$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/0610398d-9c1f-3812-8722-c430863db284.roa File: 0610398d-9c1f-3812-8722-c430863db284.roa (raw, json) Hash identifier: uVltBzIKEqyvlEl9Q8KVV68QwKj3mgdauWR1wQPRY/s= Subject key identifier: 70:33:E7:6F:F4:A5:2F:10:EF:EE:08:4F:87:7A:94:A6:CE:C6:F2:C6 Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Certificate serial: 010D0C9F43285849AD1A0880B3A765FDBEA94D40 Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/0610398d-9c1f-3812-8722-c430863db284.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7862 IP address blocks: 146.23.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:08:80:b3:a7:65:fd:be:a9:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=09e1f89d-b39d-44e9-ac56-6ed5a14596f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b4:cf:15:a7:9f:d7:11:bd:8a:32:d1:a9:1c: f4:0d:85:22:c6:51:d9:75:85:42:43:cb:f9:5e:5f: 67:19:89:58:ca:c2:d9:fd:29:43:6a:30:d8:ee:2d: 0f:03:70:81:2c:61:f9:c1:08:86:ab:21:f0:f5:50: fa:03:fd:33:c7:a4:c8:de:c7:1e:6f:88:b1:66:28: e5:59:79:24:ba:5d:76:d5:6f:0d:b0:a4:fa:cd:06: 7f:1f:b6:58:82:2b:46:f3:3e:8d:1c:42:e3:3f:a0: 60:58:64:20:12:39:da:4a:64:ca:c1:71:db:92:5c: 5c:62:10:4b:8f:95:87:b9:e9:90:82:e6:77:a7:2d: 94:94:a8:cc:e2:ce:d9:bb:36:8f:01:0e:dc:45:16: 3a:66:7b:d5:ba:dd:31:7e:77:c2:1e:15:7d:f6:ba: 39:cc:24:5c:8b:ef:96:44:d2:73:e8:f4:b7:81:6c: 62:e4:25:a5:df:cc:ad:ba:38:bb:3d:fb:ed:83:e4: 23:1a:d6:21:48:5e:ba:69:ab:e6:25:aa:a0:3b:79: 2a:1e:45:b5:3c:1d:16:7c:34:72:5a:b0:5a:c3:e5: e2:56:d9:68:0a:7b:5e:37:42:3c:c0:31:86:8e:db: 9a:cb:be:42:4a:97:d4:44:63:2f:fa:3c:70:57:ac: 15:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:33:E7:6F:F4:A5:2F:10:EF:EE:08:4F:87:7A:94:A6:CE:C6:F2:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/0610398d-9c1f-3812-8722-c430863db284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl X509v3 Authority Key Identifier: keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer sbgp-ipAddrBlock: critical IPv4: 146.23.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:91:bf:45:6b:20:71:17:7f:1c:bf:82:fa:1b:d5:23:9a:8e: 26:d5:2a:ef:0f:85:c9:e3:74:06:19:20:31:03:63:30:83:78: ac:a9:35:32:c5:b1:81:1f:e1:89:e8:59:53:63:3d:57:76:c1: 5a:87:bb:d8:5c:98:f0:ef:1d:07:fa:00:09:db:58:72:f2:fe: 95:1b:b6:79:7e:73:d2:44:a4:79:10:bf:70:c5:b7:22:86:7b: 60:04:9e:1e:95:e9:53:46:80:85:68:74:9d:69:8e:36:de:fd: d4:27:37:9d:07:35:8c:9f:2a:ce:7f:1b:ce:aa:7a:8d:ec:a3: ff:5f:e1:7a:57:ef:fe:68:48:84:0b:51:f9:1e:35:ff:96:74: 0c:68:f7:2b:61:b7:cf:8d:43:9c:2c:44:d5:81:f6:0c:3f:bc: 97:24:44:d3:b2:7e:6e:ac:9f:7f:52:96:8b:a3:f4:31:86:e8: 6d:dc:53:a6:e3:54:3d:84:0d:9b:b6:45:7a:7e:85:a3:e6:44: 43:81:1f:52:44:ee:b2:46:20:6a:04:7a:fe:f3:62:3c:74:c2: b3:5a:7b:93:a5:28:4e:05:a7:ac:f2:2a:95:8c:a4:da:6a:ce: b5:00:3c:46:a6:a6:1d:2e:73:ce:22:da:70:15:c2:ad:89:46: 02:04:d1:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgiAs6dl/b6pTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm MmJkMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MDllMWY4OWQtYjM5ZC00NGU5LWFjNTYtNmVkNWExNDU5NmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bTPFaef1xG9ijLRqRz0DYUixlHZdYVCQ8v5 Xl9nGYlYysLZ/SlDajDY7i0PA3CBLGH5wQiGqyHw9VD6A/0zx6TI3sceb4ixZijl WXkkul121W8NsKT6zQZ/H7ZYgitG8z6NHELjP6BgWGQgEjnaSmTKwXHbklxcYhBL j5WHuemQguZ3py2UlKjM4s7ZuzaPAQ7cRRY6ZnvVut0xfnfCHhV99ro5zCRci++W RNJz6PS3gWxi5CWl38ytuji7Pfvtg+QjGtYhSF66aavmJaqgO3kqHkW1PB0WfDRy WrBaw+XiVtloCnteN0I8wDGGjtuay75CSpfURGMv+jxwV6wVRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAz52/0pS8Q7+4IT4d6lKbOxvLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvMDYxMDM5OGQtOWMxZi0z ODEyLTg3MjItYzQzMDg2M2RiMjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkhf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGRv0VrIHEXfxy/gvob1SOajibVKu8PhcnjdAYZIDEDYzCDeKypNTLF sYEf4YnoWVNjPVd2wVqHu9hcmPDvHQf6AAnbWHLy/pUbtnl+c9JEpHkQv3DFtyKG e2AEnh6V6VNGgIVodJ1pjjbe/dQnN50HNYyfKs5/G86qeo3so/9f4XpX7/5oSIQL UfkeNf+WdAxo9ytht8+NQ5wsRNWB9gw/vJckRNOyfm6sn39Slouj9DGG6G3cU6bj VD2EDZu2RXp+haPmREOBH1JE7rJGIGoEev7zYjx0wrNae5OlKE4Fp6zyKpWMpNpq zrUAPEamph0uc84i2nAVwq2JRgIE0e4= -----END CERTIFICATE-----Generated at Mon May 12 16:49:41 2025 by rpki-client