$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/d6e47bdb-24a9-3833-ab3d-13192e87f425.roa File: d6e47bdb-24a9-3833-ab3d-13192e87f425.roa (raw, json) Hash identifier: EYh73jpOWE5pmVBo3njPfPRHqVZttYP32CxcePkSf7A= Subject key identifier: 6C:36:6C:F0:C9:15:7F:84:B9:AC:0D:EE:F9:D2:9D:1A:7C:19:AF:A8 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584954196CE75AD5523D2C853740 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/d6e47bdb-24a9-3833-ab3d-13192e87f425.roa Signing time: Thu 27 Mar 2025 15:52:57 +0000 ROA not before: Thu 27 Mar 2025 15:52:57 +0000 ROA not after: Wed 25 Jun 2025 15:52:57 +0000 asID: 2615 IP address blocks: 147.1.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:54:19:6c:e7:5a:d5:52:3d:2c:85:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Mar 27 15:52:57 2025 GMT Not After : Jun 25 15:52:57 2025 GMT Subject: CN=b68f7f8e-7f18-4d54-898d-6080fb45e5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:8d:6e:c0:cb:cd:3e:ab:36:a2:13:5d:04: e3:ce:6d:30:4c:84:19:19:1d:8a:ea:cc:8e:d1:d7: 79:05:34:46:25:e9:5e:ca:81:a7:4c:6d:42:ca:17: 96:72:f9:18:92:11:f4:93:e1:6f:85:c5:95:71:7f: 17:bf:a9:83:87:bc:5b:8a:0c:16:1c:9b:05:91:70: 48:02:7f:3c:6b:ff:26:f5:ed:57:fc:97:a9:7b:96: e7:b4:b2:0b:93:17:4c:b4:48:2e:09:e0:3f:c9:40: 81:c4:74:8f:ab:20:5f:21:56:8e:32:fd:45:5f:55: 38:a5:2f:93:98:ac:42:32:ea:9f:ad:71:0f:cd:15: 01:61:49:71:1e:62:3c:de:58:5c:c6:58:14:ba:b5: 44:e3:70:77:e4:2e:9c:bb:ce:7c:8f:26:fc:3b:de: 75:1c:d6:37:0b:3f:a6:62:d9:ca:a4:2d:86:0e:bf: b1:1d:f2:2e:34:dc:2e:6d:b3:16:c3:3a:88:6c:83: f7:2b:2e:23:c7:b3:6a:e4:22:f1:0f:a0:a0:3a:87: b7:fa:d6:fb:0c:c3:e2:88:fd:56:0d:bf:22:2e:96: eb:64:d0:50:77:7b:aa:e1:88:d0:8d:38:97:6c:20: 0f:12:44:83:9c:db:3e:c4:a0:d3:14:0c:16:6d:6a: ad:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:36:6C:F0:C9:15:7F:84:B9:AC:0D:EE:F9:D2:9D:1A:7C:19:AF:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/d6e47bdb-24a9-3833-ab3d-13192e87f425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:65:1d:b6:f3:05:8b:95:6b:ce:e9:68:a0:2f:d1:6b:85:45: 3f:5d:2b:b3:1f:b4:cf:7f:ba:e0:f0:01:06:74:09:2e:a7:4f: 96:e8:af:b5:35:e5:04:bc:ec:a0:f5:29:6f:c7:2a:63:d3:ad: 46:29:de:70:49:3d:a9:4f:1d:70:79:a0:13:23:02:bb:98:41: 41:1a:cb:c8:be:ec:f4:af:e3:b8:a3:b5:bd:93:ba:f3:d9:6c: 17:d6:79:b8:1b:6d:79:b6:36:10:45:09:c1:8f:27:8f:1f:3c: 90:7e:75:b5:84:51:85:93:1f:bb:92:76:8a:2b:6c:f8:fa:f5: 2a:34:bf:9e:1b:21:de:ad:bf:b1:a2:11:05:2f:cd:45:5d:1f: 34:83:14:1d:55:5d:2d:9f:d8:ed:57:ad:52:2a:8c:6d:59:bc: 95:ca:da:a7:3f:3b:cf:02:6d:76:df:c7:39:35:a9:0a:b0:6b: 3b:c1:37:4c:f9:e2:75:9f:2e:d0:9b:de:26:9d:ee:32:4d:a8: 87:93:6c:ef:f2:09:06:1c:8a:a0:3d:9a:f3:aa:cb:d9:0e:95: d0:49:55:b0:b3:44:f6:c8:b5:8e:24:71:db:d8:d5:02:cc:03: 7f:ab:cb:ce:37:8d:b7:4b:6d:6f:5b:ed:e2:e4:b2:38:71:fe: 83:e8:00:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElUGWznWtVSPSyFN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDMyNzE1NTI1N1oXDTI1MDYyNTE1NTI1N1owLzEtMCsGA1UEAxMk YjY4ZjdmOGUtN2YxOC00ZDU0LTg5OGQtNjA4MGZiNDVlNWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4yNbsDLzT6rNqITXQTjzm0wTIQZGR2K6syO 0dd5BTRGJeleyoGnTG1CyheWcvkYkhH0k+FvhcWVcX8Xv6mDh7xbigwWHJsFkXBI An88a/8m9e1X/Jepe5bntLILkxdMtEguCeA/yUCBxHSPqyBfIVaOMv1FX1U4pS+T mKxCMuqfrXEPzRUBYUlxHmI83lhcxlgUurVE43B35C6cu858jyb8O951HNY3Cz+m YtnKpC2GDr+xHfIuNNwubbMWwzqIbIP3Ky4jx7Nq5CLxD6CgOoe3+tb7DMPiiP1W Db8iLpbrZNBQd3uq4YjQjTiXbCAPEkSDnNs+xKDTFAwWbWqtgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGw2bPDJFX+EuawN7vnSnRp8Ga+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZDZlNDdiZGItMjRhOS0z ODMzLWFiM2QtMTMxOTJlODdmNDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZlHbbzBYuVa87paKAv0WuFRT9dK7MftM9/uuDwAQZ0CS6nT5bor7U1 5QS87KD1KW/HKmPTrUYp3nBJPalPHXB5oBMjAruYQUEay8i+7PSv47ijtb2TuvPZ bBfWebgbbXm2NhBFCcGPJ48fPJB+dbWEUYWTH7uSdoorbPj69So0v54bId6tv7Gi EQUvzUVdHzSDFB1VXS2f2O1XrVIqjG1ZvJXK2qc/O88CbXbfxzk1qQqwazvBN0z5 4nWfLtCb3iad7jJNqIeTbO/yCQYciqA9mvOqy9kOldBJVbCzRPbItY4kcdvY1QLM A3+ry843jbdLbW9b7eLksjhx/oPoADk= -----END CERTIFICATE-----Generated at Sat Apr 12 11:06:53 2025 by rpki-client