$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa File: 9ba08d73-b505-3fa5-a35b-23519c486b5c.roa (raw, json) Hash identifier: VmXXunpSsijWdOP6ZoKIAzgh5sNv1uApmVMI5rg6qjI= Subject key identifier: AA:95:CE:C5:0E:3E:58:2F:1C:F3:4A:FF:41:E9:71:57:B3:D3:02:07 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F43285848CEB5827181CF7777403E8680 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa Signing time: Fri 07 Feb 2025 21:09:08 +0000 ROA not before: Fri 07 Feb 2025 21:09:08 +0000 ROA not after: Thu 08 May 2025 20:09:08 +0000 asID: 2615 IP address blocks: 147.1.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ce:b5:82:71:81:cf:77:77:40:3e:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Feb 7 21:09:08 2025 GMT Not After : May 8 20:09:08 2025 GMT Subject: CN=994ee237-7ed4-4139-b6c8-61e4df375589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a2:35:3e:35:e8:63:63:5b:93:46:ae:78:c6: 83:7d:f6:d8:32:9d:1c:f1:f6:67:89:8d:87:b7:11: 9f:d9:3e:88:16:ef:1f:76:c5:7c:96:89:29:5f:82: 56:6d:4a:10:81:c3:45:be:6e:2b:3f:01:74:db:5f: 23:07:8b:62:57:0a:d0:3b:5c:81:8a:e2:01:54:07: bf:74:e8:1e:b1:5f:b4:f1:8a:c4:57:76:6e:d4:2c: ca:e8:21:c8:51:ba:40:fb:e7:4c:29:d7:a9:14:52: 33:c4:ee:99:41:9a:e4:20:71:3e:a0:e3:ed:46:93: 9c:6b:84:8f:f1:39:ed:d3:74:43:1b:bb:2f:ff:02: 22:36:41:a6:7d:b7:5d:e2:62:d3:13:ef:3b:c4:cf: 6d:37:6b:e1:43:c5:6c:94:b6:9e:8b:2a:d3:ed:65: d7:a9:22:49:82:b1:92:1d:6d:c9:75:06:42:00:84: 70:93:f8:3f:b8:04:72:56:75:00:db:01:3b:0a:60: 74:31:ba:f8:df:4b:1e:05:e7:9c:f3:7a:1f:37:cb: 30:8d:e2:01:f1:20:a8:09:a7:6b:91:7d:81:7a:57: bf:d4:2d:84:af:a7:1c:3c:9a:1e:19:24:94:5d:a3: c9:ce:a6:82:1f:94:8e:fa:99:16:ff:93:32:bc:99: a6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:95:CE:C5:0E:3E:58:2F:1C:F3:4A:FF:41:E9:71:57:B3:D3:02:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e9:07:26:68:2e:c7:25:ac:56:77:ee:1f:f9:14:2e:be:87: fa:12:35:39:e1:56:f3:7a:87:e7:f8:91:b7:a9:fc:14:99:1a: 6f:86:06:41:3d:31:3d:5f:ad:bb:1f:a0:71:ef:25:11:8a:65: 28:53:1f:55:7d:63:ef:0a:e0:2d:d3:2c:ff:6c:29:d6:08:42: 53:a6:55:c5:85:64:1f:0b:15:68:55:5d:73:6b:15:e3:41:bd: 2a:b4:93:ba:ea:c1:12:46:b4:05:65:7f:10:94:74:2d:c9:11: 30:71:4b:7d:6a:f2:d5:0d:7f:c7:48:11:7b:4e:2d:95:18:76: a9:36:ba:fc:90:2d:d1:6c:ec:e3:e5:8a:72:e7:3c:fc:9b:3b: 71:32:42:e6:d7:f8:57:d0:7a:e8:63:70:6e:34:e5:09:ae:b8: 3a:04:a4:39:7e:59:17:27:62:63:1f:6c:82:75:ef:85:b4:6e: 61:67:9e:9f:a1:90:b1:8f:07:36:33:ad:9c:ca:7c:07:e4:1e: de:b0:3d:7b:03:72:95:b9:65:d5:f1:4c:ae:9c:2d:01:93:af: dc:7b:f2:37:ba:dd:40:0b:59:c1:c4:b5:ed:6a:16:3d:b6:e0: 0f:56:37:ed:c8:af:e9:8c:ff:74:ca:eb:f3:0e:39:17:df:4a: ba:11:71:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjOtYJxgc93d0A+hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDIwNzIxMDkwOFoXDTI1MDUwODIwMDkwOFowLzEtMCsGA1UEAxMk OTk0ZWUyMzctN2VkNC00MTM5LWI2YzgtNjFlNGRmMzc1NTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKI1PjXoY2Nbk0aueMaDffbYMp0c8fZniY2H txGf2T6IFu8fdsV8lokpX4JWbUoQgcNFvm4rPwF0218jB4tiVwrQO1yBiuIBVAe/ dOgesV+08YrEV3Zu1CzK6CHIUbpA++dMKdepFFIzxO6ZQZrkIHE+oOPtRpOca4SP 8Tnt03RDG7sv/wIiNkGmfbdd4mLTE+87xM9tN2vhQ8VslLaeiyrT7WXXqSJJgrGS HW3JdQZCAIRwk/g/uARyVnUA2wE7CmB0Mbr430seBeec83ofN8swjeIB8SCoCadr kX2Bele/1C2Er6ccPJoeGSSUXaPJzqaCH5SO+pkW/5MyvJmmcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqVzsUOPlgvHPNK/0HpcVez0wIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvOWJhMDhkNzMtYjUwNS0z ZmE1LWEzNWItMjM1MTljNDg2YjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwESMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvpByZoLsclrFZ37h/5FC6+h/oSNTnhVvN6h+f4kbep/BSZGm+GBkE9 MT1frbsfoHHvJRGKZShTH1V9Y+8K4C3TLP9sKdYIQlOmVcWFZB8LFWhVXXNrFeNB vSq0k7rqwRJGtAVlfxCUdC3JETBxS31q8tUNf8dIEXtOLZUYdqk2uvyQLdFs7OPl inLnPPybO3EyQubX+FfQeuhjcG405QmuuDoEpDl+WRcnYmMfbIJ174W0bmFnnp+h kLGPBzYzrZzKfAfkHt6wPXsDcpW5ZdXxTK6cLQGTr9x78je63UALWcHEte1qFj22 4A9WN+3Ir+mM/3TK6/MOORffSroRcT0= -----END CERTIFICATE-----Generated at Sat Apr 12 13:40:12 2025 by rpki-client