$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa File: ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa (raw, json) Hash identifier: vSREEKz6+goHR+cFyHABh5QsZnTMnVqrOgyoSMTBY/k= Subject key identifier: F1:E3:29:BF:54:1B:DC:33:7C:7B:EE:B7:F5:2E:E7:A3:54:FD:83:2B Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F43285849806F2317BFDD5FECD80D0080 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 13009 IP address blocks: 147.249.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:23:17:bf:dd:5f:ec:d8:0d:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=fb146c40-ad27-43f7-ad5e-4ab90944afca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:26:13:8d:7f:e4:c6:ca:22:40:ea:bf:0c:b9: f4:ae:b5:23:e0:9c:0b:4a:ce:e0:f8:16:d8:55:aa: 68:e2:cb:23:68:71:34:f1:aa:8d:9c:98:44:ce:87: 57:06:5c:04:a8:83:7a:37:b2:ad:c8:eb:19:f8:bc: dd:40:8f:d9:9a:84:21:eb:00:f7:d4:c6:8e:d9:14: 09:c3:59:d3:49:e7:8e:08:09:d1:21:e9:8c:28:8a: 30:67:f1:b8:38:6f:b9:a4:9c:3f:3c:8a:52:ce:d9: 4e:32:6f:3b:ef:00:9f:28:87:ae:22:a2:fe:27:24: f9:dd:62:7a:54:8b:8f:cf:a1:d9:20:4f:2e:60:df: 25:33:7b:d0:55:26:b9:11:95:66:02:6c:de:25:35: 34:2d:7c:5a:e5:fb:78:bb:a9:77:41:e1:cf:ce:85: 68:f1:96:b1:1c:4d:c5:55:58:ac:56:57:0f:21:eb: a0:9d:07:48:25:ce:ae:ef:4c:c6:0b:b2:dc:ea:0e: 9d:4d:e5:ce:c8:92:4e:c0:3c:b2:44:ad:19:30:ce: dc:20:b0:cb:eb:6b:24:bb:b7:09:f6:03:4e:36:a8: b7:35:1a:b5:71:69:ac:4d:1a:b4:21:42:4f:b0:a9: cd:c4:8f:d5:e5:cd:90:87:6e:f7:61:64:2a:0a:70: 71:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E3:29:BF:54:1B:DC:33:7C:7B:EE:B7:F5:2E:E7:A3:54:FD:83:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6f:3e:12:c5:72:cc:6f:64:30:c0:e0:b1:9b:50:8c:12:bf: 4b:71:0b:66:5a:ed:91:ce:1a:ff:67:b1:90:be:fe:15:bd:38: a9:2c:96:a6:43:c1:1b:53:92:b5:6f:21:57:3e:6e:30:56:52: 33:40:2a:47:d3:d6:7f:33:9b:03:f1:ca:c2:78:48:35:a5:61: 2b:25:aa:7a:37:3b:60:ac:7d:ae:4d:d1:10:ac:fe:02:61:73: fd:ea:b7:48:a0:0b:cd:fb:1e:78:bd:5b:9c:b5:71:b2:e1:ec: 5e:27:09:60:65:c6:25:e1:7b:b7:21:62:9b:e5:a5:58:be:72: 53:ea:79:50:8c:1b:58:4d:c7:5b:dd:f3:ca:34:43:ae:5e:b9: 19:23:d4:8a:b3:67:74:dc:08:7c:38:cb:7b:70:95:f4:fc:1e: d6:59:7e:42:0d:4d:e4:07:62:bb:1a:28:65:51:45:0d:8e:cc: e6:24:38:4c:33:77:01:87:a8:f2:03:87:9f:a3:a9:46:8e:76: 41:f7:63:a3:a3:99:ba:e1:92:e9:26:e3:17:2e:c4:dd:9b:cc: 27:0b:3b:63:38:bc:66:d4:8c:ec:91:60:f5:4b:3e:1a:8b:c9: f9:18:57:2f:cc:b8:4d:76:27:00:4b:8c:3d:40:fd:08:fd:1e: 49:00:9b:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbyMXv91f7NgNAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZmIxNDZjNDAtYWQyNy00M2Y3LWFkNWUtNGFiOTA5NDRhZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSYTjX/kxsoiQOq/DLn0rrUj4JwLSs7g+BbY Vapo4ssjaHE08aqNnJhEzodXBlwEqIN6N7KtyOsZ+LzdQI/ZmoQh6wD31MaO2RQJ w1nTSeeOCAnRIemMKIowZ/G4OG+5pJw/PIpSztlOMm877wCfKIeuIqL+JyT53WJ6 VIuPz6HZIE8uYN8lM3vQVSa5EZVmAmzeJTU0LXxa5ft4u6l3QeHPzoVo8ZaxHE3F VVisVlcPIeugnQdIJc6u70zGC7Lc6g6dTeXOyJJOwDyyRK0ZMM7cILDL62sku7cJ 9gNONqi3NRq1cWmsTRq0IUJPsKnNxI/V5c2Qh273YWQqCnBxdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHjKb9UG9wzfHvut/Uu56NU/YMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvZWU1ZWE3ZTktMzFjYy0z YjE4LTljNzUtNGVjMGRlY2JjZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/lhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1vPhLFcsxvZDDA4LGbUIwSv0txC2Za7ZHOGv9nsZC+/hW9OKkslqZD wRtTkrVvIVc+bjBWUjNAKkfT1n8zmwPxysJ4SDWlYSslqno3O2Csfa5N0RCs/gJh c/3qt0igC837Hni9W5y1cbLh7F4nCWBlxiXhe7chYpvlpVi+clPqeVCMG1hNx1vd 88o0Q65euRkj1IqzZ3TcCHw4y3twlfT8HtZZfkINTeQHYrsaKGVRRQ2OzOYkOEwz dwGHqPIDh5+jqUaOdkH3Y6Ojmbrhkukm4xcuxN2bzCcLO2M4vGbUjOyRYPVLPhqL yfkYVy/MuE12JwBLjD1A/Qj9HkkAm4g= -----END CERTIFICATE-----Generated at Sun Apr 27 22:54:28 2025 by rpki-client