$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa File: df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa (raw, json) Hash identifier: 6yaRz/U6NcDPVLNBYXirW9UihOsDr4U2/gXgMA/Oa68= Subject key identifier: 20:CD:27:C6:60:D1:7A:1B:BC:5A:B8:12:15:6E:45:C4:C4:FC:48:32 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F43285849806F29E470BBE12A509CDF80 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 18434 IP address blocks: 147.249.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:29:e4:70:bb:e1:2a:50:9c:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=6f842b45-d350-4507-a9be-1893040d5982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:28:26:f5:cc:bb:84:5f:7f:25:53:00:17:ab: a9:5f:72:6b:34:02:85:be:67:e2:8a:a0:2d:8f:bc: 6d:0b:1d:62:7b:30:84:04:53:12:e7:67:cf:a2:65: ca:4c:02:7f:02:5f:3c:7c:27:3f:36:4f:62:55:95: f4:bb:4d:a8:03:44:f4:92:4a:68:22:b7:cb:79:2d: a9:66:92:52:62:16:5d:9a:c0:97:40:48:97:31:8a: 9c:35:d8:62:e8:a7:81:a2:28:e0:88:48:9a:95:aa: a8:71:1f:af:8b:c4:1f:97:8f:c0:f4:4a:e3:28:61: 89:81:d6:40:53:0b:69:bf:89:81:2e:50:cb:9b:7a: 42:11:78:9b:0a:05:de:22:e8:29:d6:2c:f6:56:c0: 78:9d:9a:03:b8:01:0a:c6:f9:e3:10:e3:7f:ed:ba: 66:f9:8a:f8:f4:38:af:79:36:1c:21:82:80:6d:c7: fc:84:41:08:82:c3:af:e8:4a:bb:09:de:58:79:7a: 1b:6d:53:50:1e:7c:b6:e0:99:41:1f:63:00:0d:b0: 3e:d9:df:13:c6:fd:c5:6b:e5:2a:8d:18:cc:e4:32: e5:ed:b6:1d:8b:4d:29:54:ae:ff:e3:c4:34:52:85: a0:be:a1:8f:45:22:ae:e4:71:b5:99:3c:ee:d2:7d: 9f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CD:27:C6:60:D1:7A:1B:BC:5A:B8:12:15:6E:45:C4:C4:FC:48:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:35:35:79:28:e4:d9:e4:f1:32:dd:50:63:bc:ff:b9:6d:75: 59:b1:ab:41:ae:3e:bf:ea:ad:72:9a:38:63:45:14:92:b4:4e: 46:8a:bd:20:91:8f:37:25:b0:0f:5b:3f:90:af:2b:10:46:fe: fd:3b:87:58:e9:9b:d8:59:7f:5e:42:8e:2b:42:c1:e7:62:c0: 8e:dc:b6:d9:97:be:72:e9:d4:d6:c3:57:f0:e1:86:14:e5:ee: 6b:4d:fd:6f:f4:11:1c:be:74:6d:9b:9b:03:91:39:c6:ce:0d: 94:54:1f:d3:68:9d:8f:20:3f:48:56:62:d1:8e:83:8e:d3:98: d2:68:0f:72:8b:4d:e9:15:fd:b6:b5:b4:39:62:d5:f5:40:17: 56:8c:9a:1d:52:31:e4:3c:ce:99:43:21:24:fe:fd:c5:2f:64: 7d:b6:f0:37:f4:47:a6:f5:3f:07:97:5f:48:9a:3c:00:7a:f0: 88:90:9d:4e:68:98:a3:fc:08:c6:e2:73:0e:69:00:08:cf:90: f5:d7:71:95:1f:9b:1f:dd:01:ce:58:5e:9e:3c:b8:a5:9d:f0: b2:f0:50:88:c1:4e:85:8f:b0:6f:f5:82:a5:f8:38:87:9e:65: e9:86:7f:10:25:94:92:bc:20:4e:e1:21:16:f2:55:16:a9:53: 58:87:3f:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbynkcLvhKlCc34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk NmY4NDJiNDUtZDM1MC00NTA3LWE5YmUtMTg5MzA0MGQ1OTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgygm9cy7hF9/JVMAF6upX3JrNAKFvmfiiqAt j7xtCx1iezCEBFMS52fPomXKTAJ/Al88fCc/Nk9iVZX0u02oA0T0kkpoIrfLeS2p ZpJSYhZdmsCXQEiXMYqcNdhi6KeBoijgiEialaqocR+vi8Qfl4/A9ErjKGGJgdZA Uwtpv4mBLlDLm3pCEXibCgXeIugp1iz2VsB4nZoDuAEKxvnjEON/7bpm+Yr49Div eTYcIYKAbcf8hEEIgsOv6Eq7Cd5YeXobbVNQHny24JlBH2MADbA+2d8Txv3Fa+Uq jRjM5DLl7bYdi00pVK7/48Q0UoWgvqGPRSKu5HG1mTzu0n2foQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDNJ8Zg0XobvFq4EhVuRcTE/EgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvZGYwMmFkMWQtMjFlMi0z OWQ3LWJmMDItNDRhZmY0NWI4NGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQ1NXko5Nnk8TLdUGO8/7ltdVmxq0GuPr/qrXKaOGNFFJK0TkaKvSCR jzclsA9bP5CvKxBG/v07h1jpm9hZf15CjitCwediwI7cttmXvnLp1NbDV/DhhhTl 7mtN/W/0ERy+dG2bmwOROcbODZRUH9NonY8gP0hWYtGOg47TmNJoD3KLTekV/ba1 tDli1fVAF1aMmh1SMeQ8zplDIST+/cUvZH228Df0R6b1PweXX0iaPAB68IiQnU5o mKP8CMbicw5pAAjPkPXXcZUfmx/dAc5YXp48uKWd8LLwUIjBToWPsG/1gqX4OIee ZemGfxAllJK8IE7hIRbyVRapU1iHPzU= -----END CERTIFICATE-----Generated at Mon Apr 28 06:10:33 2025 by rpki-client