$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/a4b48984-e8b6-30e9-a280-748e863bc46c.roa File: a4b48984-e8b6-30e9-a280-748e863bc46c.roa (raw, json) Hash identifier: kUsBh/PruesBDSqxb2m99RePLsrSTqjFnrcJ/s0R1tk= Subject key identifier: E4:74:B7:B0:58:1A:8E:8A:44:5D:2F:3C:3A:CC:D1:D6:AC:D6:70:A9 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F43285849A3547BD168A5B2C1EA077740 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/a4b48984-e8b6-30e9-a280-748e863bc46c.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 2615 IP address blocks: 147.1.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:7b:d1:68:a5:b2:c1:ea:07:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=bd89a97d-2ec9-467d-a9d4-a7067503bfed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:30:68:46:f1:3b:a6:b0:7b:61:b2:67:ca: 8e:c9:09:f6:bd:ce:1e:de:22:82:d4:e9:52:81:3a: 5e:39:53:cf:61:d7:fe:b7:b4:c8:b8:c2:3b:85:42: a8:59:75:6a:d0:d2:97:bf:62:0a:9a:df:96:69:87: d4:1d:a2:a9:3e:ef:a3:23:e4:c5:a1:fe:41:f5:39: 0e:a7:96:40:8e:49:63:f4:46:c4:f3:bb:e9:58:45: 20:1c:2e:84:fe:09:fe:80:59:a1:dc:81:8b:57:ac: 5b:c3:6f:e8:8d:3c:3c:51:5e:44:6b:c0:0f:e3:4d: ef:98:10:be:6b:1a:8c:fa:11:2a:e2:7a:a6:76:a7: 2b:35:40:cc:e2:07:16:22:27:56:98:7e:b1:73:6d: 8d:d3:03:5e:69:bb:c4:23:86:4b:96:23:75:b8:e7: de:b3:6b:d6:15:3b:ca:e7:aa:09:c6:77:87:64:74: df:0e:bd:0f:ca:5b:04:e7:6b:5e:91:1b:fe:32:d2: 4b:89:48:cb:53:94:59:1c:7f:02:d7:a9:d0:97:52: b9:e5:64:87:1d:30:1d:11:1b:7e:c9:51:38:14:46: 85:66:65:bc:c2:6b:4a:e9:35:b8:e2:97:18:db:28: f1:56:90:aa:98:f9:1f:bf:bd:20:a5:62:29:54:eb: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:74:B7:B0:58:1A:8E:8A:44:5D:2F:3C:3A:CC:D1:D6:AC:D6:70:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/a4b48984-e8b6-30e9-a280-748e863bc46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:fb:3f:92:f0:2a:71:42:f7:99:8c:e2:4e:30:7b:31:60:73: 7b:79:8a:53:af:c0:42:3b:8a:72:a7:73:3b:31:7b:0e:ab:5b: 94:29:86:40:f8:17:09:ee:ad:95:f8:82:17:86:43:28:e8:5e: 84:17:e4:3c:68:e7:6a:24:7a:fe:31:c1:87:5e:c3:d3:d9:03: 2f:24:42:28:7f:9f:72:38:cf:3e:79:60:61:c7:63:ae:70:4e: 5c:d4:f8:5d:df:c3:a4:1a:00:00:9e:79:a3:78:4e:cc:6f:b7: 5a:fc:b0:8b:fe:6b:ae:65:d1:69:20:b0:0d:61:94:7d:69:0d: ca:2c:3e:da:6d:49:ce:d2:0f:5f:b8:13:99:0d:55:87:ea:16: f0:35:e9:ee:14:f5:14:09:61:90:f4:7e:f4:4e:bc:fc:db:76: 6c:c9:ec:2b:c3:d4:c6:e2:f5:03:86:b8:d0:87:29:37:73:29: 69:af:c1:9a:c0:30:6e:a1:93:f8:19:94:f6:19:d5:e9:8d:8c: 8f:06:df:55:8c:c0:f5:fd:ca:35:0c:15:3b:44:34:47:b5:d5: fc:52:a0:ed:7f:ce:28:c2:3f:f1:5f:59:94:33:fa:8e:df:13: 85:67:f5:4a:63:bc:c2:d8:0d:af:68:a1:0e:c8:69:fe:1e:6f: 10:61:f5:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVHvRaKWyweoHd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk YmQ4OWE5N2QtMmVjOS00NjdkLWE5ZDQtYTcwNjc1MDNiZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzUwaEbxO6awe2GyZ8qOyQn2vc4e3iKC1OlS gTpeOVPPYdf+t7TIuMI7hUKoWXVq0NKXv2IKmt+WaYfUHaKpPu+jI+TFof5B9TkO p5ZAjklj9EbE87vpWEUgHC6E/gn+gFmh3IGLV6xbw2/ojTw8UV5Ea8AP403vmBC+ axqM+hEq4nqmdqcrNUDM4gcWIidWmH6xc22N0wNeabvEI4ZLliN1uOfes2vWFTvK 56oJxneHZHTfDr0PylsE52tekRv+MtJLiUjLU5RZHH8C16nQl1K55WSHHTAdERt+ yVE4FEaFZmW8wmtK6TW44pcY2yjxVpCqmPkfv70gpWIpVOueqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOR0t7BYGo6KRF0vPDrM0das1nCpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvYTRiNDg5ODQtZThiNi0z MGU5LWEyODAtNzQ4ZTg2M2JjNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL7P5LwKnFC95mM4k4wezFgc3t5ilOvwEI7inKnczsxew6rW5QphkD4 FwnurZX4gheGQyjoXoQX5Dxo52okev4xwYdew9PZAy8kQih/n3I4zz55YGHHY65w TlzU+F3fw6QaAACeeaN4Tsxvt1r8sIv+a65l0WkgsA1hlH1pDcosPtptSc7SD1+4 E5kNVYfqFvA16e4U9RQJYZD0fvROvPzbdmzJ7CvD1Mbi9QOGuNCHKTdzKWmvwZrA MG6hk/gZlPYZ1emNjI8G31WMwPX9yjUMFTtENEe11fxSoO1/zijCP/FfWZQz+o7f E4Vn9UpjvMLYDa9ooQ7Iaf4ebxBh9XE= -----END CERTIFICATE-----Generated at Sun Jun 15 21:26:45 2025 by rpki-client