$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/c49b3b11-b5be-3457-9944-344841e05c2c.roa File: c49b3b11-b5be-3457-9944-344841e05c2c.roa (raw, json) Hash identifier: 3FuXiT69AtcC84r1ZLCi8egk2iyzcXKCiSMPSg6OK+Y= Subject key identifier: A9:E7:84:EF:24:52:52:57:C2:A3:A1:04:21:1C:FE:27:E0:00:9B:D4 Certificate issuer: /CN=5ff2cbdb-2720-448b-951d-699a8e60cb7d Certificate serial: 010D0C9F43285849AD1A0C20CB78898D45047540 Authority key identifier: A2:46:63:F9:01:FB:63:EC:13:17:31:16:54:0C:A8:01:5C:7D:10:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/c49b3b11-b5be-3457-9944-344841e05c2c.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396465 IP address blocks: 134.71.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:0c:20:cb:78:89:8d:45:04:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff2cbdb-2720-448b-951d-699a8e60cb7d Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=af413772-a3a0-41e7-9189-c77d19652562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5d:18:36:b7:6c:b7:64:40:63:f4:c3:8f:c4: 86:81:04:e7:76:fd:22:e5:49:dc:ad:12:4d:11:28: b4:a9:a8:d1:17:73:ff:06:ad:01:05:55:17:13:37: 66:7c:ee:93:99:e8:91:ca:ab:e2:e9:48:ed:bb:0c: 27:fc:8b:92:cd:ce:13:e3:ea:14:7e:a4:17:68:89: 5a:a7:bc:ad:8b:bb:bd:7c:06:69:4e:b8:3c:0d:33: 27:bc:37:88:e6:aa:38:ce:14:cd:23:d5:bb:69:12: f1:93:d7:ce:cf:7a:0f:1c:8c:46:33:37:2b:0a:8a: 67:74:87:2d:e8:b9:1d:19:b1:39:ef:6e:65:03:65: 93:23:a9:fb:6b:5f:5a:2b:8e:8a:8e:f9:77:69:6e: 4b:d9:da:6f:e4:b2:a5:e9:95:04:45:b8:98:eb:8b: 01:e3:3e:16:d2:88:4c:b8:63:a5:e6:11:31:45:bf: 91:54:54:43:97:64:83:76:eb:03:39:fd:65:1b:78: ca:75:4e:6a:31:96:2b:15:73:f8:6f:e0:5d:5f:1a: a8:60:30:b8:55:fa:c5:99:47:6c:85:34:24:ed:6e: 9f:5e:f8:6e:4f:2c:33:15:31:21:08:35:4c:7c:3d: ca:c9:a8:77:d8:f1:51:a2:a1:9f:27:77:03:2b:68: ed:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E7:84:EF:24:52:52:57:C2:A3:A1:04:21:1C:FE:27:E0:00:9B:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/c49b3b11-b5be-3457-9944-344841e05c2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.crl X509v3 Authority Key Identifier: keyid:A2:46:63:F9:01:FB:63:EC:13:17:31:16:54:0C:A8:01:5C:7D:10:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer sbgp-ipAddrBlock: critical IPv4: 134.71.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:3e:93:ef:90:a7:64:84:1e:96:03:d6:7b:a0:c1:7b:33:58: 09:5f:0c:cc:f9:33:ea:d3:57:ee:50:a0:0c:84:47:fe:07:15: 40:a2:c3:20:09:d1:1a:6a:66:2c:62:84:93:49:b4:2f:f8:31: 61:45:08:43:00:b1:6e:0b:9b:04:d8:fb:c9:35:16:cc:c9:df: d6:9c:55:d3:aa:5b:10:7c:37:63:53:fa:09:c4:bb:6b:60:6c: 3e:62:e7:5e:51:08:71:6f:75:93:3c:3a:97:c7:78:da:dd:dd: 1b:70:b8:62:13:5b:21:5e:c2:9f:8b:b9:c0:cf:5a:2b:dc:cb: 78:de:30:e3:6f:02:94:14:09:d3:e1:ee:35:e1:b5:5c:88:03: 3b:f9:9a:17:6b:60:fc:11:51:17:98:15:c2:3e:31:b7:eb:05: dc:08:69:6f:b5:00:d2:4a:9d:cb:25:ac:b1:d7:b0:90:13:a6: 63:58:45:96:02:75:45:34:d4:ce:cd:f7:69:cd:17:09:61:7a: d5:8a:b0:1b:2c:95:f9:3a:a1:e4:96:3c:89:45:c1:63:f2:56: a5:47:83:6a:05:c3:da:40:51:52:c2:76:fe:28:3b:35:be:06: fb:88:72:38:67:a2:55:ca:dc:24:bf:e3:6a:4c:c3:0d:d1:08: 49:c6:1b:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgwgy3iJjUUEdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZmMmNiZGItMjcyMC00NDhiLTk1MWQtNjk5YThlNjBj YjdkMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YWY0MTM3NzItYTNhMC00MWU3LTkxODktYzc3ZDE5NjUyNTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l0YNrdst2RAY/TDj8SGgQTndv0i5UncrRJN ESi0qajRF3P/Bq0BBVUXEzdmfO6TmeiRyqvi6Ujtuwwn/IuSzc4T4+oUfqQXaIla p7yti7u9fAZpTrg8DTMnvDeI5qo4zhTNI9W7aRLxk9fOz3oPHIxGMzcrCopndIct 6LkdGbE5725lA2WTI6n7a19aK46Kjvl3aW5L2dpv5LKl6ZUERbiY64sB4z4W0ohM uGOl5hExRb+RVFRDl2SDdusDOf1lG3jKdU5qMZYrFXP4b+BdXxqoYDC4VfrFmUds hTQk7W6fXvhuTywzFTEhCDVMfD3Kyah32PFRoqGfJ3cDK2jtmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnnhO8kUlJXwqOhBCEc/ifgAJvUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmYy Y2JkYi0yNzIwLTQ0OGItOTUxZC02OTlhOGU2MGNiN2QvYzQ5YjNiMTEtYjViZS0z NDU3LTk5NDQtMzQ0ODQxZTA1YzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWZmMmNiZGItMjcyMC00NDhiLTk1 MWQtNjk5YThlNjBjYjdkLzVmZjJjYmRiLTI3MjAtNDQ4Yi05NTFkLTY5OWE4ZTYw Y2I3ZC5jcmwwHwYDVR0jBBgwFoAUokZj+QH7Y+wTFzEWVAyoAVx9EGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmYyY2JkYi0yNzIwLTQ0OGItOTUxZC02OTlh OGU2MGNiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhkf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALg+k++Qp2SEHpYD1nugwXszWAlfDMz5M+rTV+5QoAyER/4HFUCiwyAJ 0RpqZixihJNJtC/4MWFFCEMAsW4LmwTY+8k1FszJ39acVdOqWxB8N2NT+gnEu2tg bD5i515RCHFvdZM8OpfHeNrd3RtwuGITWyFewp+LucDPWivcy3jeMONvApQUCdPh 7jXhtVyIAzv5mhdrYPwRUReYFcI+MbfrBdwIaW+1ANJKncslrLHXsJATpmNYRZYC dUU01M7N92nNFwlhetWKsBsslfk6oeSWPIlFwWPyVqVHg2oFw9pAUVLCdv4oOzW+ BvuIcjhnolXK3CS/42pMww3RCEnGGww= -----END CERTIFICATE-----Generated at Mon Apr 28 15:06:01 2025 by rpki-client