$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/a4b48984-e8b6-30e9-a280-748e863bc46c.roa File: a4b48984-e8b6-30e9-a280-748e863bc46c.roa (raw, json) Hash identifier: ALBczUHovxufCu1FnVJZKSQ1b4jvJ0LSss/8rNtHJGc= Subject key identifier: BD:D0:86:73:7C:67:0D:BB:7F:54:BE:A1:B7:94:FC:37:59:05:80:58 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F43285848C2BDD4BEE7F2B83E1BBE7500 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/a4b48984-e8b6-30e9-a280-748e863bc46c.roa Signing time: Mon 03 Feb 2025 14:16:12 +0000 ROA not before: Mon 03 Feb 2025 14:16:12 +0000 ROA not after: Sun 04 May 2025 13:16:12 +0000 asID: 2615 IP address blocks: 147.1.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:bd:d4:be:e7:f2:b8:3e:1b:be:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Feb 3 14:16:12 2025 GMT Not After : May 4 13:16:12 2025 GMT Subject: CN=8d0f5f0c-a1ce-4f32-9f2f-712f7ac917ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a0:9f:3d:e2:df:04:71:cd:53:59:2b:10:80: 34:4a:9a:fc:76:9c:48:ea:d7:f0:f1:dd:21:e0:93: 82:fa:b2:4c:f1:3a:b5:5d:17:86:c2:aa:b7:a0:05: 6e:99:b0:f0:52:0b:20:12:bb:b4:18:cb:67:45:c1: c7:37:a2:c1:41:9e:85:64:74:d6:2a:26:70:4b:3b: 8e:92:7c:65:44:dd:60:08:99:44:5c:c0:2c:9b:b8: 4f:15:ed:25:ca:28:9e:4f:e0:15:8a:4e:60:a7:09: 87:5c:30:e0:62:f9:3c:c0:d4:62:97:0f:48:44:04: 05:32:e0:8a:b7:8c:3c:9b:96:9e:92:2b:cb:f4:78: b9:04:38:74:be:cc:fc:22:dd:89:fa:f3:f9:1c:1e: ea:f8:0f:1c:16:4d:58:fd:bc:2e:5e:89:1a:8d:22: 33:aa:f7:3b:9d:b4:e0:85:37:23:88:be:b1:f3:96: f6:3a:4d:99:18:53:22:5c:d3:0d:18:68:1f:a5:11: 82:ac:7c:fd:e6:37:b3:ad:f6:2a:0c:de:67:92:b2: 0b:92:33:64:13:e7:5e:7a:2e:aa:34:e2:f7:4c:78: f2:50:27:c5:33:6c:eb:77:63:42:b9:21:e3:43:09: 9c:9d:92:4f:84:76:11:96:91:06:e2:91:b2:de:4c: a8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D0:86:73:7C:67:0D:BB:7F:54:BE:A1:B7:94:FC:37:59:05:80:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/a4b48984-e8b6-30e9-a280-748e863bc46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:15:0a:c1:c5:e3:34:ef:ed:bb:8e:d3:e6:50:09:64:38:70: d1:08:74:07:78:e2:52:99:72:3c:ee:54:f1:d8:b7:f5:c9:23: 7b:55:37:85:86:a9:e7:61:eb:34:14:f1:d8:88:b8:d2:35:55: a0:b6:9c:2c:01:d2:8a:96:65:b9:17:c4:4f:3a:1e:86:f3:e4: 79:69:1d:03:39:34:8e:65:3b:b3:30:ea:ca:48:93:0e:e3:e4: ae:c3:12:7d:24:b0:8e:27:c9:96:76:c0:1a:c2:2e:6d:89:b7: ae:d4:2d:4d:35:9b:44:a9:79:c0:35:08:a4:0d:e4:8c:bb:0b: 32:fb:9f:2f:62:48:b1:51:70:83:77:47:9e:0a:c2:fd:0b:31: ab:8a:3b:99:12:bf:70:49:79:8c:19:57:08:4b:fc:a0:bb:a4: 66:ec:2b:e4:39:8a:18:99:5c:b0:db:b6:1a:2e:51:08:50:ad: c6:37:85:9c:a6:b4:58:c0:22:c9:12:92:4a:b7:e8:8a:46:f8: bd:d8:cd:d6:92:f6:2e:77:23:92:a7:24:2f:bf:c0:1c:be:a4: bc:1b:e4:c1:85:d4:4d:26:3b:44:ed:23:74:de:bb:b7:e3:6a: 60:d7:4a:3d:cd:6c:60:f5:06:7b:a9:e9:66:2d:6c:dd:e5:b2: 61:b1:8b:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCvdS+5/K4Phu+dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDIwMzE0MTYxMloXDTI1MDUwNDEzMTYxMlowLzEtMCsGA1UEAxMk OGQwZjVmMGMtYTFjZS00ZjMyLTlmMmYtNzEyZjdhYzkxN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6CfPeLfBHHNU1krEIA0Spr8dpxI6tfw8d0h 4JOC+rJM8Tq1XReGwqq3oAVumbDwUgsgEru0GMtnRcHHN6LBQZ6FZHTWKiZwSzuO knxlRN1gCJlEXMAsm7hPFe0lyiieT+AVik5gpwmHXDDgYvk8wNRilw9IRAQFMuCK t4w8m5aekivL9Hi5BDh0vsz8It2J+vP5HB7q+A8cFk1Y/bwuXokajSIzqvc7nbTg hTcjiL6x85b2Ok2ZGFMiXNMNGGgfpRGCrHz95jezrfYqDN5nkrILkjNkE+deei6q NOL3THjyUCfFM2zrd2NCuSHjQwmcnZJPhHYRlpEG4pGy3kyobwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3QhnN8Zw27f1S+obeU/DdZBYBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvYTRiNDg5ODQtZThiNi0z MGU5LWEyODAtNzQ4ZTg2M2JjNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcVCsHF4zTv7buO0+ZQCWQ4cNEIdAd44lKZcjzuVPHYt/XJI3tVN4WG qedh6zQU8diIuNI1VaC2nCwB0oqWZbkXxE86Hobz5HlpHQM5NI5lO7Mw6spIkw7j 5K7DEn0ksI4nyZZ2wBrCLm2Jt67ULU01m0SpecA1CKQN5Iy7CzL7ny9iSLFRcIN3 R54Kwv0LMauKO5kSv3BJeYwZVwhL/KC7pGbsK+Q5ihiZXLDbthouUQhQrcY3hZym tFjAIskSkkq36IpG+L3YzdaS9i53I5KnJC+/wBy+pLwb5MGF1E0mO0TtI3Teu7fj amDXSj3NbGD1Bnup6WYtbN3lsmGxi4k= -----END CERTIFICATE-----Generated at Sat Apr 12 13:40:17 2025 by rpki-client