$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7427d5e8-2af9-395b-8c6d-83f337d07c0e.roa File: 7427d5e8-2af9-395b-8c6d-83f337d07c0e.roa (raw, json) Hash identifier: FH1nUZYg+9NEGoz3PwKfZ7f6X4PnVMt2rH+qP13rdgo= Subject key identifier: 37:B8:C3:94:BC:6F:4D:19:37:18:8E:D3:99:58:B9:25:4D:08:0B:EC Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F432858492184095E548183989674C680 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7427d5e8-2af9-395b-8c6d-83f337d07c0e.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 26744 IP address blocks: 147.124.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:09:5e:54:81:83:98:96:74:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=506e84af-d577-444d-8935-cf817714774b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2a:32:25:74:e6:3e:41:7b:47:f4:21:9d:21: d4:cd:7f:83:b2:a0:4b:7c:ec:10:2e:09:e0:af:5e: ab:6b:13:c3:ed:bf:12:3c:45:98:ea:80:90:2f:1f: 04:66:43:0d:14:37:b2:26:51:81:fb:24:08:58:12: 83:8f:3b:e3:27:c0:ba:d6:54:90:ff:c9:c5:6f:cd: 4e:bf:4f:9a:1c:04:a6:f2:87:57:cd:f5:42:43:17: d7:ca:ce:f1:7f:5c:75:d3:40:de:2d:76:aa:5c:f8: 7d:84:62:14:39:21:af:94:3c:1c:42:40:61:8b:31: 74:84:3b:a3:6b:38:f1:fd:33:5e:3d:f6:a5:a5:0c: 71:2a:a1:c0:b4:19:03:75:8c:0e:57:88:1c:37:d3: 4c:9d:fe:1a:0c:2c:73:62:89:d4:ee:22:09:82:18: 38:19:18:d7:5e:c6:51:b5:c3:f0:a9:d0:61:5b:e3: 6a:48:b9:be:11:ce:a2:2b:5c:16:37:45:7a:1a:1b: 5a:32:f8:c7:e8:98:31:77:f8:b2:20:81:cc:40:d9: 47:8b:25:33:b8:c3:cc:92:ed:8c:5c:4e:0e:32:8b: a0:38:eb:d8:0c:c4:da:86:1b:4d:7b:82:96:9b:60: f6:2f:7c:71:7f:b9:da:0f:87:94:79:6a:55:58:af: 58:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B8:C3:94:BC:6F:4D:19:37:18:8E:D3:99:58:B9:25:4D:08:0B:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7427d5e8-2af9-395b-8c6d-83f337d07c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:96:a7:6e:63:9a:ba:7b:08:35:20:4b:58:a3:3d:bf:54:94: 67:8a:66:26:18:13:4e:a4:af:44:b1:8c:98:68:20:5b:d7:dc: 49:46:bc:c6:0e:33:a4:0e:b9:62:5a:70:04:b5:ad:d1:fd:75: 84:9e:f6:1a:7e:81:bf:20:2e:d1:2b:4c:25:62:36:02:89:87: 9e:43:59:14:48:31:d6:5a:dd:c0:f8:7a:b0:05:1d:84:ea:37: 67:96:e9:ab:60:da:19:aa:ce:e8:47:2d:f3:eb:9a:2a:fe:98: 02:8a:dd:07:7d:3f:98:54:66:ce:67:24:4e:b0:db:47:8a:41: 11:01:69:8a:4c:4b:22:a2:3a:d3:27:4b:cb:c1:72:96:24:e6: 1d:3c:f1:97:37:9c:3a:fc:5f:92:1b:ef:37:6e:74:fb:2b:bb: d6:ff:50:cd:cd:d0:c7:05:b5:ae:5c:6c:14:51:eb:83:98:83: 46:d8:db:58:c1:34:52:3f:59:15:db:48:b6:be:95:d6:7e:f2: 36:99:ac:cd:d8:a3:18:ad:49:80:9b:a6:c0:79:c9:c3:ff:a7: b9:4c:7f:0b:72:af:6e:56:2d:50:45:a9:17:21:26:c8:5d:84: 7a:0d:34:0e:9a:60:90:1d:08:2c:05:f9:84:7e:1d:05:e7:b4: d8:8a:f7:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAleVIGDmJZ0xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NTA2ZTg0YWYtZDU3Ny00NDRkLTg5MzUtY2Y4MTc3MTQ3NzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyoyJXTmPkF7R/QhnSHUzX+DsqBLfOwQLgng r16raxPD7b8SPEWY6oCQLx8EZkMNFDeyJlGB+yQIWBKDjzvjJ8C61lSQ/8nFb81O v0+aHASm8odXzfVCQxfXys7xf1x100DeLXaqXPh9hGIUOSGvlDwcQkBhizF0hDuj azjx/TNePfalpQxxKqHAtBkDdYwOV4gcN9NMnf4aDCxzYonU7iIJghg4GRjXXsZR tcPwqdBhW+NqSLm+Ec6iK1wWN0V6GhtaMvjH6Jgxd/iyIIHMQNlHiyUzuMPMku2M XE4OMougOOvYDMTahhtNe4KWm2D2L3xxf7naD4eUeWpVWK9YMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe4w5S8b00ZNxiO05lYuSVNCAvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNzQyN2Q1ZTgtMmFmOS0z OTViLThjNmQtODNmMzM3ZDA3YzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3z8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeWp25jmrp7CDUgS1ijPb9UlGeKZiYYE06kr0SxjJhoIFvX3ElGvMYO M6QOuWJacAS1rdH9dYSe9hp+gb8gLtErTCViNgKJh55DWRRIMdZa3cD4erAFHYTq N2eW6atg2hmqzuhHLfPrmir+mAKK3Qd9P5hUZs5nJE6w20eKQREBaYpMSyKiOtMn S8vBcpYk5h088Zc3nDr8X5Ib7zdudPsru9b/UM3N0McFta5cbBRR64OYg0bY21jB NFI/WRXbSLa+ldZ+8jaZrM3YoxitSYCbpsB5ycP/p7lMfwtyr25WLVBFqRchJshd hHoNNA6aYJAdCCwF+YR+HQXntNiK95E= -----END CERTIFICATE-----Generated at Sat Apr 12 14:52:59 2025 by rpki-client