$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa File: 2b70cd1b-681d-3341-8277-ce21a1801227.roa (raw, json) Hash identifier: 1gGSg3FEtdxTER0rm2NoSljJGkGjdvwOo4USlc5tV9Y= Subject key identifier: BF:89:A9:54:97:44:C5:D9:A7:B3:D7:34:15:E4:7B:8B:03:4C:A2:78 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F43285849CD34BE2B45770339C4110B40 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 2615 IP address blocks: 147.1.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:be:2b:45:77:03:39:c4:11:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=8a6e0108-f9f2-4ed1-8476-f3b2717d0f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:78:75:92:c4:90:7a:df:1a:80:04:3a:b4:7f: 4e:ea:20:33:fb:81:82:7b:e6:ce:a3:ff:83:9c:ae: 4d:86:37:bb:6b:34:9e:8f:e1:e8:f6:9a:9b:f0:94: 96:0d:ac:0e:0f:d1:11:2b:7d:14:b3:3e:51:62:5a: 37:40:dc:5c:31:90:9e:a9:4b:4e:54:ba:c6:96:bf: 72:34:33:41:86:52:dc:41:10:bd:bc:50:51:23:db: 8c:ae:45:85:95:16:8e:72:87:d3:8f:ab:cf:3c:49: 1c:6f:c0:45:94:b5:36:a6:09:77:30:64:ae:fd:e8: 3e:a4:e0:38:20:d6:7d:bb:fd:c0:20:f5:e4:1f:aa: 06:07:8a:03:c5:f8:3a:ba:b5:35:90:bf:cb:2c:bb: 1a:02:88:9c:da:3a:82:dc:96:2d:bb:3d:9c:f4:1e: 7e:96:5c:66:d3:2c:32:7a:67:43:4d:f3:46:af:76: 9e:46:dc:8f:c5:bc:fc:45:b3:25:58:84:fb:d6:d0: 58:05:ee:4f:00:7e:e7:a6:38:67:b7:1e:f7:89:21: 24:77:96:7e:68:e2:b7:44:e9:a2:c2:e7:e9:e5:c9: 06:38:4f:b4:e3:a8:bd:29:32:e1:97:e8:44:75:b6: 55:36:f9:be:33:a8:14:a3:d2:79:2b:a8:e7:0e:6f: 57:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:89:A9:54:97:44:C5:D9:A7:B3:D7:34:15:E4:7B:8B:03:4C:A2:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c6:ed:9e:e5:77:87:4c:2e:fc:33:0f:d6:dc:49:39:4b:75: 0b:5c:1e:58:30:5a:7a:63:be:1c:22:a1:5a:f2:57:f0:95:15: 08:bc:62:e4:b1:6b:df:4d:ed:bb:de:8f:84:70:85:d6:be:a6: fd:c2:22:73:5f:2f:68:8b:85:9a:f8:72:aa:53:a6:a1:ef:64: 6d:49:78:6f:db:d2:95:fa:d8:a1:5f:29:ed:19:a6:7b:2f:a3: 7f:e3:dd:69:96:82:5a:d3:64:ff:1f:5f:45:27:25:00:d6:80: 6b:b4:17:58:89:1b:e4:57:51:68:71:a7:b8:a7:6e:47:95:da: af:29:ea:f5:07:18:c6:9e:a5:81:d7:14:8c:53:cd:92:5a:7f: 57:6f:f1:bd:be:0e:7f:1c:12:1e:74:f2:3b:10:df:3b:bd:45: 69:7a:7e:40:2b:f6:60:10:05:27:22:e4:35:cf:8d:24:ec:06: a3:96:7e:42:04:e1:89:da:c4:f3:ce:19:eb:43:af:53:4f:28: 43:00:39:fb:4a:c5:3f:99:04:b4:b1:39:87:93:f3:1c:5f:f6: ef:55:7e:af:97:a1:3a:fa:7a:b3:9d:6d:da:42:1b:73:39:6f: e1:d1:e5:2c:19:e4:13:ab:9c:4b:3c:38:a4:cd:ff:ad:0c:b4: aa:42:6a:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNL4rRXcDOcQRC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk OGE2ZTAxMDgtZjlmMi00ZWQxLTg0NzYtZjNiMjcxN2QwZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3h1ksSQet8agAQ6tH9O6iAz+4GCe+bOo/+D nK5Nhje7azSej+Ho9pqb8JSWDawOD9ERK30Usz5RYlo3QNxcMZCeqUtOVLrGlr9y NDNBhlLcQRC9vFBRI9uMrkWFlRaOcofTj6vPPEkcb8BFlLU2pgl3MGSu/eg+pOA4 INZ9u/3AIPXkH6oGB4oDxfg6urU1kL/LLLsaAoic2jqC3JYtuz2c9B5+llxm0ywy emdDTfNGr3aeRtyPxbz8RbMlWIT71tBYBe5PAH7npjhntx73iSEkd5Z+aOK3ROmi wufp5ckGOE+046i9KTLhl+hEdbZVNvm+M6gUo9J5K6jnDm9XgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+JqVSXRMXZp7PXNBXke4sDTKJ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMmI3MGNkMWItNjgxZC0z MzQxLTgyNzctY2UyMWExODAxMjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjG7Z7ld4dMLvwzD9bcSTlLdQtcHlgwWnpjvhwioVryV/CVFQi8YuSx a99N7bvej4Rwhda+pv3CInNfL2iLhZr4cqpTpqHvZG1JeG/b0pX62KFfKe0Zpnsv o3/j3WmWglrTZP8fX0UnJQDWgGu0F1iJG+RXUWhxp7inbkeV2q8p6vUHGMaepYHX FIxTzZJaf1dv8b2+Dn8cEh508jsQ3zu9RWl6fkAr9mAQBSci5DXPjSTsBqOWfkIE 4YnaxPPOGetDr1NPKEMAOftKxT+ZBLSxOYeT8xxf9u9Vfq+XoTr6erOdbdpCG3M5 b+HR5SwZ5BOrnEs8OKTN/60MtKpCamc= -----END CERTIFICATE-----Generated at Tue Jul 1 07:49:40 2025 by rpki-client