$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa File: 22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa (raw, json) Hash identifier: 9em93Pu2S4cybPZcUc9wMDar4Xv+u62aw9pF/KWbT5Y= Subject key identifier: 74:23:32:2C:68:72:22:E2:7D:12:17:4D:D6:2E:CD:68:B5:D5:CE:49 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F43285849AE7F404969868220F2C07080 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 2615 IP address blocks: 147.1.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:40:49:69:86:82:20:f2:c0:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=702b82ce-4f0c-4459-9450-c436800283e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:fa:54:07:ad:e3:f3:df:b8:ee:88:2c:e2: fc:59:75:b4:71:2e:15:0a:7a:fd:05:81:40:35:26: 1a:64:b4:6a:5b:47:d6:0b:ce:09:a3:94:d4:96:32: 3b:94:20:38:f7:28:6c:1e:22:99:4f:4f:16:53:1c: 63:cd:8e:6f:7b:71:ea:ca:ba:92:c7:c3:88:83:a8: 36:ea:6e:40:cd:fe:dc:60:05:18:d8:41:0f:29:03: fb:be:34:6f:f0:00:ed:e9:69:d9:73:46:51:24:c5: 60:08:ec:24:ae:96:03:3a:8d:5d:43:66:9f:ca:4b: 90:de:17:ff:dc:e9:16:c9:94:28:eb:8a:9c:82:b7: b3:94:05:2c:c5:6c:29:fd:39:b2:a3:90:72:46:c1: a4:ef:df:e6:e0:8d:55:22:4e:91:d8:d7:11:2e:f3: 00:04:97:1d:c7:fe:8a:45:00:fa:5b:55:c9:55:89: 87:91:c0:6d:59:a3:f6:65:a4:7b:06:1c:a2:38:a5: 5c:7d:e0:88:fe:c0:c5:98:ed:e6:49:70:e8:2b:e2: ad:8a:85:c1:32:b3:08:09:17:b1:ba:f3:e4:ea:9f: 66:b7:47:2f:0b:27:cc:76:cf:dc:25:77:1a:f6:5f: 55:48:60:ce:fd:db:d8:30:68:2d:11:6b:ee:42:39: 04:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:23:32:2C:68:72:22:E2:7D:12:17:4D:D6:2E:CD:68:B5:D5:CE:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:31:65:e9:77:50:23:17:1f:bc:1a:c5:df:59:b9:bb:72:79: 14:40:f1:e4:a4:a8:26:37:04:ef:08:63:bb:34:0b:00:e6:e2: 87:85:6c:b8:7e:c8:f4:16:59:1a:dc:23:34:74:06:0e:91:d2: d8:f1:46:15:c4:64:d6:17:7d:c6:ec:9b:89:64:df:0a:d8:be: 32:23:28:56:c9:c7:ae:81:07:56:67:82:9a:33:35:90:cc:4e: 0f:3c:39:b5:7e:23:b1:8b:43:c2:b0:b1:e8:91:3b:71:67:ef: 99:58:c9:6f:15:eb:d0:10:c2:f2:95:59:a8:7b:a3:0c:89:d6: 0a:30:3d:85:14:27:56:0d:a5:d9:4a:0d:3e:b5:5b:82:14:f8: 96:54:20:ca:40:72:ea:d8:ba:00:88:0c:41:dc:79:15:7c:a4: 5f:68:f4:b0:0c:32:09:50:11:22:11:11:d9:09:83:70:e2:bf: 7a:56:b3:8d:ef:4a:8b:80:73:ed:b2:be:37:e0:c4:af:fa:68: 82:c3:23:9f:3c:44:fe:87:71:7a:c9:9d:81:e0:29:9f:f6:80: 10:cc:31:55:17:14:97:a0:f1:09:75:69:04:78:e8:b1:a4:4b: be:1d:67:a9:f5:96:55:30:f4:8f:7e:83:4e:08:74:65:50:cb: 5b:5a:76:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuf0BJaYaCIPLAcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk NzAyYjgyY2UtNGYwYy00NDU5LTk0NTAtYzQzNjgwMDI4M2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxP6VAet4/PfuO6ILOL8WXW0cS4VCnr9BYFA NSYaZLRqW0fWC84Jo5TUljI7lCA49yhsHiKZT08WUxxjzY5ve3HqyrqSx8OIg6g2 6m5Azf7cYAUY2EEPKQP7vjRv8ADt6WnZc0ZRJMVgCOwkrpYDOo1dQ2afykuQ3hf/ 3OkWyZQo64qcgrezlAUsxWwp/Tmyo5ByRsGk79/m4I1VIk6R2NcRLvMABJcdx/6K RQD6W1XJVYmHkcBtWaP2ZaR7BhyiOKVcfeCI/sDFmO3mSXDoK+KtioXBMrMICRex uvPk6p9mt0cvCyfMds/cJXca9l9VSGDO/dvYMGgtEWvuQjkEsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQjMixociLifRIXTdYuzWi11c5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMjJkMWNiMDctZGIyZC0z YzdkLTgyMDItZTYzZmY3YThmMGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8xZel3UCMXH7waxd9ZubtyeRRA8eSkqCY3BO8IY7s0CwDm4oeFbLh+ yPQWWRrcIzR0Bg6R0tjxRhXEZNYXfcbsm4lk3wrYvjIjKFbJx66BB1ZngpozNZDM Tg88ObV+I7GLQ8KwseiRO3Fn75lYyW8V69AQwvKVWah7owyJ1gowPYUUJ1YNpdlK DT61W4IU+JZUIMpAcurYugCIDEHceRV8pF9o9LAMMglQESIREdkJg3Div3pWs43v SouAc+2yvjfgxK/6aILDI588RP6HcXrJnYHgKZ/2gBDMMVUXFJeg8Ql1aQR46LGk S74dZ6n1llUw9I9+g04IdGVQy1tadnY= -----END CERTIFICATE-----Generated at Mon Jun 16 00:11:55 2025 by rpki-client