$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa File: 3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa (raw, json) Hash identifier: nXYcMfR2Y/hfZUxUz8sAkzn/LoSLr8yfeZ+SNrzM+gc= Subject key identifier: 37:CA:F3:F7:AC:8A:7B:36:8F:91:47:8E:DD:F6:42:36:61:D8:22:26 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F432858492CB21666175EEA011D94CF14 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 26744 IP address blocks: 147.124.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:16:66:17:5e:ea:01:1d:94:cf:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a989c279-1877-4414-b1be-d0f3b700ea71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:98:9e:94:a9:ab:c8:25:05:7f:8b:3b:95: 09:23:12:50:45:e1:f6:b4:67:a3:41:0e:74:96:b7: 55:ca:40:6d:32:c8:9a:37:13:b5:d0:62:f4:ad:0a: 4c:cd:7d:92:37:53:2b:bd:6c:ce:01:e4:36:21:a3: 0f:ff:a7:8a:e9:3b:ce:e3:d9:e7:ad:e4:4a:8d:0c: c7:cc:db:97:d2:a9:3b:0f:03:47:7f:1a:7e:36:37: e0:f0:8f:32:5b:f9:df:39:d0:b1:0a:12:06:3f:d7: 2e:0e:43:d8:65:ad:c4:b8:16:42:7a:99:58:2f:37: 4b:2d:2a:e4:e5:47:2c:2f:c6:de:3b:e2:ae:10:2b: 3b:17:b6:3a:f4:5d:d7:fe:41:80:c2:c4:52:fd:fa: ba:20:85:2e:3a:50:8f:7d:68:bf:0a:10:84:7f:bc: d9:0a:82:63:c6:d1:4b:f4:ce:22:55:bc:d7:11:04: 79:40:5e:ff:84:d1:ca:06:1a:ef:e5:8b:37:c5:2f: d4:43:74:e0:86:d3:04:5b:e3:e4:9e:eb:1c:71:29: a6:68:0d:f1:9a:22:62:e3:5b:76:c7:a8:9d:ab:ac: 95:ee:2a:e3:92:9c:40:98:b5:39:27:90:cb:fe:9f: f0:c5:60:27:af:13:0b:45:7b:c2:c1:7b:b2:09:56: bd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CA:F3:F7:AC:8A:7B:36:8F:91:47:8E:DD:F6:42:36:61:D8:22:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:07:84:9e:9c:d0:27:a6:c6:0e:09:2e:6e:f4:ae:df:54:10: 79:e0:62:cc:5f:98:98:e8:bd:89:9c:6c:3c:6d:ab:b0:09:f9: f2:86:a4:6a:a0:bc:18:15:31:3d:61:1e:96:ca:f4:fc:90:a8: ab:b1:6c:bd:dd:54:f7:d3:f6:23:8d:03:d1:37:13:2b:37:b1: 95:a5:7e:ec:ff:cd:96:ad:6e:41:98:d9:a9:4f:0e:cd:6c:d4: 33:31:1b:b3:2e:7c:9d:09:32:01:30:39:d6:fa:4c:d6:53:f3: 13:6f:66:fe:d0:27:50:11:dd:a5:93:09:91:35:df:be:19:83: 16:fb:05:c2:74:43:90:d4:9d:c9:65:b2:19:68:86:e7:63:e9: 39:c6:dd:a6:24:f0:e2:8d:8d:14:4c:cd:cf:f5:78:f8:55:f1: c2:17:2d:96:21:22:60:c9:a1:66:ad:6c:b3:01:4b:ab:0a:34: 5a:b0:65:18:22:92:9f:13:29:5d:11:0d:a7:6a:19:8b:a5:9b: e1:b5:75:62:f2:38:00:42:d9:7f:39:f3:c2:c5:bd:9a:44:0c: b5:c0:7c:9e:60:71:e7:31:43:48:2a:18:ea:97:0f:23:61:56: 07:6b:96:2b:cd:29:d9:bb:fe:db:1b:cd:97:59:e5:83:fd:2e: 32:cc:96:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksshZmF17qAR2UzxQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTk4OWMyNzktMTg3Ny00NDE0LWIxYmUtZDBmM2I3MDBlYTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK+YnpSpq8glBX+LO5UJIxJQReH2tGejQQ50 lrdVykBtMsiaNxO10GL0rQpMzX2SN1MrvWzOAeQ2IaMP/6eK6TvO49nnreRKjQzH zNuX0qk7DwNHfxp+Njfg8I8yW/nfOdCxChIGP9cuDkPYZa3EuBZCeplYLzdLLSrk 5UcsL8beO+KuECs7F7Y69F3X/kGAwsRS/fq6IIUuOlCPfWi/ChCEf7zZCoJjxtFL 9M4iVbzXEQR5QF7/hNHKBhrv5Ys3xS/UQ3TghtMEW+PknusccSmmaA3xmiJi41t2 x6idq6yV7irjkpxAmLU5J5DL/p/wxWAnrxMLRXvCwXuyCVa9/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfK8/esins2j5FHjt32QjZh2CImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvM2RjNGExZDEtYjdmNy0z NDFlLWIxMGUtNmIyYWI5NzhlMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3zkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMHhJ6c0Cemxg4JLm70rt9UEHngYsxfmJjovYmcbDxtq7AJ+fKGpGqg vBgVMT1hHpbK9PyQqKuxbL3dVPfT9iONA9E3Eys3sZWlfuz/zZatbkGY2alPDs1s 1DMxG7MufJ0JMgEwOdb6TNZT8xNvZv7QJ1AR3aWTCZE1374Zgxb7BcJ0Q5DUncll shlohudj6TnG3aYk8OKNjRRMzc/1ePhV8cIXLZYhImDJoWatbLMBS6sKNFqwZRgi kp8TKV0RDadqGYulm+G1dWLyOABC2X8588LFvZpEDLXAfJ5gcecxQ0gqGOqXDyNh VgdrlivNKdm7/tsbzZdZ5YP9LjLMllM= -----END CERTIFICATE-----Generated at Sat Apr 12 12:19:29 2025 by rpki-client