$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/4535fdd9-0d95-3ccc-b3b8-2f021f9040f1.roa File: 4535fdd9-0d95-3ccc-b3b8-2f021f9040f1.roa (raw, json) Hash identifier: agwxECMegn9ABTJAFxGZi/uP5oOtH11J0bIV7J2V3qU= Subject key identifier: 72:14:43:44:43:FB:B1:86:CF:B0:22:E0:93:D7:09:EE:0C:CE:B9:A0 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F43285849CFFF84AF57025B565953DCC0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/4535fdd9-0d95-3ccc-b3b8-2f021f9040f1.roa Signing time: Sun 11 May 2025 01:00:47 +0000 ROA not before: Sun 11 May 2025 01:00:47 +0000 ROA not after: Sat 09 Aug 2025 01:00:47 +0000 asID: 2615 IP address blocks: 147.1.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ff:84:af:57:02:5b:56:59:53:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: May 11 01:00:47 2025 GMT Not After : Aug 9 01:00:47 2025 GMT Subject: CN=a411ef1c-d75c-4a0e-82e4-2c9de740e601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:ba:28:f6:5a:2d:1f:4e:d0:f2:5c:30:3b: 96:4a:a5:06:55:df:f7:34:42:58:92:24:a7:5f:e4: ef:a7:f2:94:30:3e:56:28:1a:90:9a:c1:d8:8c:10: 8a:cb:7a:3d:b7:06:cc:e9:69:fc:ec:e2:91:8f:4f: 4f:9d:29:d3:e2:36:a4:77:7d:66:36:20:10:78:f1: d9:10:35:db:24:99:c4:35:3e:1b:62:15:a7:cd:ef: d9:ba:36:67:b5:a4:18:d9:a0:3c:d4:0f:ba:36:58: 22:90:99:40:39:49:21:2b:43:38:68:9c:31:0c:44: e4:2d:10:69:8a:6a:f9:3a:c0:ac:9d:52:22:77:b6: 2d:79:d7:06:1f:33:bc:06:e5:c6:45:66:f4:ed:dc: 62:77:84:18:62:1d:3b:d9:4f:3a:fa:df:1b:69:a8: b8:ed:d6:ee:fc:14:8c:1f:13:96:cb:c1:29:aa:36: 94:69:24:e7:f4:04:08:b0:0f:a3:36:0e:26:a0:63: b9:dd:51:b2:dc:35:95:25:e6:a5:3b:9e:14:0f:db: f4:e4:b5:57:68:0a:b6:f8:ed:ba:04:44:5c:4f:de: 79:1b:4e:84:dc:88:1d:5a:53:f1:6d:53:d9:90:0b: 7f:c6:e6:9f:f1:37:74:6d:a3:9b:4c:51:62:92:0c: 42:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:14:43:44:43:FB:B1:86:CF:B0:22:E0:93:D7:09:EE:0C:CE:B9:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/4535fdd9-0d95-3ccc-b3b8-2f021f9040f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:44:e3:ef:56:77:5c:c5:9b:f0:c1:0c:35:96:cf:0f:c6:4c: 4f:c4:00:d4:c0:56:7f:c5:84:d1:16:60:4d:27:e9:1e:48:f1: 78:4d:45:2a:f3:7f:44:90:77:5e:a3:3f:2f:f6:5d:41:72:c4: 87:b3:fd:a0:6b:9c:2a:53:21:29:ee:09:29:2e:85:a3:1c:b4: ce:d9:1e:ba:57:d9:5d:fa:cc:3d:5a:c3:b6:5a:61:06:4b:64: 6c:26:75:d5:7d:4a:df:d3:0c:fe:b9:a8:e6:71:9e:dd:25:ff: 2f:9b:3c:cc:90:17:7e:99:f1:29:45:d0:b4:dd:90:49:f9:02: 27:c2:72:ed:d2:f8:b8:7f:44:c7:6a:2a:b8:68:54:a1:18:09: 24:2f:d6:e5:19:72:e1:07:21:d2:10:fc:c6:66:6f:40:30:1a: 0a:bc:1b:9c:ee:c9:23:c1:03:6d:34:be:88:2a:56:32:94:ee: 96:1d:78:aa:04:41:22:46:98:11:51:76:1b:c4:92:20:90:9a: a2:1f:2a:8c:58:94:e8:2c:6e:38:69:b4:c8:19:13:94:54:ca: 84:35:07:84:a9:f3:56:b3:40:de:6f:17:c1:9d:20:28:b8:79: 6d:d4:b3:4c:80:e6:52:1f:3a:5c:7b:1e:a7:b9:a3:ba:ae:9a: 08:47:67:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/4SvVwJbVllT3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk YTQxMWVmMWMtZDc1Yy00YTBlLTgyZTQtMmM5ZGU3NDBlNjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGm6KPZaLR9O0PJcMDuWSqUGVd/3NEJYkiSn X+Tvp/KUMD5WKBqQmsHYjBCKy3o9twbM6Wn87OKRj09PnSnT4jakd31mNiAQePHZ EDXbJJnENT4bYhWnze/ZujZntaQY2aA81A+6NlgikJlAOUkhK0M4aJwxDETkLRBp imr5OsCsnVIid7YtedcGHzO8BuXGRWb07dxid4QYYh072U86+t8baai47dbu/BSM HxOWy8EpqjaUaSTn9AQIsA+jNg4moGO53VGy3DWVJealO54UD9v05LVXaAq2+O26 BERcT955G06E3IgdWlPxbVPZkAt/xuaf8Td0baObTFFikgxCkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIUQ0RD+7GGz7Ai4JPXCe4MzrmgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNDUzNWZkZDktMGQ5NS0z Y2NjLWIzYjgtMmYwMjFmOTA0MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlE4+9Wd1zFm/DBDDWWzw/GTE/EANTAVn/FhNEWYE0n6R5I8XhNRSrz f0SQd16jPy/2XUFyxIez/aBrnCpTISnuCSkuhaMctM7ZHrpX2V36zD1aw7ZaYQZL ZGwmddV9St/TDP65qOZxnt0l/y+bPMyQF36Z8SlF0LTdkEn5AifCcu3S+Lh/RMdq KrhoVKEYCSQv1uUZcuEHIdIQ/MZmb0AwGgq8G5zuySPBA200vogqVjKU7pYdeKoE QSJGmBFRdhvEkiCQmqIfKoxYlOgsbjhptMgZE5RUyoQ1B4Sp81azQN5vF8GdICi4 eW3Us0yA5lIfOlx7Hqe5o7qumghHZ7U= -----END CERTIFICATE-----Generated at Mon Jun 16 03:23:14 2025 by rpki-client