$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa File: 8c1d8561-e377-394b-ad52-2f543980d885.roa (raw, json) Hash identifier: KMiH3zpnuFy1KGY7a0dODWPXYX17aBDNfMrN+5z4EwQ= Subject key identifier: 44:40:2D:9C:85:70:86:97:35:01:C8:0B:DF:85:6F:6E:11:92:A5:4E Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584A268AAC49893E1F22D80BB680 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 23154 IP address blocks: 148.164.48.0/23 maxlen: 23 148.164.48.0/24 maxlen: 24 148.164.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:ac:49:89:3e:1f:22:d8:0b:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=d29b5229-35ab-4676-9b05-ca16ffd75227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:d8:36:84:6d:7c:cb:c9:0b:5e:82:24:60: 69:9e:58:f9:16:4a:2e:5b:bd:f7:90:bf:93:8f:e3: 08:e2:e7:fe:73:bf:2c:3b:c1:99:14:13:43:87:e4: 1b:e5:fc:a7:f3:d7:63:46:fa:29:6e:18:01:29:11: 85:d5:d5:c4:07:85:7f:1c:91:2d:12:2b:66:50:b2: 36:c6:aa:44:c1:0d:ea:e8:df:5e:9b:be:8c:d3:f3: 39:46:9e:4f:31:a7:15:f7:67:32:d3:6f:45:14:9f: 6f:9b:d4:5c:8d:69:7a:7b:9c:2c:b8:a8:43:8d:64: fd:3d:dc:65:e2:54:2e:e0:12:dd:06:97:93:15:29: e7:36:d6:2b:b9:19:31:e2:97:28:4c:cd:1a:04:5a: f9:c1:23:53:96:6d:5d:ee:93:0b:6a:d9:de:0d:47: 3e:93:dc:fe:fe:1a:85:b7:ac:7c:31:73:23:54:9d: 6b:bf:0f:8d:32:fe:83:c3:29:c0:e2:64:ab:de:a0: cf:80:03:10:eb:c9:db:dc:c8:77:bd:0a:bf:2d:a0: c3:70:48:ad:20:4b:59:0d:d0:50:51:8f:28:fd:e6: 41:8b:d4:97:b3:6a:c7:f6:28:67:21:a1:61:5a:05: f0:53:9a:fd:c3:03:31:82:88:60:a4:18:08:33:0e: e8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:40:2D:9C:85:70:86:97:35:01:C8:0B:DF:85:6F:6E:11:92:A5:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f7:69:ea:9a:7e:54:91:b8:40:60:e7:2f:8b:bd:b9:84:fd: 15:1e:ee:28:e1:0b:69:77:64:d6:b0:86:3c:b0:70:3b:ab:7d: 06:21:77:db:5a:8c:2d:98:4e:e7:a1:04:3c:89:10:68:97:90: 93:6c:c5:e8:f1:3e:8f:59:ad:15:fa:40:f6:34:32:aa:3c:30: f3:31:1c:75:06:d7:64:b5:97:21:54:41:c4:97:82:8f:a7:e4: 38:d4:f5:1d:af:cb:de:ca:7a:85:d8:bc:07:31:05:20:4a:88: 5e:b0:fc:cc:6a:be:66:7d:1c:8f:8b:7f:80:90:45:23:5e:51: 19:f7:9a:da:de:62:50:40:b7:e6:ae:88:81:ff:bf:05:25:ed: 9a:2a:61:1b:5c:27:d2:a3:49:e2:c9:63:69:dc:c4:2b:d3:dc: 20:f6:7e:93:bd:03:b4:1c:7a:e2:8b:c2:9d:43:b7:d3:67:df: 23:da:34:f3:74:54:01:e9:ba:9a:01:ea:74:86:67:51:6f:0a: a7:20:71:bc:9e:d4:05:8e:6e:70:96:5f:3a:40:0a:d3:70:95: 3b:38:7d:1b:11:4e:ab:89:33:c5:1d:0e:9f:cb:1b:46:1e:10: 08:96:f4:30:31:72:c9:08:f1:d7:4f:91:0d:ee:7f:bb:0e:6d: 6d:9b:8f:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomiqxJiT4fItgLtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDI5YjUyMjktMzVhYi00Njc2LTliMDUtY2ExNmZmZDc1MjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW/YNoRtfMvJC16CJGBpnlj5FkouW733kL+T j+MI4uf+c78sO8GZFBNDh+Qb5fyn89djRvopbhgBKRGF1dXEB4V/HJEtEitmULI2 xqpEwQ3q6N9em76M0/M5Rp5PMacV92cy029FFJ9vm9RcjWl6e5wsuKhDjWT9Pdxl 4lQu4BLdBpeTFSnnNtYruRkx4pcoTM0aBFr5wSNTlm1d7pMLatneDUc+k9z+/hqF t6x8MXMjVJ1rvw+NMv6DwynA4mSr3qDPgAMQ68nb3Mh3vQq/LaDDcEitIEtZDdBQ UY8o/eZBi9SXs2rH9ihnIaFhWgXwU5r9wwMxgohgpBgIMw7oNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERALZyFcIaXNQHIC9+Fb24RkqVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvOGMxZDg1NjEtZTM3Ny0z OTRiLWFkNTItMmY1NDM5ODBkODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlKQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP3aeqaflSRuEBg5y+LvbmE/RUe7ijhC2l3ZNawhjywcDurfQYhd9ta jC2YTuehBDyJEGiXkJNsxejxPo9ZrRX6QPY0Mqo8MPMxHHUG12S1lyFUQcSXgo+n 5DjU9R2vy97KeoXYvAcxBSBKiF6w/MxqvmZ9HI+Lf4CQRSNeURn3mtreYlBAt+au iIH/vwUl7ZoqYRtcJ9KjSeLJY2ncxCvT3CD2fpO9A7QceuKLwp1Dt9Nn3yPaNPN0 VAHpupoB6nSGZ1FvCqcgcbye1AWObnCWXzpACtNwlTs4fRsRTquJM8UdDp/LG0Ye EAiW9DAxcskI8ddPkQ3uf7sObW2bj98= -----END CERTIFICATE-----Generated at Wed Jun 18 12:59:29 2025 by rpki-client