$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/af49c179-4874-3bdf-a079-ae8b005698b8.roa File: af49c179-4874-3bdf-a079-ae8b005698b8.roa (raw, json) Hash identifier: o1wFWs+Hwccc3Xq1heaR5j0ADvNIg4tLzELNPzEdmCg= Subject key identifier: C7:50:6D:95:A8:D1:26:A1:75:F3:66:8F:CB:22:9E:C7:7C:37:74:75 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F43285849AE7F3FC8620F018027D4A4E0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/af49c179-4874-3bdf-a079-ae8b005698b8.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 2615 IP address blocks: 147.1.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:3f:c8:62:0f:01:80:27:d4:a4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=460cb6a3-8081-4889-aab5-6258ab9bbfa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:23:b1:59:3e:10:58:78:14:db:59:ab:2f:e6: 22:01:10:a7:0c:b2:02:85:68:25:10:32:9f:93:35: de:a4:8d:6b:e2:41:52:c9:90:13:85:e8:1c:3b:44: b2:0f:ac:63:53:86:fe:79:8f:80:2b:fe:55:e3:d8: be:5f:49:a6:71:85:c3:07:12:68:9f:68:bb:fe:e7: d1:d3:f7:6d:9c:9f:3e:38:1d:d2:11:a7:d4:73:0f: 33:58:32:20:81:ae:55:f9:a1:e2:3e:6f:08:c7:bb: fd:66:81:10:f7:db:e6:fd:b0:b1:f2:58:03:9b:9e: df:c0:4d:dc:b0:9b:85:32:51:b8:34:bf:34:a1:62: 96:24:a6:72:0a:a0:e0:b2:20:09:8c:3b:5d:72:10: 6c:5e:15:15:50:86:e7:c6:7f:3e:fc:be:93:77:bb: de:02:e2:06:d7:3a:49:9b:85:a5:db:cb:c2:61:b9: a7:a5:2c:ca:36:13:dd:47:00:48:19:88:45:db:ab: 0f:c0:12:80:42:72:78:c7:84:e9:e0:07:b3:ce:d3: 5d:fe:b3:87:3a:3c:a6:35:80:f5:b8:a7:ff:91:f4: 83:a8:89:95:38:74:15:10:89:c0:63:ef:25:40:c3: b4:70:9d:bf:df:05:05:97:96:5c:fc:98:01:7e:fc: 4f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:50:6D:95:A8:D1:26:A1:75:F3:66:8F:CB:22:9E:C7:7C:37:74:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/af49c179-4874-3bdf-a079-ae8b005698b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:78:bc:00:2d:1d:e5:aa:08:a2:38:38:86:bf:a8:c8:98:0e: 44:37:e2:e5:72:43:70:56:31:9b:70:d3:42:f6:aa:93:15:06: 26:f7:cc:83:f5:04:47:8c:e2:9c:27:6a:77:4b:f1:05:69:ea: 85:f2:86:64:9d:46:47:40:c4:3d:b2:b4:8b:08:9f:47:01:c3: 8f:4e:d5:61:98:f9:4c:f1:d4:d9:90:04:d6:9c:1f:d3:cb:00: dd:ff:2b:96:cc:6c:5b:7a:6b:8f:a9:b2:e8:92:4b:3f:1f:1a: 53:0c:8b:ee:4f:e2:fe:39:d3:6d:1a:14:28:37:cc:8e:72:46: 61:88:7d:08:d7:44:55:4c:1f:cf:14:47:b5:3a:0c:5a:00:c5: b9:ba:3e:48:5e:96:aa:bd:67:1b:64:c5:6b:0e:c9:44:53:0a: 08:f8:fd:82:34:d5:9f:a5:43:4b:7d:c0:ac:e0:da:d2:61:be: 71:de:5a:eb:ca:0a:9f:f0:0f:be:07:a2:95:31:db:08:38:ac: 21:e0:7c:53:e8:1a:d7:0a:fe:47:ee:c4:35:1d:17:bd:8f:8b: be:34:8d:ac:c2:69:3d:5f:3a:90:eb:b6:b7:50:ec:29:4b:55: 62:eb:e8:14:2e:f6:7d:ec:86:1a:cb:09:19:9a:2d:13:ad:2d: 0e:40:2e:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmufz/IYg8BgCfUpOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk NDYwY2I2YTMtODA4MS00ODg5LWFhYjUtNjI1OGFiOWJiZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiOxWT4QWHgU21mrL+YiARCnDLIChWglEDKf kzXepI1r4kFSyZAThegcO0SyD6xjU4b+eY+AK/5V49i+X0mmcYXDBxJon2i7/ufR 0/dtnJ8+OB3SEafUcw8zWDIgga5V+aHiPm8Ix7v9ZoEQ99vm/bCx8lgDm57fwE3c sJuFMlG4NL80oWKWJKZyCqDgsiAJjDtdchBsXhUVUIbnxn8+/L6Td7veAuIG1zpJ m4Wl28vCYbmnpSzKNhPdRwBIGYhF26sPwBKAQnJ4x4Tp4AezztNd/rOHOjymNYD1 uKf/kfSDqImVOHQVEInAY+8lQMO0cJ2/3wUFl5Zc/JgBfvxPgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdQbZWo0SahdfNmj8sinsd8N3R1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvYWY0OWMxNzktNDg3NC0z YmRmLWEwNzktYWU4YjAwNTY5OGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwFNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB4vAAtHeWqCKI4OIa/qMiYDkQ34uVyQ3BWMZtw00L2qpMVBib3zIP1 BEeM4pwnandL8QVp6oXyhmSdRkdAxD2ytIsIn0cBw49O1WGY+Uzx1NmQBNacH9PL AN3/K5bMbFt6a4+psuiSSz8fGlMMi+5P4v45020aFCg3zI5yRmGIfQjXRFVMH88U R7U6DFoAxbm6Pkhelqq9ZxtkxWsOyURTCgj4/YI01Z+lQ0t9wKzg2tJhvnHeWuvK Cp/wD74HopUx2wg4rCHgfFPoGtcK/kfuxDUdF72Pi740jazCaT1fOpDrtrdQ7ClL VWLr6BQu9n3shhrLCRmaLROtLQ5ALlA= -----END CERTIFICATE-----Generated at Sun Jun 15 17:13:35 2025 by rpki-client