf6c9b4516a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:40:78:84:fb:d1:2e:61:56:91:85:09:4b:b3: 4d:78:4e:93:c0:c2:01:95:52:1f:8c:12:21:68:4f: 6a:4c:c2:c1:2a:4f:27:8a:01:7f:78:a6:73:9a:bc: 97:74:b3:ae:6c:d1:52:52:34:c1:ce:0d:bc:de:2a: a0:bd:52:6d:79:94:52:f9:16:a6:7e:de:f3:75:ab: 76:01:d4:21:53:3d:5d:95:b5:08:b1:cf:43:62:22: 44:a2:d7:0a:c7:09:01:26:75:5e:91:07:b6:6e:12: 7e:16:aa:f2:c2:6f:51:7e:84:d1:b4:6a:4c:6e:8e: ae:de:27:51:aa:fe:56:14:f3:0b:7d:da:67:77:b0: d5:82:36:49:fa:aa:f1:ea:0e:a5:a8:36:66:68:3c: 53:15:9d:dd:9c:33:c7:32:45:3b:fd:45:1b:39:d0: 56:3e:a8:62:21:af:99:fc:52:73:e3:ee:25:b1:4c: f8:6e:12:e6:51:88:6c:80:f3:92:62:a4:13:99:98: 7d:6e:58:0e:73:29:c4:9e:e0:ae:2b:e2:7f:ee:04: a9:c5:45:32:9e:a2:38:05:10:2b:48:0c:c7:17:68: 65:1c:f7:64:53:00:a4:fb:bc:ed:c2:7a:3a:fb:3d: 07:b6:d0:84:6b:e8:a8:0d:dc:86:be:4b:10:3c:ba: e8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9B:73:C3:3D:0E:1A:E8:8C:FA:57:9C:C3:3B:83:FB:6F:B8:39:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/911d192a-8add-325c-a5eb-88bbefdeee71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:9b:af:e4:1e:4c:ea:9f:6f:d8:51:7e:57:cd:a8:a8:b1:17: 01:b6:65:14:18:7c:ba:23:ff:cc:29:de:e0:ba:23:86:02:8e: ef:0b:df:66:72:97:d3:4b:90:5b:6b:6a:f6:a0:0f:95:a1:ce: d7:dd:ec:c4:c6:33:7e:69:10:db:67:0f:9a:a2:00:0e:2f:de: c4:59:d4:a1:13:b7:d1:dd:82:f9:c1:24:67:ae:d6:fc:6c:26: b7:b8:8f:f6:2c:d9:78:7a:37:97:de:0e:5f:0d:9e:55:26:20: d5:06:a1:f4:ff:69:b5:2c:5c:3f:ca:61:3f:e6:ae:3b:74:3c: eb:f3:19:aa:1d:98:58:c6:43:cf:ab:cf:f5:0c:68:f5:6a:8c: c3:b1:db:a9:c2:0b:0d:e3:c6:fb:23:73:14:08:88:d0:43:3e: 8d:c3:08:4c:f5:d1:c5:5f:83:8c:c4:c5:fc:50:52:bf:9d:c5: 65:6f:ae:5c:71:94:e4:c6:b0:06:67:87:34:0b:0f:f8:60:75: 69:f4:7e:3d:bc:0a:fc:04:c5:6c:1a:ce:7f:bb:95:88:77:62: 1d:f7:e4:96:1a:7d:38:3f:f0:5f:0a:f1:1f:2b:9f:91:ef:2e: b5:be:18:2f:4c:f3:57:c0:eb:3b:c0:11:fc:3d:e1:b3:a0:39: 30:dc:2f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlNnkDcdZfZcagwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk M2I1NTg4YWEtN2Q2Mi00OWE3LTg1OTEtZWFmNmM5YjQ1MTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUB4hPvRLmFWkYUJS7NNeE6TwMIBlVIfjBIh aE9qTMLBKk8nigF/eKZzmryXdLOubNFSUjTBzg283iqgvVJteZRS+Ramft7zdat2 AdQhUz1dlbUIsc9DYiJEotcKxwkBJnVekQe2bhJ+Fqrywm9RfoTRtGpMbo6u3idR qv5WFPMLfdpnd7DVgjZJ+qrx6g6lqDZmaDxTFZ3dnDPHMkU7/UUbOdBWPqhiIa+Z /FJz4+4lsUz4bhLmUYhsgPOSYqQTmZh9blgOcynEnuCuK+J/7gSpxUUynqI4BRAr SAzHF2hlHPdkUwCk+7ztwno6+z0HttCEa+ioDdyGvksQPLroxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBybc8M9DhrojPpXnMM7g/tvuDnfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvOTExZDE5MmEtOGFkZC0z MjVjLWE1ZWItODhiYmVmZGVlZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHlUiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAebr+QeTOqfb9hRflfNqKixFwG2ZRQYfLoj/8wp3uC6I4YCju8L32Zy l9NLkFtravagD5Whztfd7MTGM35pENtnD5qiAA4v3sRZ1KETt9HdgvnBJGeu1vxs Jre4j/Ys2Xh6N5feDl8NnlUmINUGofT/abUsXD/KYT/mrjt0POvzGaodmFjGQ8+r z/UMaPVqjMOx26nCCw3jxvsjcxQIiNBDPo3DCEz10cVfg4zExfxQUr+dxWVvrlxx lOTGsAZnhzQLD/hgdWn0fj28CvwExWwazn+7lYh3Yh335JYafTg/8F8K8R8rn5Hv LrW+GC9M81fA6zvAEfw94bOgOTDcLwo= -----END CERTIFICATE-----Generated at Mon Jun 9 06:00:07 2025 by rpki-client