$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3481342c-99ba-38c4-ae6f-c28269df698b.roa File: 3481342c-99ba-38c4-ae6f-c28269df698b.roa (raw, json) Hash identifier: Mh+mzHJz6DRC+Oy7Diwv5ONXuP1ZMsTGC4MaSWeUhZs= Subject key identifier: ED:B7:0F:00:4D:EE:32:1A:55:FC:68:B3:48:C5:D0:33:0B:34:51:1F Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F43285849870151BD3D564BF3AECDC100 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3481342c-99ba-38c4-ae6f-c28269df698b.roa Signing time: Mon 14 Apr 2025 21:30:37 +0000 ROA not before: Mon 14 Apr 2025 21:30:37 +0000 ROA not after: Sun 13 Jul 2025 21:30:37 +0000 asID: 2615 IP address blocks: 147.1.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:01:51:bd:3d:56:4b:f3:ae:cd:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Apr 14 21:30:37 2025 GMT Not After : Jul 13 21:30:37 2025 GMT Subject: CN=e17ce78a-31f0-4e6c-802a-c69bd3256c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:af:06:27:63:62:fd:af:05:46:51:fc:48:9d: 9c:13:fe:3b:a2:75:fd:43:8e:38:5c:fb:f6:1c:2a: ec:3f:5d:d4:6c:c5:aa:a2:57:07:9b:3a:b5:00:3d: bb:cf:e4:90:03:94:b8:4c:42:9d:13:3d:3a:b4:35: c8:0d:27:dd:f2:70:c7:7c:91:e7:cb:5f:85:d2:ae: 15:1d:18:33:bc:9b:19:38:aa:51:1b:dd:fc:36:81: ba:40:ef:8e:e0:cb:01:59:1a:79:b4:37:f7:a1:41: b1:1a:80:73:8b:a8:01:1e:b0:a6:d1:38:af:a6:ec: 3c:fb:00:a8:aa:20:fd:6e:f5:98:43:ad:bb:43:c2: 3e:38:f2:81:d2:c0:ca:8f:55:2c:e7:0f:bb:8a:5f: 15:28:ec:1d:c0:dd:22:63:72:be:52:e1:de:84:ed: 62:28:ad:a9:e6:fa:04:ae:2a:d8:d7:04:14:94:bf: a4:86:78:18:c4:e6:7b:1b:cb:fa:d5:80:b8:73:3d: 0e:e0:cf:5d:d7:eb:3e:3d:12:f5:94:83:63:71:f8: 90:3d:7a:69:da:5f:34:7d:16:ab:3b:95:68:75:58: 17:fb:af:60:dd:74:a2:e6:96:69:18:fe:16:23:e4: 18:d8:50:8b:7b:a2:f1:1d:00:1a:53:da:17:ca:88: 6f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B7:0F:00:4D:EE:32:1A:55:FC:68:B3:48:C5:D0:33:0B:34:51:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3481342c-99ba-38c4-ae6f-c28269df698b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7d:eb:b8:87:9a:17:bd:e0:97:a9:21:b6:81:0b:59:4d:0a: a8:de:fe:28:3a:74:60:d0:9e:39:87:75:8f:a5:25:0a:66:ed: da:d0:41:43:fc:3b:c9:2a:22:73:69:a1:33:c2:4e:46:a7:00: 3d:36:6d:63:55:1f:ef:04:11:6e:84:e5:2b:f4:62:dc:4c:61: 21:ed:34:cc:69:1d:e5:c3:ba:0a:c5:e6:bc:ab:ee:cb:ad:47: 19:85:8f:6e:1b:f5:6b:d7:67:0f:c4:21:a7:81:cd:6c:e1:0d: a8:2c:99:b7:0d:32:5d:34:02:d0:f4:b8:34:e0:b7:10:45:5a: 2c:a2:16:dc:ac:df:0f:ef:1d:7f:41:79:c3:52:94:be:8b:69: f2:7c:dd:78:02:03:54:43:4d:54:d2:a5:6e:2a:d5:56:31:78: 81:e6:65:f9:3c:77:52:e6:5a:e1:dd:54:a7:b1:e2:9e:db:52: 30:3d:36:20:a7:5b:b8:e3:b3:19:54:0c:d3:48:4b:43:cc:a2: 55:44:08:fd:3d:2b:6f:3f:0d:5e:91:d7:7b:e5:e2:ca:f7:11: a7:11:b1:17:f5:1f:8c:01:94:a8:a1:cc:5d:43:d4:f2:d6:52: 2d:c7:c4:6e:ca:5c:b2:e5:95:25:2b:45:00:88:e4:28:89:7d: 0a:31:77:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHAVG9PVZL867NwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDQxNDIxMzAzN1oXDTI1MDcxMzIxMzAzN1owLzEtMCsGA1UEAxMk ZTE3Y2U3OGEtMzFmMC00ZTZjLTgwMmEtYzY5YmQzMjU2Yzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK8GJ2Ni/a8FRlH8SJ2cE/47onX9Q444XPv2 HCrsP13UbMWqolcHmzq1AD27z+SQA5S4TEKdEz06tDXIDSfd8nDHfJHny1+F0q4V HRgzvJsZOKpRG938NoG6QO+O4MsBWRp5tDf3oUGxGoBzi6gBHrCm0Tivpuw8+wCo qiD9bvWYQ627Q8I+OPKB0sDKj1Us5w+7il8VKOwdwN0iY3K+UuHehO1iKK2p5voE rirY1wQUlL+khngYxOZ7G8v61YC4cz0O4M9d1+s+PRL1lINjcfiQPXpp2l80fRar O5VodVgX+69g3XSi5pZpGP4WI+QY2FCLe6LxHQAaU9oXyohvTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO23DwBN7jIaVfxos0jF0DMLNFEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMzQ4MTM0MmMtOTliYS0z OGM0LWFlNmYtYzI4MjY5ZGY2OThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl967iHmhe94JepIbaBC1lNCqje/ig6dGDQnjmHdY+lJQpm7drQQUP8 O8kqInNpoTPCTkanAD02bWNVH+8EEW6E5Sv0YtxMYSHtNMxpHeXDugrF5ryr7sut RxmFj24b9WvXZw/EIaeBzWzhDagsmbcNMl00AtD0uDTgtxBFWiyiFtys3w/vHX9B ecNSlL6LafJ83XgCA1RDTVTSpW4q1VYxeIHmZfk8d1LmWuHdVKex4p7bUjA9NiCn W7jjsxlUDNNIS0PMolVECP09K28/DV6R13vl4sr3EacRsRf1H4wBlKihzF1D1PLW Ui3HxG7KXLLllSUrRQCI5CiJfQoxd5A= -----END CERTIFICATE-----Generated at Sun Jun 15 15:46:51 2025 by rpki-client