$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa File: da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa (raw, json) Hash identifier: tH+wgILl5ta2hxClMDifg5J7gOZpkldFcr6KJS7ZV1E= Subject key identifier: CA:F1:B7:D4:25:FD:82:D8:28:38:92:AB:4E:1A:4E:48:A8:BB:39:C6 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F43285848B85A6955081576A774854B80 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa Signing time: Thu 30 Jan 2025 20:57:47 +0000 ROA not before: Thu 30 Jan 2025 20:57:47 +0000 ROA not after: Wed 30 Apr 2025 19:57:47 +0000 asID: 2615 IP address blocks: 147.1.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:5a:69:55:08:15:76:a7:74:85:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jan 30 20:57:47 2025 GMT Not After : Apr 30 19:57:47 2025 GMT Subject: CN=c3f58dac-ecb8-45b1-a733-bacb48c6e022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:06:b8:94:7c:42:f8:30:31:3f:77:82:70:bb: b9:d7:07:c8:ae:ee:a3:57:39:bb:db:d7:61:73:d5: 2c:04:af:14:d6:e0:51:56:5d:83:27:aa:f6:46:c7: f7:70:af:7c:ae:99:a8:75:7c:3e:b9:97:d5:cb:89: 77:42:0f:1b:7c:96:d0:7c:44:51:56:5b:96:49:7d: 52:83:e0:71:e7:4d:af:d3:ce:b7:88:12:9a:2a:6b: f3:62:68:bc:22:0e:5d:e2:93:db:9f:62:76:7e:e9: 9a:97:3d:65:6a:40:f7:d6:28:65:f9:07:a5:97:8c: 97:28:87:9a:af:27:76:48:ac:89:d5:8a:87:71:51: 74:c1:77:8e:8d:40:5a:fb:6b:f4:cd:54:15:f3:40: c7:e1:d8:20:0d:98:33:07:0a:b1:a2:60:fa:dc:1c: 30:d2:67:9a:ad:95:9a:08:84:66:f4:0a:0d:7f:a5: 46:05:43:ed:22:23:09:e5:2f:92:d1:cd:f0:42:c4: a5:98:57:d1:bc:91:cc:33:00:24:25:1a:e0:ce:c1: 26:a2:d1:b1:e5:59:e8:0d:76:57:15:d9:a8:c6:82: a4:2b:a6:14:52:3e:8b:28:7f:ff:76:ce:0b:78:9b: c4:8c:9d:64:74:bb:21:96:38:ac:b2:d7:12:38:4d: 08:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F1:B7:D4:25:FD:82:D8:28:38:92:AB:4E:1A:4E:48:A8:BB:39:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:25:9d:25:97:94:d2:8a:4a:f0:6e:e5:cc:65:8e:ad:8a:7c: 6e:7c:17:ae:87:02:71:fa:e8:f2:b5:f5:e9:2c:c2:bb:62:3d: 06:2b:6d:63:af:cf:10:ba:bd:96:5c:f8:4b:28:0a:3e:3f:9f: 75:49:3e:c5:56:19:8d:c4:6a:da:9c:6c:1a:a2:6f:a7:3a:6b: 2d:1e:6c:2a:9c:b4:45:f0:f8:ac:65:8d:ad:9a:66:16:86:93: 95:6f:49:df:e5:17:a8:11:cd:88:8f:80:0a:8f:e1:68:6d:6f: c2:44:2f:9b:bd:79:07:49:ad:a1:ad:a0:62:d5:b5:84:ed:b2: 4f:bc:2f:35:37:2a:e5:a7:20:70:ba:ba:29:b9:06:55:36:9c: e5:c0:16:2f:d0:5a:7c:b6:d0:32:65:62:89:ff:5f:dd:db:df: cc:47:42:23:1a:f0:b0:25:db:c4:b6:da:aa:13:de:a0:ec:39: c3:80:bf:8d:a7:9a:61:40:03:b1:6b:24:e7:1f:59:d7:a2:ea: 26:b4:47:de:29:de:ea:23:5c:d5:1b:d0:cb:b6:ff:81:93:87: 9e:32:49:e4:92:1d:fe:30:0d:bc:27:fb:77:6c:68:2e:2a:c9: 1b:e0:c7:5a:4c:24:b3:31:a6:22:81:b5:c1:91:83:df:5d:97: ad:d9:c5:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi4WmlVCBV2p3SFS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDEzMDIwNTc0N1oXDTI1MDQzMDE5NTc0N1owLzEtMCsGA1UEAxMk YzNmNThkYWMtZWNiOC00NWIxLWE3MzMtYmFjYjQ4YzZlMDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Qa4lHxC+DAxP3eCcLu51wfIru6jVzm729dh c9UsBK8U1uBRVl2DJ6r2Rsf3cK98rpmodXw+uZfVy4l3Qg8bfJbQfERRVluWSX1S g+Bx502v0863iBKaKmvzYmi8Ig5d4pPbn2J2fumalz1lakD31ihl+Qell4yXKIea ryd2SKyJ1YqHcVF0wXeOjUBa+2v0zVQV80DH4dggDZgzBwqxomD63Bww0mearZWa CIRm9AoNf6VGBUPtIiMJ5S+S0c3wQsSlmFfRvJHMMwAkJRrgzsEmotGx5VnoDXZX FdmoxoKkK6YUUj6LKH//ds4LeJvEjJ1kdLshljisstcSOE0IHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrxt9Ql/YLYKDiSq04aTkiouznGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZGE0OWU4YTctMDlmNS0z NTYyLTk4YjctMmUyOGJlMGU4YWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIElnSWXlNKKSvBu5cxljq2KfG58F66HAnH66PK19ekswrtiPQYrbWOv zxC6vZZc+EsoCj4/n3VJPsVWGY3EatqcbBqib6c6ay0ebCqctEXw+Kxlja2aZhaG k5VvSd/lF6gRzYiPgAqP4Whtb8JEL5u9eQdJraGtoGLVtYTtsk+8LzU3KuWnIHC6 uim5BlU2nOXAFi/QWny20DJlYon/X93b38xHQiMa8LAl28S22qoT3qDsOcOAv42n mmFAA7FrJOcfWdei6ia0R94p3uojXNUb0Mu2/4GTh54ySeSSHf4wDbwn+3dsaC4q yRvgx1pMJLMxpiKBtcGRg99dl63Zxc8= -----END CERTIFICATE-----Generated at Sat Apr 12 14:53:03 2025 by rpki-client