$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa File: ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa (raw, json) Hash identifier: bvtFqQYWCA8vPgWnesInxzoCdeINRg3xl+vYegUIXaw= Subject key identifier: 09:34:13:D5:9D:6F:EF:6C:7C:2E:EF:C3:FC:3F:5B:12:8E:91:F2:62 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F43285848A13615B532961145B2689C60 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 13009 IP address blocks: 147.249.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:15:b5:32:96:11:45:b2:68:9c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=221f198b-b302-463a-a8d4-6009db18438f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:cf:92:c7:63:b8:4b:42:7d:9d:9d:b3:65: f0:9e:a3:2b:d0:bf:d8:6b:53:85:96:52:84:37:65: b4:47:74:c2:ea:99:76:89:ac:01:74:1b:e6:f5:f5: ec:86:83:a9:b8:ca:da:43:af:fe:4d:2a:16:05:06: 6e:ce:78:7f:b2:6f:a6:cb:ad:0f:fa:d2:f2:bf:4b: 42:87:2b:0d:c6:71:ba:b4:7f:d6:e9:e8:c5:90:dd: ce:9d:8d:d8:99:8c:97:36:b5:46:dc:ff:90:1a:01: bd:48:34:03:e9:da:19:e1:25:24:34:0d:0b:a4:37: 5a:71:76:58:07:58:c1:c4:8f:e0:75:06:bb:dd:47: 6a:91:ce:58:cd:be:7e:a4:59:8e:0c:71:97:a9:17: f0:ff:ed:5c:01:dc:eb:72:ca:eb:f0:79:4b:14:89: 7a:bd:53:c7:62:5a:fc:2d:5a:e1:bb:34:ba:d4:e9: 2b:e6:d3:b2:08:56:56:78:3c:3c:81:ec:5b:34:ca: 9e:09:90:c9:87:d8:81:7d:62:d5:68:48:81:f7:f6: d6:3a:56:38:20:f2:50:79:89:5d:cd:d2:e4:91:63: 57:f5:38:a2:18:56:5d:31:9a:d0:6d:b6:c1:12:83: a0:eb:26:01:86:54:01:38:d4:ad:9c:7b:47:f5:0c: 21:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:34:13:D5:9D:6F:EF:6C:7C:2E:EF:C3:FC:3F:5B:12:8E:91:F2:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:3b:8f:ea:ea:e0:cc:0b:fa:06:e5:2b:31:8d:5d:59:d9:15: ac:79:ca:65:c6:a4:6e:fd:d2:81:4b:04:60:a2:4e:01:68:6b: 7b:09:e0:fb:15:41:0d:e4:0a:e3:b4:41:ad:ce:3c:a2:67:51: 03:a9:c6:70:7f:11:15:59:42:fa:c2:d2:9f:7a:eb:cf:6e:fb: 52:e0:ff:5a:fc:65:db:3e:93:68:28:22:70:ba:92:5b:c4:0c: ea:b0:59:a6:4b:17:cb:2e:43:96:f3:b9:60:1b:26:53:b4:49: 87:d0:af:b3:fa:bd:fc:e0:ac:26:70:47:4f:41:74:e5:58:0b: 03:e4:65:ba:5f:9a:a2:f7:47:cc:fe:8e:5b:a4:e3:8b:eb:9f: ff:77:6b:dd:45:c5:f6:72:ab:a8:39:3a:4b:9e:56:6d:a1:1a: 58:c0:2d:8c:33:52:01:09:e5:20:e8:0f:5b:8e:64:e1:cf:34: 0e:b9:c5:07:1d:c3:86:44:a6:32:d7:63:3a:1a:91:3d:9c:f8: 07:bb:44:bd:53:e3:5d:07:c0:2b:87:57:6d:4a:95:c9:27:99: 8d:d9:50:bd:50:41:05:44:00:f7:4a:b7:ae:fb:bd:88:4b:49: 64:27:ef:ca:9d:10:e6:ca:64:e6:1e:ed:46:dd:67:03:2d:5f: 91:a5:7f:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhW1MpYRRbJonGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk MjIxZjE5OGItYjMwMi00NjNhLWE4ZDQtNjAwOWRiMTg0MzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9/PksdjuEtCfZ2ds2XwnqMr0L/Ya1OFllKE N2W0R3TC6pl2iawBdBvm9fXshoOpuMraQ6/+TSoWBQZuznh/sm+my60P+tLyv0tC hysNxnG6tH/W6ejFkN3OnY3YmYyXNrVG3P+QGgG9SDQD6doZ4SUkNA0LpDdacXZY B1jBxI/gdQa73Udqkc5Yzb5+pFmODHGXqRfw/+1cAdzrcsrr8HlLFIl6vVPHYlr8 LVrhuzS61Okr5tOyCFZWeDw8gexbNMqeCZDJh9iBfWLVaEiB9/bWOlY4IPJQeYld zdLkkWNX9TiiGFZdMZrQbbbBEoOg6yYBhlQBONStnHtH9QwhMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk0E9Wdb+9sfC7vw/w/WxKOkfJiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvZWU1ZWE3ZTktMzFjYy0z YjE4LTljNzUtNGVjMGRlY2JjZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/lhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ07j+rq4MwL+gblKzGNXVnZFax5ymXGpG790oFLBGCiTgFoa3sJ4PsV QQ3kCuO0Qa3OPKJnUQOpxnB/ERVZQvrC0p96689u+1Lg/1r8Zds+k2goInC6klvE DOqwWaZLF8suQ5bzuWAbJlO0SYfQr7P6vfzgrCZwR09BdOVYCwPkZbpfmqL3R8z+ jluk44vrn/93a91FxfZyq6g5OkueVm2hGljALYwzUgEJ5SDoD1uOZOHPNA65xQcd w4ZEpjLXYzoakT2c+Ae7RL1T410HwCuHV21KlcknmY3ZUL1QQQVEAPdKt677vYhL SWQn78qdEObKZOYe7UbdZwMtX5Glf5c= -----END CERTIFICATE-----Generated at Fri Apr 11 21:11:00 2025 by rpki-client