$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa File: 10eae504-c535-3d7f-8fd1-8a39ac437127.roa (raw, json) Hash identifier: y7eSKgCMgmbBZmT7feH+kYiDqY+5fRl7QNEB9oKVPbg= Subject key identifier: 70:6B:80:6E:EB:5B:7C:22:50:58:50:C1:FA:F6:DD:46:40:B0:E7:1F Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F43285849AE7F405D7B81DB5BD4419480 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 2615 IP address blocks: 147.1.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:40:5d:7b:81:db:5b:d4:41:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=1e742438-44fa-418b-acea-2a865afcb9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4e:dc:61:42:e4:e2:f5:55:b4:00:46:9f:dd: fb:42:df:29:57:ee:e9:ad:fb:3f:6b:a4:d1:f2:8b: 84:22:26:d6:bc:10:27:1c:0c:b4:48:39:b4:eb:d2: 33:8a:ef:04:84:d9:bb:1a:dc:f8:06:ab:26:31:4a: 6e:c1:e5:16:b8:06:82:d2:75:9a:7c:fa:d9:13:24: 17:f8:ab:80:7a:35:e9:4f:7b:15:72:21:ff:5f:bd: e4:1a:67:1f:bd:d7:c6:15:13:b0:ea:0c:34:90:96: 35:5f:6f:8f:db:3e:9e:88:5f:75:5a:36:65:d2:b9: cb:d0:9d:ce:82:9c:f7:5d:d3:ac:4a:2c:3e:25:31: 20:e9:b5:ab:f4:c3:85:2f:90:18:9c:ee:ef:8e:01: 67:df:fb:9c:74:cd:5e:70:04:d5:38:9b:13:12:1d: a6:5c:f8:ec:91:eb:4c:12:dc:03:fe:89:b9:4c:2c: 86:73:85:73:bc:fb:49:fb:99:9b:1c:18:4a:18:2d: ee:cf:84:c0:02:79:54:4e:04:44:ad:24:43:bc:cc: f2:23:b0:46:2d:c7:25:f9:4a:1a:bf:c3:c4:f6:e5: 4c:eb:e6:38:c7:51:c7:98:e9:c1:b1:5a:b4:c9:a1: 0f:b5:1b:53:5e:44:de:66:01:9f:61:4f:6b:a8:3a: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6B:80:6E:EB:5B:7C:22:50:58:50:C1:FA:F6:DD:46:40:B0:E7:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ab:e4:bc:a5:96:08:f0:2e:cc:70:07:8d:6f:b7:37:6a:48: 7e:25:59:2c:de:8d:d1:d7:58:fb:04:fa:9b:5a:84:48:63:25: c6:01:ff:f7:a9:d3:10:31:44:a3:96:df:be:c8:68:64:32:e6: a8:57:2b:25:53:63:b1:5b:6f:76:26:37:66:57:ff:61:3e:fd: b6:55:70:e9:9f:bd:3f:ad:e2:bb:54:30:5f:6c:1d:b8:6c:1d: cd:c3:dc:29:91:a7:f0:11:c4:56:ed:26:11:81:fe:e0:b1:53: a3:b6:e4:b4:47:2b:d2:af:26:fe:4e:89:5d:e5:9e:bd:78:96: 26:55:fb:9b:93:9c:80:b2:ea:e7:12:d0:92:13:81:d3:56:fe: 61:d1:c4:17:58:85:5f:70:b7:8c:72:2a:c2:2f:c7:34:0b:9f: 7a:58:85:46:7c:15:39:a4:27:f1:d8:d5:45:8b:14:42:ec:a0: 8d:ad:de:13:1d:02:63:8a:6c:ea:79:cd:a1:85:b9:12:e3:b1: c5:93:2c:aa:2a:d9:ad:a0:39:19:da:21:81:9a:0c:06:67:7c: ce:16:e0:c5:7c:9a:b7:44:8d:fc:e6:42:13:25:ab:81:e3:2f: 8b:41:6e:96:41:49:13:e5:2c:8b:1a:3b:03:c1:13:4d:2b:d9: cf:ac:ec:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuf0Bde4HbW9RBlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk MWU3NDI0MzgtNDRmYS00MThiLWFjZWEtMmE4NjVhZmNiOWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk7cYULk4vVVtABGn937Qt8pV+7prfs/a6TR 8ouEIibWvBAnHAy0SDm069Iziu8EhNm7Gtz4BqsmMUpuweUWuAaC0nWafPrZEyQX +KuAejXpT3sVciH/X73kGmcfvdfGFROw6gw0kJY1X2+P2z6eiF91WjZl0rnL0J3O gpz3XdOsSiw+JTEg6bWr9MOFL5AYnO7vjgFn3/ucdM1ecATVOJsTEh2mXPjsketM EtwD/om5TCyGc4VzvPtJ+5mbHBhKGC3uz4TAAnlUTgRErSRDvMzyI7BGLccl+Uoa v8PE9uVM6+Y4x1HHmOnBsVq0yaEPtRtTXkTeZgGfYU9rqDp7aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBrgG7rW3wiUFhQwfr23UZAsOcfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMTBlYWU1MDQtYzUzNS0z ZDdmLThmZDEtOGEzOWFjNDM3MTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACar5LyllgjwLsxwB41vtzdqSH4lWSzejdHXWPsE+ptahEhjJcYB//ep 0xAxRKOW377IaGQy5qhXKyVTY7Fbb3YmN2ZX/2E+/bZVcOmfvT+t4rtUMF9sHbhs Hc3D3CmRp/ARxFbtJhGB/uCxU6O25LRHK9KvJv5OiV3lnr14liZV+5uTnICy6ucS 0JITgdNW/mHRxBdYhV9wt4xyKsIvxzQLn3pYhUZ8FTmkJ/HY1UWLFELsoI2t3hMd AmOKbOp5zaGFuRLjscWTLKoq2a2gORnaIYGaDAZnfM4W4MV8mrdEjfzmQhMlq4Hj L4tBbpZBSRPlLIsaOwPBE00r2c+s7FE= -----END CERTIFICATE-----Generated at Mon Jun 16 12:01:42 2025 by rpki-client