$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9a01a09c-42e3-3cee-be99-cffa2e621539.roa File: 9a01a09c-42e3-3cee-be99-cffa2e621539.roa (raw, json) Hash identifier: LJhy5aV7I6GZ91aDaUz5Otb9JQr62LioOlmz7dObMcM= Subject key identifier: 5C:EB:A3:74:F2:90:E1:B0:6C:99:F7:13:4A:3C:79:D8:96:FA:A4:6C Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F43285849218409AB4FA7CCFF496ABBC0 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9a01a09c-42e3-3cee-be99-cffa2e621539.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 26744 IP address blocks: 147.124.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:09:ab:4f:a7:cc:ff:49:6a:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=af1841c8-5fa4-47f8-b0af-0a86873c17e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b3:18:22:f0:db:ac:b1:bb:7f:80:33:3e:bb: c3:d7:73:84:9c:2f:09:da:c4:9c:a8:59:e9:29:39: 81:18:06:2d:a0:19:ed:c6:f1:90:9c:ca:6a:9d:6e: 4e:f9:d1:cb:87:6d:01:7d:12:52:52:03:72:bb:17: 70:75:69:16:c1:a3:5c:f4:49:a5:d8:f2:bc:b2:04: ee:1c:f6:52:f2:c1:4c:7f:04:24:65:48:81:63:37: f2:bf:38:8d:47:61:a4:3a:13:06:62:3c:7f:cb:97: 9b:a4:c1:bb:ec:a1:00:40:13:76:a4:ed:85:7d:e3: 0b:de:01:15:b4:3b:ca:8e:4f:77:8b:5f:ad:f9:f1: 04:38:3f:62:c6:6e:87:cd:fc:f3:0b:6b:6f:09:f0: b6:53:6d:4c:26:9b:1f:80:fb:5a:19:cc:57:25:f3: 4d:57:91:b5:ba:fb:04:71:02:50:6d:a7:69:ba:97: f1:14:f5:24:1a:ff:92:23:c8:5f:71:f8:fe:ea:22: 6e:67:90:6c:ce:d3:2d:12:91:9e:a8:94:f6:26:8e: b7:f3:db:b8:18:45:9e:03:ca:f8:3a:f2:65:3a:1a: 65:5f:7e:b4:1c:67:72:3a:90:51:36:07:88:44:f3: 84:ed:a4:69:db:76:8d:6f:21:f6:f0:c6:90:a9:32: fb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EB:A3:74:F2:90:E1:B0:6C:99:F7:13:4A:3C:79:D8:96:FA:A4:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9a01a09c-42e3-3cee-be99-cffa2e621539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f5:f3:c2:d7:72:96:68:81:18:c2:50:99:e5:a5:78:a1:ae: 84:6a:93:41:04:5e:6a:fd:59:3c:22:cd:36:6b:2d:1d:58:1c: ac:ca:47:7d:4b:7c:69:9d:f0:2f:d9:30:9a:e0:08:83:58:d6: 35:09:6a:d7:f3:40:f4:13:f4:4b:98:74:63:bd:91:51:6b:c6: 2d:84:fb:c3:e5:0c:f6:af:a0:c8:13:6f:b9:2e:e9:fb:67:19: 65:6b:3f:79:86:47:46:26:84:a5:0b:8b:ce:ac:7a:7c:c8:02: 53:05:7f:27:c1:0e:4a:2b:66:fe:e3:db:7d:8e:b8:83:58:e0: 4f:20:c0:8e:a6:9d:88:d8:6c:e8:df:92:d7:4c:55:fa:96:97: 4e:23:d2:bd:93:63:36:ff:2e:eb:30:d5:ba:da:ea:df:a2:5e: f8:32:76:56:b1:92:6b:74:b9:dd:13:5b:ad:d9:1c:50:c9:44: d8:0c:e5:b3:36:ed:54:2f:e5:56:2f:6f:e3:4c:60:72:7b:0f: e4:31:e3:a6:35:77:51:a3:e7:f9:13:7d:bb:c0:23:e1:86:01: f0:bf:36:39:ba:3d:9c:13:d3:ff:01:a6:4f:6b:0a:a1:8c:f9: 29:6f:ad:53:7f:9b:ea:8a:f4:8e:c4:9f:ee:b9:bc:15:f8:56: a2:a2:39:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAmrT6fM/0lqu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YWYxODQxYzgtNWZhNC00N2Y4LWIwYWYtMGE4Njg3M2MxN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLMYIvDbrLG7f4AzPrvD13OEnC8J2sScqFnp KTmBGAYtoBntxvGQnMpqnW5O+dHLh20BfRJSUgNyuxdwdWkWwaNc9Eml2PK8sgTu HPZS8sFMfwQkZUiBYzfyvziNR2GkOhMGYjx/y5ebpMG77KEAQBN2pO2FfeML3gEV tDvKjk93i1+t+fEEOD9ixm6HzfzzC2tvCfC2U21MJpsfgPtaGcxXJfNNV5G1uvsE cQJQbadpupfxFPUkGv+SI8hfcfj+6iJuZ5BsztMtEpGeqJT2Jo6389u4GEWeA8r4 OvJlOhplX360HGdyOpBRNgeIRPOE7aRp23aNbyH28MaQqTL7BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzro3TykOGwbJn3E0o8ediW+qRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvOWEwMWEwOWMtNDJlMy0z Y2VlLWJlOTktY2ZmYTJlNjIxNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3z6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb188LXcpZogRjCUJnlpXihroRqk0EEXmr9WTwizTZrLR1YHKzKR31L fGmd8C/ZMJrgCINY1jUJatfzQPQT9EuYdGO9kVFrxi2E+8PlDPavoMgTb7ku6ftn GWVrP3mGR0YmhKULi86senzIAlMFfyfBDkorZv7j232OuINY4E8gwI6mnYjYbOjf ktdMVfqWl04j0r2TYzb/Lusw1bra6t+iXvgydlaxkmt0ud0TW63ZHFDJRNgM5bM2 7VQv5VYvb+NMYHJ7D+Qx46Y1d1Gj5/kTfbvAI+GGAfC/Njm6PZwT0/8Bpk9rCqGM +SlvrVN/m+qK9I7En+65vBX4VqKiOaA= -----END CERTIFICATE-----Generated at Sat Apr 12 14:48:28 2025 by rpki-client