$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/496f49ea-3359-31aa-95bc-daa3ccdae006.roa File: 496f49ea-3359-31aa-95bc-daa3ccdae006.roa (raw, json) Hash identifier: vFQm/0Is0aRFJc7qBD0UJmvasBoWZwfXHlFXLcKzpzM= Subject key identifier: 7F:D8:38:98:44:3F:9E:06:08:50:3A:34:65:C9:77:12:9B:36:A4:CB Certificate issuer: /CN=544240c0-1aad-4163-8ada-3b71180eac4f Certificate serial: 010D0C9F432858491246AAFEA818F5F916861180 Authority key identifier: A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/496f49ea-3359-31aa-95bc-daa3ccdae006.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 396982 IP address blocks: 147.146.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:aa:fe:a8:18:f5:f9:16:86:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544240c0-1aad-4163-8ada-3b71180eac4f Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=5a0f3da1-4778-4a11-9f30-093de1ce243a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:18:b6:e8:3a:cf:1f:db:4f:dc:15:03:5c:2b: cc:be:92:ab:a0:ac:ea:a6:32:77:b3:d5:f6:e5:dd: 2b:10:b9:d0:ce:64:2d:2d:53:e6:f9:d6:99:78:51: 0c:44:7c:b2:26:03:d8:6a:f0:d3:30:38:f7:54:e2: 8c:7d:3c:59:d0:20:fd:ff:8d:c0:af:b3:55:2c:fa: 3c:c2:c5:bb:12:af:ed:2d:3d:c1:b9:2c:e1:13:c1: 52:ea:2f:a7:1a:85:8c:be:b3:2d:c2:55:04:37:67: 60:55:78:89:b2:d9:95:14:d8:05:c6:23:8a:9d:46: c0:17:37:22:c0:42:c1:2a:39:01:b4:a7:10:d1:ed: 75:8e:bb:b5:7f:f8:4d:5d:5a:77:7b:65:8e:0e:d3: 27:cf:44:1f:6b:15:45:25:41:67:b5:e6:ba:32:3d: 05:13:ef:8e:94:92:77:b0:c9:e4:0d:92:ff:37:aa: 05:15:45:e2:63:eb:92:ce:38:80:ea:14:88:ab:da: 4c:81:63:9d:e3:11:f0:ef:77:cc:df:7d:29:43:4d: bf:28:30:a3:5b:39:85:ca:46:8a:65:3b:d2:0f:2a: 9d:3c:7c:ce:20:4a:6d:75:0f:59:fe:4c:e9:b7:1e: b6:9a:df:84:b0:54:32:20:86:34:eb:51:73:84:a1: 0b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D8:38:98:44:3F:9E:06:08:50:3A:34:65:C9:77:12:9B:36:A4:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/496f49ea-3359-31aa-95bc-daa3ccdae006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.crl X509v3 Authority Key Identifier: keyid:A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer sbgp-ipAddrBlock: critical IPv4: 147.146.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:fa:37:54:76:7a:ba:cf:7f:bf:44:c1:ed:7c:9f:1b:8d:69: 8e:0f:d0:d5:50:10:94:3c:29:04:7d:87:a4:76:59:be:0c:4b: 05:5d:d0:c2:32:79:4e:f2:13:e1:c1:84:0b:0c:ec:48:7a:59: cc:a9:ca:3a:b4:3c:87:59:9c:91:d1:e2:22:38:fb:25:82:05: 7d:96:ce:57:7b:5a:35:46:28:1f:d7:8e:c9:33:ae:2e:d8:5c: 90:98:f8:f9:4f:42:a9:ef:c9:a6:c2:e3:9e:e3:ef:ea:ab:5a: bd:ec:78:e7:9d:4c:40:b7:e4:16:17:42:98:f9:0d:15:71:d2: cf:b2:d9:89:1f:91:4e:40:47:9d:c8:e6:90:51:01:11:5d:23: a7:7b:9b:6b:09:89:58:8f:3b:00:a3:34:95:9a:3c:35:6f:11: 87:04:3b:c1:c7:a2:06:1f:09:b1:c8:4b:32:c7:c6:e6:fa:45: df:fc:6c:cb:ca:ec:d0:5f:f1:04:1e:50:61:9c:bc:90:af:5f: 74:dd:22:62:80:9d:3f:9d:8f:b0:4e:5f:e1:56:8e:cb:ec:e7: 82:72:79:77:73:2a:83:b0:3b:fa:53:38:7b:0b:89:ba:ec:24: 4e:f8:b1:a2:3a:a7:7b:35:8e:10:34:a4:db:d2:8f:df:ab:84: 2a:e7:76:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqr+qBj1+RaGEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQ0MjQwYzAtMWFhZC00MTYzLThhZGEtM2I3MTE4MGVh YzRmMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NWEwZjNkYTEtNDc3OC00YTExLTlmMzAtMDkzZGUxY2UyNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBi26DrPH9tP3BUDXCvMvpKroKzqpjJ3s9X2 5d0rELnQzmQtLVPm+daZeFEMRHyyJgPYavDTMDj3VOKMfTxZ0CD9/43Ar7NVLPo8 wsW7Eq/tLT3BuSzhE8FS6i+nGoWMvrMtwlUEN2dgVXiJstmVFNgFxiOKnUbAFzci wELBKjkBtKcQ0e11jru1f/hNXVp3e2WODtMnz0QfaxVFJUFntea6Mj0FE++OlJJ3 sMnkDZL/N6oFFUXiY+uSzjiA6hSIq9pMgWOd4xHw73fM330pQ02/KDCjWzmFykaK ZTvSDyqdPHzOIEptdQ9Z/kzptx62mt+EsFQyIIY061FzhKELLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/YOJhEP54GCFA6NGXJdxKbNqTLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NDQy NDBjMC0xYWFkLTQxNjMtOGFkYS0zYjcxMTgwZWFjNGYvNDk2ZjQ5ZWEtMzM1OS0z MWFhLTk1YmMtZGFhM2NjZGFlMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTQ0MjQwYzAtMWFhZC00MTYzLThh ZGEtM2I3MTE4MGVhYzRmLzU0NDI0MGMwLTFhYWQtNDE2My04YWRhLTNiNzExODBl YWM0Zi5jcmwwHwYDVR0jBBgwFoAUp7CWW0gBVnrgQpqffgw+Qpq7WR0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NDQyNDBjMC0xYWFkLTQxNjMtOGFkYS0zYjcx MTgwZWFjNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5LwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH36N1R2errPf79Ewe18nxuNaY4P0NVQEJQ8KQR9h6R2Wb4MSwVd0MIy eU7yE+HBhAsM7Eh6Wcypyjq0PIdZnJHR4iI4+yWCBX2Wzld7WjVGKB/Xjskzri7Y XJCY+PlPQqnvyabC457j7+qrWr3seOedTEC35BYXQpj5DRVx0s+y2YkfkU5AR53I 5pBRARFdI6d7m2sJiViPOwCjNJWaPDVvEYcEO8HHogYfCbHISzLHxub6Rd/8bMvK 7NBf8QQeUGGcvJCvX3TdImKAnT+dj7BOX+FWjsvs54JyeXdzKoOwO/pTOHsLibrs JE74saI6p3s1jhA0pNvSj9+rhCrndvU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:53:00 2025 by rpki-client