$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa File: f43e8308-d375-3574-bde0-f0f8e725d68c.roa (raw, json) Hash identifier: Y4dEVIDvN3shbTvQK4gms0m8qfb0hww18YkjvWImOzE= Subject key identifier: 33:67:2A:A4:F4:20:11:BF:4E:6A:95:03:9C:D3:A0:28:43:3E:AE:EF Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584A268AB24B7C0F2B5B30553080 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 23154 IP address blocks: 148.164.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:b2:4b:7c:0f:2b:5b:30:55:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=471ea694-420b-429b-a367-5a2fc720de97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a5:cd:a8:1a:29:92:a5:b7:87:93:8b:33:0d: 27:c6:77:10:3f:9f:20:b8:9a:17:dd:4a:97:c4:54: ad:bd:31:da:14:4f:d1:b8:ca:ab:bc:e0:3d:24:77: 5a:c5:6d:ef:56:e4:52:2e:94:89:3d:bc:6a:32:5f: 72:1e:7a:cf:97:70:a3:a4:76:20:cd:48:18:67:82: fa:59:e9:4e:c4:1d:ed:56:b4:66:a3:40:0a:ac:c5: 13:b1:2a:19:c2:f9:c9:fb:49:8f:b3:f6:61:d1:22: 9a:fd:52:b8:5f:94:33:89:00:26:49:0c:86:39:c3: 96:e6:9a:09:28:67:1c:20:37:4a:a8:84:1c:f2:91: f8:bf:0c:98:a7:8c:65:b1:5b:67:ca:64:28:75:a4: 18:b8:c5:52:4a:4e:c5:90:f5:82:87:54:25:b6:09: f3:98:bb:75:14:8c:83:17:71:2a:6f:56:23:d2:fe: b2:6f:45:54:e0:9e:05:b5:04:1e:8d:d7:1a:3c:2d: e7:28:e9:c6:41:d7:a6:b6:08:ff:f6:f7:24:b1:9a: 1c:25:e2:d4:e5:40:e2:d8:b7:05:6e:0d:f3:ba:8c: 5a:5c:f5:6f:c3:3b:d2:61:9f:0c:42:71:f7:01:58: f8:7f:0d:ce:4b:b9:68:a2:da:39:46:53:59:69:c2: 73:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:67:2A:A4:F4:20:11:BF:4E:6A:95:03:9C:D3:A0:28:43:3E:AE:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f5:75:4f:79:28:91:80:51:0a:59:a3:48:51:a1:42:b2:9e: 50:1b:b5:5f:a7:ce:4a:e6:be:29:21:aa:c1:38:86:ca:1c:f3: 83:c5:66:fc:d7:8c:94:51:60:eb:1e:1a:1a:8e:dc:ef:c9:41: 6c:c0:a0:84:11:79:d8:79:d0:15:8b:99:c8:a5:ab:af:e8:61: 98:68:82:c7:bd:d5:d0:83:4d:52:2d:41:ac:3c:ca:be:91:be: 0e:8c:b1:20:f2:64:bf:3a:68:76:9f:8e:84:d5:a0:79:b0:9c: 84:0b:d0:ef:83:b1:78:7d:83:19:ec:cd:54:28:e2:bc:28:c7: 09:1a:53:86:70:43:30:77:4c:6a:02:2c:06:4b:e9:c5:d5:64: da:c0:40:f6:7e:63:b3:bb:d9:27:42:12:84:97:73:e1:09:5a: 1e:69:36:4f:62:24:04:77:82:bd:85:9f:64:ee:f9:97:18:27: b3:61:43:a7:cb:78:e1:31:86:05:15:bf:e7:0d:e7:a5:b0:44: 1c:39:4b:d0:67:22:af:e2:8a:0c:8b:0b:ce:52:8d:7d:3a:f9: 93:69:f9:51:54:4c:b5:dd:a4:24:65:0e:7b:b3:0f:b0:66:32: ac:4a:54:09:8f:02:b4:e8:f4:e7:7c:19:cf:55:ec:9a:86:5e: 94:35:96:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomirJLfA8rWzBVMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk NDcxZWE2OTQtNDIwYi00MjliLWEzNjctNWEyZmM3MjBkZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6XNqBopkqW3h5OLMw0nxncQP58guJoX3UqX xFStvTHaFE/RuMqrvOA9JHdaxW3vVuRSLpSJPbxqMl9yHnrPl3CjpHYgzUgYZ4L6 WelOxB3tVrRmo0AKrMUTsSoZwvnJ+0mPs/Zh0SKa/VK4X5QziQAmSQyGOcOW5poJ KGccIDdKqIQc8pH4vwyYp4xlsVtnymQodaQYuMVSSk7FkPWCh1QltgnzmLt1FIyD F3Eqb1Yj0v6yb0VU4J4FtQQejdcaPC3nKOnGQdemtgj/9vcksZocJeLU5UDi2LcF bg3zuoxaXPVvwzvSYZ8MQnH3AVj4fw3OS7looto5RlNZacJz6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNnKqT0IBG/TmqVA5zToChDPq7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvZjQzZTgzMDgtZDM3NS0z NTc0LWJkZTAtZjBmOGU3MjVkNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL1dU95KJGAUQpZo0hRoUKynlAbtV+nzkrmvikhqsE4hsoc84PFZvzX jJRRYOseGhqO3O/JQWzAoIQRedh50BWLmcilq6/oYZhogse91dCDTVItQaw8yr6R vg6MsSDyZL86aHafjoTVoHmwnIQL0O+DsXh9gxnszVQo4rwoxwkaU4ZwQzB3TGoC LAZL6cXVZNrAQPZ+Y7O72SdCEoSXc+EJWh5pNk9iJAR3gr2Fn2Tu+ZcYJ7NhQ6fL eOExhgUVv+cN56WwRBw5S9BnIq/iigyLC85SjX06+ZNp+VFUTLXdpCRlDnuzD7Bm MqxKVAmPArTo9Od8Gc9V7JqGXpQ1lpE= -----END CERTIFICATE-----Generated at Mon Jun 16 13:47:55 2025 by rpki-client