$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/1d6f6a38-f24c-3ee0-a596-22c44f563b6f.roa File: 1d6f6a38-f24c-3ee0-a596-22c44f563b6f.roa (raw, json) Hash identifier: cuUiBLoy49JjKyrkzhbisyFQn6wNT0jLrTS5PfPWwxM= Subject key identifier: 8D:ED:C6:7F:FE:B6:2B:04:6F:A5:BF:93:5E:81:C3:7A:8F:5A:00:49 Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Certificate serial: 010D0C9F43285849AD1A07D3D12A8165873A4900 Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/1d6f6a38-f24c-3ee0-a596-22c44f563b6f.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7862 IP address blocks: 146.23.208.0/22 maxlen: 24 146.23.212.0/22 maxlen: 24 146.23.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:07:d3:d1:2a:81:65:87:3a:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=8aacd131-b8bb-48d8-bcc7-f5963a5427ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cc:7c:5a:c2:1a:26:e9:fd:dd:9d:5c:84:38: 94:cf:ee:01:e8:f9:11:0e:fe:6b:9a:82:ad:75:d9: 97:01:9f:7d:1c:12:4f:c9:93:6d:d5:88:1c:fc:92: 20:8a:1e:69:b6:0a:4b:36:38:8d:f8:df:be:71:69: a1:95:81:9a:a2:05:0f:94:30:96:b9:17:4b:cf:d2: 4e:20:a2:66:ef:b2:b9:a2:31:2f:ea:9a:33:27:e6: 68:d3:70:18:ac:3f:7c:01:20:50:27:69:f7:45:f7: ec:4d:30:f0:ea:1c:01:ad:13:35:af:2b:b0:ec:cb: 88:1a:4a:c1:91:08:52:75:1e:f1:07:63:c7:74:b5: f4:dd:43:63:76:d6:7a:35:5a:28:4e:b7:88:c7:5b: 62:21:a0:99:70:a9:ba:d8:49:1b:2a:8d:d0:67:d4: ea:28:fa:ed:c2:28:00:32:60:5f:a3:21:44:01:7d: fb:d7:cf:5d:96:3d:71:49:fe:c9:12:80:57:c9:bb: 31:fa:9f:53:bc:fa:93:e1:cd:1b:7f:8c:66:8e:d3: 60:00:de:f6:8e:08:b1:4a:6f:b0:01:40:07:5c:79: 01:f0:37:b9:2e:e1:24:d4:ae:8d:f9:1e:47:60:c9: 58:12:fa:1e:9e:7e:37:99:ee:b0:ec:ae:3d:61:96: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:ED:C6:7F:FE:B6:2B:04:6F:A5:BF:93:5E:81:C3:7A:8F:5A:00:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/1d6f6a38-f24c-3ee0-a596-22c44f563b6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl X509v3 Authority Key Identifier: keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer sbgp-ipAddrBlock: critical IPv4: 146.23.208.0-146.23.219.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ec:1c:44:1c:28:37:46:79:0c:30:d0:97:54:25:ed:81:96: 1b:03:a3:d6:c0:b8:f0:44:f4:1b:30:b7:29:8e:76:4a:0e:bd: b4:a7:e3:83:cf:85:e4:c1:95:4c:d4:1b:d0:da:a4:8d:37:12: 98:8c:8a:30:e7:58:2d:ce:22:1a:c3:23:5a:ff:1c:f0:c9:d5: cd:02:5d:29:2d:5a:6e:79:6f:de:bb:4a:7f:e5:cf:66:dc:8c: 82:7a:e8:1e:81:14:75:88:98:26:4d:6f:b0:3b:8e:3d:ae:26: 38:cc:81:19:eb:c8:92:80:d4:82:12:07:f8:39:0f:9d:5d:57: 5b:40:f3:0d:72:3b:36:8b:46:be:63:ec:e8:51:3f:df:fa:d7: c3:ad:36:96:a3:d0:51:83:14:e6:5c:57:46:d6:18:f6:7f:7c: 17:9e:f1:21:af:38:84:48:d2:ea:19:a7:a2:1c:68:82:07:0a: b9:e2:5d:b4:d3:90:5d:95:2b:3d:02:eb:50:f6:c6:7a:2b:e1: 0c:85:88:11:2c:d1:07:fb:65:52:27:2b:fc:60:42:a5:22:b0: 01:ca:15:8d:c4:bc:93:66:cd:eb:b5:eb:cf:2d:44:0d:a9:4d: 46:aa:09:8d:ab:ff:29:0f:8e:fd:95:66:96:34:e2:4d:78:64: a4:5d:a1:d6 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEmtGgfT0SqBZYc6SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm MmJkMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OGFhY2QxMzEtYjhiYi00OGQ4LWJjYzctZjU5NjNhNTQyN2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocx8WsIaJun93Z1chDiUz+4B6PkRDv5rmoKt ddmXAZ99HBJPyZNt1Ygc/JIgih5ptgpLNjiN+N++cWmhlYGaogUPlDCWuRdLz9JO IKJm77K5ojEv6pozJ+Zo03AYrD98ASBQJ2n3RffsTTDw6hwBrRM1ryuw7MuIGkrB kQhSdR7xB2PHdLX03UNjdtZ6NVooTreIx1tiIaCZcKm62EkbKo3QZ9TqKPrtwigA MmBfoyFEAX37189dlj1xSf7JEoBXybsx+p9TvPqT4c0bf4xmjtNgAN72jgixSm+w AUAHXHkB8De5LuEk1K6N+R5HYMlYEvoenn43me6w7K49YZZGWQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFI3txn/+tisEb6W/k16Bw3qPWgBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvMWQ2ZjZhMzgtZjI0Yy0z ZWUwLWE1OTYtMjJjNDRmNTYzYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz MzAwYmYyYmQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASSF9AD BAKSF9gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAH+wcRBwoN0Z5DDDQl1Ql7YGWGwOj1sC48ET0GzC3KY52 Sg69tKfjg8+F5MGVTNQb0NqkjTcSmIyKMOdYLc4iGsMjWv8c8MnVzQJdKS1abnlv 3rtKf+XPZtyMgnroHoEUdYiYJk1vsDuOPa4mOMyBGevIkoDUghIH+DkPnV1XW0Dz DXI7NotGvmPs6FE/3/rXw602lqPQUYMU5lxXRtYY9n98F57xIa84hEjS6hmnohxo ggcKueJdtNOQXZUrPQLrUPbGeivhDIWIESzRB/tlUicr/GBCpSKwAcoVjcS8k2bN 67Xrzy1EDalNRqoJjav/KQ+O/ZVmljTiTXhkpF2h1g== -----END CERTIFICATE-----Generated at Mon May 12 10:47:38 2025 by rpki-client