$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa File: 97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa (raw, json) Hash identifier: 7g3k6Igpu69u8iG5eYXQxNcGLi85+MiRYcBXMgghlmY= Subject key identifier: 29:A9:8D:37:5E:24:5F:D3:A5:E0:3C:1D:14:38:C0:40:D6:41:4D:A1 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F43285849350EAAECE0A378C70FC17180 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 18434 IP address blocks: 147.249.0.0/24 maxlen: 24 147.249.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:aa:ec:e0:a3:78:c7:0f:c1:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=cd8cbbb7-3768-45e7-8fd4-40bc8b73830c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:25:c9:7f:c6:ef:73:a7:1c:9f:d5:c6:85:c7: f0:14:cd:7d:1a:22:e1:e1:56:59:76:53:69:3c:e7: 4d:9b:24:9c:e4:a0:e4:8d:47:4d:e8:3f:a5:e1:15: 71:c7:b6:71:b3:b9:85:c7:9d:03:e1:ba:d3:58:16: 57:58:55:64:3c:ce:ac:cd:46:a5:a8:50:67:d0:86: 5f:25:30:e9:b3:aa:d2:d0:1f:fb:fb:06:f4:8a:f3: bd:29:60:33:84:ab:b8:c1:08:7b:ac:b6:f6:d8:40: 23:b4:2d:9e:6e:e1:39:7c:dd:df:9c:1e:a7:47:7a: e5:7d:bd:86:60:22:ae:6a:f2:5f:48:a3:60:08:e1: 56:4d:bb:b4:4f:29:0c:a0:56:20:62:ba:60:8b:60: 48:3f:77:67:dd:b1:91:5a:44:45:7c:d8:97:38:63: 12:73:6f:60:ab:b6:89:5d:57:5f:8f:dc:b1:b4:5a: 49:0a:4a:ef:a0:a1:44:d0:a2:41:64:6a:b1:4f:3a: 43:0c:09:da:ad:70:1c:c5:4e:5e:62:e8:dc:a6:88: ff:b7:60:5f:0f:83:6c:de:23:30:99:67:79:fa:66: 96:d9:4a:f2:b0:92:15:e9:37:5c:21:58:29:a0:f9: cd:ed:cf:89:35:ca:29:2f:39:9b:84:1a:d1:8e:fd: 55:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A9:8D:37:5E:24:5F:D3:A5:E0:3C:1D:14:38:C0:40:D6:41:4D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:4e:47:2e:13:3a:35:71:65:ac:32:59:39:c3:5a:8f:63:5a: 07:32:e3:50:e6:be:98:f9:9a:54:ac:78:29:3a:6f:5c:06:99: 42:42:5d:89:34:75:b0:2c:60:d5:e9:ee:a5:26:98:55:e7:e9: 41:3e:40:43:1e:31:9c:55:c8:89:f1:1d:5a:4e:cb:14:91:a5: cc:7f:d8:f0:88:a2:46:89:4a:79:a8:64:9c:b2:c3:47:df:a7: 08:f0:2e:97:d0:41:22:36:39:8d:90:63:20:13:78:6f:38:0a: 72:34:b9:f0:54:97:5f:4a:c8:7f:e7:8a:4f:68:08:9e:98:a5: eb:32:ab:79:28:56:05:97:34:c5:ae:06:6c:d1:21:e6:27:5c: d8:2a:05:3b:76:4b:e4:2b:05:dc:78:c7:db:8e:c3:46:57:23: f3:ad:e7:52:ca:db:d2:fd:37:c2:22:ba:66:a1:d1:44:50:96: 05:78:24:1a:27:38:ea:44:1e:ae:c4:9e:30:ef:b8:70:e7:6f: 4c:68:ab:ed:90:b3:b8:ef:35:27:9e:a0:76:3a:bc:a4:88:3f: dc:e6:44:fa:ea:29:1e:7c:af:02:69:4e:54:05:90:77:de:2a: f4:e4:aa:2f:16:ac:b2:3a:b0:ad:41:71:3e:fb:9c:b2:7d:20: 56:51:fe:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dqrs4KN4xw/BcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk Y2Q4Y2JiYjctMzc2OC00NWU3LThmZDQtNDBiYzhiNzM4MzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CXJf8bvc6ccn9XGhcfwFM19GiLh4VZZdlNp POdNmySc5KDkjUdN6D+l4RVxx7Zxs7mFx50D4brTWBZXWFVkPM6szUalqFBn0IZf JTDps6rS0B/7+wb0ivO9KWAzhKu4wQh7rLb22EAjtC2ebuE5fN3fnB6nR3rlfb2G YCKuavJfSKNgCOFWTbu0TykMoFYgYrpgi2BIP3dn3bGRWkRFfNiXOGMSc29gq7aJ XVdfj9yxtFpJCkrvoKFE0KJBZGqxTzpDDAnarXAcxU5eYujcpoj/t2BfD4Ns3iMw mWd5+maW2UrysJIV6TdcIVgpoPnN7c+JNcopLzmbhBrRjv1V1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmpjTdeJF/TpeA8HRQ4wEDWQU2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvOTdjMWI3NGItNjhmZi0z OGNhLWE3YmMtZjI4MDE3NjdlYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk/kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9ORy4TOjVxZawyWTnDWo9jWgcy41Dmvpj5mlSseCk6b1wGmUJCXYk0 dbAsYNXp7qUmmFXn6UE+QEMeMZxVyInxHVpOyxSRpcx/2PCIokaJSnmoZJyyw0ff pwjwLpfQQSI2OY2QYyATeG84CnI0ufBUl19KyH/nik9oCJ6Ypesyq3koVgWXNMWu BmzRIeYnXNgqBTt2S+QrBdx4x9uOw0ZXI/Ot51LK29L9N8Iiumah0URQlgV4JBon OOpEHq7EnjDvuHDnb0xoq+2Qs7jvNSeeoHY6vKSIP9zmRPrqKR58rwJpTlQFkHfe KvTkqi8WrLI6sK1BcT77nLJ9IFZR/lg= -----END CERTIFICATE-----Generated at Fri Apr 11 21:30:01 2025 by rpki-client