$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa File: da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa (raw, json) Hash identifier: Jt4WU742fwxUPKYVM9rTOCSxdgtmzFM4XDtFosVLtd4= Subject key identifier: ED:A6:CC:9B:69:D6:9F:92:B7:E7:D7:C3:13:7B:76:51:21:D8:12:57 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F432858499829C5A97D58302F96B05C00 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 2615 IP address blocks: 147.1.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c5:a9:7d:58:30:2f:96:b0:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=df41f4bf-0287-4649-94f3-48bf6fc526b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f8:96:90:62:dc:c1:1b:83:43:4e:14:a5:29: 92:c3:0b:c9:51:db:1d:fe:f4:76:47:6f:c4:b5:bc: ff:c2:3a:75:02:a1:24:d5:1f:2b:19:29:a9:88:71: fa:6c:66:88:61:f3:17:8a:dd:6c:0d:2a:1f:ed:40: de:e7:62:7c:5f:95:36:80:4b:8e:47:b0:a1:74:87: 50:5e:4d:58:fd:fd:c3:a4:2c:53:2a:60:91:e0:69: e4:68:1a:f8:fc:97:03:c0:79:0f:41:42:c1:1a:0a: bb:fb:fc:be:bf:02:fc:53:d4:0e:83:ec:df:db:86: c6:cb:fe:c7:6a:89:9d:89:81:4c:7e:4e:f7:99:e4: 42:2e:34:53:33:ac:6a:77:13:fb:ec:5e:79:fd:92: 98:2e:13:60:b5:0a:30:03:7a:2e:34:21:e0:3b:02: f5:09:91:6e:7b:20:75:22:b8:b5:1d:66:0f:16:5d: 77:24:39:3f:b8:ac:e9:dc:6e:02:a6:4c:6a:13:f3: cb:cb:df:7e:1c:fe:69:85:b2:92:ea:63:43:9f:30: 86:9c:7e:a2:2d:43:3c:cc:28:79:68:b6:cc:31:86: de:df:26:eb:a9:15:6b:a8:e4:37:91:e8:2e:bc:b6: 16:6f:c8:31:ec:10:72:58:51:f6:85:76:11:ca:9f: 56:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A6:CC:9B:69:D6:9F:92:B7:E7:D7:C3:13:7B:76:51:21:D8:12:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:34:02:d3:1a:ec:ce:23:b9:c7:47:00:94:8c:c7:2d:af:79: 8a:96:e7:e4:4a:79:b7:8d:6d:61:f8:44:db:a8:b3:21:07:29: 21:a1:50:ac:d3:67:06:c3:38:0e:88:2d:a5:5a:f9:4c:26:f1: e3:a7:a1:74:72:31:4d:c0:ba:a8:49:74:a5:af:d1:2c:e8:3e: 85:1f:10:a3:8b:e0:65:f6:ee:eb:69:b5:0f:f1:12:81:c9:6a: 5e:dd:ce:a8:bf:ff:3d:e6:82:b7:e8:a6:bb:f5:cf:39:b4:07: 27:9d:44:55:cf:7f:71:2d:f6:23:be:a8:d7:cb:03:4c:2b:26: 2c:03:42:ec:6c:c0:bc:ff:5a:98:b5:1e:3a:b8:f0:0c:26:4b: 14:06:10:c9:e4:42:f3:eb:89:76:96:51:73:5a:8f:74:9c:67: 61:35:04:c1:e7:21:62:f9:ce:d7:58:98:58:36:37:ac:11:ad: 5a:70:f4:98:6c:e3:51:4f:fb:25:de:7f:3e:b5:59:87:0b:ca: eb:10:cd:d1:fa:b6:65:1a:93:2c:b0:3d:9f:27:7f:c0:07:7d: c3:e8:07:2e:3a:20:48:75:2e:22:b3:55:f9:1c:7f:61:20:3a: 66:10:7c:2a:67:33:5d:a0:ba:b3:db:8b:a2:f2:d7:96:f4:bf: 6d:03:8f:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcWpfVgwL5awXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZGY0MWY0YmYtMDI4Ny00NjQ5LTk0ZjMtNDhiZjZmYzUyNmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fiWkGLcwRuDQ04UpSmSwwvJUdsd/vR2R2/E tbz/wjp1AqEk1R8rGSmpiHH6bGaIYfMXit1sDSof7UDe52J8X5U2gEuOR7ChdIdQ Xk1Y/f3DpCxTKmCR4GnkaBr4/JcDwHkPQULBGgq7+/y+vwL8U9QOg+zf24bGy/7H aomdiYFMfk73meRCLjRTM6xqdxP77F55/ZKYLhNgtQowA3ouNCHgOwL1CZFueyB1 Iri1HWYPFl13JDk/uKzp3G4CpkxqE/PLy99+HP5phbKS6mNDnzCGnH6iLUM8zCh5 aLbMMYbe3ybrqRVrqOQ3keguvLYWb8gx7BByWFH2hXYRyp9W0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2mzJtp1p+St+fXwxN7dlEh2BJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZGE0OWU4YTctMDlmNS0z NTYyLTk4YjctMmUyOGJlMGU4YWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE0AtMa7M4jucdHAJSMxy2veYqW5+RKebeNbWH4RNuosyEHKSGhUKzT ZwbDOA6ILaVa+Uwm8eOnoXRyMU3AuqhJdKWv0SzoPoUfEKOL4GX27utptQ/xEoHJ al7dzqi//z3mgrfoprv1zzm0ByedRFXPf3Et9iO+qNfLA0wrJiwDQuxswLz/Wpi1 Hjq48AwmSxQGEMnkQvPriXaWUXNaj3ScZ2E1BMHnIWL5ztdYmFg2N6wRrVpw9Jhs 41FP+yXefz61WYcLyusQzdH6tmUakyywPZ8nf8AHfcPoBy46IEh1LiKzVfkcf2Eg OmYQfCpnM12gurPbi6Ly15b0v20Dj4Q= -----END CERTIFICATE-----Generated at Sun Jun 15 14:45:07 2025 by rpki-client