$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa File: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (raw, json) Hash identifier: cwcmGinHeBkFR7QoVPGw0dPCq8h0LmvpoCC+OQ7EIYY= Subject key identifier: 81:B7:A4:01:38:CC:56:9D:8F:2A:F0:77:92:7B:6A:A5:C4:95:32:2F Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584A03A543CBE02C8E2E6EC613D0 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 148.59.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:43:cb:e0:2c:8e:2e:6e:c6:13:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=2ea5c25c-4057-43c6-99ce-d0f29232fc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:41:9e:21:8d:49:61:92:3f:48:d9:2c:d9:c3: d5:e5:ba:ce:a4:44:d0:f4:40:4e:77:9c:d5:84:8e: 81:ce:42:ce:57:06:1a:2b:e3:c9:77:7d:82:58:cf: 2e:a5:0e:b1:2a:ac:b7:02:24:7e:a1:8f:59:ef:00: 4f:89:95:5e:04:57:8c:56:be:c2:d3:9d:d0:a2:2e: e3:79:f8:5e:b8:35:39:25:f8:39:fa:d9:2e:47:f9: c0:dc:29:47:1f:24:2a:f2:e4:e8:58:78:aa:b9:8f: d0:78:99:aa:8f:e7:a6:67:c7:af:1b:43:32:47:9d: 27:c6:84:cf:bb:46:23:ae:12:32:cb:bd:a7:17:cf: a0:48:b9:a4:92:41:98:78:d8:36:54:e3:1a:09:ba: b8:86:28:86:8c:d2:30:8e:a6:4d:6a:e7:ce:10:df: 68:9b:7c:a1:aa:b1:e2:d1:38:cd:94:56:96:74:ff: 2c:7b:f4:4f:df:8f:a5:81:1d:4b:5d:5e:31:54:49: 05:7f:9c:51:72:3d:8c:1e:ca:6f:4e:ce:a2:f0:28: fb:f5:d1:f0:3d:25:99:1f:c4:c5:d6:18:6e:28:7a: c9:16:f1:4d:8c:7e:cf:23:af:65:b7:51:b6:30:f8: da:4e:18:cd:e8:fd:b5:ae:eb:34:aa:3f:e0:16:5a: bd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B7:A4:01:38:CC:56:9D:8F:2A:F0:77:92:7B:6A:A5:C4:95:32:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: 148.59.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c4:a9:ac:ad:ae:e1:b9:58:c6:85:0b:94:aa:85:fb:49:f2: 46:05:f4:6c:36:43:53:7b:e1:ae:65:34:01:77:9b:80:1f:1c: 44:b2:d9:67:7e:8b:b1:80:77:82:5b:ad:8f:29:f2:73:a3:dc: 44:43:43:ad:59:a6:7a:f1:cc:ac:d2:26:2f:3f:94:3e:5b:e5: 63:98:b5:5c:72:f2:2d:dc:b2:a9:0f:16:49:95:11:44:49:0c: 93:b1:26:11:75:6a:03:e3:da:e1:59:ef:85:ac:20:8f:70:f9: d3:02:d0:6b:17:a0:eb:42:87:15:21:c7:d3:43:51:be:3e:8a: d5:25:9d:66:d0:47:8f:3d:04:b7:c5:57:d5:26:d1:7a:3c:5b: 6b:61:eb:08:35:7c:cb:1c:b0:4c:14:03:50:2d:11:d9:a7:b6: 49:bb:bb:a3:98:18:14:b1:54:6f:ac:a0:f0:7b:4f:0e:15:81: 67:96:e6:2f:74:1e:90:6c:a2:3a:3c:52:af:fa:b2:28:dd:e9: 65:15:93:08:90:d1:6e:be:78:1b:16:47:7e:b3:a6:2e:f8:0f: 44:ae:da:e3:ae:dc:2f:f6:d1:fe:71:f6:20:9f:21:5e:e1:57: d3:f9:6f:6b:05:46:6d:24:d6:13:18:13:b1:62:bf:10:20:66: f3:05:e0:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUPL4CyOLm7GE9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MmVhNWMyNWMtNDA1Ny00M2M2LTk5Y2UtZDBmMjkyMzJmYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0GeIY1JYZI/SNks2cPV5brOpETQ9EBOd5zV hI6BzkLOVwYaK+PJd32CWM8upQ6xKqy3AiR+oY9Z7wBPiZVeBFeMVr7C053Qoi7j efheuDU5Jfg5+tkuR/nA3ClHHyQq8uToWHiquY/QeJmqj+emZ8evG0MyR50nxoTP u0YjrhIyy72nF8+gSLmkkkGYeNg2VOMaCbq4hiiGjNIwjqZNaufOEN9om3yhqrHi 0TjNlFaWdP8se/RP34+lgR1LXV4xVEkFf5xRcj2MHspvTs6i8Cj79dHwPSWZH8TF 1hhuKHrJFvFNjH7PI69lt1G2MPjaThjN6P21rus0qj/gFlq9FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIG3pAE4zFadjyrwd5J7aqXElTIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvMmVkMDRlNjAtMWU5Ny0z NjQ3LWIzOWEtOWE5M2JlOWUzY2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDEqaytruG5WMaFC5SqhftJ8kYF9Gw2Q1N74a5lNAF3m4AfHESy2Wd+ i7GAd4JbrY8p8nOj3ERDQ61ZpnrxzKzSJi8/lD5b5WOYtVxy8i3csqkPFkmVEURJ DJOxJhF1agPj2uFZ74WsII9w+dMC0GsXoOtChxUhx9NDUb4+itUlnWbQR489BLfF V9Um0Xo8W2th6wg1fMscsEwUA1AtEdmntkm7u6OYGBSxVG+soPB7Tw4VgWeW5i90 HpBsojo8Uq/6sijd6WUVkwiQ0W6+eBsWR36zpi74D0Su2uOu3C/20f5x9iCfIV7h V9P5b2sFRm0k1hMYE7FivxAgZvMF4Hc= -----END CERTIFICATE-----Generated at Sat Jun 14 06:37:23 2025 by rpki-client