$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa File: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (raw, json) Hash identifier: 8zWcV4y3LmVz6RTzQCkkErVc+7nZmlxrVNA3cSSEQ54= Subject key identifier: 36:97:CD:88:20:7E:CC:29:AF:26:54:EE:8C:FF:84:DA:08:2D:75:D8 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F43285849244E7AB095BE9C1FF7EAD180 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 148.59.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7a:b0:95:be:9c:1f:f7:ea:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=2bec175c-c150-4360-9447-7eba5828cd68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2e:9e:a2:58:9e:0c:b2:a8:3f:59:e2:c9:44: bc:ef:a6:7f:95:12:79:ed:40:10:d7:c6:35:d4:f1: 19:ca:84:90:37:58:71:2f:75:14:0a:d8:0e:07:56: c7:e5:9c:81:79:b6:72:b9:76:05:8e:3b:37:8f:2e: 75:c1:e8:94:c6:c7:74:a1:12:28:c6:f9:72:a7:df: 9b:71:f9:2f:02:d6:95:8a:48:d9:18:27:74:dd:40: e2:b4:78:5c:2b:5c:ed:23:9e:d3:67:c0:cd:79:76: 2e:97:e6:f2:d8:ae:d6:48:bc:56:af:57:4e:c2:16: 15:8a:53:2a:9b:5b:15:d8:68:b2:7c:15:64:56:93: 38:62:33:1b:bf:18:23:f5:28:fd:b2:c2:9b:dd:77: c7:c6:d1:f6:95:90:3f:7f:c7:ba:a1:fc:08:bd:70: f0:ee:20:fd:ea:92:17:82:9f:30:8a:c3:4e:3a:8e: bb:3b:2f:69:f3:f4:2f:b6:a3:35:8d:db:2f:3c:c6: 05:0f:98:c9:23:12:ff:f0:ab:c3:81:c4:1a:32:73: b5:2d:79:67:ea:1f:9e:ec:25:75:4e:0e:0f:90:37: 4a:a5:d7:68:6a:c2:1d:eb:61:40:05:31:bd:fb:90: a7:2c:c9:9f:06:33:af:e7:9f:29:0f:16:fa:c8:fb: 3c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:97:CD:88:20:7E:CC:29:AF:26:54:EE:8C:FF:84:DA:08:2D:75:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: 148.59.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e1:c3:eb:eb:26:d6:39:8d:e6:78:4e:13:32:27:a1:af:52: 7a:65:0f:2b:72:14:77:70:65:32:f2:94:15:b4:3b:5a:ae:3c: ae:db:a3:23:c8:f8:c0:b8:e1:45:48:88:86:d6:c8:b5:ad:29: 02:ba:eb:d4:b9:f2:c4:f6:55:c8:75:9e:ce:28:c9:de:15:84: 7e:bf:b1:f1:47:de:fb:94:43:4a:e8:91:c9:c5:12:72:82:81: 45:0f:31:c7:d6:63:5b:42:bf:fb:95:d2:55:f9:aa:8d:6d:a4: 90:36:90:62:55:6b:40:9a:74:7a:56:e6:ec:71:47:09:46:9a: 3d:a3:c5:34:cf:46:0d:0c:8e:79:39:27:e3:c0:94:be:30:c1: d8:b4:ce:df:71:ce:d3:aa:e1:55:bd:d8:cf:7e:50:3d:79:d8: 22:21:1e:50:15:d8:50:e4:b3:66:53:ce:3f:2e:8c:aa:03:d4: 4f:1e:52:cd:90:43:f0:02:fc:cd:df:0b:e5:de:40:d1:0f:f4: 9f:d2:d3:f7:a6:31:0d:61:f0:4e:21:aa:71:62:44:1f:1b:a5: d7:c7:d4:d3:92:fe:84:6f:1f:da:a4:13:fe:70:96:48:e1:51: 66:8a:bd:22:30:8f:e6:76:05:4f:73:bc:11:6e:12:50:c2:4e: 92:b7:d1:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnqwlb6cH/fq0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MmJlYzE3NWMtYzE1MC00MzYwLTk0NDctN2ViYTU4MjhjZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy6eolieDLKoP1niyUS876Z/lRJ57UAQ18Y1 1PEZyoSQN1hxL3UUCtgOB1bH5ZyBebZyuXYFjjs3jy51weiUxsd0oRIoxvlyp9+b cfkvAtaVikjZGCd03UDitHhcK1ztI57TZ8DNeXYul+by2K7WSLxWr1dOwhYVilMq m1sV2GiyfBVkVpM4YjMbvxgj9Sj9ssKb3XfHxtH2lZA/f8e6ofwIvXDw7iD96pIX gp8wisNOOo67Oy9p8/QvtqM1jdsvPMYFD5jJIxL/8KvDgcQaMnO1LXln6h+e7CV1 Tg4PkDdKpddoasId62FABTG9+5CnLMmfBjOv558pDxb6yPs89QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaXzYggfswpryZU7oz/hNoILXXYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvMmVkMDRlNjAtMWU5Ny0z NjQ3LWIzOWEtOWE5M2JlOWUzY2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzhw+vrJtY5jeZ4ThMyJ6GvUnplDytyFHdwZTLylBW0O1quPK7boyPI +MC44UVIiIbWyLWtKQK669S58sT2Vch1ns4oyd4VhH6/sfFH3vuUQ0rokcnFEnKC gUUPMcfWY1tCv/uV0lX5qo1tpJA2kGJVa0CadHpW5uxxRwlGmj2jxTTPRg0Mjnk5 J+PAlL4wwdi0zt9xztOq4VW92M9+UD152CIhHlAV2FDks2ZTzj8ujKoD1E8eUs2Q Q/AC/M3fC+XeQNEP9J/S0/emMQ1h8E4hqnFiRB8bpdfH1NOS/oRvH9qkE/5wlkjh UWaKvSIwj+Z2BU9zvBFuElDCTpK30W0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:52:13 2025 by rpki-client