$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa File: cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa (raw, json) Hash identifier: PD5ZV077qgBkdXZxsaUi4xBxpOIDb9nwFZfyBlVu93w= Subject key identifier: 7C:A4:BE:47:23:CA:CC:C4:06:82:21:CA:5E:3B:8C:B3:A7:D4:20:1A Certificate issuer: /CN=994eeb97-12ef-4721-824f-9ba41ba67983 Certificate serial: 010D0C9F43285848AF2B74333B059BCD2CFAE580 Authority key identifier: 1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 23539 IP address blocks: 147.185.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:74:33:3b:05:9b:cd:2c:fa:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994eeb97-12ef-4721-824f-9ba41ba67983 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=ffa6c4a1-436b-4d89-b70c-9c7838db7ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:66:57:1a:11:e8:65:88:23:44:84:96:61:39: 68:ff:dc:d5:4f:ec:c2:56:a4:53:f3:d5:2a:80:72: 02:c0:b4:58:9b:0d:9a:46:d1:44:1b:d9:3a:1b:27: ec:49:d4:93:5d:85:ab:8d:95:2f:fd:2a:2c:84:1f: da:d6:83:f7:f0:45:10:28:61:7b:cc:80:ee:19:25: 47:c7:c1:70:00:6b:96:f3:92:57:83:3c:ac:8d:f9: 34:b9:39:dd:62:34:0b:f4:1f:52:e5:10:2d:97:96: 57:f6:7d:b7:1d:0c:1f:6d:71:9d:6a:5d:19:4e:04: 8a:42:66:90:55:6a:70:b2:c4:e1:b2:bb:d9:a1:c6: 0a:4a:34:e7:69:29:6a:aa:c7:04:2f:44:61:5f:87: fb:83:4f:b9:c5:e3:e1:3f:0d:89:bc:f4:9b:ec:6c: 6e:ee:96:72:55:d0:2b:36:a7:11:4c:07:1f:07:10: 3c:42:43:54:ae:05:83:9d:47:40:dd:d9:6d:f1:d1: e0:4d:0e:18:b4:1a:2e:0d:69:ca:85:83:3c:b8:2b: da:24:75:c3:cb:bf:c8:6b:0a:bd:f6:38:7e:5e:5e: 8d:bb:3c:e7:69:c4:95:6d:40:8e:3e:45:2e:aa:51: de:c7:6e:5f:03:27:e2:12:ef:c8:8d:42:d6:d2:94: a8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A4:BE:47:23:CA:CC:C4:06:82:21:CA:5E:3B:8C:B3:A7:D4:20:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl X509v3 Authority Key Identifier: keyid:1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer sbgp-ipAddrBlock: critical IPv4: 147.185.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ca:47:00:ab:c6:77:c9:c7:45:04:3e:28:be:20:d6:d7:cc: ae:d4:f4:26:bc:01:94:2f:d9:79:3f:73:5a:db:dd:9c:02:18: 80:ee:e2:06:78:2c:3d:86:05:e2:36:88:66:7d:9b:04:84:12: d5:4e:08:8e:61:c7:2f:47:f1:86:3a:ca:7d:ba:f7:99:83:74: 04:fb:ec:55:0a:0a:83:d3:69:e5:9b:3a:6e:ad:bc:33:dd:19: f2:94:59:49:59:71:e9:24:44:aa:72:3a:63:d8:d1:8d:c5:bb: 73:ed:9c:0f:97:43:7f:f2:ff:cf:2a:20:51:bb:32:73:82:55: 9e:1b:b8:16:04:5c:b9:c4:7f:d4:2e:4f:56:d1:96:97:37:8b: ab:03:d8:3c:c3:a8:08:69:33:8c:0c:69:97:a1:d9:70:1f:c8: 79:1a:e2:13:ca:f5:b1:f1:56:4d:19:71:20:13:19:c2:a8:6b: 0c:cc:23:bb:49:49:43:7d:ff:f3:00:ed:c8:db:d2:63:04:54: 7d:0e:c3:4a:5b:57:d6:c4:81:d2:3e:bb:92:71:6e:d6:0b:32: 38:72:70:38:41:78:71:eb:97:19:bc:82:2a:3c:c1:f3:c6:34: 99:92:b6:b9:fa:13:50:e6:28:c5:57:45:d3:c1:72:17:15:1c: c2:09:c5:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK3QzOwWbzSz65YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0ZWViOTctMTJlZi00NzIxLTgyNGYtOWJhNDFiYTY3 OTgzMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZmZhNmM0YTEtNDM2Yi00ZDg5LWI3MGMtOWM3ODM4ZGI3ZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2ZXGhHoZYgjRISWYTlo/9zVT+zCVqRT89Uq gHICwLRYmw2aRtFEG9k6GyfsSdSTXYWrjZUv/SoshB/a1oP38EUQKGF7zIDuGSVH x8FwAGuW85JXgzysjfk0uTndYjQL9B9S5RAtl5ZX9n23HQwfbXGdal0ZTgSKQmaQ VWpwssThsrvZocYKSjTnaSlqqscEL0RhX4f7g0+5xePhPw2JvPSb7Gxu7pZyVdAr NqcRTAcfBxA8QkNUrgWDnUdA3dlt8dHgTQ4YtBouDWnKhYM8uCvaJHXDy7/Iawq9 9jh+Xl6NuzznacSVbUCOPkUuqlHex25fAyfiEu/IjULW0pSooQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHykvkcjyszEBoIhyl47jLOn1CAaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRl ZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0MWJhNjc5ODMvY2RjNTU1NTktOGNhMC0z MmFlLTkyNzktZGYzM2NmOWVmNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTk0ZWViOTctMTJlZi00NzIxLTgy NGYtOWJhNDFiYTY3OTgzLzk5NGVlYjk3LTEyZWYtNDcyMS04MjRmLTliYTQxYmE2 Nzk4My5jcmwwHwYDVR0jBBgwFoAUHHbEf8LL+oxCYBMTd941QZrU5EQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRlZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0 MWJhNjc5ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7m8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnKRwCrxnfJx0UEPii+INbXzK7U9Ca8AZQv2Xk/c1rb3ZwCGIDu4gZ4 LD2GBeI2iGZ9mwSEEtVOCI5hxy9H8YY6yn2695mDdAT77FUKCoPTaeWbOm6tvDPd GfKUWUlZcekkRKpyOmPY0Y3Fu3PtnA+XQ3/y/88qIFG7MnOCVZ4buBYEXLnEf9Qu T1bRlpc3i6sD2DzDqAhpM4wMaZeh2XAfyHka4hPK9bHxVk0ZcSATGcKoawzMI7tJ SUN9//MA7cjb0mMEVH0Ow0pbV9bEgdI+u5JxbtYLMjhycDhBeHHrlxm8gio8wfPG NJmStrn6E1DmKMVXRdPBchcVHMIJxZA= -----END CERTIFICATE-----Generated at Fri Apr 4 19:29:40 2025 by rpki-client