$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa File: 29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa (raw, json) Hash identifier: 6E2B3pL70SoyUz15K0H7cq5OZ7bha2+oy42kt8/2Mns= Subject key identifier: 99:37:18:5B:1E:D0:9E:C7:4A:43:4E:84:2A:64:89:29:37:82:3C:36 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F432858486C2B12F28FC04A89136CE9C0 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 9 IP address blocks: 147.72.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:12:f2:8f:c0:4a:89:13:6c:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=d56f6f5f-2848-4c84-817e-99f2c2f56221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:72:d8:07:50:b5:49:11:d7:09:cd:91:2a: e2:ce:1d:4e:43:cf:dc:88:b6:58:26:14:23:ae:da: 06:77:82:1e:a7:7d:f7:05:df:d7:90:35:91:a3:c1: cc:d6:6a:bd:5a:90:bf:d7:d7:9e:bc:27:94:35:01: 82:d7:87:af:8d:8d:8f:c0:4f:f4:db:e2:17:d1:3b: 95:03:b7:9b:45:9a:f3:02:cb:45:18:e1:6c:7b:15: 2b:5e:8c:02:10:22:d6:a7:27:80:d3:de:42:1c:88: 21:36:84:08:9d:dc:f4:f3:00:eb:48:bd:a5:2d:29: 03:59:78:c5:83:21:2c:8d:89:e2:2d:37:24:d1:fb: 1a:f3:a6:31:41:33:9f:f5:15:23:c4:93:17:b2:06: 52:0d:f1:cb:94:c1:77:de:4f:46:e8:37:35:c0:50: b8:66:73:34:84:3b:fb:28:75:9c:19:ec:7d:c1:ea: 9d:bc:59:db:74:18:ff:03:c8:dc:4e:9f:b3:7c:dd: 4f:77:95:67:bc:a0:fa:08:37:6e:81:01:98:a6:c6: c5:9e:0d:2e:5f:88:86:64:37:38:e9:75:13:17:b2: e4:9a:14:75:37:58:39:95:1b:dd:98:f9:ff:7e:f7: e2:1e:0c:10:21:bf:2a:dd:80:50:73:e6:9b:54:8b: 83:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:37:18:5B:1E:D0:9E:C7:4A:43:4E:84:2A:64:89:29:37:82:3C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:27:9c:85:1a:eb:56:de:bb:66:25:8f:c4:d9:04:b6:fb:28: ad:08:8e:76:e7:90:da:84:86:38:40:4f:a1:c6:4f:1f:de:1d: a1:2f:ee:29:7d:18:a6:62:cf:f1:9d:02:82:e0:c3:ae:ad:df: ae:87:7d:10:5e:b1:61:a9:d0:66:2f:9d:ce:fe:65:0e:ea:1e: aa:4f:5c:c1:cf:f1:fe:f3:0b:10:8c:75:81:c2:36:98:9b:e0: b6:0c:ba:4e:a7:bb:c5:d6:87:98:56:1b:61:82:8e:f7:ed:89: 54:ae:ca:6a:12:d4:14:7b:60:45:75:80:16:e2:68:e9:11:08: 19:77:dd:d4:a2:50:53:f9:01:a6:ee:dd:07:fa:2d:6c:bf:73: bc:1e:c3:3a:4c:69:fb:f5:80:8a:f5:8c:b3:cd:9b:98:cf:14: b8:f8:49:a3:cf:97:6b:9b:a8:e5:c0:a2:bd:f2:ce:2a:29:ba: 1f:ef:04:75:ec:44:f4:0a:aa:06:01:1b:6c:e9:8c:77:99:be: 6a:7a:77:b3:95:74:f3:0f:91:90:c1:83:db:c2:87:8b:eb:eb: c3:ab:2d:49:aa:9a:5b:70:7c:f4:ba:72:29:e8:94:99:fe:cd: 53:d7:2a:19:0f:f3:30:6f:18:46:02:76:24:14:0a:86:58:8b: 35:a0:76:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKxLyj8BKiRNs6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk ZDU2ZjZmNWYtMjg0OC00Yzg0LTgxN2UtOTlmMmMyZjU2MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugJy2AdQtUkR1wnNkSrizh1OQ8/ciLZYJhQj rtoGd4Iep333Bd/XkDWRo8HM1mq9WpC/19eevCeUNQGC14evjY2PwE/02+IX0TuV A7ebRZrzAstFGOFsexUrXowCECLWpyeA095CHIghNoQIndz08wDrSL2lLSkDWXjF gyEsjYniLTck0fsa86YxQTOf9RUjxJMXsgZSDfHLlMF33k9G6Dc1wFC4ZnM0hDv7 KHWcGex9weqdvFnbdBj/A8jcTp+zfN1Pd5VnvKD6CDdugQGYpsbFng0uX4iGZDc4 6XUTF7LkmhR1N1g5lRvdmPn/fvfiHgwQIb8q3YBQc+abVIuDaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJk3GFse0J7HSkNOhCpkiSk3gjw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvMjllYTk2ZWYtNWZjMC0z OWZhLWIxNGEtODEwYmRlZWU5YjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk0j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0nnIUa61beu2Ylj8TZBLb7KK0IjnbnkNqEhjhAT6HGTx/eHaEv7il9 GKZiz/GdAoLgw66t366HfRBesWGp0GYvnc7+ZQ7qHqpPXMHP8f7zCxCMdYHCNpib 4LYMuk6nu8XWh5hWG2GCjvftiVSuymoS1BR7YEV1gBbiaOkRCBl33dSiUFP5Aabu 3Qf6LWy/c7wewzpMafv1gIr1jLPNm5jPFLj4SaPPl2ubqOXAor3yziopuh/vBHXs RPQKqgYBG2zpjHeZvmp6d7OVdPMPkZDBg9vCh4vr68OrLUmqmltwfPS6cinolJn+ zVPXKhkP8zBvGEYCdiQUCoZYizWgdoQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:06 2025 by rpki-client