$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/a96694e2-fc23-3945-9156-dbb9dcbef238.roa File: a96694e2-fc23-3945-9156-dbb9dcbef238.roa (raw, json) Hash identifier: Vn8rot7jHSuY1+uZhGkQhEq7ILuKjQGgRKqw+NClsco= Subject key identifier: 97:D5:AA:68:8A:59:A5:65:1C:CD:BD:7B:43:70:BF:F4:D9:19:32:BE Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584A2C201475D7209DB5A096B740 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/a96694e2-fc23-3945-9156-dbb9dcbef238.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 46616 IP address blocks: 147.72.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:14:75:d7:20:9d:b5:a0:96:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=1f9ae6d0-48fb-4525-a271-7c3ed29af235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:65:c2:7f:b0:2e:09:d9:ca:9b:3f:b8:10:b3: fc:6f:e3:2d:20:24:ae:52:df:2e:cd:15:fd:bf:64: 52:5f:03:5f:2e:85:de:ea:89:ed:11:ad:1a:c8:ec: 0b:20:15:ba:96:2b:9a:f1:da:ac:a8:b8:c9:a9:e1: 86:28:e8:61:f8:5b:40:ba:54:b7:ba:5e:32:eb:6a: 69:c2:5c:2b:6a:f5:99:8f:de:d5:5b:71:78:d4:7f: b0:c5:c1:9c:22:81:1c:5a:05:d3:b1:8b:d4:69:e4: a6:e7:cd:f5:d5:21:f8:5f:70:2f:79:95:35:9a:4d: 4b:fe:d9:c6:4e:34:01:21:d7:93:cd:a5:6c:4c:fe: f4:b4:4a:d2:74:5e:70:84:45:74:1c:c8:3c:3e:63: c8:43:50:5b:48:55:7c:a5:27:98:41:e1:c7:3a:3b: 5a:65:35:30:ed:fe:00:8d:e6:f7:87:34:3a:6a:cc: 30:8a:ab:48:7d:61:1f:16:36:cd:ab:e7:bb:d1:25: a9:ae:cf:8e:bb:19:ef:2d:e3:27:a3:b5:f6:53:44: c4:e0:4c:f2:1d:74:f7:4a:60:5f:7f:6f:7e:26:4d: 21:4e:4e:65:12:41:f2:3d:0b:97:40:6f:30:0e:56: b0:8c:24:de:c5:a7:9d:21:f5:28:4f:55:d3:cc:db: 77:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D5:AA:68:8A:59:A5:65:1C:CD:BD:7B:43:70:BF:F4:D9:19:32:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/a96694e2-fc23-3945-9156-dbb9dcbef238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b4:0a:d3:5c:7c:02:10:37:39:39:9a:2d:01:38:1e:fb:21: 5c:68:73:94:65:be:e0:06:9b:b5:58:32:40:39:fb:c7:01:14: 74:38:fe:e5:a8:de:97:b5:c6:a9:36:6c:24:7f:18:ce:af:1e: 0a:ba:f6:a2:18:9a:b2:85:29:e8:11:43:3e:9e:1e:66:a5:b3: 90:17:10:c9:d1:93:5a:d0:41:ce:5c:52:45:3d:8e:c5:d9:a7: 9f:9c:db:2e:44:fb:f5:7d:77:84:f6:15:77:be:17:5e:e0:c7: 61:cf:73:7d:ca:67:89:85:2c:73:dd:7f:8f:c5:b8:87:4c:7e: 4d:93:27:f5:f9:84:f0:a9:dc:f1:57:a7:d5:d6:5f:81:c8:5f: e3:bb:ce:28:6b:b5:8d:0f:5f:1c:7f:21:fe:cc:89:c8:b4:1e: 27:73:8f:b8:52:30:8c:33:58:78:f4:84:bd:26:c5:25:d5:38: bf:45:ec:55:83:91:57:5d:9d:a2:b2:8e:7e:ed:3e:a2:81:f6: 90:06:9c:da:e9:53:e8:1d:36:e8:b9:8c:45:50:5a:f3:cd:70: 69:d1:4f:49:c0:bb:bc:40:1e:29:e4:d3:2d:8c:13:58:83:a8: bd:af:2f:a2:f2:42:52:b9:0d:96:76:67:84:28:73:d4:7f:4a: ac:8f:22:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBR11yCdtaCWt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MWY5YWU2ZDAtNDhmYi00NTI1LWEyNzEtN2MzZWQyOWFmMjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWXCf7AuCdnKmz+4ELP8b+MtICSuUt8uzRX9 v2RSXwNfLoXe6ontEa0ayOwLIBW6liua8dqsqLjJqeGGKOhh+FtAulS3ul4y62pp wlwravWZj97VW3F41H+wxcGcIoEcWgXTsYvUaeSm58311SH4X3AveZU1mk1L/tnG TjQBIdeTzaVsTP70tErSdF5whEV0HMg8PmPIQ1BbSFV8pSeYQeHHOjtaZTUw7f4A jeb3hzQ6aswwiqtIfWEfFjbNq+e70SWprs+OuxnvLeMno7X2U0TE4EzyHXT3SmBf f29+Jk0hTk5lEkHyPQuXQG8wDlawjCTexaedIfUoT1XTzNt3EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfVqmiKWaVlHM29e0Nwv/TZGTK+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvYTk2Njk0ZTItZmMyMy0z OTQ1LTkxNTYtZGJiOWRjYmVmMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk0jrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO0CtNcfAIQNzk5mi0BOB77IVxoc5RlvuAGm7VYMkA5+8cBFHQ4/uWo 3pe1xqk2bCR/GM6vHgq69qIYmrKFKegRQz6eHmals5AXEMnRk1rQQc5cUkU9jsXZ p5+c2y5E+/V9d4T2FXe+F17gx2HPc33KZ4mFLHPdf4/FuIdMfk2TJ/X5hPCp3PFX p9XWX4HIX+O7zihrtY0PXxx/If7Mici0Hidzj7hSMIwzWHj0hL0mxSXVOL9F7FWD kVddnaKyjn7tPqKB9pAGnNrpU+gdNui5jEVQWvPNcGnRT0nAu7xAHink0y2ME1iD qL2vL6LyQlK5DZZ2Z4Qoc9R/SqyPIiQ= -----END CERTIFICATE-----Generated at Mon Jun 30 03:56:01 2025 by rpki-client