$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa File: 87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa (raw, json) Hash identifier: Zx2MnFT4uAfoNga1eR3cB++QVyNxuXRCeYypRxGWcgc= Subject key identifier: 61:62:39:14:73:9A:DE:1B:23:0D:20:B4:1B:D7:53:5E:09:13:74:90 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F432858494CC940BD8A66616D8A219480 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 36407 IP address blocks: 147.72.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:40:bd:8a:66:61:6d:8a:21:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=f4c3d752-601a-4202-b545-060a96a18811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d8:08:0c:f7:1a:32:f4:97:8a:26:dc:16:f3: e0:9f:b3:cb:da:c5:ac:56:32:6b:12:b9:2a:a2:0d: 13:39:c3:41:e9:7e:2f:c1:f3:32:3e:1f:22:c1:a4: 61:10:3d:22:fc:93:19:a5:7f:c4:9b:8d:d2:7a:36: d1:36:1e:a6:aa:66:9f:04:d1:a4:6f:09:3e:7b:96: 3a:03:34:61:4f:51:e3:0a:8f:79:e6:3f:20:54:c7: 47:29:3c:9a:d3:c4:8d:17:6d:e3:ba:c9:21:69:cf: 84:0a:77:60:58:2d:7e:12:82:ee:a0:ab:ae:24:c0: e5:6a:59:c0:b2:45:a6:37:94:12:b5:16:9a:88:80: d6:9b:11:14:e5:4b:9d:03:24:f1:22:bc:96:fb:93: 67:8c:0f:8a:77:13:93:03:c6:27:76:eb:dd:08:6f: 09:ea:ae:49:03:03:72:e9:cc:38:6b:62:92:18:15: e4:7d:10:41:58:fb:ec:4e:3d:c6:ba:72:ad:bd:02: 2b:c8:be:d6:38:cd:2b:2c:df:45:9a:75:1c:1b:51: 42:50:0f:48:d3:a2:49:0e:f0:94:43:d6:c6:c8:0a: 83:b1:d9:68:3e:87:32:96:87:d5:8a:b4:ea:ba:60: cc:c8:b7:71:18:29:69:bb:1e:5d:db:d6:5d:84:da: 33:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:62:39:14:73:9A:DE:1B:23:0D:20:B4:1B:D7:53:5E:09:13:74:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:8e:fe:df:7b:77:63:f4:b7:61:8f:9c:54:2c:aa:4a:be:46: 29:09:6d:d9:bb:7f:13:af:5e:34:28:ec:2f:d5:a0:21:2d:fa: 85:ba:cc:05:da:f7:75:6f:18:61:fb:14:8c:ac:60:21:83:1d: e2:75:d9:ee:83:2a:39:5b:3e:31:db:d1:db:4b:b2:8d:39:20: 52:6f:7f:ff:ac:0e:55:a9:f2:e7:35:ef:6f:e8:ff:2b:2c:0d: 2b:61:d7:02:30:e4:e8:7b:97:a0:1f:a9:7e:29:ec:6a:18:9d: a5:13:24:3e:67:64:a2:b3:45:05:48:09:aa:66:95:15:ea:e9: 9f:2c:13:68:44:56:bf:ea:d6:63:f0:92:49:70:ad:84:69:08: 81:98:59:59:9d:be:e7:73:4d:28:c6:c5:eb:e3:6a:f5:c0:d4: cb:8a:7c:09:8c:c8:bd:74:16:12:0f:9e:73:c8:21:a8:aa:59: 9c:6a:43:18:0a:6c:3e:9b:39:4c:a0:bc:47:d9:12:bf:fa:75: 69:5f:c0:e0:5b:7e:e3:0d:97:a7:ad:65:2d:a1:5f:cc:c1:7d: b7:d1:02:87:a4:19:24:2c:b3:f6:4c:0a:d6:27:88:09:bf:43: 2a:fc:78:69:57:ab:2b:6f:c6:07:98:2b:d1:7a:c4:b8:d9:f9: b5:40:77:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUC9imZhbYohlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZjRjM2Q3NTItNjAxYS00MjAyLWI1NDUtMDYwYTk2YTE4ODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9gIDPcaMvSXiibcFvPgn7PL2sWsVjJrErkq og0TOcNB6X4vwfMyPh8iwaRhED0i/JMZpX/Em43SejbRNh6mqmafBNGkbwk+e5Y6 AzRhT1HjCo955j8gVMdHKTya08SNF23juskhac+ECndgWC1+EoLuoKuuJMDlalnA skWmN5QStRaaiIDWmxEU5UudAyTxIryW+5NnjA+KdxOTA8YnduvdCG8J6q5JAwNy 6cw4a2KSGBXkfRBBWPvsTj3GunKtvQIryL7WOM0rLN9FmnUcG1FCUA9I06JJDvCU Q9bGyAqDsdloPocylofVirTqumDMyLdxGClpux5d29ZdhNozRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFiORRzmt4bIw0gtBvXU14JE3SQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvODdhNWY1NzEtM2NmYS0z NGM2LThlYzItMTEwZWU3MTQwZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk0j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCO/t97d2P0t2GPnFQsqkq+RikJbdm7fxOvXjQo7C/VoCEt+oW6zAXa 93VvGGH7FIysYCGDHeJ12e6DKjlbPjHb0dtLso05IFJvf/+sDlWp8uc172/o/yss DSth1wIw5Oh7l6AfqX4p7GoYnaUTJD5nZKKzRQVICapmlRXq6Z8sE2hEVr/q1mPw kklwrYRpCIGYWVmdvudzTSjGxevjavXA1MuKfAmMyL10FhIPnnPIIaiqWZxqQxgK bD6bOUygvEfZEr/6dWlfwOBbfuMNl6etZS2hX8zBfbfRAoekGSQss/ZMCtYniAm/ Qyr8eGlXqytvxgeYK9F6xLjZ+bVAd3c= -----END CERTIFICATE-----Generated at Tue Apr 29 12:48:52 2025 by rpki-client