$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/53bba041-53c4-3b8a-affe-6cd50ac26209.roa File: 53bba041-53c4-3b8a-affe-6cd50ac26209.roa (raw, json) Hash identifier: RBMMxJxDs8UHIFOL8sdo466pMyprG4cLQ764YisuyOg= Subject key identifier: 46:C8:2C:61:BE:A9:0E:66:22:57:7C:C5:A3:35:1E:24:CA:A1:FD:25 Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F43285849203C1336874F6A251EFE8880 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/53bba041-53c4-3b8a-affe-6cd50ac26209.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 400238 IP address blocks: 147.185.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:13:36:87:4f:6a:25:1e:fe:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=a58b8fc5-621c-40df-a022-e1397f20977d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:20:1c:0d:f8:f8:ff:dc:95:11:2e:60:dc: 48:81:ab:18:71:bc:59:11:e8:06:b8:af:74:37:14: 1f:d8:74:10:ef:24:6c:1e:c7:d4:99:d3:18:b8:88: 90:5f:f9:85:e1:72:2e:8a:8b:04:52:70:45:6b:e9: 13:9d:c1:24:99:92:d9:3b:e2:09:dc:85:a9:fb:8a: e2:dc:e2:f2:62:02:b4:94:27:ba:70:66:ff:43:c6: 4e:b6:7a:df:ce:6e:7f:ee:04:d0:87:e3:9e:e5:46: 1a:d9:f5:d0:58:b1:88:d9:7b:91:43:7e:5a:ad:7a: a5:13:c3:51:43:a3:68:95:bc:8d:d1:ed:12:ed:7a: 54:07:06:30:98:0b:13:2d:60:6e:b1:11:b8:04:b1: 3c:1f:80:5b:0b:74:04:f1:e3:d5:42:5d:eb:e4:22: 3e:86:e5:3a:b5:a7:2c:8a:62:0a:e4:e8:49:ae:07: aa:c2:41:96:fc:86:1c:6e:3c:69:f0:35:ba:68:fa: f8:d2:36:17:5f:e7:1c:0b:0a:d4:12:01:20:ce:93: e3:f9:15:49:95:5c:91:23:82:19:cd:1f:70:a3:d3: 42:9c:da:cc:15:af:88:4d:a1:57:db:68:c5:ad:c7: 55:0e:5b:91:09:1b:01:07:da:b0:af:dd:a8:f6:c5: 79:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C8:2C:61:BE:A9:0E:66:22:57:7C:C5:A3:35:1E:24:CA:A1:FD:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/53bba041-53c4-3b8a-affe-6cd50ac26209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 147.185.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e1:23:80:01:c3:3c:2c:82:79:c4:39:c0:74:5e:50:dd:e8: e0:0a:0a:9b:44:69:85:bc:c6:57:8c:3d:31:a5:1b:87:e6:c9: 70:f3:e6:b4:4f:7d:c8:ce:85:b6:28:52:28:8c:77:9c:b7:f1: df:9d:6d:ee:a9:36:22:e9:41:52:f3:12:fb:54:82:10:cc:98: 62:4d:c2:33:71:02:d0:6b:83:a0:27:ce:72:35:00:62:8c:a7: bf:ef:c8:78:13:89:1d:ba:60:35:22:07:a8:5c:5a:fa:1e:0a: 13:e6:0f:06:a6:c3:ac:43:1f:e0:c9:3b:04:de:0e:97:9e:33: 06:d6:c5:f1:01:15:70:62:3e:df:8a:c4:b7:7c:79:14:48:52: 04:88:8e:33:ee:01:54:62:1e:31:57:e2:03:56:44:df:5d:93: 88:90:24:17:b3:e6:09:b3:cf:40:83:a4:27:a4:13:aa:a5:2e: ad:0b:07:6d:9f:ff:ba:d2:82:9b:80:ef:50:40:ce:1f:fa:91: 72:54:5c:9a:a5:82:b2:d8:2e:9e:57:9f:c6:35:f1:1a:34:22: 41:a8:21:2e:b9:3a:1a:da:69:33:b7:8c:53:1b:f7:b8:47:1d: eb:ea:53:7d:1a:a2:93:40:e4:22:c6:26:60:50:e5:61:1d:7d: 15:34:99:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPBM2h09qJR7+iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk YTU4YjhmYzUtNjIxYy00MGRmLWEwMjItZTEzOTdmMjA5NzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpcgHA34+P/clREuYNxIgasYcbxZEegGuK90 NxQf2HQQ7yRsHsfUmdMYuIiQX/mF4XIuiosEUnBFa+kTncEkmZLZO+IJ3IWp+4ri 3OLyYgK0lCe6cGb/Q8ZOtnrfzm5/7gTQh+Oe5UYa2fXQWLGI2XuRQ35arXqlE8NR Q6NolbyN0e0S7XpUBwYwmAsTLWBusRG4BLE8H4BbC3QE8ePVQl3r5CI+huU6tacs imIK5OhJrgeqwkGW/IYcbjxp8DW6aPr40jYXX+ccCwrUEgEgzpPj+RVJlVyRI4IZ zR9wo9NCnNrMFa+ITaFX22jFrcdVDluRCRsBB9qwr92o9sV5KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbILGG+qQ5mIld8xaM1HiTKof0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvNTNiYmEwNDEtNTNjNC0z YjhhLWFmZmUtNmNkNTBhYzI2MjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7m9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDhI4ABwzwsgnnEOcB0XlDd6OAKCptEaYW8xleMPTGlG4fmyXDz5rRP fcjOhbYoUiiMd5y38d+dbe6pNiLpQVLzEvtUghDMmGJNwjNxAtBrg6AnznI1AGKM p7/vyHgTiR26YDUiB6hcWvoeChPmDwamw6xDH+DJOwTeDpeeMwbWxfEBFXBiPt+K xLd8eRRIUgSIjjPuAVRiHjFX4gNWRN9dk4iQJBez5gmzz0CDpCekE6qlLq0LB22f /7rSgpuA71BAzh/6kXJUXJqlgrLYLp5Xn8Y18Ro0IkGoIS65OhraaTO3jFMb97hH HevqU30aopNA5CLGJmBQ5WEdfRU0mf8= -----END CERTIFICATE-----Generated at Sun Apr 6 13:36:34 2025 by rpki-client