$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/d4077d9c-bdad-34b7-88f3-d7a067314e78.roa File: d4077d9c-bdad-34b7-88f3-d7a067314e78.roa (raw, json) Hash identifier: 3RNpOsTQzWuWd2SC2d9a6uJttk7370eyfCY5j58wVD4= Subject key identifier: C6:A7:C6:B9:E4:66:0D:72:47:15:C3:33:98:96:E5:BB:F4:4A:69:96 Certificate issuer: /CN=544240c0-1aad-4163-8ada-3b71180eac4f Certificate serial: 010D0C9F4328584902EC25931B9FA208D27F2180 Authority key identifier: A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/d4077d9c-bdad-34b7-88f3-d7a067314e78.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 2924 IP address blocks: 147.146.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:25:93:1b:9f:a2:08:d2:7f:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544240c0-1aad-4163-8ada-3b71180eac4f Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=0aa20634-db62-4a3b-861b-6648373641d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6b:ca:37:40:5c:38:fa:18:3c:2f:6c:25:b7: 89:40:6e:e9:85:b8:84:c2:df:01:9f:24:c7:ff:8b: b7:03:38:aa:c4:26:df:57:f3:47:61:52:8a:ba:c1: 39:88:9b:ba:31:cd:5a:41:d8:40:15:7c:96:64:75: f5:77:9a:ff:95:3e:a9:c0:26:f0:1e:28:57:ea:79: f5:1e:c9:53:f6:c7:a3:1f:d3:ab:22:15:ff:98:47: 0a:eb:1f:cf:ee:ee:1a:c2:77:72:7b:bf:9b:2e:ad: ea:2a:53:3a:d9:e3:db:81:60:0b:be:ab:eb:cb:36: 33:55:04:fe:6a:fa:3a:07:50:ad:a8:60:ab:ce:7b: f5:8a:dc:78:40:e4:14:55:66:f6:8a:ed:8c:4d:76: 5a:0a:56:99:86:40:b5:d4:ed:30:e9:c4:b9:3f:53: e9:74:2d:aa:44:7a:b6:98:41:ed:39:2c:c1:1a:6f: 2f:69:02:48:72:8d:45:58:b8:c9:19:21:44:67:48: 45:68:3c:5a:39:e5:b3:1a:13:dd:0b:38:83:4f:f4: 9f:d7:19:ed:5b:84:e1:73:0e:3e:ea:57:69:fc:df: cf:5f:60:dd:55:08:84:5b:5f:32:be:23:6c:2e:7e: b2:f0:f1:d6:24:d3:2c:0e:9a:f7:2b:d2:ce:fa:7c: 9e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A7:C6:B9:E4:66:0D:72:47:15:C3:33:98:96:E5:BB:F4:4A:69:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/d4077d9c-bdad-34b7-88f3-d7a067314e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.crl X509v3 Authority Key Identifier: keyid:A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer sbgp-ipAddrBlock: critical IPv4: 147.146.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:17:be:95:18:62:0b:0a:16:17:5b:52:01:9a:43:b9:0a:e1: 3f:64:cd:1d:8c:55:50:7d:d7:67:34:4b:d1:d6:a1:e7:54:c5: 62:3c:4f:62:bc:1a:6c:78:2b:73:e1:71:1e:a6:b5:99:0e:45: 35:37:59:5f:bd:1b:d4:0b:d0:f3:44:a4:85:4a:64:eb:d8:68: 9e:2f:d0:dc:90:38:5e:58:27:5f:59:b5:55:a1:fb:cd:40:13: de:a6:0b:8f:0a:42:f3:10:64:5d:27:59:69:f3:28:a7:ba:23: d1:63:74:12:8d:f2:be:c8:8d:2a:cd:23:a2:7b:01:45:5b:86: eb:39:b1:3c:76:eb:26:fd:b7:a1:a5:e2:a5:6c:53:60:bf:be: cf:4d:9a:19:1e:58:37:2a:1f:d5:53:e9:b4:28:89:89:7c:c7: 69:3c:6b:19:c7:59:8a:ce:6f:c6:74:7e:15:4a:8d:f2:26:e7: 26:4c:93:08:34:ab:85:27:50:aa:44:2c:4c:18:1f:1c:3a:56: 4b:cd:08:b7:f1:35:70:f9:b5:ee:fb:5d:d4:0c:81:85:6e:2e: 64:5a:87:24:5e:31:b4:5b:12:80:10:92:af:5f:04:31:bc:c3: 4e:d7:4f:1f:b3:54:ed:0d:a4:a6:6f:72:4e:39:68:20:16:67: 32:06:56:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CWTG5+iCNJ/IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQ0MjQwYzAtMWFhZC00MTYzLThhZGEtM2I3MTE4MGVh YzRmMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MGFhMjA2MzQtZGI2Mi00YTNiLTg2MWItNjY0ODM3MzY0MWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWvKN0BcOPoYPC9sJbeJQG7phbiEwt8BnyTH /4u3AziqxCbfV/NHYVKKusE5iJu6Mc1aQdhAFXyWZHX1d5r/lT6pwCbwHihX6nn1 HslT9sejH9OrIhX/mEcK6x/P7u4awndye7+bLq3qKlM62ePbgWALvqvryzYzVQT+ avo6B1CtqGCrznv1itx4QOQUVWb2iu2MTXZaClaZhkC11O0w6cS5P1PpdC2qRHq2 mEHtOSzBGm8vaQJIco1FWLjJGSFEZ0hFaDxaOeWzGhPdCziDT/Sf1xntW4Thcw4+ 6ldp/N/PX2DdVQiEW18yviNsLn6y8PHWJNMsDpr3K9LO+nye3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFManxrnkZg1yRxXDM5iW5bv0SmmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NDQy NDBjMC0xYWFkLTQxNjMtOGFkYS0zYjcxMTgwZWFjNGYvZDQwNzdkOWMtYmRhZC0z NGI3LTg4ZjMtZDdhMDY3MzE0ZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTQ0MjQwYzAtMWFhZC00MTYzLThh ZGEtM2I3MTE4MGVhYzRmLzU0NDI0MGMwLTFhYWQtNDE2My04YWRhLTNiNzExODBl YWM0Zi5jcmwwHwYDVR0jBBgwFoAUp7CWW0gBVnrgQpqffgw+Qpq7WR0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NDQyNDBjMC0xYWFkLTQxNjMtOGFkYS0zYjcx MTgwZWFjNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5LwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsXvpUYYgsKFhdbUgGaQ7kK4T9kzR2MVVB912c0S9HWoedUxWI8T2K8 Gmx4K3PhcR6mtZkORTU3WV+9G9QL0PNEpIVKZOvYaJ4v0NyQOF5YJ19ZtVWh+81A E96mC48KQvMQZF0nWWnzKKe6I9FjdBKN8r7IjSrNI6J7AUVbhus5sTx26yb9t6Gl 4qVsU2C/vs9NmhkeWDcqH9VT6bQoiYl8x2k8axnHWYrOb8Z0fhVKjfIm5yZMkwg0 q4UnUKpELEwYHxw6VkvNCLfxNXD5te77XdQMgYVuLmRahyReMbRbEoAQkq9fBDG8 w07XTx+zVO0NpKZvck45aCAWZzIGVnU= -----END CERTIFICATE-----Generated at Tue Apr 15 17:03:59 2025 by rpki-client