$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa File: 8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa (raw, json) Hash identifier: UUwlDZNIY0R/GIHX3vC8Q1ZFWSZZyysh8tFV8kSLLLY= Subject key identifier: 91:8A:F9:F8:A4:AC:E5:44:7E:B1:43:7B:76:72:42:9C:DF:8F:15:7E Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584985F7057E32C827FF68D4E2A0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa Signing time: Mon 14 Apr 2025 12:34:03 +0000 ROA not before: Mon 14 Apr 2025 12:34:03 +0000 ROA not after: Sun 13 Jul 2025 12:34:03 +0000 asID: 2615 IP address blocks: 147.1.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:85:f7:05:7e:32:c8:27:ff:68:d4:e2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Apr 14 12:34:03 2025 GMT Not After : Jul 13 12:34:03 2025 GMT Subject: CN=ed4fb75b-17f9-4c59-9180-481f787a5d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7a:23:31:85:0a:00:1c:d0:2d:e5:d6:e5:b6: 0e:c5:12:64:77:f0:ba:38:be:7b:6f:89:9f:1b:48: 60:26:1c:67:f7:0e:94:bb:d5:98:63:08:26:35:4b: 7f:89:bd:06:5c:d9:82:a8:7c:44:12:40:14:73:2a: c7:e2:51:6a:d0:72:33:71:c9:c6:b3:82:64:a7:74: 90:2c:45:14:9e:5f:69:84:53:64:2d:ca:e1:85:e0: da:fb:d2:bf:27:97:14:ef:6a:6f:14:0c:9f:ea:14: 6b:5c:54:90:55:c4:26:af:d3:34:f6:32:ff:5b:df: df:6c:20:4c:1d:be:db:32:3e:3c:1e:47:4f:69:d5: e0:c6:64:5c:b7:93:69:4f:3e:4f:68:6c:fc:a5:40: 7b:30:82:89:54:97:16:ba:6c:e7:a2:a1:a9:22:1c: d8:02:34:7d:30:26:78:07:27:6a:c2:9d:78:f4:df: 62:35:4c:cf:3b:43:ff:90:e1:2a:78:23:31:1b:bb: 5e:9a:75:4b:fe:65:c3:69:18:9e:75:90:57:82:a7: 62:f0:bf:d3:49:fb:74:95:ce:b5:2f:ff:0e:ba:6b: b1:31:4f:17:a6:06:fc:19:1e:e6:1a:80:fc:9e:02: 0a:56:0b:3d:05:13:43:87:40:cd:2b:4f:c5:19:c7: 6b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8A:F9:F8:A4:AC:E5:44:7E:B1:43:7B:76:72:42:9C:DF:8F:15:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2b:ba:6b:52:91:46:00:08:f9:7e:a5:fc:d3:f3:fc:2d:e4: 57:41:be:f8:1e:02:29:95:60:44:d8:71:6c:11:3f:e4:d8:d9: ad:43:89:3f:28:78:42:7e:06:14:ee:1f:72:46:5f:be:7b:a6: 36:30:7a:2d:33:26:cb:1a:41:76:f4:33:7c:bc:f7:f5:8a:7a: a0:a0:da:b0:46:44:da:e9:34:1b:22:14:e3:3d:5b:7a:91:4c: c9:d3:a3:0f:9e:7c:56:78:b9:40:86:58:ba:09:51:cb:84:99: b2:d3:9c:37:de:c1:8d:6d:8d:79:3b:df:e7:b6:77:44:7c:ec: a1:0c:14:bb:8f:04:38:1b:66:d0:19:b3:45:42:4a:f6:a7:ff: 4f:be:39:18:65:25:62:2a:fa:3f:4a:b3:56:c4:a8:f0:c8:31: 32:dd:65:54:0a:b0:78:a6:9f:2e:c9:f1:ac:1a:38:16:d7:0e: 09:d2:51:df:1d:9e:2e:46:f6:6a:a8:87:1b:ec:9b:49:a0:55: 63:94:38:88:25:d2:b6:02:85:a1:92:9f:8d:1c:5f:1c:e6:55: 93:10:60:93:8c:30:e8:c2:44:b0:d8:c1:1b:bb:39:3b:67:00: b4:95:12:3e:67:60:2a:28:09:eb:31:00:c2:a2:52:17:58:56: bb:e7:0b:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmF9wV+Msgn/2jU4qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDQxNDEyMzQwM1oXDTI1MDcxMzEyMzQwM1owLzEtMCsGA1UEAxMk ZWQ0ZmI3NWItMTdmOS00YzU5LTkxODAtNDgxZjc4N2E1ZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHojMYUKABzQLeXW5bYOxRJkd/C6OL57b4mf G0hgJhxn9w6Uu9WYYwgmNUt/ib0GXNmCqHxEEkAUcyrH4lFq0HIzccnGs4Jkp3SQ LEUUnl9phFNkLcrhheDa+9K/J5cU72pvFAyf6hRrXFSQVcQmr9M09jL/W9/fbCBM Hb7bMj48HkdPadXgxmRct5NpTz5PaGz8pUB7MIKJVJcWumznoqGpIhzYAjR9MCZ4 Bydqwp149N9iNUzPO0P/kOEqeCMxG7temnVL/mXDaRiedZBXgqdi8L/TSft0lc61 L/8OumuxMU8Xpgb8GR7mGoD8ngIKVgs9BRNDh0DNK0/FGcdrGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGK+fikrOVEfrFDe3ZyQpzfjxV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvOGFjZDZhYjgtYmMwMC0z N2ZlLTliNDctOWIyNWI3ZmIxYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUrumtSkUYACPl+pfzT8/wt5FdBvvgeAimVYETYcWwRP+TY2a1DiT8o eEJ+BhTuH3JGX757pjYwei0zJssaQXb0M3y89/WKeqCg2rBGRNrpNBsiFOM9W3qR TMnTow+efFZ4uUCGWLoJUcuEmbLTnDfewY1tjXk73+e2d0R87KEMFLuPBDgbZtAZ s0VCSvan/0++ORhlJWIq+j9Ks1bEqPDIMTLdZVQKsHimny7J8awaOBbXDgnSUd8d ni5G9mqohxvsm0mgVWOUOIgl0rYChaGSn40cXxzmVZMQYJOMMOjCRLDYwRu7OTtn ALSVEj5nYCooCesxAMKiUhdYVrvnC5I= -----END CERTIFICATE-----Generated at Mon Jun 30 13:05:50 2025 by rpki-client