$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/ef0d832d-d7a2-3d8f-8177-db51c86acb13.roa File: ef0d832d-d7a2-3d8f-8177-db51c86acb13.roa (raw, json) Hash identifier: mh1slwo0Y83WdDL1pWNmK5IPqIcY9wnVT5V2N08bQjw= Subject key identifier: 76:43:B1:E7:05:2E:C1:85:9B:06:AA:7D:B1:AA:2A:10:85:4F:43:A6 Certificate issuer: /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Certificate serial: 010D0C9F432858491ED6D78A83D1A53DFC168180 Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/ef0d832d-d7a2-3d8f-8177-db51c86acb13.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 36374 IP address blocks: 147.185.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d7:8a:83:d1:a5:3d:fc:16:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=b59227f4-03e5-4f84-8ad8-582601928507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c6:79:5a:c3:70:2f:a0:e0:bd:97:64:e3:32: 28:5d:a8:80:bc:57:0c:1d:48:91:f5:7b:cd:3d:46: f0:df:b1:04:b3:dc:ff:fd:be:bc:1d:1c:72:c4:09: 15:cb:d5:6d:e3:ee:e8:5b:30:c5:d7:26:60:f7:38: 49:2b:08:d1:b0:20:66:a0:c1:cf:f4:3d:0e:da:ac: 54:9d:b7:a3:2a:6f:6f:67:28:2f:56:ca:70:f1:48: 65:2e:39:63:69:e0:83:74:d4:e4:70:c8:43:3c:2f: 99:23:6b:c3:4e:e0:54:bd:b7:ff:d0:01:49:06:fd: 4f:6f:aa:0a:38:ff:a1:9c:db:15:9a:3d:9f:da:4a: f6:c9:24:12:72:74:55:7b:c9:e6:c6:1d:0d:4b:99: da:ef:5c:0c:b3:c1:a7:21:fd:eb:00:c3:33:84:3a: da:8c:82:c9:24:74:4b:30:70:3a:91:7f:5a:25:3b: a8:aa:8f:9b:f1:33:fc:5a:e4:df:79:99:5d:2d:cc: 56:98:5c:a6:ce:7d:f8:40:ad:5c:fd:c7:e3:a6:8c: 59:61:4d:85:e4:4f:dd:d6:45:05:c1:51:d1:83:6c: 5d:26:0d:61:14:33:3e:2f:fe:c3:22:e9:de:2e:c5: e5:53:7e:2a:03:85:d9:10:b2:02:a6:b2:30:58:18: da:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:43:B1:E7:05:2E:C1:85:9B:06:AA:7D:B1:AA:2A:10:85:4F:43:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/ef0d832d-d7a2-3d8f-8177-db51c86acb13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl X509v3 Authority Key Identifier: keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer sbgp-ipAddrBlock: critical IPv4: 147.185.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:ba:a3:de:85:42:21:f0:02:7e:d0:3a:2d:eb:89:0d:1e:56: b2:03:bf:bc:28:0e:c8:d8:84:45:e9:ff:20:39:9f:67:43:fa: 2a:3a:a9:57:c0:1f:6b:b4:26:68:34:88:90:37:b0:6c:ba:f4: 4b:9f:50:88:74:23:d9:d7:d7:6c:2e:43:f7:2e:46:70:ad:91: 35:7e:30:61:88:fd:74:0d:62:a9:f4:65:06:8b:fd:ed:74:07: 5d:2a:34:65:ad:25:44:86:44:bf:3e:29:be:4d:3c:2c:e4:ee: 3e:cb:a8:8e:33:bf:9b:30:af:0f:ad:f9:85:5e:63:d1:4a:53: 9d:60:63:12:7b:31:f3:63:2a:fe:4e:19:a0:50:63:08:6d:c5: 2b:47:a3:35:6b:7e:88:f7:39:dd:2b:59:b1:37:14:d8:c1:4a: 1b:27:b2:e4:b2:81:17:ad:2f:11:95:67:dd:1b:76:a7:af:f4: d8:0e:13:37:68:97:d6:04:15:25:88:67:fb:91:c6:3f:ca:ba: 49:7e:68:6c:86:96:74:9d:75:e0:00:23:f6:28:5e:00:dc:91: bf:80:07:57:6d:ba:da:06:e2:fd:74:6f:3c:21:21:cd:ff:f2: 60:de:f7:3c:85:be:4a:e2:69:cd:d4:d3:5d:5c:50:4a:5d:05: fe:9c:ff:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1teKg9GlPfwWgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E2MjBkNDUtMWYyNi00NjBjLTlhM2UtOWJjMGNjNGE1 ZDU5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk YjU5MjI3ZjQtMDNlNS00Zjg0LThhZDgtNTgyNjAxOTI4NTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsZ5WsNwL6DgvZdk4zIoXaiAvFcMHUiR9XvN PUbw37EEs9z//b68HRxyxAkVy9Vt4+7oWzDF1yZg9zhJKwjRsCBmoMHP9D0O2qxU nbejKm9vZygvVspw8UhlLjljaeCDdNTkcMhDPC+ZI2vDTuBUvbf/0AFJBv1Pb6oK OP+hnNsVmj2f2kr2ySQScnRVe8nmxh0NS5na71wMs8GnIf3rAMMzhDrajILJJHRL MHA6kX9aJTuoqo+b8TP8WuTfeZldLcxWmFymzn34QK1c/cfjpoxZYU2F5E/d1kUF wVHRg2xdJg1hFDM+L/7DIuneLsXlU34qA4XZELICprIwWBjaAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZDsecFLsGFmwaqfbGqKhCFT0OmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTYy MGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMwY2M0YTVkNTkvZWYwZDgzMmQtZDdhMi0z ZDhmLTgxNzctZGI1MWM4NmFjYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2E2MjBkNDUtMWYyNi00NjBjLTlh M2UtOWJjMGNjNGE1ZDU5LzdhNjIwZDQ1LTFmMjYtNDYwYy05YTNlLTliYzBjYzRh NWQ1OS5jcmwwHwYDVR0jBBgwFoAUKRxwwEbJq9wo7iaQmtx92QAr9MIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTYyMGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMw Y2M0YTVkNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk7lkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMK6o96FQiHwAn7QOi3riQ0eVrIDv7woDsjYhEXp/yA5n2dD+io6qVfA H2u0Jmg0iJA3sGy69EufUIh0I9nX12wuQ/cuRnCtkTV+MGGI/XQNYqn0ZQaL/e10 B10qNGWtJUSGRL8+Kb5NPCzk7j7LqI4zv5swrw+t+YVeY9FKU51gYxJ7MfNjKv5O GaBQYwhtxStHozVrfoj3Od0rWbE3FNjBShsnsuSygRetLxGVZ90bdqev9NgOEzdo l9YEFSWIZ/uRxj/Kukl+aGyGlnSddeAAI/YoXgDckb+AB1dtutoG4v10bzwhIc3/ 8mDe9zyFvkriac3U011cUEpdBf6c/zY= -----END CERTIFICATE-----Generated at Fri Mar 14 08:35:49 2025 by rpki-client