$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa File: 2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa (raw, json) Hash identifier: vZjc5fgH0lq3ujyuRFzSFv4Cm1JqVPfD3w/eRK5XVEQ= Subject key identifier: 6F:29:8E:7C:72:FC:E8:28:05:29:9F:F5:31:B2:C5:B0:29:AF:30:25 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F43285849E0BF8ACE4CC67A524C36AC80 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa Signing time: Sat 17 May 2025 01:00:47 +0000 ROA not before: Sat 17 May 2025 01:00:47 +0000 ROA not after: Fri 15 Aug 2025 01:00:47 +0000 asID: 2615 IP address blocks: 147.1.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e0:bf:8a:ce:4c:c6:7a:52:4c:36:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: May 17 01:00:47 2025 GMT Not After : Aug 15 01:00:47 2025 GMT Subject: CN=8df98dc8-04f3-47d8-9582-9f94290c969c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9d:8a:97:b1:b5:1f:6f:99:7f:5f:98:39:0f: 3a:4b:8a:68:fd:a2:a0:9a:ca:6d:2f:2c:1a:7f:89: 4d:43:31:f5:ac:36:e2:76:cb:e2:b2:a6:ba:9f:6e: 62:08:f6:96:00:e4:3b:43:24:9f:87:5e:7d:e1:16: f6:a0:29:30:df:28:e7:bf:30:ca:81:4b:bb:ea:49: ce:2b:e5:f9:af:bf:37:60:96:4f:6d:9b:8a:ba:df: 76:4b:21:11:6e:65:7c:9e:86:cf:db:0a:8d:92:fa: 26:ba:0a:47:1d:0c:17:0a:66:96:d1:51:1f:ed:b5: 45:48:c3:c2:28:cf:22:20:01:a7:f0:ce:07:6b:80: 43:37:da:51:28:4b:81:cc:af:11:9d:6a:f9:5a:40: 5b:ba:8f:1b:be:a8:42:e5:73:fc:04:9e:42:14:8c: 11:81:ba:06:ac:10:8a:99:2e:9a:44:25:20:f1:99: ad:44:2c:8c:b9:0a:35:19:c2:a8:fe:dc:66:83:f1: 07:46:af:c1:9f:8e:c8:3e:4e:36:10:f8:e9:71:f2: bd:a6:dd:86:e7:92:22:4f:53:2b:8f:7a:54:5c:0f: aa:aa:90:35:41:bf:69:49:68:8e:ee:0c:b5:d1:ef: 97:74:5f:eb:49:43:dd:05:47:55:e6:0d:89:36:f4: a1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:29:8E:7C:72:FC:E8:28:05:29:9F:F5:31:B2:C5:B0:29:AF:30:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:97:45:2a:a9:0c:f5:76:2d:db:55:2c:4e:40:21:5c:5e:3b: dd:62:c1:89:61:16:ac:86:11:6d:4f:af:5e:af:19:b6:45:4a: aa:59:d6:f9:04:9a:f4:3b:1f:9c:50:96:5f:81:19:c9:60:ca: 3e:35:67:7d:71:62:62:1c:ff:df:8b:d2:9c:09:25:83:22:a7: a0:3c:48:7c:1c:68:4e:fd:c5:28:37:88:11:34:37:ab:b5:35: 3b:c1:8b:27:db:b3:c2:7f:c0:cd:a8:32:93:78:35:49:5d:de: 84:a9:90:e2:ab:95:f3:e1:71:cd:d1:7d:c6:aa:63:62:8a:85: 7a:d8:e2:b3:eb:5d:d7:cb:b2:e9:d2:d6:70:73:ff:f5:8e:2a: 70:38:7e:86:49:af:60:ab:43:73:af:2e:0c:80:9c:06:f8:5a: cf:3e:73:a2:bb:8a:2a:54:44:d3:72:5b:50:3b:7d:d7:94:5b: c9:b8:b8:21:d6:80:49:a3:89:9c:f3:72:ba:8b:51:64:eb:68: 5d:a8:84:20:75:a5:ed:cd:e6:79:9f:d6:77:41:c7:d9:b0:8a: 30:8f:95:a7:6a:39:aa:c1:86:0d:ab:b6:76:45:a1:0e:ff:9b: 22:9b:a7:b7:a3:7a:2e:cc:28:fe:3c:58:f2:d9:fe:b1:d0:1f: 5c:15:15:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEngv4rOTMZ6Ukw2rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDUxNzAxMDA0N1oXDTI1MDgxNTAxMDA0N1owLzEtMCsGA1UEAxMk OGRmOThkYzgtMDRmMy00N2Q4LTk1ODItOWY5NDI5MGM5NjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ2Kl7G1H2+Zf1+YOQ86S4po/aKgmsptLywa f4lNQzH1rDbidsvisqa6n25iCPaWAOQ7QySfh1594Rb2oCkw3yjnvzDKgUu76knO K+X5r783YJZPbZuKut92SyERbmV8nobP2wqNkvomugpHHQwXCmaW0VEf7bVFSMPC KM8iIAGn8M4Ha4BDN9pRKEuBzK8RnWr5WkBbuo8bvqhC5XP8BJ5CFIwRgboGrBCK mS6aRCUg8ZmtRCyMuQo1GcKo/txmg/EHRq/Bn47IPk42EPjpcfK9pt2G55IiT1Mr j3pUXA+qqpA1Qb9pSWiO7gy10e+XdF/rSUPdBUdV5g2JNvSh6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8pjnxy/OgoBSmf9TGyxbAprzAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMmExMDAwY2ItM2MxZi0z MmMwLThkNGUtYWQzYmRkZjM4YzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkwE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGXRSqpDPV2LdtVLE5AIVxeO91iwYlhFqyGEW1Pr16vGbZFSqpZ1vkE mvQ7H5xQll+BGclgyj41Z31xYmIc/9+L0pwJJYMip6A8SHwcaE79xSg3iBE0N6u1 NTvBiyfbs8J/wM2oMpN4NUld3oSpkOKrlfPhcc3RfcaqY2KKhXrY4rPrXdfLsunS 1nBz//WOKnA4foZJr2CrQ3OvLgyAnAb4Ws8+c6K7iipURNNyW1A7fdeUW8m4uCHW gEmjiZzzcrqLUWTraF2ohCB1pe3N5nmf1ndBx9mwijCPladqOarBhg2rtnZFoQ7/ myKbp7ejei7MKP48WPLZ/rHQH1wVFaY= -----END CERTIFICATE-----Generated at Sun Jun 15 14:37:36 2025 by rpki-client