$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa File: 2b70cd1b-681d-3341-8277-ce21a1801227.roa (raw, json) Hash identifier: NH++ISrEfrubqte1VWyRYsEnHh4HpeQWdYJ1m94sNvY= Subject key identifier: 7A:CD:D7:95:F9:C0:E9:CE:C5:6E:3D:28:E8:FB:D2:F5:85:E8:3B:0C Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F43285848ECD4AF2EBDBC66C4C84D8240 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa Signing time: Tue 18 Feb 2025 16:06:11 +0000 ROA not before: Tue 18 Feb 2025 16:06:11 +0000 ROA not after: Mon 19 May 2025 15:06:11 +0000 asID: 2615 IP address blocks: 147.1.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:d4:af:2e:bd:bc:66:c4:c8:4d:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Feb 18 16:06:11 2025 GMT Not After : May 19 15:06:11 2025 GMT Subject: CN=552d890c-d502-423e-9eb7-c90747fbd424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f7:a8:34:65:00:7b:9a:79:1b:7c:9f:c3:7a: b8:b5:ca:6f:f5:70:fa:3b:3b:94:54:47:2b:04:3b: f9:5c:c5:b1:76:91:a7:eb:fe:2c:47:8e:39:11:e8: da:16:1a:92:11:ee:73:b2:a2:24:b8:3f:70:76:2c: f3:94:68:9f:19:91:e1:48:df:74:0d:84:05:be:80: ed:1d:5d:74:e9:3c:5c:79:bc:c8:05:bc:f4:57:45: 1f:3c:eb:8b:31:20:1b:f6:fa:6d:7b:4c:4b:30:23: df:f6:5c:7e:0b:39:07:b5:66:fa:4d:a2:15:8c:07: 86:78:5c:d1:1b:bc:cd:3f:92:98:16:74:0f:19:a3: 97:f5:83:ec:1c:cd:7c:9c:25:cd:15:39:e5:84:8c: 40:97:f9:54:5b:2b:46:8d:82:eb:e2:c1:ba:a7:df: 41:dd:6c:07:00:a0:5a:d3:63:fc:82:f7:59:f1:b1: 0a:bb:c2:48:d8:a4:29:de:30:5b:82:ed:32:aa:e5: 6e:a1:62:95:53:7f:66:97:5b:d7:96:a2:c9:c3:e0: 2a:ad:8a:f1:95:f0:dd:ca:39:d9:a5:94:b8:ce:e6: b9:0a:cd:d6:6f:65:b0:32:ec:2e:bb:aa:a1:29:c9: 07:2a:ef:6a:4e:94:f0:3b:71:75:e7:01:cc:97:03: 64:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CD:D7:95:F9:C0:E9:CE:C5:6E:3D:28:E8:FB:D2:F5:85:E8:3B:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:96:4f:8a:1c:b6:14:25:e0:d5:f0:77:b7:a0:3e:84:79:10: b1:56:57:7d:6b:21:dd:6c:23:49:ee:2e:c5:4e:78:be:d1:c1: 7c:b9:14:59:98:89:75:0f:da:00:60:31:3d:e6:15:dc:e7:8e: a4:59:f5:18:6d:5a:b2:9d:02:55:9f:2c:41:a2:1b:1b:c1:eb: 25:f8:20:bc:c6:38:c7:c2:d3:7d:f0:e6:a5:c0:fc:1b:81:ff: 5a:80:d0:7f:e0:1d:7a:11:74:c7:1e:80:e0:83:d0:d5:d5:13: 35:dd:d1:79:20:b9:e4:08:6c:0f:02:e7:d4:f1:54:41:83:5d: 9d:72:95:cf:cb:76:aa:53:8e:a5:20:78:1a:6f:68:e6:0f:91: 1b:83:08:9b:fc:c5:54:98:ab:4f:f6:30:d8:b8:1e:ed:02:99: 32:f9:23:fb:51:11:78:07:a6:d8:fb:69:bf:91:94:0f:84:8b: 1c:76:e9:6b:76:79:a0:83:57:7b:45:d1:08:86:aa:21:0e:4e: da:87:19:a7:23:00:60:c7:b8:77:dc:f1:41:8d:24:59:fe:b2: 66:0d:94:9b:f9:8a:e2:ea:e5:24:6e:e7:84:c4:bb:da:73:42: ba:78:bc:e8:68:f8:c8:f0:07:64:37:35:60:50:54:dc:34:1e: d4:a1:e6:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjs1K8uvbxmxMhNgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDIxODE2MDYxMVoXDTI1MDUxOTE1MDYxMVowLzEtMCsGA1UEAxMk NTUyZDg5MGMtZDUwMi00MjNlLTllYjctYzkwNzQ3ZmJkNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfeoNGUAe5p5G3yfw3q4tcpv9XD6OzuUVEcr BDv5XMWxdpGn6/4sR445EejaFhqSEe5zsqIkuD9wdizzlGifGZHhSN90DYQFvoDt HV106TxcebzIBbz0V0UfPOuLMSAb9vpte0xLMCPf9lx+CzkHtWb6TaIVjAeGeFzR G7zNP5KYFnQPGaOX9YPsHM18nCXNFTnlhIxAl/lUWytGjYLr4sG6p99B3WwHAKBa 02P8gvdZ8bEKu8JI2KQp3jBbgu0yquVuoWKVU39ml1vXlqLJw+AqrYrxlfDdyjnZ pZS4zua5Cs3Wb2WwMuwuu6qhKckHKu9qTpTwO3F15wHMlwNkJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrN15X5wOnOxW49KOj70vWF6DsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMmI3MGNkMWItNjgxZC0z MzQxLTgyNzctY2UyMWExODAxMjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmWT4octhQl4NXwd7egPoR5ELFWV31rId1sI0nuLsVOeL7RwXy5FFmY iXUP2gBgMT3mFdznjqRZ9RhtWrKdAlWfLEGiGxvB6yX4ILzGOMfC033w5qXA/BuB /1qA0H/gHXoRdMcegOCD0NXVEzXd0XkgueQIbA8C59TxVEGDXZ1ylc/LdqpTjqUg eBpvaOYPkRuDCJv8xVSYq0/2MNi4Hu0CmTL5I/tREXgHptj7ab+RlA+Eixx26Wt2 eaCDV3tF0QiGqiEOTtqHGacjAGDHuHfc8UGNJFn+smYNlJv5iuLq5SRu54TEu9pz Qrp4vOho+MjwB2Q3NWBQVNw0HtSh5gM= -----END CERTIFICATE-----Generated at Sat Apr 12 12:10:45 2025 by rpki-client