$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8c35e725-cb7a-34fc-b8dd-3626efeea859.roa File: 8c35e725-cb7a-34fc-b8dd-3626efeea859.roa (raw, json) Hash identifier: 1Nwkn7JtQ1ExDPmaswR33IryrX1YWdPVZmwtLNg+RT4= Subject key identifier: 8B:49:A7:F2:07:9D:68:48:43:31:C6:1C:01:CA:BB:A7:75:C0:0D:79 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584954183F4F20E9C41776FD3720 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8c35e725-cb7a-34fc-b8dd-3626efeea859.roa Signing time: Thu 27 Mar 2025 15:50:35 +0000 ROA not before: Thu 27 Mar 2025 15:50:35 +0000 ROA not after: Wed 25 Jun 2025 15:50:35 +0000 asID: 2615 IP address blocks: 147.1.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:54:18:3f:4f:20:e9:c4:17:76:fd:37:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Mar 27 15:50:35 2025 GMT Not After : Jun 25 15:50:35 2025 GMT Subject: CN=74e30c96-f02c-4a2c-b6a3-4aaddf697a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:6f:c9:c0:32:6c:ca:1a:c0:cd:e5:47:42: 5a:e3:f8:5e:30:57:ce:f0:34:e8:e8:ca:17:d3:79: 00:58:4c:44:7d:d8:42:10:2c:b0:d0:62:0b:36:c6: 79:a1:d8:12:5e:71:e5:06:a4:ab:cd:39:f9:7d:34: 70:75:4f:30:a1:09:df:95:ed:e3:15:92:90:5f:40: a3:18:02:04:7d:2e:ab:1e:d4:1b:22:1b:f6:a0:9a: 2a:56:40:ee:01:39:72:de:93:92:52:6d:bb:ad:52: 0d:f7:5b:00:02:a4:2a:0f:47:76:a4:b0:1d:e1:a4: 36:52:80:74:81:d7:ac:94:ad:fc:98:90:fe:df:5e: 23:01:a1:18:1f:c8:55:c1:58:5c:95:ca:aa:ed:c7: c2:a5:11:ae:22:4a:1f:c3:e9:55:07:e2:87:41:7d: 8c:c5:f6:bc:6e:27:ea:8d:83:ea:40:e4:8e:d4:b3: 9f:39:4f:cc:e2:46:22:d8:9a:b7:b2:cd:eb:5e:4b: 98:ea:e3:e6:f0:35:60:6b:f4:b4:aa:d9:a0:f7:6c: c3:87:bf:f9:02:99:ad:42:8d:9a:f9:e4:ce:32:0b: 33:de:bb:d7:70:53:ce:f3:e1:7e:3a:f3:d8:9e:aa: 09:e5:61:ae:70:d4:89:39:56:2c:6a:f9:71:36:91: 55:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:49:A7:F2:07:9D:68:48:43:31:C6:1C:01:CA:BB:A7:75:C0:0D:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8c35e725-cb7a-34fc-b8dd-3626efeea859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d1:29:ac:be:19:f0:8a:de:0d:54:96:3c:9c:45:86:25:bd: 36:0b:b2:b3:82:da:18:b2:bc:20:d3:28:12:7f:c2:01:33:48: b0:58:97:ca:13:98:45:4e:ec:11:ba:81:ca:3a:ee:90:77:ee: 07:bb:87:a2:f2:fc:70:f0:66:ac:b3:17:d0:1d:79:d0:48:22: d0:3b:7f:5a:86:41:ae:32:1a:b5:5e:8e:a1:59:69:14:b7:97: 2e:12:58:51:2b:0e:72:7a:f4:f9:7a:65:ad:03:fb:dd:5b:35: e0:70:05:1d:30:12:b0:0e:d5:5a:70:1c:ee:10:50:d4:9b:c2: 74:83:8d:d8:de:35:d2:b2:d7:7e:ad:71:2f:c9:42:87:2e:76: f4:2a:03:e3:82:f3:24:ce:82:76:44:a6:9f:6d:fd:0f:78:17: 19:4c:91:13:4b:b9:15:72:3b:e0:58:b3:2e:39:ab:e4:db:1f: 65:b9:23:71:4b:a7:2a:8f:02:8b:a7:d2:5c:b6:d8:c3:41:16: ef:d4:84:e5:cf:3b:c6:f5:89:de:3d:d3:00:b2:e3:44:d7:59: 5a:c5:cc:09:78:f8:39:56:77:ef:4e:2a:68:c8:f4:6a:95:06: f5:d6:5f:69:25:58:56:6d:a5:31:d5:e7:f8:30:8b:c2:8b:b3: 3a:af:1b:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElUGD9PIOnEF3b9NyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDMyNzE1NTAzNVoXDTI1MDYyNTE1NTAzNVowLzEtMCsGA1UEAxMk NzRlMzBjOTYtZjAyYy00YTJjLWI2YTMtNGFhZGRmNjk3YTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtapvycAybMoawM3lR0Ja4/heMFfO8DTo6MoX 03kAWExEfdhCECyw0GILNsZ5odgSXnHlBqSrzTn5fTRwdU8woQnfle3jFZKQX0Cj GAIEfS6rHtQbIhv2oJoqVkDuATly3pOSUm27rVIN91sAAqQqD0d2pLAd4aQ2UoB0 gdeslK38mJD+314jAaEYH8hVwVhclcqq7cfCpRGuIkofw+lVB+KHQX2Mxfa8bifq jYPqQOSO1LOfOU/M4kYi2Jq3ss3rXkuY6uPm8DVga/S0qtmg92zDh7/5ApmtQo2a +eTOMgsz3rvXcFPO8+F+OvPYnqoJ5WGucNSJOVYsavlxNpFVrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItJp/IHnWhIQzHGHAHKu6d1wA15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvOGMzNWU3MjUtY2I3YS0z NGZjLWI4ZGQtMzYyNmVmZWVhODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzRKay+GfCK3g1UljycRYYlvTYLsrOC2hiyvCDTKBJ/wgEzSLBYl8oT mEVO7BG6gco67pB37ge7h6Ly/HDwZqyzF9AdedBIItA7f1qGQa4yGrVejqFZaRS3 ly4SWFErDnJ69Pl6Za0D+91bNeBwBR0wErAO1VpwHO4QUNSbwnSDjdjeNdKy136t cS/JQocudvQqA+OC8yTOgnZEpp9t/Q94FxlMkRNLuRVyO+BYsy45q+TbH2W5I3FL pyqPAoun0ly22MNBFu/UhOXPO8b1id490wCy40TXWVrFzAl4+DlWd+9OKmjI9GqV BvXWX2klWFZtpTHV5/gwi8KLszqvGyU= -----END CERTIFICATE-----Generated at Sat Apr 12 15:01:05 2025 by rpki-client