$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/d3fea9d2-5423-3d98-9da7-a3ab1970fd01.roa File: d3fea9d2-5423-3d98-9da7-a3ab1970fd01.roa (raw, json) Hash identifier: YnDcKrK2C99aEBpCWLRgkpZmRr3pXzNx4UtsFKlv6Qw= Subject key identifier: 47:A3:A0:26:25:34:79:8A:75:CE:4C:02:E0:DD:A1:EE:03:99:48:52 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584A3BF7D180F0B87384DE456280 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/d3fea9d2-5423-3d98-9da7-a3ab1970fd01.roa Signing time: Wed 18 Jun 2025 17:12:47 +0000 ROA not before: Wed 18 Jun 2025 17:12:47 +0000 ROA not after: Tue 16 Sep 2025 17:12:47 +0000 asID: 5050 IP address blocks: 147.72.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:f7:d1:80:f0:b8:73:84:de:45:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Jun 18 17:12:47 2025 GMT Not After : Sep 16 17:12:47 2025 GMT Subject: CN=2c05743c-3581-455b-90b8-b4b934d24ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:77:b6:a7:af:c4:f4:ec:57:64:95:7b:c5:70: 25:c9:f3:92:a0:10:bd:9a:0d:e2:db:44:f2:e3:37: 4f:07:1b:47:4b:87:2b:03:19:c6:1e:34:0f:d4:ed: 2c:a9:15:13:f1:81:1b:b9:45:46:b0:18:94:ca:23: 31:aa:2d:da:e9:d9:c0:7b:f3:80:ae:86:16:58:20: b5:3f:34:cc:d7:8a:5c:3d:04:8a:ad:0c:da:5f:95: 60:74:ca:b2:25:52:a1:95:5b:c9:b5:6f:ed:5b:81: 51:cc:07:f7:ce:4c:0e:31:f3:88:9b:e3:19:2d:ec: ae:b8:ba:2a:7a:42:96:70:e7:7d:cb:0e:ef:05:f6: 51:a5:7f:b4:96:ce:a7:2d:c8:b6:3b:a4:40:42:86: c6:9e:14:99:5b:76:60:34:db:35:85:13:65:e9:5b: 92:23:c3:98:3a:79:8e:c1:18:61:6d:08:45:8e:e3: be:68:1d:9b:5f:ce:62:01:f0:ca:34:d0:90:8a:74: a1:80:02:61:65:41:24:5d:9f:3b:75:3c:52:47:11: f1:eb:68:f5:96:50:27:c9:c1:8e:a1:fa:35:40:03: f3:3b:46:b0:d1:17:c7:4a:cf:bc:69:e2:10:9a:3d: ef:e7:05:19:5d:d0:e8:dd:9b:a2:d3:a3:2a:5a:d4: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A3:A0:26:25:34:79:8A:75:CE:4C:02:E0:DD:A1:EE:03:99:48:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/d3fea9d2-5423-3d98-9da7-a3ab1970fd01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:a8:8a:b4:da:a8:bd:85:fb:39:9e:13:f0:53:19:5e:82:95: 3e:d3:74:80:b1:9e:f5:6c:17:db:a2:d7:10:fb:26:9d:2e:29: b2:79:5f:12:32:b8:39:84:bd:88:82:a0:83:80:17:6c:d2:6c: 00:67:16:4d:dd:fe:fd:14:07:fc:c9:02:19:ae:f5:dd:22:17: 08:0f:e2:cd:fb:d7:bc:96:2c:4e:4e:b0:1c:31:e4:d3:7d:d3: ff:7a:96:bb:73:ee:e3:bc:ed:65:40:3c:16:04:95:6c:b8:e6: df:76:a3:a6:36:cb:a6:76:6f:9e:0a:23:2b:82:38:fa:93:1c: 5d:55:2a:e1:4d:77:48:6c:b7:f4:4b:a4:e1:c5:9a:35:12:55: 32:0e:43:a2:5d:7c:eb:3a:19:e7:4a:08:cc:04:3c:b1:b6:70: 49:52:52:f9:af:5f:b4:5e:96:fb:7e:e3:44:a8:ba:8f:8a:da: f6:e0:1c:43:19:6e:b3:c7:36:62:6e:cc:e7:b0:75:ae:87:12: b8:ef:08:a4:1a:a5:52:cd:3f:d8:ea:71:42:ea:1d:f2:7f:24: 26:29:3d:62:b8:d9:5b:81:51:19:a0:75:f2:12:ad:3a:7d:7b: 9d:b0:25:70:a3:2a:55:a4:a4:9d:60:4e:c4:0f:8c:ab:83:5a: 35:32:95:18 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEo799GA8LhzhN5FYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MDYxODE3MTI0N1oXDTI1MDkxNjE3MTI0N1owLzEtMCsGA1UEAxMk MmMwNTc0M2MtMzU4MS00NTViLTkwYjgtYjRiOTM0ZDI0ZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6He2p6/E9OxXZJV7xXAlyfOSoBC9mg3i20Ty 4zdPBxtHS4crAxnGHjQP1O0sqRUT8YEbuUVGsBiUyiMxqi3a6dnAe/OAroYWWCC1 PzTM14pcPQSKrQzaX5VgdMqyJVKhlVvJtW/tW4FRzAf3zkwOMfOIm+MZLeyuuLoq ekKWcOd9yw7vBfZRpX+0ls6nLci2O6RAQobGnhSZW3ZgNNs1hRNl6VuSI8OYOnmO wRhhbQhFjuO+aB2bX85iAfDKNNCQinShgAJhZUEkXZ87dTxSRxHx62j1llAnycGO ofo1QAPzO0aw0RfHSs+8aeIQmj3v5wUZXdDo3Zui06MqWtTeXwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEejoCYlNHmKdc5MAuDdoe4DmUhSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvZDNmZWE5ZDItNTQyMy0z ZDk4LTlkYTctYTNhYjE5NzBmZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk0gwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAr6iKtNqovYX7OZ4T8FMZXoKVPtN0gLGe9WwX26LXEPsmnS4psnlfEjK4 OYS9iIKgg4AXbNJsAGcWTd3+/RQH/MkCGa713SIXCA/izfvXvJYsTk6wHDHk033T /3qWu3Pu47ztZUA8FgSVbLjm33ajpjbLpnZvngojK4I4+pMcXVUq4U13SGy39Euk 4cWaNRJVMg5Dol186zoZ50oIzAQ8sbZwSVJS+a9ftF6W+37jRKi6j4ra9uAcQxlu s8c2Ym7M57B1rocSuO8IpBqlUs0/2OpxQuod8n8kJik9YrjZW4FRGaB18hKtOn17 nbAlcKMqVaSknWBOxA+Mq4NaNTKVGA== -----END CERTIFICATE-----Generated at Mon Jun 30 07:18:11 2025 by rpki-client