$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa File: 87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa (raw, json) Hash identifier: d2CLs6POMBZ/E+ahUncumVI8EUb5ICZOkT1/i0ibUO0= Subject key identifier: 6C:40:60:D5:36:A9:F9:2E:9B:C5:6E:3F:DD:3E:B8:BA:93:2C:57:A7 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F432858486D904DE8F14040AFABDF4EA0 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 36407 IP address blocks: 147.72.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:4d:e8:f1:40:40:af:ab:df:4e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=e5c42785-69cc-48c4-85ee-fa2ac346f831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:98:61:e7:67:7e:0b:10:db:72:d5:de:e1: 6b:3c:f9:3e:f1:6f:9a:47:46:b1:a2:6f:8f:a7:c2: f2:8e:3e:3c:6a:9e:d1:fe:75:b7:97:40:ae:fe:5f: 07:8a:83:0a:9d:d4:8d:f8:33:d1:5c:e7:2f:90:4d: f5:3f:97:80:4f:51:d0:94:1f:8b:c1:05:44:22:55: 72:29:23:49:f0:63:b3:ac:6d:8b:04:2a:dd:7b:c9: 77:7f:f7:62:eb:f0:79:d4:65:16:ef:c2:3f:7a:4e: d7:81:73:f4:66:30:f7:8e:22:ab:a8:46:4d:89:45: 7a:1d:cb:34:c3:74:b3:39:f5:04:75:06:0b:50:f1: d2:ba:d9:07:23:89:17:27:34:1b:cd:15:48:8f:04: 4d:fa:9c:ad:a9:3d:cb:50:2b:6d:ca:3b:3c:5f:05: ed:d6:17:f4:b5:10:17:b4:a3:52:ec:59:af:3a:92: 16:e3:1e:94:a1:cc:07:62:fe:70:99:c3:2d:48:7e: 90:14:4e:ee:5f:86:7e:4c:b3:e4:18:b3:1d:35:07: a2:61:72:9f:8e:a8:2c:e0:80:2d:d2:3d:99:fd:1f: c2:2c:1b:47:dc:27:44:1d:b7:13:f5:f2:a8:e2:c8: 79:a5:8f:a8:fe:e1:5f:6d:3d:40:57:4e:9a:d4:8a: eb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:40:60:D5:36:A9:F9:2E:9B:C5:6E:3F:DD:3E:B8:BA:93:2C:57:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:18:ec:55:d5:ab:35:ee:aa:25:0a:15:bd:93:18:ee:54:dc: ab:f2:c1:dc:a8:3e:28:7b:fd:ef:34:f9:71:1a:b7:73:3a:f2: b6:f2:05:30:d7:b4:5a:cf:0a:07:9f:54:ef:43:84:10:27:58: 26:65:36:ce:68:12:98:69:da:bf:88:27:46:d5:b8:4e:c9:41: ef:f1:f3:7c:ec:12:00:e6:2a:44:82:bc:a1:92:24:41:0a:91: 0e:fc:f1:ee:23:24:58:5e:c5:da:3e:f2:d7:c4:01:ee:09:5f: 7e:ce:3a:54:f0:2d:0e:1a:33:87:ea:15:2f:70:56:e8:a6:ad: f8:34:24:a9:ac:29:a2:d8:2c:20:07:df:ed:c8:2a:56:98:d4: 8b:fe:20:34:90:7c:23:81:4d:ca:15:b8:bc:c4:3d:1f:b9:9c: 4a:ae:d6:32:2e:c7:a1:ed:f6:ee:20:2a:68:b5:03:94:e1:63: f9:cd:16:15:26:fd:97:7a:73:b4:f3:e4:4c:2d:c0:6e:a1:99: e9:78:55:d0:a2:a9:23:5d:f1:73:a1:d2:56:d4:c3:99:34:c6: e3:6d:d5:78:d9:eb:b1:97:9a:02:b9:56:75:e9:8b:56:e0:02: 2d:e2:91:f4:c7:24:dc:6d:7e:25:a8:7b:5d:5c:d5:01:f7:41: f7:94:88:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkE3o8UBAr6vfTqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTVjNDI3ODUtNjljYy00OGM0LTg1ZWUtZmEyYWMzNDZmODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW2YYednfgsQ23LV3uFrPPk+8W+aR0axom+P p8Lyjj48ap7R/nW3l0Cu/l8HioMKndSN+DPRXOcvkE31P5eAT1HQlB+LwQVEIlVy KSNJ8GOzrG2LBCrde8l3f/di6/B51GUW78I/ek7XgXP0ZjD3jiKrqEZNiUV6Hcs0 w3SzOfUEdQYLUPHSutkHI4kXJzQbzRVIjwRN+pytqT3LUCttyjs8XwXt1hf0tRAX tKNS7FmvOpIW4x6UocwHYv5wmcMtSH6QFE7uX4Z+TLPkGLMdNQeiYXKfjqgs4IAt 0j2Z/R/CLBtH3CdEHbcT9fKo4sh5pY+o/uFfbT1AV06a1IrrSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxAYNU2qfkum8VuP90+uLqTLFenMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvODdhNWY1NzEtM2NmYS0z NGM2LThlYzItMTEwZWU3MTQwZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk0j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8Y7FXVqzXuqiUKFb2TGO5U3KvywdyoPih7/e80+XEat3M68rbyBTDX tFrPCgefVO9DhBAnWCZlNs5oEphp2r+IJ0bVuE7JQe/x83zsEgDmKkSCvKGSJEEK kQ788e4jJFhexdo+8tfEAe4JX37OOlTwLQ4aM4fqFS9wVuimrfg0JKmsKaLYLCAH 3+3IKlaY1Iv+IDSQfCOBTcoVuLzEPR+5nEqu1jIux6Ht9u4gKmi1A5ThY/nNFhUm /Zd6c7Tz5EwtwG6hmel4VdCiqSNd8XOh0lbUw5k0xuNt1XjZ67GXmgK5VnXpi1bg Ai3ikfTHJNxtfiWoe11c1QH3QfeUiKM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:59 2025 by rpki-client