$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/e4a82e59-0553-3570-87e0-c71481eb42e5.roa File: e4a82e59-0553-3570-87e0-c71481eb42e5.roa (raw, json) Hash identifier: khPGaO4R86QGD899OFMyDJG/SNJ5y8ekvewR5gW60i8= Subject key identifier: B2:A1:DB:BC:1A:FF:BC:36:90:9B:D4:11:7B:31:A4:C4:03:EF:BB:D8 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584A268AAB9F495EB838EED5D320 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/e4a82e59-0553-3570-87e0-c71481eb42e5.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 23154 IP address blocks: 148.164.22.0/23 maxlen: 23 148.164.22.0/24 maxlen: 24 148.164.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:ab:9f:49:5e:b8:38:ee:d5:d3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=2f6e2432-0d96-4f85-9041-9e5da4ac934c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:ca:4f:e8:21:8a:90:b8:b9:0c:ff:c9:e7: e6:42:46:c8:bd:27:b6:ce:de:ee:52:18:51:b2:60: c8:e0:a3:80:86:53:71:01:9c:6a:a0:5a:cf:ca:e4: 8f:2a:7a:ca:31:ed:32:82:ff:b9:57:00:67:af:79: 28:f6:63:fd:88:ce:b4:0c:02:e5:5a:3d:69:72:12: 6e:a0:d6:15:f1:0e:fe:1b:ff:4f:ad:ee:a8:65:56: 82:bf:a3:27:d2:68:48:2f:f8:4d:34:25:79:ca:69: 54:da:ce:81:9a:b1:21:d0:01:b6:a5:8f:63:c7:77: fa:84:96:85:8a:66:ab:cd:69:18:77:9f:91:72:5f: 32:ec:21:33:45:f3:5e:9b:31:52:c7:ae:b1:3a:47: 1a:d2:76:5a:f9:9a:04:73:fa:96:57:b2:ac:14:d1: bc:2e:93:41:06:41:76:7e:7b:00:bb:4c:2b:4b:cb: a6:5a:11:b4:19:ed:d9:7c:af:19:e7:0a:cb:95:dc: 9b:7d:31:36:bf:80:38:49:d8:13:53:7d:dd:6c:13: 5c:ad:3e:d3:ca:e7:7e:e4:62:7e:6c:fa:fd:73:3e: 5d:3c:9f:b4:96:fd:f4:b4:1b:b3:14:dd:fb:ec:a5: 44:a1:1c:2c:20:76:7e:7e:e2:2b:a3:e5:af:6e:77: 56:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A1:DB:BC:1A:FF:BC:36:90:9B:D4:11:7B:31:A4:C4:03:EF:BB:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/e4a82e59-0553-3570-87e0-c71481eb42e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:a9:2e:07:d1:d0:a8:28:50:13:76:af:ee:26:c6:02:e7:74: ac:22:be:c4:6f:8f:9a:6b:1e:4b:87:35:45:83:f5:96:e0:fa: ac:dd:5e:45:79:d4:e7:57:a6:55:48:bb:12:5b:11:cc:08:55: a8:81:55:a9:51:47:c6:30:ba:b6:da:f4:15:4b:9f:05:71:1d: a8:f6:b4:3e:35:bf:79:db:0f:37:5f:5e:4b:55:73:e0:18:ac: cd:3f:c9:0e:c4:da:01:9c:49:6d:e5:82:97:c6:2d:c0:40:6e: 7a:9d:1c:5e:7f:a5:8a:62:45:56:e0:9c:f9:88:2c:6f:a0:57: 71:29:ab:de:1d:c4:0b:4d:39:6b:16:a8:84:e7:4e:b8:e4:75: a7:5a:f2:b1:6c:25:01:7f:b1:cb:68:cc:57:41:5a:23:e3:cd: 21:0a:62:a8:2b:9e:db:fd:77:6f:e3:a8:d3:d9:c0:bc:75:2e: 80:9e:c3:59:25:c8:b1:a1:42:39:c5:4c:fc:2d:af:ce:c5:c2: 7c:c4:bb:4c:89:29:0f:cc:53:4a:fe:de:52:3b:bb:18:b4:5b: 07:ce:72:ec:6b:6d:0b:4b:9c:e5:8c:54:aa:48:81:3b:1d:7a: 61:39:27:7f:e8:3d:bf:7a:0b:50:4a:6e:51:d7:c9:3e:57:91: 64:db:3f:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomiqufSV64OO7V0yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk MmY2ZTI0MzItMGQ5Ni00Zjg1LTkwNDEtOWU1ZGE0YWM5MzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8jKT+ghipC4uQz/yefmQkbIvSe2zt7uUhhR smDI4KOAhlNxAZxqoFrPyuSPKnrKMe0ygv+5VwBnr3ko9mP9iM60DALlWj1pchJu oNYV8Q7+G/9Pre6oZVaCv6Mn0mhIL/hNNCV5ymlU2s6BmrEh0AG2pY9jx3f6hJaF imarzWkYd5+Rcl8y7CEzRfNemzFSx66xOkca0nZa+ZoEc/qWV7KsFNG8LpNBBkF2 fnsAu0wrS8umWhG0Ge3ZfK8Z5wrLldybfTE2v4A4SdgTU33dbBNcrT7Tyud+5GJ+ bPr9cz5dPJ+0lv30tBuzFN377KVEoRwsIHZ+fuIro+WvbndW6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKh27wa/7w2kJvUEXsxpMQD77vYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvZTRhODJlNTktMDU1My0z NTcwLTg3ZTAtYzcxNDgxZWI0MmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlKQWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALapLgfR0KgoUBN2r+4mxgLndKwivsRvj5prHkuHNUWD9Zbg+qzdXkV5 1OdXplVIuxJbEcwIVaiBValRR8Ywurba9BVLnwVxHaj2tD41v3nbDzdfXktVc+AY rM0/yQ7E2gGcSW3lgpfGLcBAbnqdHF5/pYpiRVbgnPmILG+gV3Epq94dxAtNOWsW qITnTrjkdada8rFsJQF/sctozFdBWiPjzSEKYqgrntv9d2/jqNPZwLx1LoCew1kl yLGhQjnFTPwtr87FwnzEu0yJKQ/MU0r+3lI7uxi0WwfOcuxrbQtLnOWMVKpIgTsd emE5J3/oPb96C1BKblHXyT5XkWTbP+M= -----END CERTIFICATE-----Generated at Mon Jun 16 17:07:37 2025 by rpki-client