$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/af3da4b5-5bc6-3024-8fd3-5cc990ec75a8.roa File: af3da4b5-5bc6-3024-8fd3-5cc990ec75a8.roa (raw, json) Hash identifier: 7180MDvKZhsOnyC+qx8k5KH8iRCa1A3mqJsj2Eiz0wE= Subject key identifier: 39:BB:70:2A:5F:B8:DF:7F:E3:D7:89:B6:31:13:00:2D:3A:99:C0:4A Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849CBCF9E22CD04B8C93D806180 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/af3da4b5-5bc6-3024-8fd3-5cc990ec75a8.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 7018 IP address blocks: 147.53.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:9e:22:cd:04:b8:c9:3d:80:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=c7ce0d9f-5e3e-4755-8888-83dd0cfd2f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:45:5f:cd:e6:53:aa:24:c9:80:0e:84:4e:66: 07:a7:ba:3a:f6:65:91:d3:4a:ee:d2:1f:b0:32:25: dc:3d:c5:d3:25:1e:ad:98:93:7f:48:84:90:5e:de: 67:7a:4f:ae:9a:54:52:b1:6c:7a:60:ef:75:0c:83: 14:e4:d8:e5:99:1a:ba:b9:fa:bc:72:21:75:70:f8: 43:89:0f:e1:8c:75:bf:dc:93:f9:ea:a8:c8:27:4a: d7:dd:d9:09:3e:4a:ad:08:60:bd:a3:53:39:ad:6d: db:79:d9:5b:7c:1a:86:f9:8f:e1:04:21:9d:e7:1b: 7a:da:c4:9f:d2:89:ae:21:59:f2:8a:fd:42:4d:41: d2:3c:d6:26:35:7f:2d:db:dd:1e:93:34:42:3a:c0: 1b:40:3e:d1:10:74:96:a8:97:b0:6e:0c:54:a7:48: 3c:5a:d3:52:ac:39:39:cb:28:bb:34:7d:ea:6f:8f: 86:73:10:7e:14:12:66:e1:0a:cb:8d:71:98:e8:ad: 21:2e:5a:3e:69:4b:95:f1:55:b5:52:c1:3f:04:ec: 16:a9:35:f4:70:2a:e3:e7:c6:4d:e0:eb:44:99:ce: 60:a5:95:4a:af:7f:f6:e8:68:dd:ff:14:be:39:09: a8:ea:7a:b5:e7:f7:e9:3a:8a:d7:86:66:24:8c:0a: 25:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BB:70:2A:5F:B8:DF:7F:E3:D7:89:B6:31:13:00:2D:3A:99:C0:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/af3da4b5-5bc6-3024-8fd3-5cc990ec75a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 147.53.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:24:8e:6a:ca:3c:78:b0:29:c7:43:b6:b4:fc:75:f1:65:f1: 14:ea:0f:e8:b4:25:b3:ee:e4:24:12:e3:23:f6:20:84:36:a8: ab:cb:19:35:d3:9c:7e:56:1d:b2:af:27:ed:2e:70:ff:b8:53: 5d:30:4b:5a:71:0c:57:e5:91:e2:48:f2:72:5d:cb:de:74:bb: 67:a9:85:8a:b4:95:35:82:75:86:35:00:74:10:6b:54:66:79: b6:06:ae:74:9f:e1:28:e5:25:d8:e1:d5:7c:f3:b8:1a:b7:44: 48:86:10:8f:64:25:cf:9d:a9:85:89:12:2b:af:d7:67:69:a4: 36:60:97:a8:f1:08:53:8e:cd:36:62:a4:ba:40:a9:28:1a:52: 74:8b:ce:1f:c4:3c:64:3c:56:07:25:60:65:e3:b9:29:4e:fc: 2c:4a:f2:a6:6b:aa:c8:67:7a:30:d9:09:0c:ba:99:09:b8:20: 99:2a:10:62:99:b1:fd:9f:f0:d7:5b:2c:d8:af:c2:b1:be:b6: 74:f3:b1:44:30:7d:b7:5a:50:b2:a0:da:57:98:d7:00:b9:28: 8f:b6:18:7b:25:9c:ec:d1:5e:83:06:ab:a8:40:77:6a:03:43: 4d:93:a2:b1:c2:ab:ba:c0:b6:63:e4:df:e3:be:1b:09:08:49: c1:7a:71:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz54izQS4yT2AYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YzdjZTBkOWYtNWUzZS00NzU1LTg4ODgtODNkZDBjZmQyZjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEVfzeZTqiTJgA6ETmYHp7o69mWR00ru0h+w MiXcPcXTJR6tmJN/SISQXt5nek+umlRSsWx6YO91DIMU5NjlmRq6ufq8ciF1cPhD iQ/hjHW/3JP56qjIJ0rX3dkJPkqtCGC9o1M5rW3bedlbfBqG+Y/hBCGd5xt62sSf 0omuIVnyiv1CTUHSPNYmNX8t290ekzRCOsAbQD7REHSWqJewbgxUp0g8WtNSrDk5 yyi7NH3qb4+GcxB+FBJm4QrLjXGY6K0hLlo+aUuV8VW1UsE/BOwWqTX0cCrj58ZN 4OtEmc5gpZVKr3/26Gjd/xS+OQmo6nq15/fpOorXhmYkjAolUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDm7cCpfuN9/49eJtjETAC06mcBKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYWYzZGE0YjUtNWJjNi0z MDI0LThmZDMtNWNjOTkwZWM3NWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0kjmrKPHiwKcdDtrT8dfFl8RTqD+i0JbPu5CQS4yP2IIQ2qKvLGTXT nH5WHbKvJ+0ucP+4U10wS1pxDFflkeJI8nJdy950u2ephYq0lTWCdYY1AHQQa1Rm ebYGrnSf4SjlJdjh1XzzuBq3REiGEI9kJc+dqYWJEiuv12dppDZgl6jxCFOOzTZi pLpAqSgaUnSLzh/EPGQ8VgclYGXjuSlO/CxK8qZrqshnejDZCQy6mQm4IJkqEGKZ sf2f8NdbLNivwrG+tnTzsUQwfbdaULKg2leY1wC5KI+2GHslnOzRXoMGq6hAd2oD Q02TorHCq7rAtmPk3+O+GwkIScF6cRU= -----END CERTIFICATE-----Generated at Sun May 11 15:56:56 2025 by rpki-client