$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa File: 33981a11-ee98-3be8-afd7-464452a032db.roa (raw, json) Hash identifier: ZQdw9mY8Rcj9Vsvd0tm46vFRLjN9QVtrSVv62HaNs18= Subject key identifier: A9:3E:40:A8:1B:1A:47:7A:05:1E:3F:21:4B:42:9F:3B:DA:3E:DE:77 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F432858491D7179004011A7A16A7E08E0 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 5050 IP address blocks: 147.73.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:79:00:40:11:a7:a1:6a:7e:08:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=d07e7f66-e9bf-4e76-8405-4eb3647443f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:54:c3:aa:14:3c:ce:58:e1:81:60:98:33: aa:5c:46:bb:e4:35:3c:46:64:b0:f4:b2:1c:6a:bb: 40:32:be:c3:6e:b2:b8:08:bd:2e:c0:52:06:0e:c8: 4f:f6:57:d1:e1:55:2e:13:2b:96:aa:99:ae:51:57: 33:64:e4:58:cd:c8:c5:7b:c1:47:2d:7b:36:90:9d: d1:88:d9:4e:ee:84:c4:aa:4b:7b:90:3c:3c:8f:76: 05:54:a3:f8:84:f6:64:a6:d5:1b:7b:d9:ad:02:e5: 5d:a2:47:37:fe:e7:8a:77:43:ac:27:16:27:df:4e: 56:e5:7a:d2:9c:6f:7c:80:2b:a4:81:5a:00:81:70: 68:1e:e8:0f:1a:92:a2:0a:7d:68:7c:d7:83:cf:ec: 0a:d9:da:87:36:ff:c2:bd:f9:06:3f:b7:be:fc:2d: a7:23:50:6e:3a:ef:8f:c6:f5:27:dd:71:b4:93:ce: 49:c4:86:22:e1:88:0d:79:45:bf:cc:56:d1:e8:58: 0f:5f:09:33:77:1f:cc:78:b9:43:3a:e7:bd:6f:b5: 94:4a:71:bd:38:82:f1:46:81:df:04:3f:3e:9a:93: b7:eb:c5:f0:9c:94:59:6a:d6:4c:05:d9:23:13:f0: bd:fd:c2:ab:43:ad:54:09:1d:31:d1:d1:e5:ce:0d: c0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3E:40:A8:1B:1A:47:7A:05:1E:3F:21:4B:42:9F:3B:DA:3E:DE:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.73.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:1b:72:44:60:7f:d0:bd:f2:95:b9:61:d4:ea:7a:66:78:30: d6:35:87:f0:2f:d9:6a:b7:85:43:f1:b2:60:7e:f1:8a:81:fb: 90:9f:72:93:5b:b2:40:db:db:9e:f1:05:77:a8:a9:d5:97:3e: 8a:ed:3a:7a:36:2a:9c:05:5b:c8:a1:1c:d4:6e:48:1d:b5:46: 28:01:9f:b1:f9:cc:81:41:b0:b3:72:98:ed:0d:49:08:1b:90: 78:f1:f0:f4:cf:87:e9:6f:da:a8:a5:c4:1c:5f:30:f5:de:c3: 74:82:c6:49:21:d2:cb:5a:60:3d:7b:06:ef:8c:20:71:85:a4: 08:7a:46:c4:f9:25:a1:91:3b:1e:34:96:1c:cc:ee:8b:6a:33: f7:bd:82:dd:11:c7:e7:9f:69:96:33:70:c8:4e:12:fa:29:9b: 34:5c:26:95:88:c9:4e:ff:75:0e:0b:7a:69:82:02:a0:eb:d4: 6a:fd:29:ef:37:51:ec:92:2b:c3:c3:b7:3b:eb:53:a8:35:ba: 51:d9:00:c8:17:0f:23:c6:da:4b:73:cf:07:b6:22:18:3f:83: dd:51:75:c4:f5:b9:a2:7c:f1:ab:54:56:5a:0c:83:2f:1c:d8: ab:26:b1:c1:07:be:cc:e9:79:bc:54:84:26:77:81:d4:7c:87: a8:16:ec:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXkAQBGnoWp+COAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZDA3ZTdmNjYtZTliZi00ZTc2LTg0MDUtNGViMzY0NzQ0M2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7dUw6oUPM5Y4YFgmDOqXEa75DU8RmSw9LIc artAMr7DbrK4CL0uwFIGDshP9lfR4VUuEyuWqpmuUVczZORYzcjFe8FHLXs2kJ3R iNlO7oTEqkt7kDw8j3YFVKP4hPZkptUbe9mtAuVdokc3/ueKd0OsJxYn305W5XrS nG98gCukgVoAgXBoHugPGpKiCn1ofNeDz+wK2dqHNv/CvfkGP7e+/C2nI1BuOu+P xvUn3XG0k85JxIYi4YgNeUW/zFbR6FgPXwkzdx/MeLlDOue9b7WUSnG9OILxRoHf BD8+mpO368XwnJRZatZMBdkjE/C9/cKrQ61UCR0x0dHlzg3AYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk+QKgbGkd6BR4/IUtCnzvaPt53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvMzM5ODFhMTEtZWU5OC0z YmU4LWFmZDctNDY0NDUyYTAzMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk0kBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAbckRgf9C98pW5YdTqemZ4MNY1h/Av2Wq3hUPxsmB+8YqB+5CfcpNb skDb257xBXeoqdWXPortOno2KpwFW8ihHNRuSB21RigBn7H5zIFBsLNymO0NSQgb kHjx8PTPh+lv2qilxBxfMPXew3SCxkkh0staYD17Bu+MIHGFpAh6RsT5JaGROx40 lhzM7otqM/e9gt0Rx+efaZYzcMhOEvopmzRcJpWIyU7/dQ4LemmCAqDr1Gr9Ke83 UeySK8PDtzvrU6g1ulHZAMgXDyPG2ktzzwe2Ihg/g91RdcT1uaJ88atUVloMgy8c 2KsmscEHvszpebxUhCZ3gdR8h6gW7PU= -----END CERTIFICATE-----Generated at Fri Mar 14 09:00:01 2025 by rpki-client