$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/d6e47bdb-24a9-3833-ab3d-13192e87f425.roa File: d6e47bdb-24a9-3833-ab3d-13192e87f425.roa (raw, json) Hash identifier: vKs8WwRFORSdhTPYiHKuOFWN6NZTf8c5G9MVjgCGmuM= Subject key identifier: 11:A7:90:53:35:FA:80:DB:1A:21:D4:FC:06:BD:59:BC:D5:B4:F8:3A Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584A34801436035501E8DC7EFF20 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/d6e47bdb-24a9-3833-ab3d-13192e87f425.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 2615 IP address blocks: 147.1.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:14:36:03:55:01:e8:dc:7e:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=1b9d545b-275b-427c-ab48-a0c9b138ac09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:45:f1:2f:fe:d5:ad:50:76:5d:16:9c:44:69: ca:88:03:88:00:a0:9b:93:bf:e8:e7:f3:4e:ce:03: 5c:37:00:8e:8b:c4:fc:65:e5:66:24:29:6b:2b:e9: 16:0b:16:83:48:50:09:ef:ca:38:34:e7:7b:a4:a9: d6:d6:c1:7d:47:1d:91:94:d3:b4:31:41:12:19:94: 4b:cf:e5:81:25:b0:ed:93:1a:df:bd:a5:52:f0:51: a7:a9:a0:8a:af:5b:d2:26:8a:c3:72:af:dc:e5:d2: 08:3c:1c:f1:ab:3d:ba:d7:65:59:f3:bb:88:2f:87: d6:fd:60:67:06:20:59:91:9d:04:92:c5:6f:61:24: 6e:5e:64:6c:95:74:70:85:a6:be:0d:09:bd:a1:38: 65:18:5f:7e:7e:43:ef:c9:fa:8f:e4:d7:f1:10:0e: bd:c2:02:4b:86:c1:fa:77:ca:ad:45:82:0f:21:7f: 72:05:19:a9:94:15:20:e2:1b:b6:e8:77:26:5c:0d: 13:91:c6:06:46:a3:3f:b1:3e:17:25:81:5e:f0:d7: 1f:89:b0:7d:9b:3b:56:6d:4c:8c:2f:10:c7:16:d0: 2d:93:b0:06:52:55:ff:c7:9b:68:1c:a6:15:b2:4f: e4:ff:68:f6:d6:5c:57:6b:15:ae:77:ff:9b:e5:9a: e8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A7:90:53:35:FA:80:DB:1A:21:D4:FC:06:BD:59:BC:D5:B4:F8:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/d6e47bdb-24a9-3833-ab3d-13192e87f425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:53:88:c4:f4:15:7a:ac:4a:5a:35:4f:7e:90:29:a2:4a:8f: 33:23:5f:17:56:b5:b2:81:e1:49:b7:28:ca:86:4b:7a:5d:2b: 50:78:32:d3:71:09:c8:76:3e:9a:41:ea:1f:9d:2b:f1:77:1d: fe:c6:0b:22:c8:cb:f1:72:c3:88:40:5a:66:b2:9f:a7:50:bc: 0f:4a:a0:c3:5e:09:10:96:a6:87:29:5b:f1:c3:96:06:a0:12: 6a:da:da:c4:62:41:3c:b5:7e:88:fd:02:91:d4:94:b9:19:be: 9d:48:ad:b0:fb:dd:6a:09:f1:99:be:b3:16:5d:bf:93:f4:a7: a8:22:b5:e9:85:30:78:46:3a:66:55:e0:d2:b0:c7:79:bf:1f: ae:3f:e1:4b:9a:b8:16:43:e2:56:3d:b1:7d:48:d6:a6:48:a3: 5b:f8:50:05:74:fe:ba:1d:1e:00:40:f3:dd:e2:64:1a:b8:23: 54:95:07:e2:94:62:95:21:4b:42:b2:da:2a:d3:af:61:78:eb: f6:f7:06:da:9d:46:29:b1:b5:45:d4:db:78:70:d0:96:b5:e7: 04:4a:89:30:f2:16:0b:08:4d:cd:ec:01:29:49:9b:32:db:60: 3c:d8:b4:1b:bd:e5:0f:07:58:b1:d1:4a:08:f8:5b:e6:60:5e: a3:7d:77:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBQ2A1UB6Nx+/yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk MWI5ZDU0NWItMjc1Yi00MjdjLWFiNDgtYTBjOWIxMzhhYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUXxL/7VrVB2XRacRGnKiAOIAKCbk7/o5/NO zgNcNwCOi8T8ZeVmJClrK+kWCxaDSFAJ78o4NOd7pKnW1sF9Rx2RlNO0MUESGZRL z+WBJbDtkxrfvaVS8FGnqaCKr1vSJorDcq/c5dIIPBzxqz2612VZ87uIL4fW/WBn BiBZkZ0EksVvYSRuXmRslXRwhaa+DQm9oThlGF9+fkPvyfqP5NfxEA69wgJLhsH6 d8qtRYIPIX9yBRmplBUg4hu26HcmXA0TkcYGRqM/sT4XJYFe8NcfibB9mztWbUyM LxDHFtAtk7AGUlX/x5toHKYVsk/k/2j21lxXaxWud/+b5ZrofwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGnkFM1+oDbGiHU/Aa9WbzVtPg6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZDZlNDdiZGItMjRhOS0z ODMzLWFiM2QtMTMxOTJlODdmNDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdTiMT0FXqsSlo1T36QKaJKjzMjXxdWtbKB4Um3KMqGS3pdK1B4MtNx Cch2PppB6h+dK/F3Hf7GCyLIy/Fyw4hAWmayn6dQvA9KoMNeCRCWpocpW/HDlgag Emra2sRiQTy1foj9ApHUlLkZvp1IrbD73WoJ8Zm+sxZdv5P0p6gitemFMHhGOmZV 4NKwx3m/H64/4UuauBZD4lY9sX1I1qZIo1v4UAV0/rodHgBA893iZBq4I1SVB+KU YpUhS0Ky2irTr2F46/b3BtqdRimxtUXU23hw0Ja15wRKiTDyFgsITc3sASlJmzLb YDzYtBu95Q8HWLHRSgj4W+ZgXqN9d+4= -----END CERTIFICATE-----Generated at Mon Jun 30 13:04:58 2025 by rpki-client