$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa File: 677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa (raw, json) Hash identifier: xDPvAKE0G90908H7n+kfo02y+C6fWyEYnyebaxMTDAk= Subject key identifier: 61:98:40:66:62:1B:BE:6C:FB:46:2F:5C:9A:4C:57:71:4C:C8:FF:EB Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F432858494733E2485BD62FB0A7F77E80 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 23154 IP address blocks: 148.164.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:e2:48:5b:d6:2f:b0:a7:f7:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=0dbe3ce8-6287-40be-ba26-cd134f255b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:04:0c:fe:d2:e2:38:98:33:4b:36:73:6d:37: 49:5f:08:32:1b:3e:31:6f:1b:df:a1:92:02:2e:bc: 53:3c:ae:c0:77:c4:a1:48:c1:b9:a5:03:73:8d:53: 6e:70:33:7c:da:46:5c:26:dc:7b:03:a8:29:c7:f6: 4d:e6:2f:5f:62:0d:0e:93:2e:4a:6a:4b:48:32:e1: b0:5b:34:5e:7f:d2:0b:03:ff:27:73:c2:08:df:f5: 1b:37:24:83:df:e4:18:5b:1f:d9:3b:82:8b:e5:39: 13:5a:e2:40:f8:2b:19:ff:4e:d2:23:eb:98:7e:70: a1:85:3c:14:d5:7b:5d:bf:79:b2:54:95:70:b9:df: 40:75:b8:3f:c5:c8:60:f1:72:fa:2e:3b:18:7a:22: ea:81:a2:f5:6f:f8:b2:43:77:79:31:ac:65:07:9d: 16:cc:18:b2:c8:7e:0b:ce:36:24:dd:c6:03:cd:12: 19:79:21:17:24:42:f9:db:e5:37:09:10:0d:bc:00: e3:e1:e1:4d:a1:dd:5b:fe:ea:02:dc:db:8a:d7:49: d4:da:22:da:c8:84:f2:01:a5:60:30:cb:e5:84:1a: 38:21:ab:52:17:e9:34:5b:ea:ed:46:8a:37:69:e5: 95:c3:6d:8a:ae:a8:ed:ab:26:c5:68:97:c2:4e:f6: d0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:98:40:66:62:1B:BE:6C:FB:46:2F:5C:9A:4C:57:71:4C:C8:FF:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:36:bb:33:47:a0:63:9b:86:db:83:df:65:e7:7f:cc:f2:c8: d6:27:6d:fe:fc:62:f0:03:e9:62:f0:6a:77:90:ac:6a:c3:bf: 28:03:eb:fd:60:a8:c0:86:7c:f7:ac:dd:29:c1:8e:c2:88:25: 31:e6:1a:cf:2a:9e:5d:2a:c9:05:9e:e0:7b:7b:46:45:91:dd: b2:a4:a1:49:66:f2:28:d5:ae:82:7e:a2:3d:91:c3:b8:b8:0f: 96:3b:f3:f7:4f:82:4f:f1:fd:db:ef:7f:dc:04:89:6c:89:95: fb:60:0d:2b:73:01:b7:1c:ae:0a:d5:09:af:6b:00:af:bf:7f: 9b:21:7b:ce:21:a4:2f:5d:fd:d5:06:a7:d6:23:b5:c5:c9:08: eb:cd:b3:26:86:d1:53:ad:95:22:a7:eb:4a:4b:80:62:83:f3: 6b:25:7f:f2:ed:73:39:14:be:d0:69:6b:15:f8:d4:4b:e5:ee: 78:26:df:82:17:13:e8:0a:22:11:fe:e0:b2:be:7d:da:2b:3c: 54:88:ec:0b:bb:f7:2f:9c:8a:04:98:3a:35:2d:0f:2e:d3:da: 70:76:be:c6:51:d3:c2:d6:02:a1:45:2a:84:65:34:7a:1f:4d: 1e:44:7d:82:51:6f:49:26:dc:ed:00:b1:b1:39:01:d9:c8:90: 5f:4c:85:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+JIW9YvsKf3foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk MGRiZTNjZTgtNjI4Ny00MGJlLWJhMjYtY2QxMzRmMjU1YjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwQM/tLiOJgzSzZzbTdJXwgyGz4xbxvfoZIC LrxTPK7Ad8ShSMG5pQNzjVNucDN82kZcJtx7A6gpx/ZN5i9fYg0Oky5KaktIMuGw WzRef9ILA/8nc8II3/UbNySD3+QYWx/ZO4KL5TkTWuJA+CsZ/07SI+uYfnChhTwU 1Xtdv3myVJVwud9Adbg/xchg8XL6LjsYeiLqgaL1b/iyQ3d5MaxlB50WzBiyyH4L zjYk3cYDzRIZeSEXJEL52+U3CRANvADj4eFNod1b/uoC3NuK10nU2iLayITyAaVg MMvlhBo4IatSF+k0W+rtRoo3aeWVw22KrqjtqybFaJfCTvbQnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGYQGZiG75s+0YvXJpMV3FMyP/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvNjc3YWIyZjctZGZlYi0z OTM3LWIyOGYtM2JiM2MwYWRlMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo2uzNHoGObhtuD32Xnf8zyyNYnbf78YvAD6WLwaneQrGrDvygD6/1g qMCGfPes3SnBjsKIJTHmGs8qnl0qyQWe4Ht7RkWR3bKkoUlm8ijVroJ+oj2Rw7i4 D5Y78/dPgk/x/dvvf9wEiWyJlftgDStzAbccrgrVCa9rAK+/f5she84hpC9d/dUG p9YjtcXJCOvNsyaG0VOtlSKn60pLgGKD82slf/LtczkUvtBpaxX41Evl7ngm34IX E+gKIhH+4LK+fdorPFSI7Au79y+cigSYOjUtDy7T2nB2vsZR08LWAqFFKoRlNHof TR5EfYJRb0km3O0AsbE5AdnIkF9MheY= -----END CERTIFICATE-----Generated at Sun Apr 27 11:32:48 2025 by rpki-client