$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/80cd6a23-5ccd-3284-b7b0-5178308cfc25.roa File: 80cd6a23-5ccd-3284-b7b0-5178308cfc25.roa (raw, json) Hash identifier: TNYvfvL+gbleZAZHVcsv7cT29h21/fgMyyHKOdP2RBE= Subject key identifier: 61:11:01:3C:78:69:AB:BB:38:70:2E:CB:04:07:8E:99:FA:65:9A:D4 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F432858495419B3CCEB05D20916518300 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/80cd6a23-5ccd-3284-b7b0-5178308cfc25.roa Signing time: Thu 27 Mar 2025 15:53:31 +0000 ROA not before: Thu 27 Mar 2025 15:53:31 +0000 ROA not after: Wed 25 Jun 2025 15:53:31 +0000 asID: 2615 IP address blocks: 147.1.24.0/24 maxlen: 24 147.1.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:54:19:b3:cc:eb:05:d2:09:16:51:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Mar 27 15:53:31 2025 GMT Not After : Jun 25 15:53:31 2025 GMT Subject: CN=dfbca72e-a37b-48d9-95a8-0d2d4f19ca44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:54:6e:18:64:2b:1b:52:65:5d:b0:64:6c:19: 7e:1a:d6:9b:16:e4:89:b5:5c:f6:84:93:eb:11:37: af:d8:98:e6:a4:b2:ff:59:18:64:53:b9:b1:76:77: 68:62:19:3e:e7:e2:d7:65:f6:fc:e8:7c:be:70:2b: 25:4a:32:4c:28:71:86:7a:7a:5b:27:a5:90:c6:4a: 6d:a4:5f:22:cc:4f:84:23:fb:9c:d5:d6:36:7a:c5: d3:4c:09:f6:48:92:ea:ff:d4:8b:02:6b:13:17:6c: cb:0a:1c:94:a2:f6:4f:29:05:32:42:50:40:dc:67: d4:f0:30:bd:2a:95:2c:d3:e0:6e:e0:4d:26:15:97: b3:61:2f:75:00:30:1c:cc:b1:e0:64:46:72:e7:70: 71:b0:ec:f9:95:17:40:35:56:fc:db:f4:72:d9:1a: ad:29:32:16:71:34:ef:ad:a9:47:b9:9e:8c:a5:9f: 04:17:a4:5c:18:0c:b2:81:8c:f6:f5:6e:cf:c7:34: 60:af:a5:59:52:b0:e5:fa:6a:21:dd:6e:c9:dc:32: 9d:f9:f6:11:86:7f:2e:e7:ac:44:9e:ea:c6:25:51: 39:15:13:59:28:15:cf:36:bd:9c:7f:22:89:79:b7: 82:76:27:52:d8:fd:65:c3:cf:98:de:82:4b:2e:c3: 0c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:11:01:3C:78:69:AB:BB:38:70:2E:CB:04:07:8E:99:FA:65:9A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/80cd6a23-5ccd-3284-b7b0-5178308cfc25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:46:03:bc:2b:54:8e:86:99:0b:e1:1b:83:0f:3f:98:00:67: 10:d0:a8:66:d1:ee:01:ac:81:07:30:38:24:15:dc:80:b1:49: 49:36:c8:d6:81:62:ff:48:5c:7d:58:77:a3:c7:09:e9:4e:50: a5:d6:ea:56:52:1d:a3:88:b5:64:b5:bb:6a:80:d3:85:2a:8a: 3d:0d:f1:65:ea:97:7a:12:9e:37:56:57:70:7c:d9:1c:e3:c9: 19:8f:1d:0c:78:42:14:7b:e6:9c:02:7b:af:38:24:21:e8:6f: e6:4e:15:70:61:63:02:6f:ca:a7:fa:b3:cf:ac:2a:a0:f4:3a: 77:22:a1:4b:2f:96:5a:63:24:c0:a9:4d:dd:11:bc:2c:74:25: b4:4a:ca:83:15:8d:6e:cc:8d:78:8a:05:cf:37:49:47:b5:7e: 30:81:f9:01:80:4b:32:c0:79:ff:42:ea:f0:95:9f:30:cd:e0: 23:80:cc:4f:0f:07:52:c4:e4:8f:83:71:99:c1:bb:59:bf:cd: 2c:a2:24:fe:9f:05:95:18:6b:65:06:ee:5f:a8:ab:eb:ab:50: c3:5c:80:47:96:70:63:8a:80:d2:fb:23:85:df:d4:3f:b4:c6: cd:33:d9:7b:42:10:42:fd:09:82:4c:83:bd:9e:e2:bc:fc:c1: 16:9f:73:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElUGbPM6wXSCRZRgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDMyNzE1NTMzMVoXDTI1MDYyNTE1NTMzMVowLzEtMCsGA1UEAxMk ZGZiY2E3MmUtYTM3Yi00OGQ5LTk1YTgtMGQyZDRmMTljYTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VRuGGQrG1JlXbBkbBl+GtabFuSJtVz2hJPr ETev2JjmpLL/WRhkU7mxdndoYhk+5+LXZfb86Hy+cCslSjJMKHGGenpbJ6WQxkpt pF8izE+EI/uc1dY2esXTTAn2SJLq/9SLAmsTF2zLChyUovZPKQUyQlBA3GfU8DC9 KpUs0+Bu4E0mFZezYS91ADAczLHgZEZy53BxsOz5lRdANVb82/Ry2RqtKTIWcTTv ralHuZ6MpZ8EF6RcGAyygYz29W7PxzRgr6VZUrDl+moh3W7J3DKd+fYRhn8u56xE nurGJVE5FRNZKBXPNr2cfyKJebeCdidS2P1lw8+Y3oJLLsMMuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGERATx4aau7OHAuywQHjpn6ZZrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvODBjZDZhMjMtNWNjZC0z Mjg0LWI3YjAtNTE3ODMwOGNmYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkwEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhGA7wrVI6GmQvhG4MPP5gAZxDQqGbR7gGsgQcwOCQV3ICxSUk2yNaB Yv9IXH1Yd6PHCelOUKXW6lZSHaOItWS1u2qA04Uqij0N8WXql3oSnjdWV3B82Rzj yRmPHQx4QhR75pwCe684JCHob+ZOFXBhYwJvyqf6s8+sKqD0OncioUsvllpjJMCp Td0RvCx0JbRKyoMVjW7MjXiKBc83SUe1fjCB+QGASzLAef9C6vCVnzDN4COAzE8P B1LE5I+DcZnBu1m/zSyiJP6fBZUYa2UG7l+oq+urUMNcgEeWcGOKgNL7I4Xf1D+0 xs0z2XtCEEL9CYJMg72e4rz8wRafc/s= -----END CERTIFICATE-----Generated at Sat Apr 12 11:54:17 2025 by rpki-client