$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa File: 7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa (raw, json) Hash identifier: qwn0lyIPa7Nj4g0y4N0FdciBDVSck0ZmvdwEDnip/RM= Subject key identifier: 94:B8:00:35:72:46:26:54:61:91:A7:48:43:69:56:44:BD:64:D9:C7 Certificate issuer: /CN=147f088f-ace0-45c8-9c73-f06e60d7debb Certificate serial: 010D0C9F4328584979744439F6958C55BE0F46C0 Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 16509 IP address blocks: 216.147.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:44:39:f6:95:8c:55:be:0f:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=c76c3567-cbbe-478b-85b3-8ba4d264c339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:de:b7:45:64:d3:d9:9f:57:79:7a:f6:9f: 0b:fb:fe:e8:22:c3:8d:d1:4a:4a:ea:22:a1:17:cf: f2:74:ed:13:72:38:47:98:ab:6d:9d:98:5c:ea:2e: d8:77:dd:da:8a:14:f9:cb:ce:27:66:16:73:89:ca: 13:f4:ce:65:ca:b5:0f:7e:2b:ec:a6:c7:d7:93:fa: a0:dc:bc:45:e2:4b:c2:84:35:b2:22:01:b3:53:43: b0:f8:84:96:91:e6:ed:82:30:57:a1:af:da:31:75: 97:f3:a1:d3:35:67:57:57:2d:d6:44:e4:c7:6d:c9: 5c:ac:0d:56:4c:cb:4a:18:41:0e:59:2c:f7:b7:8f: fb:e1:13:8c:aa:ff:28:48:41:02:f9:bf:fc:e7:f3: 51:f1:df:28:1c:14:c7:2c:aa:e5:27:e8:0c:f4:95: 69:37:56:ba:b8:96:7c:d7:4c:5c:bc:10:4c:19:7e: cf:e3:4b:df:72:6f:3f:48:8d:03:95:e4:ee:e4:c8: 4e:4f:da:37:b6:e2:82:fd:dc:d8:8f:06:4e:cf:4a: ce:1b:cb:9a:18:bd:c2:c6:58:0a:f5:e1:4b:ca:69: f4:dc:0c:40:3f:1b:44:b8:1d:50:8c:7a:ad:83:43: 82:5e:5f:6b:f8:90:48:92:d7:29:6c:fe:a5:b8:fe: 4a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B8:00:35:72:46:26:54:61:91:A7:48:43:69:56:44:BD:64:D9:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl X509v3 Authority Key Identifier: keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer sbgp-ipAddrBlock: critical IPv4: 216.147.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:b7:08:32:c2:c4:e0:6f:47:db:d6:a2:11:d4:75:67:48:00: 4e:20:5c:46:e7:96:d9:2a:52:6a:03:73:cd:ed:37:4d:d1:93: b2:3e:af:d7:5f:96:18:df:f1:b6:f4:aa:9c:c5:04:b9:cc:0c: 3f:a3:49:74:17:30:a6:c1:14:45:7f:0c:ba:ab:c6:d1:4d:2e: fa:18:d2:0f:5b:e6:9f:84:03:77:38:ba:bf:36:19:fe:67:e3: 5d:29:86:7d:8c:92:43:d3:d6:46:fb:3b:30:fe:6a:7a:fe:a6: 46:e3:18:d0:5e:f7:b0:b8:82:91:a3:e6:0a:48:df:3c:7a:2f: 59:70:0a:b4:af:07:3c:e5:d4:48:9f:12:fd:e4:08:f8:67:8f: 9e:e9:02:0b:c1:1d:80:ed:36:42:89:44:d3:34:b1:82:7f:df: 70:75:19:c6:83:95:62:50:c8:b2:e5:c2:7f:d8:26:16:69:b2: ba:2f:70:53:42:ff:19:60:71:b7:f8:b7:98:1c:55:d7:c4:ca: af:f5:bc:dd:1d:70:70:5a:6c:c7:8a:ea:df:31:0a:cc:1b:d3: f7:02:ff:d7:bb:88:04:73:4d:73:00:f0:c5:78:fc:38:06:30: 34:8d:94:77:ad:45:7b:fe:3e:38:9d:9b:f2:4b:35:7f:77:3f: 50:d0:dd:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dEQ59pWMVb4PRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk ZWJiMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk Yzc2YzM1NjctY2JiZS00NzhiLTg1YjMtOGJhNGQyNjRjMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHjet0Vk09mfV3l69p8L+/7oIsON0UpK6iKh F8/ydO0TcjhHmKttnZhc6i7Yd93aihT5y84nZhZzicoT9M5lyrUPfivspsfXk/qg 3LxF4kvChDWyIgGzU0Ow+ISWkebtgjBXoa/aMXWX86HTNWdXVy3WROTHbclcrA1W TMtKGEEOWSz3t4/74ROMqv8oSEEC+b/85/NR8d8oHBTHLKrlJ+gM9JVpN1a6uJZ8 10xcvBBMGX7P40vfcm8/SI0DleTu5MhOT9o3tuKC/dzYjwZOz0rOG8uaGL3CxlgK 9eFLymn03AxAPxtEuB1QjHqtg0OCXl9r+JBIktcpbP6luP5K7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS4ADVyRiZUYZGnSENpVkS9ZNnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvN2UyZjdiMGQtMzYyOS0z MmZmLWJlZjctOGY1M2U2OTEzMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3 ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JO4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKK3CDLCxOBvR9vWohHUdWdIAE4gXEbnltkqUmoDc83tN03Rk7I+r9df lhjf8bb0qpzFBLnMDD+jSXQXMKbBFEV/DLqrxtFNLvoY0g9b5p+EA3c4ur82Gf5n 410phn2MkkPT1kb7OzD+anr+pkbjGNBe97C4gpGj5gpI3zx6L1lwCrSvBzzl1Eif Ev3kCPhnj57pAgvBHYDtNkKJRNM0sYJ/33B1GcaDlWJQyLLlwn/YJhZpsrovcFNC /xlgcbf4t5gcVdfEyq/1vN0dcHBabMeK6t8xCswb0/cC/9e7iARzTXMA8MV4/DgG MDSNlHetRXv+Pjidm/JLNX93P1DQ3dE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:20 2025 by rpki-client