$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa File: 72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa (raw, json) Hash identifier: 33N2YWUiJ+5G5BUgPIrSfEwWvvL5Iiv5GMWD12Xw144= Subject key identifier: 53:14:0A:7C:2E:BB:85:BF:43:96:BC:51:C3:54:8E:7E:29:59:1F:67 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F432858499829C595F051670E6C602F40 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 2615 IP address blocks: 147.1.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c5:95:f0:51:67:0e:6c:60:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=57ecf76a-b259-4bad-8773-db2a72b3c340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7d:75:9a:3a:4c:3a:a1:d1:78:f6:11:bb:d4: a4:da:08:db:f2:84:67:6e:dd:a2:8a:bd:b1:79:d4: 73:76:7f:2d:c3:41:f7:67:eb:c5:46:8e:03:4a:95: d6:1a:03:04:58:dc:74:34:11:43:d7:db:83:c2:73: 10:79:cc:26:a5:3f:37:83:0a:70:a7:b5:2e:13:60: 19:8a:7d:64:c1:be:cc:97:8b:de:97:f5:db:b7:37: 24:c7:f2:23:0c:86:62:79:0c:d9:cc:be:ab:c5:2b: 6f:05:a3:6e:47:36:f9:b3:e1:2a:34:62:ae:c1:c2: 90:46:8d:56:fc:e4:b6:2a:78:c9:47:0e:6f:04:25: b2:4b:40:94:8a:3e:5f:9b:2d:c6:dd:f9:6b:35:ae: dc:1b:d1:f5:fe:88:dc:09:56:65:68:83:5c:5b:4c: d8:cf:c5:ec:52:f1:aa:21:4d:33:c9:1a:38:c6:11: 9e:61:2e:85:81:10:6a:f4:54:43:ed:3a:6a:08:b3: 28:2a:37:6d:55:1b:53:ad:86:bc:3c:52:82:89:e2: b3:50:ec:ae:f3:0e:91:40:96:2c:e3:70:f9:3b:68: db:bb:bd:6f:c9:97:8e:40:23:2b:70:36:ce:54:fe: d1:2f:91:49:10:9d:22:28:b3:7e:13:a7:5e:a1:ef: 47:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:14:0A:7C:2E:BB:85:BF:43:96:BC:51:C3:54:8E:7E:29:59:1F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:02:28:38:35:4a:45:78:c0:cb:4c:9c:dd:8f:ff:1d:f4:e3: cb:df:4f:26:71:26:8f:50:04:51:99:80:27:ad:1a:06:ad:9c: e6:fc:0a:47:0f:9b:21:36:f0:36:8d:f3:3c:74:96:da:a2:60: 41:cd:30:f8:cf:f5:0d:d4:8a:b6:e0:54:13:33:eb:bb:1c:3d: fe:b6:fb:d0:6e:65:73:54:5a:81:70:ec:ee:82:4d:b1:21:bf: 40:cf:0b:e6:ae:f9:2e:8e:08:d3:b9:3b:eb:04:35:b6:ca:3c: 79:7c:30:fc:e2:53:4d:63:b2:e6:5b:95:0e:31:ff:7c:24:be: 32:ee:38:79:ee:67:64:56:ed:bd:52:e8:3a:f6:a1:93:5c:56: be:82:ef:82:e3:36:38:23:03:1e:06:09:dc:5b:f9:ab:d9:64: 00:4f:74:50:6e:8e:6c:a0:e8:8e:7c:e6:e8:bd:00:82:51:d4: 31:90:1a:d3:a7:d7:e1:f4:51:65:54:19:3c:1e:12:b3:0c:01: f2:92:91:58:d2:02:ff:b4:ec:60:24:3f:f0:b9:a5:8f:95:89: 75:e3:ff:11:6e:71:52:32:b3:3d:c1:dc:9b:40:db:18:3a:ba: 2a:96:8a:0c:db:86:72:43:82:ee:4f:ca:c8:60:21:93:e8:35: d8:6c:c4:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcWV8FFnDmxgL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NTdlY2Y3NmEtYjI1OS00YmFkLTg3NzMtZGIyYTcyYjNjMzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH11mjpMOqHRePYRu9Sk2gjb8oRnbt2iir2x edRzdn8tw0H3Z+vFRo4DSpXWGgMEWNx0NBFD19uDwnMQecwmpT83gwpwp7UuE2AZ in1kwb7Ml4vel/Xbtzckx/IjDIZieQzZzL6rxStvBaNuRzb5s+EqNGKuwcKQRo1W /OS2KnjJRw5vBCWyS0CUij5fmy3G3flrNa7cG9H1/ojcCVZlaINcW0zYz8XsUvGq IU0zyRo4xhGeYS6FgRBq9FRD7TpqCLMoKjdtVRtTrYa8PFKCieKzUOyu8w6RQJYs 43D5O2jbu71vyZeOQCMrcDbOVP7RL5FJEJ0iKLN+E6deoe9HEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMUCnwuu4W/Q5a8UcNUjn4pWR9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNzJiOWY0ZjAtMGYyMi0z YmFhLTg5OWEtODdiNWUzN2YxZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAECKDg1SkV4wMtMnN2P/x3048vfTyZxJo9QBFGZgCetGgatnOb8CkcP myE28DaN8zx0ltqiYEHNMPjP9Q3UirbgVBMz67scPf62+9BuZXNUWoFw7O6CTbEh v0DPC+au+S6OCNO5O+sENbbKPHl8MPziU01jsuZblQ4x/3wkvjLuOHnuZ2RW7b1S 6Dr2oZNcVr6C74LjNjgjAx4GCdxb+avZZABPdFBujmyg6I585ui9AIJR1DGQGtOn 1+H0UWVUGTweErMMAfKSkVjSAv+07GAkP/C5pY+ViXXj/xFucVIysz3B3JtA2xg6 uiqWigzbhnJDgu5PyshgIZPoNdhsxKI= -----END CERTIFICATE-----Generated at Mon Jun 30 13:05:50 2025 by rpki-client