$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa File: 29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa (raw, json) Hash identifier: DDl867tL+lY992+9mp9TdCJ4pglFjZC9vA/2PiWA1AU= Subject key identifier: D5:DF:59:B7:C8:51:FA:DF:13:BD:38:17:4F:41:83:1C:35:B8:FD:62 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584A2ABADB21EF1E7064F69A49E0 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 9 IP address blocks: 147.72.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:db:21:ef:1e:70:64:f6:9a:49:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=ec6e9870-f3e4-488d-adcc-840a7154dc9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2b:a8:3d:35:e1:6d:15:17:c8:91:33:d3:b0: 0f:9b:f8:27:33:0b:50:23:ef:80:c3:2e:e8:1c:18: 88:35:c4:ba:3a:98:5f:91:11:80:01:74:6f:67:ad: d9:80:37:05:e1:b9:37:1d:bd:0f:04:0f:4a:d1:49: ad:26:eb:ea:b6:2f:ad:34:c1:1e:c6:ac:56:ad:47: 29:74:21:01:ae:d6:42:66:9a:84:e5:e5:1b:55:30: 57:12:f1:4a:b3:19:a3:c9:1a:e6:4e:26:d7:78:03: e1:1a:1b:50:86:77:75:0a:26:c7:18:cd:22:42:92: d9:86:1e:49:ee:ca:4d:42:e8:2c:33:5f:c4:4c:46: fa:fd:0b:e1:f1:0d:d4:57:d8:81:f7:bb:9f:9d:eb: 6a:fb:f9:18:a8:ae:57:5e:ff:a6:0e:dc:f0:b4:53: 9f:3b:9b:b2:22:09:72:e4:80:ab:ba:62:c0:34:8c: af:3a:ad:c4:b1:dc:dc:b7:09:02:b4:06:96:17:34: ce:bb:4b:bb:b4:28:6e:76:c5:38:31:94:2c:06:27: 05:ff:e9:92:f8:41:53:5f:a1:20:73:36:eb:8f:96: 6a:f3:2b:fb:08:d4:c0:09:88:8d:0a:2c:68:74:7c: 76:10:4a:9f:1e:85:6f:04:d6:43:98:c6:69:be:d4: af:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DF:59:B7:C8:51:FA:DF:13:BD:38:17:4F:41:83:1C:35:B8:FD:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:10:d1:b5:48:32:fd:99:d1:f1:06:bd:22:26:35:cf:56:1c: 83:09:f0:73:ea:84:50:40:7e:ad:36:d3:13:f9:b4:71:b1:8a: dc:5f:b1:5f:e3:9d:5f:45:27:92:60:92:43:75:8d:15:36:04: 8c:4f:b1:67:3a:13:dc:c7:9f:19:dc:dd:f5:24:da:ce:9b:f6: 01:62:04:a2:aa:ff:2f:8e:ec:44:04:4e:2d:7b:27:43:1a:7b: fb:a5:ad:17:4b:45:dc:0f:0d:c7:33:29:52:f4:a8:40:c0:9a: 50:46:eb:ff:18:97:db:60:1a:4c:73:93:50:a4:ec:be:2f:28: 42:ff:0f:3c:87:0e:81:04:e9:4a:f1:87:4c:ed:bc:d2:47:bf: ad:ef:97:0e:d3:24:73:76:c6:c6:f9:67:a5:ad:3d:55:e5:78: ad:69:47:c9:73:ff:a3:6f:6b:d7:62:67:c9:a6:d4:65:bc:68: 59:7c:25:6c:ea:9e:e1:b9:92:81:e2:2b:fd:19:79:83:4d:78: 69:65:05:46:1f:4b:d2:27:47:25:40:62:10:6a:03:5d:d3:02: 7b:a2:77:98:fb:12:e6:8d:70:e1:da:59:f5:43:42:c1:e0:19: 3a:c1:0e:b7:af:7b:b7:2c:d3:39:0e:8c:25:55:00:8e:83:65: c5:56:9c:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqutsh7x5wZPaaSeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZWM2ZTk4NzAtZjNlNC00ODhkLWFkY2MtODQwYTcxNTRkYzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSuoPTXhbRUXyJEz07APm/gnMwtQI++Awy7o HBiINcS6OphfkRGAAXRvZ63ZgDcF4bk3Hb0PBA9K0UmtJuvqti+tNMEexqxWrUcp dCEBrtZCZpqE5eUbVTBXEvFKsxmjyRrmTibXeAPhGhtQhnd1CibHGM0iQpLZhh5J 7spNQugsM1/ETEb6/Qvh8Q3UV9iB97ufnetq+/kYqK5XXv+mDtzwtFOfO5uyIgly 5ICrumLANIyvOq3EsdzctwkCtAaWFzTOu0u7tChudsU4MZQsBicF/+mS+EFTX6Eg czbrj5Zq8yv7CNTACYiNCixodHx2EEqfHoVvBNZDmMZpvtSvAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXfWbfIUfrfE704F09Bgxw1uP1iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvMjllYTk2ZWYtNWZjMC0z OWZhLWIxNGEtODEwYmRlZWU5YjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk0j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIQ0bVIMv2Z0fEGvSImNc9WHIMJ8HPqhFBAfq020xP5tHGxitxfsV/j nV9FJ5JgkkN1jRU2BIxPsWc6E9zHnxnc3fUk2s6b9gFiBKKq/y+O7EQETi17J0Ma e/ulrRdLRdwPDcczKVL0qEDAmlBG6/8Yl9tgGkxzk1Ck7L4vKEL/DzyHDoEE6Urx h0ztvNJHv63vlw7TJHN2xsb5Z6WtPVXleK1pR8lz/6Nva9diZ8mm1GW8aFl8JWzq nuG5koHiK/0ZeYNNeGllBUYfS9InRyVAYhBqA13TAnuid5j7EuaNcOHaWfVDQsHg GTrBDreve7cs0zkOjCVVAI6DZcVWnGQ= -----END CERTIFICATE-----Generated at Sun Jun 15 22:42:31 2025 by rpki-client