$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/e50b675a-f0df-35b7-bdd9-68271d2f787a.roa File: e50b675a-f0df-35b7-bdd9-68271d2f787a.roa (raw, json) Hash identifier: XXzQea3ZaQgLbee0d9U9uhe8olwZrW0VfH2mKRxcCpM= Subject key identifier: C3:D1:F9:21:30:D4:A4:59:9C:55:01:A5:C9:A3:AF:52:B3:D5:A4:12 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F43285848CEAD68C2B1B770FE491A82BF Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/e50b675a-f0df-35b7-bdd9-68271d2f787a.roa Signing time: Fri 07 Feb 2025 20:52:48 +0000 ROA not before: Fri 07 Feb 2025 20:52:48 +0000 ROA not after: Thu 08 May 2025 19:52:48 +0000 asID: 2615 IP address blocks: 147.1.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ce:ad:68:c2:b1:b7:70:fe:49:1a:82:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Feb 7 20:52:48 2025 GMT Not After : May 8 19:52:48 2025 GMT Subject: CN=be1a1099-102f-4702-9eee-dd8ae82f62df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:47:63:54:bc:1f:e0:0d:1b:c5:1c:0e:82:2a: 73:8a:af:f9:34:0b:02:22:70:62:7e:fc:d1:2d:cf: e8:f3:82:a3:7c:d8:c3:4c:86:ec:74:0a:0d:92:2c: 50:14:28:6c:6a:4e:b6:81:27:bf:24:af:0f:8c:14: 42:3f:54:19:e3:84:6f:75:77:5d:f5:db:cf:2b:fe: dd:e6:1e:e4:17:8c:58:ab:bd:d4:f9:e9:dc:64:69: 01:a4:a2:9e:63:c9:d9:32:57:a8:c1:75:92:e6:c6: da:20:06:4f:7d:f6:90:7a:2f:37:77:12:02:89:10: bf:6c:49:84:ca:c9:8d:2e:e8:78:68:d4:d9:41:25: 43:80:ba:49:fc:1a:da:1b:91:08:12:66:6a:72:54: 9c:c3:58:82:9d:82:5c:44:86:7f:b7:a4:3a:8b:5f: e6:c9:47:66:76:b9:fb:33:3b:0b:35:ef:6e:54:bf: 97:f8:cb:9c:25:16:94:0a:a1:5f:b2:78:22:99:ba: 7b:19:57:ba:ac:76:4a:50:16:d0:47:90:27:b3:ce: e5:35:7d:29:8a:57:ee:b9:21:7f:c7:7b:09:a7:b6: df:2c:e7:fe:e6:88:fb:a5:a7:39:45:99:6e:9e:f0: 82:bb:8b:70:5a:2e:a8:af:f3:f9:31:f6:b9:0f:bf: 0c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D1:F9:21:30:D4:A4:59:9C:55:01:A5:C9:A3:AF:52:B3:D5:A4:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/e50b675a-f0df-35b7-bdd9-68271d2f787a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a0:56:6f:1d:b7:3c:db:fa:23:fb:38:c9:d7:e6:e2:02:66: b2:8f:b2:dc:17:c4:a0:b4:ce:37:51:75:3a:82:e9:74:dd:25: a0:d6:e5:a6:77:78:0e:ee:f6:b0:54:96:b6:2d:8f:c8:1f:fb: 88:0b:a1:57:0a:a4:a2:24:54:80:f4:b4:b2:91:7b:8f:a6:15: 15:68:c1:f5:9f:f6:a5:f7:c6:5b:c8:bf:79:19:f8:07:67:5f: 85:57:f7:4b:4d:29:78:c8:d3:5f:2f:84:d1:8c:68:ba:17:3f: be:1a:6a:03:30:9e:46:21:ef:f1:a3:9d:ab:d6:36:df:e3:18: cb:24:40:d8:c1:e8:63:2a:49:22:b0:ce:88:05:2b:4a:f2:fb: f5:2d:8c:f5:2b:27:70:9d:7c:55:00:0c:a1:07:c2:38:33:ee: 64:f0:3f:86:fb:c4:02:a8:48:75:47:f6:84:cf:65:b7:9d:ed: 42:2a:df:f6:f3:62:bc:63:27:3b:f5:81:7a:66:6e:fc:01:3c: 88:32:13:e9:52:b1:7a:60:77:b2:7a:0b:fc:e3:4a:f7:54:c5: 79:7c:aa:f5:b3:c3:fc:e3:e2:d7:4e:48:b4:18:a3:e2:90:0b: 60:9d:e5:ab:8a:97:36:4d:fd:02:a8:b0:05:10:55:ef:d3:50: 6e:ac:27:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjOrWjCsbdw/kkagr8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDIwNzIwNTI0OFoXDTI1MDUwODE5NTI0OFowLzEtMCsGA1UEAxMk YmUxYTEwOTktMTAyZi00NzAyLTllZWUtZGQ4YWU4MmY2MmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UdjVLwf4A0bxRwOgipziq/5NAsCInBifvzR Lc/o84KjfNjDTIbsdAoNkixQFChsak62gSe/JK8PjBRCP1QZ44RvdXdd9dvPK/7d 5h7kF4xYq73U+encZGkBpKKeY8nZMleowXWS5sbaIAZPffaQei83dxICiRC/bEmE ysmNLuh4aNTZQSVDgLpJ/BraG5EIEmZqclScw1iCnYJcRIZ/t6Q6i1/myUdmdrn7 MzsLNe9uVL+X+MucJRaUCqFfsngimbp7GVe6rHZKUBbQR5Ans87lNX0pilfuuSF/ x3sJp7bfLOf+5oj7pac5RZlunvCCu4twWi6or/P5Mfa5D78M5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPR+SEw1KRZnFUBpcmjr1Kz1aQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZTUwYjY3NWEtZjBkZi0z NWI3LWJkZDktNjgyNzFkMmY3ODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwFOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqgVm8dtzzb+iP7OMnX5uICZrKPstwXxKC0zjdRdTqC6XTdJaDW5aZ3 eA7u9rBUlrYtj8gf+4gLoVcKpKIkVID0tLKRe4+mFRVowfWf9qX3xlvIv3kZ+Adn X4VX90tNKXjI018vhNGMaLoXP74aagMwnkYh7/GjnavWNt/jGMskQNjB6GMqSSKw zogFK0ry+/UtjPUrJ3CdfFUADKEHwjgz7mTwP4b7xAKoSHVH9oTPZbed7UIq3/bz YrxjJzv1gXpmbvwBPIgyE+lSsXpgd7J6C/zjSvdUxXl8qvWzw/zj4tdOSLQYo+KQ C2Cd5auKlzZN/QKosAUQVe/TUG6sJ+4= -----END CERTIFICATE-----Generated at Sat Apr 12 11:44:01 2025 by rpki-client