$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/bbbf91b9-718d-3adc-8f53-92010dd213b9.roa File: bbbf91b9-718d-3adc-8f53-92010dd213b9.roa (raw, json) Hash identifier: wSk0L7J84teg13FNVEGX3MV2QyjaC2oggSrw9Wja9yI= Subject key identifier: E4:90:20:0E:2A:06:76:A7:6F:90:F4:44:9D:54:AD:32:91:AC:8F:71 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F43285849E91F9CAC273B262737A12080 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/bbbf91b9-718d-3adc-8f53-92010dd213b9.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 397423 IP address blocks: 147.124.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:9c:ac:27:3b:26:27:37:a1:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=9ccc6476-f656-4a40-992d-ddfec152620a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:93:75:7e:50:fc:27:1a:67:60:e6:2b:d8:95: 34:98:65:21:c3:17:5b:a1:dc:30:74:7b:35:a4:3f: e1:d5:42:d6:ba:ab:39:dc:a7:37:a5:f5:1a:e7:61: 43:40:c8:cd:f8:51:b4:2e:d7:1e:2c:f4:2f:97:4d: 3a:93:29:02:57:ee:f3:c7:b9:60:54:86:fb:f7:1d: c0:9e:11:5e:64:5d:4b:b7:0a:da:d1:52:fe:4b:0d: cb:e1:93:52:aa:11:62:30:a8:d5:d9:e2:c9:ed:8e: 8f:0c:e1:d9:62:87:6a:43:4f:a4:ed:08:0a:88:1e: da:ed:21:50:01:83:ea:87:1e:b1:21:16:ab:9d:37: 65:3a:9e:7b:07:17:0a:16:f0:fd:d4:83:69:18:a7: 2f:98:c3:2b:53:a3:c5:ec:50:5c:d4:53:31:2c:b0: 81:6d:48:f0:b2:03:7f:b2:27:b5:e9:f1:2f:8c:82: da:1a:55:16:64:5b:2a:19:0a:cc:45:71:8c:23:4e: 10:a3:a0:03:fc:48:85:31:68:27:ae:9d:c0:40:33: 0b:21:27:3a:36:66:62:31:b9:77:75:0f:99:06:d6: 48:cd:26:b9:1b:7c:53:d3:a5:0a:55:94:6d:83:3f: 53:bf:df:59:44:e0:5b:62:37:6d:ae:6b:1e:41:f5: 37:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:90:20:0E:2A:06:76:A7:6F:90:F4:44:9D:54:AD:32:91:AC:8F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/bbbf91b9-718d-3adc-8f53-92010dd213b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 147.124.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:4f:b6:31:01:db:9f:8b:b5:d9:30:04:26:3e:75:69:95:b8: 5b:cf:43:3f:6d:85:79:34:56:a2:13:e4:c0:d6:55:1a:00:6c: 5f:59:ca:e9:a6:77:ef:ad:eb:8e:99:02:b0:4c:b5:0b:c1:a3: 58:ae:ff:90:26:01:64:04:81:86:af:76:3d:22:7e:9f:ab:2b: 02:6b:5b:fe:d8:46:0d:75:c7:9d:60:b2:c3:f3:ec:53:42:9a: 77:f4:43:db:24:48:30:ee:db:b4:4f:b7:af:c4:17:c0:fe:5d: b9:53:93:a5:45:13:7e:6b:48:17:4b:67:98:15:7d:c4:48:5b: f3:ad:c8:df:a3:af:9b:7c:60:79:5d:d4:3e:63:1a:e0:ff:e7: 1c:35:c0:cc:32:ad:e3:a5:c7:41:4b:cc:f1:2e:81:79:f6:fd: 08:03:dd:d3:34:f6:7a:3f:88:95:48:8e:63:87:cf:2b:39:b5: 38:c2:41:e7:4a:50:10:6b:4d:39:f7:3b:22:e0:1b:1e:f9:a1: ec:19:7e:d6:40:b6:73:06:b9:4e:70:5d:29:19:26:66:62:cf: 8c:7a:d8:5d:12:aa:ea:9b:a4:ac:7c:61:f0:ed:02:b9:e2:47: fc:d8:1c:36:48:cc:18:75:81:35:2c:1e:17:1a:69:46:89:a0: fa:5b:6f:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH5ysJzsmJzehIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk OWNjYzY0NzYtZjY1Ni00YTQwLTk5MmQtZGRmZWMxNTI2MjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJN1flD8JxpnYOYr2JU0mGUhwxdbodwwdHs1 pD/h1ULWuqs53Kc3pfUa52FDQMjN+FG0LtceLPQvl006kykCV+7zx7lgVIb79x3A nhFeZF1Ltwra0VL+Sw3L4ZNSqhFiMKjV2eLJ7Y6PDOHZYodqQ0+k7QgKiB7a7SFQ AYPqhx6xIRarnTdlOp57BxcKFvD91INpGKcvmMMrU6PF7FBc1FMxLLCBbUjwsgN/ sie16fEvjILaGlUWZFsqGQrMRXGMI04Qo6AD/EiFMWgnrp3AQDMLISc6NmZiMbl3 dQ+ZBtZIzSa5G3xT06UKVZRtgz9Tv99ZROBbYjdtrmseQfU3cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSQIA4qBnanb5D0RJ1UrTKRrI9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvYmJiZjkxYjktNzE4ZC0z YWRjLThmNTMtOTIwMTBkZDIxM2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk3zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtPtjEB25+LtdkwBCY+dWmVuFvPQz9thXk0VqIT5MDWVRoAbF9Zyumm d++t646ZArBMtQvBo1iu/5AmAWQEgYavdj0ifp+rKwJrW/7YRg11x51gssPz7FNC mnf0Q9skSDDu27RPt6/EF8D+XblTk6VFE35rSBdLZ5gVfcRIW/OtyN+jr5t8YHld 1D5jGuD/5xw1wMwyreOlx0FLzPEugXn2/QgD3dM09no/iJVIjmOHzys5tTjCQedK UBBrTTn3OyLgGx75oewZftZAtnMGuU5wXSkZJmZiz4x62F0SquqbpKx8YfDtArni R/zYHDZIzBh1gTUsHhcaaUaJoPpbb1M= -----END CERTIFICATE-----Generated at Thu Jun 5 18:18:34 2025 by rpki-client