$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/fb1ec478-9e0c-324d-9230-e38ddaa87431.roa File: fb1ec478-9e0c-324d-9230-e38ddaa87431.roa (raw, json) Hash identifier: lCneNxHBM6pJewzQ+KXbz3Nhs/9UfE4APXgQCjUyzYU= Subject key identifier: 29:09:2E:D7:9C:45:91:A8:36:E6:84:D2:F2:1A:B4:D5:5B:17:F2:48 Certificate issuer: /CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a Certificate serial: 010D0C9F43285849A1EF6E6340BA91E8A56F3A58 Authority key identifier: C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/fb1ec478-9e0c-324d-9230-e38ddaa87431.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 400541 IP address blocks: 147.185.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:6e:63:40:ba:91:e8:a5:6f:3a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=53a8c67a-572b-4b25-976d-c1b44f497925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ed:36:0d:25:8b:89:e3:26:49:d3:74:bf:6f: cb:ba:df:23:65:59:37:ff:a0:26:50:d3:9f:30:72: 0a:53:78:57:6c:10:c2:1d:9d:c0:66:f3:62:db:d5: 01:42:30:45:f3:ac:8f:c3:d5:5a:13:cd:75:c2:2c: 3f:f4:0e:66:55:31:59:85:e8:3a:78:41:7d:8e:bb: 2e:ce:d0:e9:f8:9d:9a:a9:19:a4:41:60:3f:b7:aa: 16:4f:0d:e2:c9:f5:e4:44:5e:17:0a:2d:aa:2f:76: 33:57:9e:90:f1:9a:aa:f6:c5:d6:c8:2f:f4:41:21: b9:39:b5:28:ff:7f:3f:1e:6e:52:a7:fa:d4:0f:6a: 41:57:20:1f:9f:21:cc:1e:17:8e:9f:b6:f2:d2:d9: e4:58:de:91:e4:af:60:45:a3:19:f0:b3:09:03:6a: 93:78:02:47:68:69:33:e9:c6:6f:0b:af:06:d6:b7: b6:79:95:c9:f3:e9:34:f3:03:6a:6e:0d:e5:6b:3c: 3e:ec:98:7c:8f:20:e4:18:08:6d:c3:7c:0a:95:b5: 29:0d:48:c0:77:49:9c:35:4e:d2:90:65:c7:4c:55: 91:d0:36:ef:b5:c7:f9:af:68:ed:60:d8:24:a9:3b: 85:d3:9c:6b:b2:b2:8f:be:e3:85:e0:88:99:0b:89: 96:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:09:2E:D7:9C:45:91:A8:36:E6:84:D2:F2:1A:B4:D5:5B:17:F2:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/fb1ec478-9e0c-324d-9230-e38ddaa87431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl X509v3 Authority Key Identifier: keyid:C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer sbgp-ipAddrBlock: critical IPv4: 147.185.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:aa:b7:bc:c1:ee:68:20:62:d2:f5:d8:ad:59:c9:e5:f1:41: 7e:a5:31:7f:5f:6c:fe:e8:67:ef:83:b4:ad:42:47:a8:44:15: 76:ff:33:bf:16:a6:68:70:32:e2:3c:f1:1a:9d:ef:40:0c:de: 56:24:47:1f:20:98:11:c9:0a:bb:e5:ef:3d:dc:93:69:1c:65: 9f:bb:c4:48:92:58:46:50:a8:0a:94:fc:35:ec:31:6b:ef:45: e8:46:31:79:5c:ef:43:ac:a7:62:46:7d:80:27:75:cc:44:71: 53:e4:08:85:40:8e:bf:01:05:db:e8:a3:e9:37:ca:6e:ab:16: 8e:b5:9e:59:f4:c6:a2:30:8e:28:f7:63:23:a6:fc:20:cf:43: 98:28:f9:7c:09:a5:38:cf:60:28:90:de:af:94:3b:b4:d9:7d: 1f:f6:ff:36:dc:40:24:dd:c8:39:db:70:ab:08:30:c5:06:30: c5:59:cd:5f:aa:3f:05:09:41:91:04:fc:82:17:88:2b:55:12: f0:4b:e3:94:6d:5d:4c:67:55:4b:55:6d:92:5b:97:73:e4:49: a5:da:4e:78:e8:5c:f7:a0:a1:ad:eb:9a:3e:bf:28:b6:83:5d: 2c:34:8d:f7:05:0d:dd:de:74:44:42:7a:ee:ee:a6:69:17:67: 33:61:3b:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh725jQLqR6KVvOlgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc4OGE5NDEtNDBhNi00OWUzLWFiYzYtMWY1MWYxMWU2 ZjNhMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NTNhOGM2N2EtNTcyYi00YjI1LTk3NmQtYzFiNDRmNDk3OTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe02DSWLieMmSdN0v2/Lut8jZVk3/6AmUNOf MHIKU3hXbBDCHZ3AZvNi29UBQjBF86yPw9VaE811wiw/9A5mVTFZheg6eEF9jrsu ztDp+J2aqRmkQWA/t6oWTw3iyfXkRF4XCi2qL3YzV56Q8Zqq9sXWyC/0QSG5ObUo /38/Hm5Sp/rUD2pBVyAfnyHMHheOn7by0tnkWN6R5K9gRaMZ8LMJA2qTeAJHaGkz 6cZvC68G1re2eZXJ8+k08wNqbg3lazw+7Jh8jyDkGAhtw3wKlbUpDUjAd0mcNU7S kGXHTFWR0Dbvtcf5r2jtYNgkqTuF05xrsrKPvuOF4IiZC4mW7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkJLtecRZGoNuaE0vIatNVbF/JIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzg4 YTk0MS00MGE2LTQ5ZTMtYWJjNi0xZjUxZjExZTZmM2EvZmIxZWM0NzgtOWUwYy0z MjRkLTkyMzAtZTM4ZGRhYTg3NDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc4OGE5NDEtNDBhNi00OWUzLWFi YzYtMWY1MWYxMWU2ZjNhLzE3ODhhOTQxLTQwYTYtNDllMy1hYmM2LTFmNTFmMTFl NmYzYS5jcmwwHwYDVR0jBBgwFoAUxOcZn90XJU7Mz/mhIfJhVKKx44kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzg4YTk0MS00MGE2LTQ5ZTMtYWJjNi0xZjUx ZjExZTZmM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk7lYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuqt7zB7mggYtL12K1ZyeXxQX6lMX9fbP7oZ++DtK1CR6hEFXb/M78W pmhwMuI88Rqd70AM3lYkRx8gmBHJCrvl7z3ck2kcZZ+7xEiSWEZQqAqU/DXsMWvv RehGMXlc70Osp2JGfYAndcxEcVPkCIVAjr8BBdvoo+k3ym6rFo61nln0xqIwjij3 YyOm/CDPQ5go+XwJpTjPYCiQ3q+UO7TZfR/2/zbcQCTdyDnbcKsIMMUGMMVZzV+q PwUJQZEE/IIXiCtVEvBL45RtXUxnVUtVbZJbl3PkSaXaTnjoXPegoa3rmj6/KLaD XSw0jfcFDd3edERCeu7upmkXZzNhOxk= -----END CERTIFICATE-----Generated at Wed May 14 15:54:12 2025 by rpki-client