$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/a57367d5-9043-398f-998d-3ef5f5822e72.roa File: a57367d5-9043-398f-998d-3ef5f5822e72.roa (raw, json) Hash identifier: ntRb8w0jMblrfqBScWMLjNG36DKlnRD+4OVMqi2+SZY= Subject key identifier: 02:F8:74:4F:96:E0:CB:4B:94:44:D6:BC:33:39:65:03:02:81:A1:CE Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584A0C0573A78CDF4BFB51FA9780 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/a57367d5-9043-398f-998d-3ef5f5822e72.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 26744 IP address blocks: 147.124.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:73:a7:8c:df:4b:fb:51:fa:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=40c9e13c-a869-47e4-8ec1-10b2698a6994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:16:41:c0:21:46:d5:cf:97:50:99:29:02: 45:50:7c:51:86:f0:9c:07:45:e7:d3:ea:3a:04:b9: b8:8c:09:e4:41:ac:95:40:65:33:85:be:fa:4d:94: 7f:28:20:0f:f9:ca:96:5e:e0:33:81:d9:4b:bf:6f: 3a:19:e0:4c:0d:67:2f:cc:40:2e:ad:f1:ba:66:c3: 96:31:27:f0:dc:9b:f1:ef:bc:4f:a2:72:29:74:58: b6:67:f0:7c:78:49:73:8c:fb:6b:18:21:dc:42:ad: 40:64:4e:31:35:fa:57:0f:3c:79:20:42:9b:71:27: 48:65:0e:d7:73:6a:e5:e8:4c:02:e4:7e:b4:dc:ff: 8d:94:55:45:28:55:cd:fd:d1:56:fc:d1:83:d9:6a: 30:9b:68:f4:38:79:d5:85:63:13:b8:9c:b4:6a:25: f3:1a:f8:4a:1f:f3:37:76:9b:b4:4d:57:c7:df:1f: 00:0e:3c:26:bd:c6:71:ad:74:56:1d:f6:c2:20:30: b5:54:19:59:d5:cf:ee:12:7c:56:9d:e2:44:d0:d4: f2:82:2e:40:55:b2:ab:15:c5:c3:e6:f4:10:d6:d0: 3c:31:9d:d8:9b:bb:77:3d:63:02:4a:4b:91:94:f6: f3:f6:00:a5:21:f1:12:44:82:be:86:37:53:bb:44: ad:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F8:74:4F:96:E0:CB:4B:94:44:D6:BC:33:39:65:03:02:81:A1:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/a57367d5-9043-398f-998d-3ef5f5822e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:b9:d1:18:02:ae:88:e1:bd:ef:81:6a:69:3a:82:ad:c6:b5: 6d:27:1a:a1:48:12:89:fd:d4:2c:85:07:5d:81:f1:f2:c6:14: 7d:b0:44:60:5c:0f:44:07:ca:76:dc:ec:62:ca:41:26:9a:64: 62:b0:40:9b:41:23:93:ba:03:8b:a0:5a:da:94:20:93:cb:b0: c0:dd:ce:1b:d8:45:70:d6:72:ec:0d:73:66:9d:aa:a9:64:ea: f9:2d:cf:b2:7b:e2:52:f7:97:15:45:ca:cf:01:48:bf:01:fd: 2c:f3:80:59:c5:d6:1c:57:82:bc:d4:b1:66:25:61:59:a8:64: 80:9a:68:ca:f3:33:91:9b:21:99:bf:0e:42:f1:8d:97:9c:9b: 43:a9:8d:a8:a4:46:29:a3:89:da:08:aa:f3:c5:02:39:65:57: d4:14:f0:81:84:c3:fd:81:70:50:70:20:61:6f:3d:b8:56:e9: 0d:ab:b5:29:ae:0d:00:f9:8b:6c:9a:30:bd:c1:b6:16:64:00: 31:5e:24:45:af:43:34:c2:ae:cf:6c:0c:ec:2c:1e:b9:29:af: 40:92:23:9d:8c:d8:bb:00:08:78:5c:c7:1a:4b:7a:89:1b:b8: 9a:b3:55:e9:fa:e6:01:a2:eb:47:01:f6:93:4d:95:ec:72:0a: 49:d4:da:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBXOnjN9L+1H6l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NDBjOWUxM2MtYTg2OS00N2U0LThlYzEtMTBiMjY5OGE2OTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAligWQcAhRtXPl1CZKQJFUHxRhvCcB0Xn0+o6 BLm4jAnkQayVQGUzhb76TZR/KCAP+cqWXuAzgdlLv286GeBMDWcvzEAurfG6ZsOW MSfw3Jvx77xPonIpdFi2Z/B8eElzjPtrGCHcQq1AZE4xNfpXDzx5IEKbcSdIZQ7X c2rl6EwC5H603P+NlFVFKFXN/dFW/NGD2Wowm2j0OHnVhWMTuJy0aiXzGvhKH/M3 dpu0TVfH3x8ADjwmvcZxrXRWHfbCIDC1VBlZ1c/uEnxWneJE0NTygi5AVbKrFcXD 5vQQ1tA8MZ3Ym7t3PWMCSkuRlPbz9gClIfESRIK+hjdTu0StUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAL4dE+W4MtLlETWvDM5ZQMCgaHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvYTU3MzY3ZDUtOTA0My0z OThmLTk5OGQtM2VmNWY1ODIyZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALO50RgCrojhve+Bamk6gq3GtW0nGqFIEon91CyFB12B8fLGFH2wRGBc D0QHynbc7GLKQSaaZGKwQJtBI5O6A4ugWtqUIJPLsMDdzhvYRXDWcuwNc2adqqlk 6vktz7J74lL3lxVFys8BSL8B/SzzgFnF1hxXgrzUsWYlYVmoZICaaMrzM5GbIZm/ DkLxjZecm0OpjaikRimjidoIqvPFAjllV9QU8IGEw/2BcFBwIGFvPbhW6Q2rtSmu DQD5i2yaML3BthZkADFeJEWvQzTCrs9sDOwsHrkpr0CSI52M2LsACHhcxxpLeokb uJqzVen65gGi60cB9pNNlexyCknU2ms= -----END CERTIFICATE-----Generated at Mon Jun 16 22:30:43 2025 by rpki-client