$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/02c67eec-fa8e-34db-b94d-008faf554b49.roa File: 02c67eec-fa8e-34db-b94d-008faf554b49.roa (raw, json) Hash identifier: NCiRpi/Apai9AMTAHsfCyjONfaZggWrRWHzWkAIcaHs= Subject key identifier: AC:F2:E3:31:E6:9E:47:56:39:C1:C5:60:17:89:C7:38:99:E3:11:43 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F43285849F87AA036B7230F536C91BCC0 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/02c67eec-fa8e-34db-b94d-008faf554b49.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 54535 IP address blocks: 146.197.60.0/23 maxlen: 23 146.197.62.0/24 maxlen: 24 146.197.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:a0:36:b7:23:0f:53:6c:91:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=66f2877c-a79f-430f-a50a-cad0998c3b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:81:85:39:24:6a:fb:0a:08:44:ac:75:b5:78: a9:23:f6:5a:87:94:02:54:bb:38:48:11:ea:b6:1e: 37:7d:e5:19:43:4e:30:ee:08:7d:93:ae:98:65:3d: d2:9c:e9:df:e3:5e:17:a6:53:ec:54:29:c7:5c:57: 30:98:ba:d1:c3:a2:ed:56:44:ac:06:f3:f3:2c:bb: 78:fa:5c:7d:2f:1c:53:f9:38:a5:58:7b:2c:ee:f2: 52:80:a7:75:0b:0f:4e:19:0e:f7:a1:ff:2c:70:e4: 37:37:e3:db:0e:45:a0:6d:76:37:0f:9f:9f:64:48: a9:b7:a1:3c:93:c6:40:ec:5c:a1:2c:a0:0d:b4:1f: b0:ca:8f:09:47:96:90:87:b4:c2:d5:d0:ca:a7:55: 7b:2a:8a:8a:c6:92:41:69:e9:ff:df:69:f0:27:c4: bf:0b:46:d0:2c:65:e4:43:44:6a:71:b5:be:c3:9c: 41:f1:c5:e2:95:76:92:47:c4:be:ae:f9:52:9a:ee: 8f:91:9c:e4:7d:83:69:40:b5:45:05:7f:6e:32:d7: fb:76:ac:26:20:58:c7:92:53:f3:f3:a2:9d:cc:42: 1c:0c:cb:80:33:2a:dd:1c:a2:8f:3a:55:82:09:4d: 3a:56:34:f3:96:49:9e:cf:4b:93:70:6d:5b:28:5c: 10:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F2:E3:31:E6:9E:47:56:39:C1:C5:60:17:89:C7:38:99:E3:11:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/02c67eec-fa8e-34db-b94d-008faf554b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 146.197.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:51:7c:c0:ef:ea:3e:c1:57:69:4f:15:e4:29:3d:de:87:e5: 15:34:04:8e:ed:bf:51:09:4b:19:98:85:4f:9a:13:da:59:eb: 2a:10:3f:89:b3:1d:fe:01:97:fd:2e:ab:2f:ae:60:89:a2:e8: 03:3e:be:89:46:29:8b:0c:b3:b3:30:fb:96:35:32:e5:d6:68: 15:ec:f3:cb:ab:a6:93:09:0c:98:6b:06:00:51:cb:ab:0a:cf: cf:4f:eb:18:c0:69:81:08:9f:75:e3:89:27:b9:b6:e0:0c:4d: 82:ff:79:93:99:cf:18:8e:5d:18:4d:76:7f:30:e1:ed:23:52: 98:5c:2a:bd:6d:27:e3:15:71:21:4f:46:9b:e0:32:a1:e9:8a: 26:31:08:31:33:a5:10:50:82:ad:31:8f:ce:42:1f:02:d0:d2: 1c:52:fb:2d:d9:83:14:0b:8c:a9:40:c2:47:44:d7:ad:be:6b: 9d:0a:10:12:f5:2c:93:69:15:2f:cb:5f:cd:93:2a:d0:e3:62: 68:9b:26:c4:7d:13:16:72:a4:f3:df:b0:6f:b6:ef:0b:c3:a1: c2:61:44:01:65:b7:cd:e0:0e:77:c3:67:8b:ad:71:4c:db:3f: d6:72:75:2c:be:af:ea:d8:b2:a4:32:77:d3:99:b7:13:89:b7: 95:d5:16:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eqA2tyMPU2yRvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NjZmMjg3N2MtYTc5Zi00MzBmLWE1MGEtY2FkMDk5OGMzYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYGFOSRq+woIRKx1tXipI/Zah5QCVLs4SBHq th43feUZQ04w7gh9k66YZT3SnOnf414XplPsVCnHXFcwmLrRw6LtVkSsBvPzLLt4 +lx9LxxT+TilWHss7vJSgKd1Cw9OGQ73of8scOQ3N+PbDkWgbXY3D5+fZEipt6E8 k8ZA7FyhLKANtB+wyo8JR5aQh7TC1dDKp1V7KoqKxpJBaen/32nwJ8S/C0bQLGXk Q0RqcbW+w5xB8cXilXaSR8S+rvlSmu6PkZzkfYNpQLVFBX9uMtf7dqwmIFjHklPz 86KdzEIcDMuAMyrdHKKPOlWCCU06VjTzlkmez0uTcG1bKFwQiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzy4zHmnkdWOcHFYBeJxziZ4xFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvMDJjNjdlZWMtZmE4ZS0z NGRiLWI5NGQtMDA4ZmFmNTU0YjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCksU8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZRfMDv6j7BV2lPFeQpPd6H5RU0BI7tv1EJSxmYhU+aE9pZ6yoQP4mz Hf4Bl/0uqy+uYImi6AM+volGKYsMs7Mw+5Y1MuXWaBXs88urppMJDJhrBgBRy6sK z89P6xjAaYEIn3XjiSe5tuAMTYL/eZOZzxiOXRhNdn8w4e0jUphcKr1tJ+MVcSFP RpvgMqHpiiYxCDEzpRBQgq0xj85CHwLQ0hxS+y3ZgxQLjKlAwkdE162+a50KEBL1 LJNpFS/LX82TKtDjYmibJsR9ExZypPPfsG+27wvDocJhRAFlt83gDnfDZ4utcUzb P9ZydSy+r+rYsqQyd9OZtxOJt5XVFjQ= -----END CERTIFICATE-----Generated at Mon Jun 16 01:29:26 2025 by rpki-client