$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/4faa0bb8-825d-3134-a243-0635887e58a3.roa File: 4faa0bb8-825d-3134-a243-0635887e58a3.roa (raw, json) Hash identifier: ROXp/IgY+09rA2qv3rIJ+q4WPDuecn+HWJyi6IlYaJA= Subject key identifier: 2A:00:9C:F8:FD:A1:20:28:45:85:4F:BD:36:95:6B:BC:D4:BE:42:E3 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584A00DAC506360689AB6144B040 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/4faa0bb8-825d-3134-a243-0635887e58a3.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 26744 IP address blocks: 147.124.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:c5:06:36:06:89:ab:61:44:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=88823d75-d2e5-4b78-bc83-f54d3360b7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:cb:06:f2:0c:fb:b6:4d:15:6e:f2:87:76: 83:45:cd:06:9f:3d:38:9a:19:70:98:96:3e:84:f5: d9:06:da:25:0f:26:5c:cf:18:e5:30:2c:4e:0b:58: 60:e8:6f:57:2f:b6:41:fd:a8:e2:13:bb:43:2f:33: e2:e0:e2:a3:49:c4:df:87:fe:0b:a5:9e:34:b1:dd: df:9c:ed:0f:9b:60:d7:ae:ed:08:9f:07:97:04:8b: 06:1d:6b:88:35:ad:d2:54:ec:1d:3a:8f:b9:7e:97: 9e:7c:05:47:a1:00:dd:6b:b7:99:3e:5e:ec:b0:e7: 12:36:cc:07:bf:78:30:e5:2f:b1:31:4a:3d:51:cc: 4d:a4:ee:f7:db:2e:bf:99:bb:1a:d0:93:2f:c1:7b: 6d:61:a5:43:4a:06:bc:69:c6:04:06:17:b4:03:0c: b1:24:6a:a6:0b:56:7a:72:93:b3:96:b4:44:5d:81: 5d:b1:bc:b0:f5:26:7f:a3:ed:a3:16:1e:49:2e:5a: 49:b6:ba:aa:4d:68:df:1c:1a:a3:8a:eb:91:f4:04: 37:85:93:1c:84:36:d6:85:de:b2:14:3b:30:54:77: eb:85:75:97:ef:41:5f:65:f8:93:dd:33:35:8b:34: 93:b6:6d:d8:67:dc:b1:2f:bc:fd:fb:10:0d:2d:2f: e5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:00:9C:F8:FD:A1:20:28:45:85:4F:BD:36:95:6B:BC:D4:BE:42:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/4faa0bb8-825d-3134-a243-0635887e58a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:d1:23:f1:17:a1:46:d6:82:92:10:63:b1:4c:54:aa:1a:4c: b0:94:0e:69:f7:ae:58:d0:45:69:12:3a:0c:78:b4:59:14:f0: 3f:f0:33:af:37:6a:eb:01:dc:40:18:3c:02:06:b7:01:36:0f: 90:cd:b0:46:2b:e4:0a:96:ea:ba:82:8c:96:2f:c5:fb:86:8c: 27:05:99:c4:98:54:6d:59:1a:25:6c:82:bc:89:97:ce:b2:48: b5:24:e2:e0:0c:c7:4d:59:d2:3b:ea:2b:02:b6:79:4b:9c:7b: ef:e1:f6:cf:03:cc:81:cf:fc:52:0b:be:14:87:56:16:f4:d5: 28:ab:f1:a1:da:af:2a:20:87:9e:d5:cd:6e:c7:6d:71:ca:6d: ab:c2:9d:d6:b5:bd:d5:81:ac:41:d8:05:b8:f2:18:55:5a:8d: a5:c9:41:04:12:a9:c3:da:ec:7c:fe:47:26:45:65:a5:bf:25: fc:2b:06:b0:64:18:11:a7:ae:f8:47:a8:9f:57:44:90:f8:06: fc:21:8f:28:00:0a:b1:97:b5:aa:a0:f2:24:cb:f2:80:66:bd: 4b:60:fd:c7:54:3b:1a:3c:af:b2:8a:06:df:29:4e:49:70:5d: 21:ce:55:97:64:7a:45:b3:32:c0:76:c3:ad:41:18:31:86:3a: 0d:ea:37:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2sUGNgaJq2FEsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ODg4MjNkNzUtZDJlNS00Yjc4LWJjODMtZjU0ZDMzNjBiN2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf7LBvIM+7ZNFW7yh3aDRc0Gnz04mhlwmJY+ hPXZBtolDyZczxjlMCxOC1hg6G9XL7ZB/ajiE7tDLzPi4OKjScTfh/4LpZ40sd3f nO0Pm2DXru0InweXBIsGHWuINa3SVOwdOo+5fpeefAVHoQDda7eZPl7ssOcSNswH v3gw5S+xMUo9UcxNpO732y6/mbsa0JMvwXttYaVDSga8acYEBhe0AwyxJGqmC1Z6 cpOzlrREXYFdsbyw9SZ/o+2jFh5JLlpJtrqqTWjfHBqjiuuR9AQ3hZMchDbWhd6y FDswVHfrhXWX70FfZfiT3TM1izSTtm3YZ9yxL7z9+xANLS/lXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoAnPj9oSAoRYVPvTaVa7zUvkLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNGZhYTBiYjgtODI1ZC0z MTM0LWEyNDMtMDYzNTg4N2U1OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrRI/EXoUbWgpIQY7FMVKoaTLCUDmn3rljQRWkSOgx4tFkU8D/wM683 ausB3EAYPAIGtwE2D5DNsEYr5AqW6rqCjJYvxfuGjCcFmcSYVG1ZGiVsgryJl86y SLUk4uAMx01Z0jvqKwK2eUuce+/h9s8DzIHP/FILvhSHVhb01Sir8aHaryogh57V zW7HbXHKbavCnda1vdWBrEHYBbjyGFVajaXJQQQSqcPa7Hz+RyZFZaW/JfwrBrBk GBGnrvhHqJ9XRJD4BvwhjygACrGXtaqg8iTL8oBmvUtg/cdUOxo8r7KKBt8pTklw XSHOVZdkekWzMsB2w61BGDGGOg3qN9g= -----END CERTIFICATE-----Generated at Wed Jun 18 05:32:41 2025 by rpki-client