$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa File: 2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa (raw, json) Hash identifier: 7rGh4Cz47miGLyOFbpSMxFvuhgb43Cb79QsIZLXHbTw= Subject key identifier: E9:CE:7E:70:67:EB:F1:50:E7:93:61:CD:9D:A4:D4:44:77:14:05:1F Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F43285848CEB18109373D0DED9C48A700 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa Signing time: Fri 07 Feb 2025 21:01:03 +0000 ROA not before: Fri 07 Feb 2025 21:01:03 +0000 ROA not after: Thu 08 May 2025 20:01:03 +0000 asID: 2615 IP address blocks: 147.1.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ce:b1:81:09:37:3d:0d:ed:9c:48:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Feb 7 21:01:03 2025 GMT Not After : May 8 20:01:03 2025 GMT Subject: CN=92d27808-1a63-49e3-bfc6-8125f79a7ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b6:fb:81:03:2f:0a:fa:fb:f2:63:de:d5:54: dc:86:5f:34:03:53:4c:5f:44:ec:3f:e3:24:d4:c4: 8d:bd:a7:81:b8:d8:0f:d2:d0:fc:2a:6d:4b:bf:43: b3:6d:37:5e:7f:96:6a:c2:1f:2e:55:30:9f:a5:0b: b2:df:11:26:f6:9e:41:4c:1f:12:27:18:20:86:5b: 85:59:67:88:1e:d9:a2:93:dc:73:e5:0c:31:46:b9: 23:f3:4c:a8:44:50:bc:75:bb:7e:ac:32:d0:e9:d6: eb:52:d3:5e:15:bb:ff:dd:20:f1:74:c1:e8:82:22: 68:7c:57:d6:4d:08:14:1c:54:84:9d:ca:d4:60:88: 27:2a:d2:4e:f0:3d:de:4a:3d:d8:ec:2e:00:77:2b: b1:66:b9:01:18:f0:df:52:d3:cd:13:8d:6a:98:a5: 71:97:5b:05:99:fa:b0:17:fe:75:35:0c:20:50:6e: 0c:5a:41:2a:4e:01:3a:f2:5e:e1:4d:a6:86:54:87: 1a:06:ed:8a:35:b5:74:5b:39:65:c2:ef:d5:d5:f5: e9:6b:1e:d9:98:14:13:ef:52:4c:83:09:ae:a6:96: f8:75:88:7c:10:f8:98:f7:c7:ac:11:ca:cd:fe:ca: f2:81:be:b5:e0:41:ce:38:0c:49:e9:b0:eb:c6:ac: 1e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CE:7E:70:67:EB:F1:50:E7:93:61:CD:9D:A4:D4:44:77:14:05:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:8f:19:b9:fe:06:35:aa:20:12:88:05:59:8f:88:fc:03:b4: f7:7e:b8:9c:ac:12:67:80:78:a4:52:25:42:ba:70:72:b1:a4: 24:25:d8:61:55:49:52:ae:14:4a:e7:55:4c:6e:c6:15:31:aa: c1:4a:f3:4b:a9:bd:86:b1:e0:9b:90:1f:3e:c9:e1:01:75:f1: 74:87:47:e3:e0:3d:10:bc:c8:20:c0:ff:d6:fa:ce:15:cc:9b: cb:6f:40:1e:ea:98:39:d6:4e:e6:d6:65:09:e5:78:f2:02:b6: 12:29:2d:56:4d:0f:c4:67:7a:54:a6:82:6c:9e:c0:c0:b3:9f: d2:36:fb:0b:50:96:4f:d7:f6:3b:73:6e:2b:f5:de:4a:48:18: 09:75:61:c5:8a:ba:e7:63:78:0f:ec:3e:d3:4f:83:73:f6:7d: 7b:6f:db:5e:9a:e7:89:15:c7:84:46:ee:1e:aa:43:38:1b:7c: e4:99:4b:bc:e9:ad:68:74:9a:a1:b5:e3:9c:ec:ab:64:24:de: 1c:30:5f:5a:0c:1e:c8:11:19:f3:8f:72:7f:97:92:36:00:2f: 14:7e:34:2f:88:6f:15:1d:bd:1d:6e:b3:fa:b9:1f:59:9e:eb: 76:da:57:54:e1:cf:1a:97:7c:b8:ba:92:a9:17:2a:5a:ca:56: 0f:3c:33:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjOsYEJNz0N7ZxIpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDIwNzIxMDEwM1oXDTI1MDUwODIwMDEwM1owLzEtMCsGA1UEAxMk OTJkMjc4MDgtMWE2My00OWUzLWJmYzYtODEyNWY3OWE3YWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrb7gQMvCvr78mPe1VTchl80A1NMX0TsP+Mk 1MSNvaeBuNgP0tD8Km1Lv0OzbTdef5Zqwh8uVTCfpQuy3xEm9p5BTB8SJxgghluF WWeIHtmik9xz5QwxRrkj80yoRFC8dbt+rDLQ6dbrUtNeFbv/3SDxdMHogiJofFfW TQgUHFSEncrUYIgnKtJO8D3eSj3Y7C4AdyuxZrkBGPDfUtPNE41qmKVxl1sFmfqw F/51NQwgUG4MWkEqTgE68l7hTaaGVIcaBu2KNbV0Wzllwu/V1fXpax7ZmBQT71JM gwmuppb4dYh8EPiY98esEcrN/srygb614EHOOAxJ6bDrxqwerQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnOfnBn6/FQ55NhzZ2k1ER3FAUfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMmNkM2M3NzItMTEyYy0z MjIyLWFlOGUtN2FmMDRiZjFkNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKPGbn+BjWqIBKIBVmPiPwDtPd+uJysEmeAeKRSJUK6cHKxpCQl2GFV SVKuFErnVUxuxhUxqsFK80upvYax4JuQHz7J4QF18XSHR+PgPRC8yCDA/9b6zhXM m8tvQB7qmDnWTubWZQnlePICthIpLVZND8RnelSmgmyewMCzn9I2+wtQlk/X9jtz biv13kpIGAl1YcWKuudjeA/sPtNPg3P2fXtv216a54kVx4RG7h6qQzgbfOSZS7zp rWh0mqG145zsq2Qk3hwwX1oMHsgRGfOPcn+XkjYALxR+NC+IbxUdvR1us/q5H1me 63baV1ThzxqXfLi6kqkXKlrKVg88Mxo= -----END CERTIFICATE-----Generated at Sat Apr 12 14:56:14 2025 by rpki-client