$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/476cfbf6-869b-3b2c-84f1-4dd828da9b82.roa File: 476cfbf6-869b-3b2c-84f1-4dd828da9b82.roa (raw, json) Hash identifier: lEiGVCop8OZKFOZy3MUQtZ3kOQ2Wy3qIFsOPPH1MH74= Subject key identifier: 03:F3:1D:41:42:A2:17:17:B1:67:6D:58:67:03:AA:26:93:38:09:E2 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F432858492CB21676EBCF79A9D6B21300 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/476cfbf6-869b-3b2c-84f1-4dd828da9b82.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 26744 IP address blocks: 147.124.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:16:76:eb:cf:79:a9:d6:b2:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=66f7e313-adcc-4b74-aadf-575891ad809f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1d:5a:c2:e3:42:18:76:e0:86:09:29:e5:d5: 90:3e:c7:63:1f:a2:04:0b:da:e8:11:ca:b8:d3:ab: 82:1c:10:95:fb:02:a5:2d:0d:5f:13:3b:0f:2a:c2: e0:48:14:66:b7:f7:b6:56:ad:7d:02:85:02:4d:7d: 85:f8:da:b5:10:4e:e0:a3:1a:68:f6:d5:23:d1:99: e1:6d:3a:71:50:b0:1b:bb:e2:d8:50:a2:21:46:f0: 2e:61:d0:b2:fd:76:3a:21:42:04:88:8d:b2:ea:14: a5:bb:90:b3:b2:58:39:36:90:cc:32:56:da:2a:7b: 81:80:b5:73:88:cc:eb:b7:c0:db:e2:64:53:e7:16: 93:0f:d0:6b:cc:11:03:2d:2c:9b:df:fc:23:06:6c: 86:28:01:20:92:31:20:0b:13:0d:a0:63:dd:65:84: 7d:2c:7b:4b:27:78:60:5c:30:78:60:dd:4f:a4:cd: 15:d4:42:e6:1f:4e:55:0d:6d:7d:bb:76:a7:e4:20: 7d:3d:a9:a2:96:f9:9a:cc:67:8f:7f:d1:10:27:ac: ea:93:89:1e:09:6d:58:29:38:cf:58:81:77:0d:d8: 13:bc:cc:e1:2f:a3:bb:c1:7a:05:b1:5d:6e:2c:16: 7c:b4:d9:42:a6:a6:b6:a9:b3:0c:a9:72:cb:e2:66: e1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F3:1D:41:42:A2:17:17:B1:67:6D:58:67:03:AA:26:93:38:09:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/476cfbf6-869b-3b2c-84f1-4dd828da9b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9f:91:42:b5:e4:d4:24:ae:16:d6:29:b6:38:ae:e5:71:b0: 66:c4:ad:d2:27:f0:5b:2c:04:b8:af:10:ca:b5:fe:45:79:0d: ba:10:00:b4:8f:96:65:8d:ac:16:33:46:ba:f9:f1:29:90:c7: 0a:99:f7:14:d7:90:dd:04:35:6a:9a:73:79:b9:18:0e:32:a3: e3:3f:91:86:ff:9a:86:2a:6d:4a:3b:b7:2e:45:d4:1b:2e:3f: be:46:be:42:5f:47:19:60:c5:78:98:98:b4:00:bc:5b:b4:5f: 9b:c5:16:de:d6:35:f2:f4:e8:65:be:cd:72:91:25:c6:ef:67: 26:f0:68:6f:7e:e6:df:ce:f8:59:df:c2:61:b9:eb:a7:ff:77: 2e:50:fa:76:4f:cc:7b:21:e8:7c:02:df:1f:4a:3d:09:1d:86: e9:3d:a9:80:35:31:be:a4:f7:e6:9e:1b:34:b9:af:7b:47:c7: 40:f6:6d:d2:fd:1d:66:a4:64:a9:63:7e:d9:b5:f1:ff:e2:19: 2b:9e:87:95:e1:24:0d:be:39:1a:30:4e:4b:f8:25:5c:8b:36: fa:80:e4:89:07:14:35:b4:db:31:da:7b:84:71:3f:c6:03:ea: 66:5c:31:b3:b9:8f:e1:ee:a4:82:e3:e6:54:03:d4:ec:c6:1f: 82:9e:2f:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksshZ26895qdayEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NjZmN2UzMTMtYWRjYy00Yjc0LWFhZGYtNTc1ODkxYWQ4MDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB1awuNCGHbghgkp5dWQPsdjH6IEC9roEcq4 06uCHBCV+wKlLQ1fEzsPKsLgSBRmt/e2Vq19AoUCTX2F+Nq1EE7goxpo9tUj0Znh bTpxULAbu+LYUKIhRvAuYdCy/XY6IUIEiI2y6hSlu5Czslg5NpDMMlbaKnuBgLVz iMzrt8Db4mRT5xaTD9BrzBEDLSyb3/wjBmyGKAEgkjEgCxMNoGPdZYR9LHtLJ3hg XDB4YN1PpM0V1ELmH05VDW19u3an5CB9PamilvmazGePf9EQJ6zqk4keCW1YKTjP WIF3DdgTvMzhL6O7wXoFsV1uLBZ8tNlCpqa2qbMMqXLL4mbhzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPzHUFCohcXsWdtWGcDqiaTOAniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNDc2Y2ZiZjYtODY5Yi0z YjJjLTg0ZjEtNGRkODI4ZGE5YjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEufkUK15NQkrhbWKbY4ruVxsGbErdIn8FssBLivEMq1/kV5DboQALSP lmWNrBYzRrr58SmQxwqZ9xTXkN0ENWqac3m5GA4yo+M/kYb/moYqbUo7ty5F1Bsu P75GvkJfRxlgxXiYmLQAvFu0X5vFFt7WNfL06GW+zXKRJcbvZybwaG9+5t/O+Fnf wmG566f/dy5Q+nZPzHsh6HwC3x9KPQkdhuk9qYA1Mb6k9+aeGzS5r3tHx0D2bdL9 HWakZKljftm18f/iGSueh5XhJA2+ORowTkv4JVyLNvqA5IkHFDW02zHae4RxP8YD 6mZcMbO5j+HupILj5lQD1OzGH4KeL8w= -----END CERTIFICATE-----Generated at Sat Apr 12 14:49:47 2025 by rpki-client