$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/55027072-44f6-34a8-afe4-17e9948a1fb2.roa File: 55027072-44f6-34a8-afe4-17e9948a1fb2.roa (raw, json) Hash identifier: YTl3A/M10xGX/n/BtlC6dAxG4/eoGpd42f/KEr4EvoE= Subject key identifier: CB:52:42:53:8C:79:D1:FE:2F:F4:8A:6D:DA:BB:AB:46:99:DE:92:D7 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F432858490126C2BF0901D757C2395A80 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/55027072-44f6-34a8-afe4-17e9948a1fb2.roa Signing time: Tue 25 Feb 2025 22:47:44 +0000 ROA not before: Tue 25 Feb 2025 22:47:44 +0000 ROA not after: Mon 26 May 2025 21:47:44 +0000 asID: 7764 IP address blocks: 148.129.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:01:26:c2:bf:09:01:d7:57:c2:39:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Feb 25 22:47:44 2025 GMT Not After : May 26 21:47:44 2025 GMT Subject: CN=6ff55fbf-4231-4049-bff0-4850a5b93eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:c2:40:c2:6c:28:61:32:35:34:d9:d9:49: f8:a2:6b:2b:8e:37:f0:41:d1:00:b7:a5:5e:93:26: 60:5a:4b:ab:31:03:3d:9c:d0:e0:3e:a4:c8:a4:da: 24:4d:81:91:f2:55:e3:45:51:87:18:a8:fb:d9:27: bc:be:4d:53:00:79:14:31:41:50:4b:59:b6:de:5b: bc:ac:00:d3:6a:d6:f6:b9:62:9d:fa:7a:54:04:98: a4:05:62:a1:1d:e6:7c:31:1b:56:7f:ea:5a:1f:1b: 8a:21:ae:ed:be:f7:2a:e0:1c:36:a9:86:c8:ec:02: 02:28:e2:52:41:56:a1:de:5e:be:a1:5a:bf:ac:ff: 77:c6:53:3d:cd:fa:5c:47:40:a4:15:d8:60:83:79: e2:64:4f:f9:76:db:31:09:5d:6b:aa:78:de:15:d0: f9:1a:7c:66:ac:f7:c3:ff:75:6b:e9:96:7d:1f:16: 39:b7:71:36:de:e2:f1:66:9d:2f:e7:44:5a:aa:ad: 76:19:1c:0f:aa:2c:49:e3:47:d9:20:98:fc:5d:d0: 44:69:68:48:21:3f:0e:e3:4d:1f:a7:9f:7c:b1:65: ec:ac:76:37:be:98:ee:ba:a0:03:e3:0f:e0:0f:6c: 5f:07:36:3f:0e:8c:c8:1a:01:aa:dc:31:b5:2a:be: 38:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:52:42:53:8C:79:D1:FE:2F:F4:8A:6D:DA:BB:AB:46:99:DE:92:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/55027072-44f6-34a8-afe4-17e9948a1fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 148.129.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:8b:ab:c0:7e:5f:4a:8b:df:5b:61:01:8f:23:0a:f5:a7:b4: d6:37:4f:cb:e0:33:9d:fe:93:28:d2:2c:00:7f:9e:b8:1e:ba: 20:59:96:0d:05:3b:af:ba:98:72:e6:02:c0:1e:6f:d4:ad:7b: a1:68:da:c4:9a:f3:f1:17:99:31:18:04:61:6c:a9:0f:a7:87: d6:5f:be:83:10:5b:16:2c:af:33:69:18:a8:ee:a4:27:a8:1f: da:ff:96:45:19:1a:fd:42:f0:91:a5:99:6a:05:48:48:13:6b: 9e:80:e0:e8:21:c0:79:cd:3a:1e:bf:8b:17:80:83:c3:33:90: e3:40:53:d9:c0:5a:58:7b:cd:ae:67:aa:23:a6:82:cc:31:c5: 0f:79:ed:75:3b:e2:8e:6f:c4:50:fe:67:2b:23:f4:51:71:c6: 31:4d:f5:c5:89:8f:33:f8:69:c5:47:f5:48:df:6c:5c:67:0f: 78:bc:76:47:bf:71:5d:89:a6:d1:0a:1a:59:c3:07:32:f5:4c: f3:c3:7b:3e:8f:a1:f7:eb:a3:67:23:03:aa:85:8a:0f:3d:36: 24:9a:d6:02:9f:1d:c6:2d:ea:7e:24:10:7a:f6:84:ef:33:81: 90:7f:d0:eb:45:59:9c:88:67:60:58:e8:79:5b:b0:b4:56:8e: 1b:b4:9b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkBJsK/CQHXV8I5WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDIyNTIyNDc0NFoXDTI1MDUyNjIxNDc0NFowLzEtMCsGA1UEAxMk NmZmNTVmYmYtNDIzMS00MDQ5LWJmZjAtNDg1MGE1YjkzZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+DCQMJsKGEyNTTZ2Un4omsrjjfwQdEAt6Ve kyZgWkurMQM9nNDgPqTIpNokTYGR8lXjRVGHGKj72Se8vk1TAHkUMUFQS1m23lu8 rADTatb2uWKd+npUBJikBWKhHeZ8MRtWf+paHxuKIa7tvvcq4Bw2qYbI7AICKOJS QVah3l6+oVq/rP93xlM9zfpcR0CkFdhgg3niZE/5dtsxCV1rqnjeFdD5GnxmrPfD /3Vr6ZZ9HxY5t3E23uLxZp0v50Raqq12GRwPqixJ40fZIJj8XdBEaWhIIT8O400f p598sWXsrHY3vpjuuqAD4w/gD2xfBzY/DozIGgGq3DG1Kr44QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtSQlOMedH+L/SKbdq7q0aZ3pLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNTUwMjcwNzItNDRmNi0z NGE4LWFmZTQtMTdlOTk0OGExZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlIGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyLq8B+X0qL31thAY8jCvWntNY3T8vgM53+kyjSLAB/nrgeuiBZlg0F O6+6mHLmAsAeb9Ste6Fo2sSa8/EXmTEYBGFsqQ+nh9ZfvoMQWxYsrzNpGKjupCeo H9r/lkUZGv1C8JGlmWoFSEgTa56A4OghwHnNOh6/ixeAg8MzkONAU9nAWlh7za5n qiOmgswxxQ957XU74o5vxFD+Zysj9FFxxjFN9cWJjzP4acVH9UjfbFxnD3i8dke/ cV2JptEKGlnDBzL1TPPDez6Poffro2cjA6qFig89NiSa1gKfHcYt6n4kEHr2hO8z gZB/0OtFWZyIZ2BY6HlbsLRWjhu0m5o= -----END CERTIFICATE-----Generated at Sat Apr 26 23:48:55 2025 by rpki-client