$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/16ed4e65-bd20-3b5a-bfe6-96dc53aed5a8.roa File: 16ed4e65-bd20-3b5a-bfe6-96dc53aed5a8.roa (raw, json) Hash identifier: 7Qjw4AergV7MMtlrwytoMWsLdpqlUfdgE1IOhoqCCkA= Subject key identifier: 65:45:25:51:08:55:DC:59:4E:F6:6A:33:E9:5E:57:64:64:BE:B1:E3 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F432858494733DC65D66C5E24A57068CB Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/16ed4e65-bd20-3b5a-bfe6-96dc53aed5a8.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 23154 IP address blocks: 148.164.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:dc:65:d6:6c:5e:24:a5:70:68:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=7b2b69f9-5c25-412f-8113-20d5985062c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:7e:e9:4f:39:c8:23:cc:49:80:f7:9d:c4: e2:eb:7b:54:c6:3f:eb:b7:ea:9d:99:2e:cc:22:79: 91:f9:77:b7:14:1d:4a:d6:3e:59:16:c8:b4:69:17: 6c:ec:bf:6e:b1:4a:cc:ce:09:bd:86:db:e9:61:9d: d9:41:90:75:4f:72:a3:21:d8:5e:0d:9e:01:44:4c: bd:4c:ff:b1:a7:6d:37:0b:97:c4:12:21:dc:0b:0d: b9:08:e4:d2:26:5d:86:88:de:89:ca:af:3f:c5:6d: 0a:ac:20:21:c0:e0:dc:36:0b:e1:6f:96:63:4a:88: a1:e2:76:9b:66:a1:84:62:ec:e8:24:27:64:a4:8b: f6:1b:be:9d:8f:c9:51:b2:2c:d3:0c:41:88:94:1c: e9:da:a0:98:cd:4a:f6:df:09:fa:54:38:54:91:26: 2f:32:c0:20:c2:24:c8:5f:25:a1:e7:3e:37:6a:a0: a2:d3:1e:a8:54:42:80:0d:a0:cc:b5:59:15:1f:c1: 57:6b:5f:8a:0f:00:d6:08:27:98:af:dc:e8:b3:24: eb:8c:84:d9:da:57:e1:77:c0:5b:e6:6f:84:39:6d: 91:05:dc:41:7b:78:29:5e:c8:1b:99:58:dd:b9:bd: b2:f8:29:5f:bd:79:4c:80:b1:ab:2a:be:f5:23:b8: 02:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:45:25:51:08:55:DC:59:4E:F6:6A:33:E9:5E:57:64:64:BE:B1:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/16ed4e65-bd20-3b5a-bfe6-96dc53aed5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:00:f5:de:a9:f8:1e:53:a9:8b:7b:fc:2e:dd:e2:62:04:c9: b1:27:c9:a7:09:3e:0e:3d:06:63:c2:89:14:43:03:6b:d3:f5: dc:5c:92:95:91:c7:79:45:fb:a0:11:5b:8f:1f:1f:6c:54:cb: 92:e9:68:67:04:30:5f:ee:91:79:11:c1:fd:59:f2:81:5d:c5: b9:2b:3a:08:0b:e3:ef:2b:72:38:26:1d:d9:58:b7:90:ce:40: 5b:c6:83:8a:bb:9f:db:ff:a9:56:59:27:13:ce:c5:6e:f6:08: 26:de:19:95:a6:08:f1:ed:88:94:c5:57:47:7d:f5:1c:52:8c: 14:d0:83:f8:74:cf:03:07:00:32:c0:97:f3:4d:51:24:2b:2f: b8:ba:a7:df:12:41:63:a0:c7:60:60:16:c2:8f:82:ec:66:75: a8:08:68:97:7f:50:29:20:8e:e8:d8:fc:6a:6c:b8:50:cc:22: e3:a7:3c:d8:4e:64:2a:a1:c9:a8:79:4f:c0:18:14:00:de:46: cc:71:f7:49:03:d8:fe:05:5f:5e:23:66:e5:f9:d3:c1:9c:b5: c4:38:0d:d3:67:20:c5:54:60:a1:fa:81:75:69:0b:0b:97:46: d8:10:90:a6:8f:ad:c9:75:fa:8e:91:f4:79:46:ea:05:24:05: f5:ec:ae:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM9xl1mxeJKVwaMswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk N2IyYjY5ZjktNWMyNS00MTJmLTgxMTMtMjBkNTk4NTA2MmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNB+6U85yCPMSYD3ncTi63tUxj/rt+qdmS7M InmR+Xe3FB1K1j5ZFsi0aRds7L9usUrMzgm9htvpYZ3ZQZB1T3KjIdheDZ4BREy9 TP+xp203C5fEEiHcCw25COTSJl2GiN6Jyq8/xW0KrCAhwODcNgvhb5ZjSoih4nab ZqGEYuzoJCdkpIv2G76dj8lRsizTDEGIlBzp2qCYzUr23wn6VDhUkSYvMsAgwiTI XyWh5z43aqCi0x6oVEKADaDMtVkVH8FXa1+KDwDWCCeYr9zosyTrjITZ2lfhd8Bb 5m+EOW2RBdxBe3gpXsgbmVjdub2y+ClfvXlMgLGrKr71I7gC4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVFJVEIVdxZTvZqM+leV2RkvrHjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvMTZlZDRlNjUtYmQyMC0z YjVhLWJmZTYtOTZkYzUzYWVkNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKTBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcA9d6p+B5TqYt7/C7d4mIEybEnyacJPg49BmPCiRRDA2vT9dxckpWR x3lF+6ARW48fH2xUy5LpaGcEMF/ukXkRwf1Z8oFdxbkrOggL4+8rcjgmHdlYt5DO QFvGg4q7n9v/qVZZJxPOxW72CCbeGZWmCPHtiJTFV0d99RxSjBTQg/h0zwMHADLA l/NNUSQrL7i6p98SQWOgx2BgFsKPguxmdagIaJd/UCkgjujY/GpsuFDMIuOnPNhO ZCqhyah5T8AYFADeRsxx90kD2P4FX14jZuX508GctcQ4DdNnIMVUYKH6gXVpCwuX RtgQkKaPrcl1+o6R9HlG6gUkBfXsrgE= -----END CERTIFICATE-----Generated at Mon Apr 28 02:30:52 2025 by rpki-client