$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa File: 42377806-4a77-3098-8fd4-c6b8e4389e40.roa (raw, json) Hash identifier: PSb1IjbQRslxiz4sTL0E5y/EbJUZWJQYdQ8elkiWgfY= Subject key identifier: 55:86:BF:71:06:EF:8B:5E:57:1E:B4:32:07:0A:3E:87:FD:CE:F6:99 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F432858491D71790CBE2048822A188AC0 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 5050 IP address blocks: 147.73.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:79:0c:be:20:48:82:2a:18:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=3fe81ced-6bbb-43f8-bb10-5bf0d907c954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ef:69:59:58:a8:d2:5b:82:4f:43:90:ab:1f: c7:70:c9:01:0c:ac:23:01:0c:c9:e8:fc:a3:6c:35: 5a:e9:61:97:b6:66:9f:07:f0:c8:a6:0c:9c:82:21: b5:af:7c:8d:1a:8a:56:65:d6:7d:e9:19:11:d8:15: 77:27:b9:78:07:70:bf:0e:1a:3c:a2:64:04:ff:6e: 3f:f5:0b:5d:25:eb:48:2b:ad:25:d2:b0:6c:e0:c8: eb:f5:4e:05:2e:d8:48:e6:2a:8b:97:c5:af:53:c2: 9f:b9:4b:13:7d:62:d3:0f:a8:ae:af:8e:49:1e:7c: cc:d1:e6:90:3b:64:73:33:f2:af:67:2a:ab:39:04: 0c:db:ba:d8:a5:02:55:ea:d3:a7:34:fb:7b:64:ff: 16:9e:f8:41:9d:0d:0d:10:81:c8:99:da:b7:57:eb: 0d:46:66:1f:f3:5f:b4:74:25:44:01:8e:9c:9b:22: b9:a0:b8:8a:1c:d5:65:96:85:9f:0d:30:02:b2:a4: 3e:3e:4b:16:25:c3:f4:4f:1c:fa:de:44:17:9a:1b: ac:5b:18:e6:34:d8:09:af:b8:08:41:12:63:9a:30: b9:62:15:7e:e5:4f:f1:70:6e:03:ef:8e:39:2f:d4: d9:f0:f7:4b:36:b3:64:2d:d4:dc:4e:f7:82:e5:69: ad:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:86:BF:71:06:EF:8B:5E:57:1E:B4:32:07:0A:3E:87:FD:CE:F6:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.73.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:fa:ba:28:b8:d7:35:a9:a0:f6:fd:5a:07:3e:fe:1c:41:6d: c5:22:b0:cc:50:20:dd:d1:0b:45:19:89:f9:75:46:16:42:e1: ba:92:3e:31:3c:f9:ed:7a:f3:00:91:d1:d0:d8:42:85:2a:0e: 3f:4b:f5:b3:85:a8:75:2f:c4:ff:f8:c4:be:88:88:b3:a1:a2: 48:5c:2b:40:f7:64:15:0a:5e:23:56:1b:36:1e:da:c0:75:dd: 07:68:a8:7b:09:96:13:de:86:39:cf:26:87:a5:4e:8e:70:a2: 95:d8:66:bd:7b:89:4b:41:4a:1b:b7:d7:c2:46:86:04:9e:d6: 94:d3:23:35:66:83:9b:91:aa:c2:35:43:ce:70:ac:37:34:2d: fc:b5:53:87:39:f4:e3:e7:ef:84:5d:4f:24:b5:8a:0f:42:86: 4f:64:f9:76:15:63:53:70:c4:29:00:e2:4e:83:92:04:1a:06: d0:e3:ae:dc:f4:e0:c7:da:5b:ed:c8:b5:63:e4:11:6e:ff:51: 3c:f3:cc:a3:ac:9c:ca:68:71:ae:e9:86:e9:eb:1c:07:be:c5: e0:d0:58:01:ba:19:9b:2f:26:3f:97:b6:b4:a1:45:1f:7a:6a: e4:7d:05:02:9d:3e:d4:29:2d:ab:86:a5:f4:8f:cf:95:d7:a8: ac:82:48:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXkMviBIgioYisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk M2ZlODFjZWQtNmJiYi00M2Y4LWJiMTAtNWJmMGQ5MDdjOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu9pWVio0luCT0OQqx/HcMkBDKwjAQzJ6Pyj bDVa6WGXtmafB/DIpgycgiG1r3yNGopWZdZ96RkR2BV3J7l4B3C/Dho8omQE/24/ 9QtdJetIK60l0rBs4Mjr9U4FLthI5iqLl8WvU8KfuUsTfWLTD6iur45JHnzM0eaQ O2RzM/KvZyqrOQQM27rYpQJV6tOnNPt7ZP8WnvhBnQ0NEIHImdq3V+sNRmYf81+0 dCVEAY6cmyK5oLiKHNVlloWfDTACsqQ+PksWJcP0Txz63kQXmhusWxjmNNgJr7gI QRJjmjC5YhV+5U/xcG4D7445L9TZ8PdLNrNkLdTcTveC5WmtMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWGv3EG74teVx60MgcKPof9zvaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvNDIzNzc4MDYtNGE3Ny0z MDk4LThmZDQtYzZiOGU0Mzg5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk0kIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/6uii41zWpoPb9Wgc+/hxBbcUisMxQIN3RC0UZifl1RhZC4bqSPjE8 +e168wCR0dDYQoUqDj9L9bOFqHUvxP/4xL6IiLOhokhcK0D3ZBUKXiNWGzYe2sB1 3QdoqHsJlhPehjnPJoelTo5wopXYZr17iUtBShu318JGhgSe1pTTIzVmg5uRqsI1 Q85wrDc0Lfy1U4c59OPn74RdTyS1ig9Chk9k+XYVY1NwxCkA4k6DkgQaBtDjrtz0 4MfaW+3ItWPkEW7/UTzzzKOsnMpoca7phunrHAe+xeDQWAG6GZsvJj+XtrShRR96 auR9BQKdPtQpLauGpfSPz5XXqKyCSOE= -----END CERTIFICATE-----Generated at Fri Apr 11 21:42:31 2025 by rpki-client