$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/af49c179-4874-3bdf-a079-ae8b005698b8.roa File: af49c179-4874-3bdf-a079-ae8b005698b8.roa (raw, json) Hash identifier: u8R1/vwxdbXh3PsyYmES9qNFb2Syn5kfOe2pIElQ/AE= Subject key identifier: 5E:EB:74:A7:68:48:C5:66:47:D8:11:F8:BB:A9:09:94:90:70:3C:6C Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F43285848CEAD0C67017320EADCDA8180 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/af49c179-4874-3bdf-a079-ae8b005698b8.roa Signing time: Fri 07 Feb 2025 20:52:05 +0000 ROA not before: Fri 07 Feb 2025 20:52:05 +0000 ROA not after: Thu 08 May 2025 19:52:05 +0000 asID: 2615 IP address blocks: 147.1.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ce:ad:0c:67:01:73:20:ea:dc:da:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Feb 7 20:52:05 2025 GMT Not After : May 8 19:52:05 2025 GMT Subject: CN=3a238174-5877-4489-b370-14eb6db669e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:6d:de:8c:84:b0:fd:d5:36:be:ce:ce:d0: f8:23:bc:73:36:c9:15:25:00:1a:9c:9d:0c:67:e5: 1c:3a:b5:d2:37:e6:c6:f0:f2:e4:d0:65:90:da:7b: 4a:70:79:d4:d1:74:8b:e3:22:19:2c:2b:28:2d:85: 25:37:86:92:e2:a6:80:e2:e0:73:d2:ba:f4:15:30: 58:46:3d:fe:31:f1:fc:c3:54:56:ef:72:b2:c3:28: ae:b7:54:24:92:2b:0b:1b:0e:7d:1f:0c:c0:92:35: 6c:61:1f:34:f6:51:e0:e5:91:cc:a5:d5:0f:df:8c: de:5d:0a:41:14:fa:21:72:a2:0c:e8:cb:fc:1f:48: 97:5e:41:d9:20:ce:df:f8:81:ae:6e:48:e4:7a:b2: 52:50:9d:2e:fd:80:8d:10:37:c6:b8:d1:6c:f2:7f: a5:80:0d:17:05:17:a0:16:21:38:6c:b2:5a:b4:5e: 81:ed:c7:c0:cf:99:25:7f:9c:03:e0:2b:72:89:57: 67:4d:d7:a5:49:25:75:e2:ea:b6:e2:aa:07:8b:8f: be:50:f5:4e:80:1b:6a:07:83:fd:b0:86:3a:86:75: 9c:e8:8e:18:3a:75:34:a8:f8:eb:e3:01:34:86:83: 01:c6:30:9e:6e:c2:fa:7b:b3:d6:32:d5:90:19:32: a0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EB:74:A7:68:48:C5:66:47:D8:11:F8:BB:A9:09:94:90:70:3C:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/af49c179-4874-3bdf-a079-ae8b005698b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e8:99:da:4c:52:60:73:f1:17:2e:2d:92:92:c5:e5:bc:c7: 8a:eb:11:4c:1f:87:26:7a:41:19:09:4d:29:7f:d3:df:bc:c9: e9:23:d7:74:c8:e6:6b:9d:57:74:67:c3:32:10:4a:97:84:cd: bf:5f:fd:3e:d5:b5:77:d9:63:1c:7e:40:9b:7d:77:a8:41:7c: 5c:e9:06:d9:a4:63:c0:6e:52:dd:e5:e0:cd:92:81:62:6a:ac: ef:81:f4:f7:e9:bf:3b:6c:12:d7:54:4f:8e:c1:70:9e:0d:d6: aa:f3:59:18:f0:df:cb:28:d1:b3:ce:32:05:94:56:56:bc:ac: 2f:d5:9b:46:4c:cc:04:a4:cf:5a:ea:3b:9f:b2:da:0b:61:b4: df:dc:74:16:a1:84:7f:02:88:0a:33:92:76:bd:c4:ee:fc:a5: 19:1c:1b:e9:aa:5a:f9:d4:b3:5d:2e:cb:75:6d:b0:cb:85:4a: ce:e0:2c:30:9c:68:36:4f:fe:44:b2:ab:c2:83:0b:43:5a:bf: 6d:77:ac:3a:a0:f9:2a:80:17:a6:9f:62:03:a0:27:22:82:c2: 7f:3d:21:2d:0c:37:1e:5b:d3:8a:ce:a1:90:e8:de:8d:07:66: 30:a3:45:d1:be:26:84:9d:c3:09:28:9f:9c:37:63:45:f5:fb: df:da:ce:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjOrQxnAXMg6tzagYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDIwNzIwNTIwNVoXDTI1MDUwODE5NTIwNVowLzEtMCsGA1UEAxMk M2EyMzgxNzQtNTg3Ny00NDg5LWIzNzAtMTRlYjZkYjY2OWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsldt3oyEsP3VNr7OztD4I7xzNskVJQAanJ0M Z+UcOrXSN+bG8PLk0GWQ2ntKcHnU0XSL4yIZLCsoLYUlN4aS4qaA4uBz0rr0FTBY Rj3+MfH8w1RW73Kywyiut1QkkisLGw59HwzAkjVsYR809lHg5ZHMpdUP34zeXQpB FPohcqIM6Mv8H0iXXkHZIM7f+IGubkjkerJSUJ0u/YCNEDfGuNFs8n+lgA0XBReg FiE4bLJatF6B7cfAz5klf5wD4CtyiVdnTdelSSV14uq24qoHi4++UPVOgBtqB4P9 sIY6hnWc6I4YOnU0qPjr4wE0hoMBxjCebsL6e7PWMtWQGTKg1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7rdKdoSMVmR9gR+LupCZSQcDxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvYWY0OWMxNzktNDg3NC0z YmRmLWEwNzktYWU4YjAwNTY5OGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwFNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjomdpMUmBz8RcuLZKSxeW8x4rrEUwfhyZ6QRkJTSl/09+8yekj13TI 5mudV3RnwzIQSpeEzb9f/T7VtXfZYxx+QJt9d6hBfFzpBtmkY8BuUt3l4M2SgWJq rO+B9PfpvztsEtdUT47BcJ4N1qrzWRjw38so0bPOMgWUVla8rC/Vm0ZMzASkz1rq O5+y2gthtN/cdBahhH8CiAozkna9xO78pRkcG+mqWvnUs10uy3VtsMuFSs7gLDCc aDZP/kSyq8KDC0Nav213rDqg+SqAF6afYgOgJyKCwn89IS0MNx5b04rOoZDo3o0H ZjCjRdG+JoSdwwkon5w3Y0X1+9/azms= -----END CERTIFICATE-----Generated at Sat Apr 12 11:55:56 2025 by rpki-client