$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa File: 1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa (raw, json) Hash identifier: k8wllzMNKGl22wLmbsNIyB8N2dlRTxJL2ef7SgfBMq4= Subject key identifier: 19:8D:C8:BD:37:B1:D9:9C:44:3B:0F:34:AF:D6:D0:A3:72:18:B3:E4 Certificate issuer: /CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48 Certificate serial: 010D0C9F4328584A29556BA3A5691DB93A220AE0 Authority key identifier: 1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 0 IP address blocks: 149.112.0.0/24 maxlen: 32 2001:504:104::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:6b:a3:a5:69:1d:b9:3a:22:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=bc41dd75-2ac1-4496-8d3f-1e54a9f3393c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:6f:17:87:c7:45:43:b4:95:4c:19:f3:2f: 2f:ff:2f:6d:98:8b:97:46:27:ce:c8:89:84:db:7c: 33:7e:20:3e:15:0b:2a:6a:ff:b6:77:83:d4:51:a4: a8:1b:0f:d3:06:20:72:53:82:2d:9c:00:59:24:9a: 34:6e:12:52:ae:0b:4e:76:ea:1e:4c:6c:d0:30:51: 1d:08:e1:e5:ec:d3:1b:ef:8f:d8:ee:0a:dc:ef:9f: 25:b9:d0:62:0c:60:e9:82:26:c1:8d:7d:57:2f:d9: da:0d:9a:3c:3d:57:8f:f9:94:2e:ec:1c:af:93:fe: cd:44:7d:4d:89:ea:b6:ac:df:34:33:ec:c6:ef:a9: d1:94:8a:50:86:3a:cb:8d:ba:9e:70:7f:b8:77:18: 1b:e4:57:b7:b2:08:62:63:54:67:1d:d2:d7:8e:83: 31:a8:fa:2f:1f:9a:a2:94:a3:be:2a:18:8c:06:2e: bc:ac:3c:22:92:52:76:9b:1a:88:4a:de:34:c9:73: 8f:62:c0:61:d4:f3:81:a2:6d:2e:7f:57:f6:45:e3: 97:6e:6a:c6:28:60:40:ef:3f:a1:a0:57:13:df:76: c8:eb:93:1f:d1:4b:02:31:ac:e2:03:22:0c:c0:f8: d1:c3:d7:25:ee:76:c6:f4:60:79:c8:f6:c2:d9:8e: 66:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8D:C8:BD:37:B1:D9:9C:44:3B:0F:34:AF:D6:D0:A3:72:18:B3:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl X509v3 Authority Key Identifier: keyid:1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer sbgp-ipAddrBlock: critical IPv4: 149.112.0.0/24 IPv6: 2001:504:104::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:bf:03:a4:fa:33:4d:df:02:9c:0b:75:0c:b4:81:6f:b5:15: 6b:81:6b:33:f6:0e:2f:5a:a9:2e:bf:e5:27:3c:ae:1b:48:62: e8:aa:ea:23:e9:6b:96:c1:4b:b1:c6:9f:be:9a:17:b6:38:85: f2:a2:6d:a0:83:81:d7:97:09:4e:2c:f8:5a:16:11:79:7e:bd: 51:cd:c8:23:8f:27:d6:9f:21:5f:bb:a9:61:e3:49:36:80:4d: d9:5c:a4:5a:ee:c4:c7:f9:9f:5f:6f:b1:a3:ed:40:03:b3:67: a4:9b:a3:2a:68:9d:ae:59:94:57:50:b4:3c:e8:65:57:bd:3a: 0b:4b:8b:8e:48:1a:86:46:86:a3:83:ad:89:82:3a:0f:a8:12: 0f:fc:ef:04:d6:2d:05:ba:7b:c3:96:01:e8:be:1e:14:e7:77: 3a:8c:a8:9a:fb:d3:ac:33:42:5c:16:59:30:e9:4f:b1:15:1d: 28:63:0c:9b:12:39:53:11:58:83:79:1e:17:a2:3f:17:f0:94: c6:2f:c5:e9:36:0e:df:f7:46:97:90:4d:e8:ca:72:dc:e9:68: bc:1a:7b:48:0e:57:66:8d:08:6e:5f:b3:9c:7e:59:65:eb:00: 21:a8:dd:74:75:ea:4b:de:9d:1d:4e:38:a7:da:96:f8:7e:3b: 21:78:ec:fb -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEopVWujpWkduToiCuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxMmY5NmEtMmFmNS00YmIwLTljOTgtZGI4YjlhOGE5 YzQ4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk YmM0MWRkNzUtMmFjMS00NDk2LThkM2YtMWU1NGE5ZjMzOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR9vF4fHRUO0lUwZ8y8v/y9tmIuXRifOyImE 23wzfiA+FQsqav+2d4PUUaSoGw/TBiByU4ItnABZJJo0bhJSrgtOduoeTGzQMFEd COHl7NMb74/Y7grc758ludBiDGDpgibBjX1XL9naDZo8PVeP+ZQu7Byvk/7NRH1N ieq2rN80M+zG76nRlIpQhjrLjbqecH+4dxgb5Fe3sghiY1RnHdLXjoMxqPovH5qi lKO+KhiMBi68rDwiklJ2mxqISt40yXOPYsBh1POBom0uf1f2ReOXbmrGKGBA7z+h oFcT33bI65Mf0UsCMaziAyIMwPjRw9cl7nbG9GB5yPbC2Y5mawIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBmNyL03sdmcRDsPNK/W0KNyGLPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDEy Zjk2YS0yYWY1LTRiYjAtOWM5OC1kYjhiOWE4YTljNDgvMWYzMTA3NzktOWIyYS0z Y2M0LWFlYTQtZTMxNTIxZDI4ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxMmY5NmEtMmFmNS00YmIwLTlj OTgtZGI4YjlhOGE5YzQ4LzUwMTJmOTZhLTJhZjUtNGJiMC05Yzk4LWRiOGI5YThh OWM0OC5jcmwwHwYDVR0jBBgwFoAUHl+PVLvCW2Sa4uFRL+U2SPr1+i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDEyZjk2YS0yYWY1LTRiYjAtOWM5OC1kYjhi OWE4YTljNDguY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAlXAAMA8E AgACMAkDBwAgAQUEAQQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAj78DpPozTd8CnAt1DLSBb7UVa4FrM/YO L1qpLr/lJzyuG0hi6KrqI+lrlsFLscafvpoXtjiF8qJtoIOB15cJTiz4WhYReX69 Uc3II48n1p8hX7upYeNJNoBN2VykWu7Ex/mfX2+xo+1AA7NnpJujKmidrlmUV1C0 POhlV706C0uLjkgahkaGo4OtiYI6D6gSD/zvBNYtBbp7w5YB6L4eFOd3OoyomvvT rDNCXBZZMOlPsRUdKGMMmxI5UxFYg3keF6I/F/CUxi/F6TYO3/dGl5BN6Mpy3Olo vBp7SA5XZo0Ibl+znH5ZZesAIajddHXqS96dHU44p9qW+H47IXjs+w== -----END CERTIFICATE-----Generated at Sun Jun 15 18:51:23 2025 by rpki-client