$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/7949338e-45a1-3525-b96e-1f1f879e2b21.roa File: 7949338e-45a1-3525-b96e-1f1f879e2b21.roa (raw, json) Hash identifier: lfnDXe7nHVy3Krk702tf165dTHTHA/X2Bs7dptzFKe8= Subject key identifier: D0:0A:87:63:6B:37:F0:AF:C0:B7:56:49:7D:A0:BB:5F:F4:74:A2:B6 Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F43285849C0A4E6B72E9556DFACA09860 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/7949338e-45a1-3525-b96e-1f1f879e2b21.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 1403 IP address blocks: 146.71.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e6:b7:2e:95:56:df:ac:a0:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=cfa4e761-c52b-4186-b60e-311565e000f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b2:76:4b:20:76:95:02:e0:de:4e:df:17:60: 84:c2:08:c7:d0:82:64:25:31:39:1f:28:5b:76:21: 31:c0:ab:8d:f2:23:6e:13:8e:63:c4:68:81:02:9e: e7:fc:8b:78:9f:34:ef:2c:55:97:c7:2d:83:11:40: 20:8c:7d:b0:6c:32:6c:ed:09:31:24:e0:c4:92:7b: a7:33:a0:48:e1:a8:38:9c:36:34:cf:94:31:eb:f2: 42:14:8d:6c:d5:58:9b:b0:a9:4b:42:3f:0f:7a:18: c0:60:98:a7:04:08:9a:63:da:12:58:97:10:fb:5f: 8d:44:c4:74:55:8c:5d:85:41:44:35:68:ff:ed:07: 10:d0:17:d5:75:43:1a:6b:4a:75:9e:76:e7:29:d6: f0:f3:da:8d:19:1f:ff:0f:67:23:d0:27:7e:d0:4e: fa:bb:7f:bf:69:80:fc:6c:cf:5d:b4:2f:5e:f9:af: bd:64:ed:3a:38:f3:e0:b3:f2:e6:9f:8e:ad:5c:65: 2e:3c:50:f3:6e:6d:a3:40:a0:fc:e3:3f:8a:30:c2: cd:50:cd:2f:27:d2:22:41:eb:4f:85:bf:92:dd:85: ed:26:16:1e:8b:f7:46:ce:ea:ba:05:21:a1:21:98: a0:3b:6b:05:11:2d:f1:39:ed:c3:f0:03:b4:39:6b: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0A:87:63:6B:37:F0:AF:C0:B7:56:49:7D:A0:BB:5F:F4:74:A2:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/7949338e-45a1-3525-b96e-1f1f879e2b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 146.71.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:88:94:b6:5d:f1:80:4c:0d:65:94:1d:72:72:b6:8e:a7:44: 59:48:52:03:56:0a:41:f3:b6:00:ff:c6:17:33:7b:85:69:27: 97:47:ef:f8:c7:32:ed:d2:44:40:34:b5:62:cb:f3:05:50:df: 71:68:1e:0d:d6:54:36:1f:44:cc:a0:5d:e8:d2:4d:f6:eb:dc: 5a:50:bd:eb:fe:3d:4b:c7:5c:9a:73:5c:55:47:bd:96:33:fc: 8f:eb:6d:95:d2:cb:65:d8:62:54:70:17:5d:ff:f5:3f:59:73: ed:de:7b:11:5a:7f:a7:21:c9:c1:d7:c0:bb:9f:05:f5:36:91: ba:7b:a3:3f:46:8a:6c:bb:f7:44:aa:80:46:85:cb:b7:83:29: 39:e5:bd:76:90:19:63:19:62:c0:ee:72:2b:fb:b5:87:77:af: 3e:0a:36:15:56:85:e5:c1:57:ab:56:19:38:f1:29:07:d6:83: 98:06:48:3e:d4:e2:bb:5c:f0:ff:ed:8f:cc:2b:99:84:fb:e4: 69:ba:70:3a:01:c5:3d:88:0b:9b:69:c4:4e:67:f5:2e:e5:8f: 1a:93:ac:9b:d5:b4:3c:2f:e2:a0:20:a4:69:8d:8e:cd:a9:44: b4:2d:79:9f:5e:17:4a:ac:67:48:a8:9f:7b:6a:85:12:0a:df: cf:31:4a:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOa3LpVW36ygmGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk Y2ZhNGU3NjEtYzUyYi00MTg2LWI2MGUtMzExNTY1ZTAwMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbJ2SyB2lQLg3k7fF2CEwgjH0IJkJTE5Hyhb diExwKuN8iNuE45jxGiBAp7n/It4nzTvLFWXxy2DEUAgjH2wbDJs7QkxJODEknun M6BI4ag4nDY0z5Qx6/JCFI1s1VibsKlLQj8PehjAYJinBAiaY9oSWJcQ+1+NRMR0 VYxdhUFENWj/7QcQ0BfVdUMaa0p1nnbnKdbw89qNGR//D2cj0Cd+0E76u3+/aYD8 bM9dtC9e+a+9ZO06OPPgs/Lmn46tXGUuPFDzbm2jQKD84z+KMMLNUM0vJ9IiQetP hb+S3YXtJhYei/dGzuq6BSGhIZigO2sFES3xOe3D8AO0OWsknwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAKh2NrN/CvwLdWSX2gu1/0dKK2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvNzk0OTMzOGUtNDVhMS0z NTI1LWI5NmUtMWYxZjg3OWUyYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkkcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqIlLZd8YBMDWWUHXJyto6nRFlIUgNWCkHztgD/xhcze4VpJ5dH7/jH Mu3SREA0tWLL8wVQ33FoHg3WVDYfRMygXejSTfbr3FpQvev+PUvHXJpzXFVHvZYz /I/rbZXSy2XYYlRwF13/9T9Zc+3eexFaf6chycHXwLufBfU2kbp7oz9Gimy790Sq gEaFy7eDKTnlvXaQGWMZYsDuciv7tYd3rz4KNhVWheXBV6tWGTjxKQfWg5gGSD7U 4rtc8P/tj8wrmYT75Gm6cDoBxT2IC5tpxE5n9S7ljxqTrJvVtDwv4qAgpGmNjs2p RLQteZ9eF0qsZ0ion3tqhRIK388xSkE= -----END CERTIFICATE-----Generated at Sun May 11 09:08:32 2025 by rpki-client