$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c2216585-71fc-34f0-bfb6-1c152fd66dba.roa File: c2216585-71fc-34f0-bfb6-1c152fd66dba.roa (raw, json) Hash identifier: eIIWjP9HlHmONNJ23X7wPcDONzmsPMaOoCirnBOUf2M= Subject key identifier: 1D:AC:BD:19:67:C8:84:4F:72:BF:8C:E7:1E:DE:3F:DE:AB:C9:AA:97 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F43285849393E75A1E5D7909E8BF51480 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c2216585-71fc-34f0-bfb6-1c152fd66dba.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 18659 IP address blocks: 147.249.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:75:a1:e5:d7:90:9e:8b:f5:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=771e2b60-8a51-47d1-aadf-d2d58364c64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:22:42:88:91:67:31:52:ac:9a:57:83:e1:24: e9:69:2c:6b:17:dd:d1:58:ea:33:3d:58:a2:b1:76: 0f:17:63:2a:36:31:09:c4:26:af:56:ef:6f:66:61: 85:34:f3:0e:fd:74:87:2f:2b:9f:5f:21:ff:28:e2: b3:49:87:e5:c7:1a:ff:b6:ff:43:e1:c6:70:fa:bd: 4e:bc:99:40:56:c9:19:1e:3c:1e:f0:26:5c:a0:75: 72:e0:92:dc:f2:39:50:b6:bb:ba:d4:c3:e2:d3:bb: f6:95:70:88:2d:09:f9:f9:c2:e9:e1:94:53:51:72: c1:c6:67:03:90:51:63:36:c6:88:47:12:b9:6c:e0: 0c:cd:97:35:a0:8e:3e:bc:b2:52:d9:fc:b1:b0:ec: 74:11:7f:84:a6:7c:5f:41:4c:38:d4:2c:d7:3f:f9: 10:d5:c3:be:89:f1:27:7d:40:27:be:77:3c:cd:05: 40:7c:84:fd:cf:db:16:12:87:6d:82:b1:30:65:e4: fc:4a:55:8e:a2:6b:4b:2e:95:b2:48:24:c0:92:bd: e8:18:53:69:78:17:8d:88:96:1e:7f:52:e0:d6:1f: 2c:65:9d:31:00:f6:4b:eb:7c:90:ef:c3:82:50:b3: 21:25:6e:c6:dd:f0:17:f6:b9:eb:0c:14:4f:07:03: 00:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AC:BD:19:67:C8:84:4F:72:BF:8C:E7:1E:DE:3F:DE:AB:C9:AA:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c2216585-71fc-34f0-bfb6-1c152fd66dba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:d3:47:25:1b:2f:b1:57:07:a9:14:c7:a1:39:25:9b:8a:18: a3:9d:cb:9e:43:ed:2e:09:ed:46:ef:79:af:18:ff:1d:c7:d2: 90:f5:12:e4:8f:5f:35:a0:2e:d5:90:6b:c8:7f:6b:14:76:ac: e2:fb:67:cf:71:01:8e:03:2f:9d:1c:4f:38:74:07:13:2b:3c: be:cf:e3:70:3d:a0:1c:d7:c2:cf:e5:cc:b0:a8:70:c0:a3:f7: 57:af:72:27:e7:9d:bf:7e:d9:82:6b:85:77:d1:35:7e:52:76: 22:c4:2d:1f:d2:a1:a1:20:e1:03:c9:a9:b9:d4:02:47:5c:d3: de:7d:4d:d5:a9:b2:10:ff:cd:e6:2a:8d:44:c7:71:5b:f5:40: 7f:21:01:02:dc:9f:f4:a2:72:01:a0:31:c7:1a:6c:d7:2d:dd: f2:51:51:a3:3d:df:a4:b3:53:85:dc:07:7e:ae:b7:47:a3:99: be:ac:c9:c6:08:73:7e:70:8a:3b:84:b9:6f:f7:4e:50:19:02: ee:60:58:32:2a:7f:6e:c5:c6:52:ea:09:ef:cf:76:74:21:14: 00:08:93:38:91:87:ce:de:fc:8f:24:b5:fd:38:7a:5f:d5:a7: 2e:5c:b6:cd:59:f2:1a:22:1f:81:41:cf:ca:ba:a8:17:8f:3c: f6:e8:e9:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PnWh5deQnov1FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk NzcxZTJiNjAtOGE1MS00N2QxLWFhZGYtZDJkNTgzNjRjNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiJCiJFnMVKsmleD4STpaSxrF93RWOozPVii sXYPF2MqNjEJxCavVu9vZmGFNPMO/XSHLyufXyH/KOKzSYflxxr/tv9D4cZw+r1O vJlAVskZHjwe8CZcoHVy4JLc8jlQtru61MPi07v2lXCILQn5+cLp4ZRTUXLBxmcD kFFjNsaIRxK5bOAMzZc1oI4+vLJS2fyxsOx0EX+EpnxfQUw41CzXP/kQ1cO+ifEn fUAnvnc8zQVAfIT9z9sWEodtgrEwZeT8SlWOomtLLpWySCTAkr3oGFNpeBeNiJYe f1Lg1h8sZZ0xAPZL63yQ78OCULMhJW7G3fAX9rnrDBRPBwMAXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2svRlnyIRPcr+M5x7eP96ryaqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvYzIyMTY1ODUtNzFmYy0z NGYwLWJmYjYtMWMxNTJmZDY2ZGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/kYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDTRyUbL7FXB6kUx6E5JZuKGKOdy55D7S4J7Ubvea8Y/x3H0pD1EuSP XzWgLtWQa8h/axR2rOL7Z89xAY4DL50cTzh0BxMrPL7P43A9oBzXws/lzLCocMCj 91evcifnnb9+2YJrhXfRNX5SdiLELR/SoaEg4QPJqbnUAkdc0959TdWpshD/zeYq jUTHcVv1QH8hAQLcn/SicgGgMccabNct3fJRUaM936SzU4XcB36ut0ejmb6sycYI c35wijuEuW/3TlAZAu5gWDIqf27FxlLqCe/PdnQhFAAIkziRh87e/I8ktf04el/V py5cts1Z8hoiH4FBz8q6qBePPPbo6Ro= -----END CERTIFICATE-----Generated at Fri May 9 08:42:38 2025 by rpki-client