$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa File: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (raw, json) Hash identifier: yW32RbA6WDg8G8/PGbMbLsaHAb9WDPzYk/AC3vxuA6g= Subject key identifier: 55:39:62:CD:A8:D1:1E:64:2C:F0:1D:97:56:8B:8C:09:A9:47:89:A7 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584A03A543DBA053DFB486CFA500 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 14618 IP address blocks: 148.59.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:43:db:a0:53:df:b4:86:cf:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=e71b1f02-6b4f-4533-9f8a-27b2321cc36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:94:50:51:2d:57:b4:a0:2a:f5:c3:c6:70:ef: 83:5b:21:f3:b1:2a:72:c1:20:b7:ac:43:f5:fe:c0: ae:0b:22:fa:ef:2a:2b:81:be:22:36:60:c1:f3:4c: 49:d9:0d:8e:c4:49:a8:73:b0:71:95:df:0e:7f:87: 9a:ce:f9:2b:e1:eb:f1:eb:8c:85:c9:a5:e2:10:88: 18:61:45:40:55:e8:55:42:3d:d7:18:f1:ac:27:55: 9b:be:10:c5:7c:89:c4:57:eb:bd:aa:f2:6d:3e:c8: 1e:94:57:76:91:70:91:c6:22:34:56:91:bf:95:4b: ed:67:05:d0:a2:30:82:46:48:3e:4e:5b:1d:7b:b7: 4f:35:8d:f1:85:69:d8:09:bc:da:f5:33:4b:6a:e4: b8:a5:bf:12:1a:0b:4b:37:3d:1e:ba:f7:20:5c:ff: 32:8c:d1:13:0e:87:1a:e6:7d:e6:a4:49:00:31:84: 7e:2f:b3:bd:ac:11:2e:dc:24:e2:b0:f2:df:78:91: f6:86:85:3c:fb:a2:90:47:6e:4a:f5:d0:06:e3:69: 1b:e9:b0:36:fc:82:3d:93:4b:f7:3e:7f:c2:15:52: 56:ea:e9:70:bb:c8:fa:d6:cc:ee:51:89:93:3a:c2: 44:cd:c4:6c:a7:6b:77:11:9b:c9:51:f5:d4:45:a8: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:39:62:CD:A8:D1:1E:64:2C:F0:1D:97:56:8B:8C:09:A9:47:89:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: 148.59.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5a:58:48:e1:c4:89:65:8f:99:1f:1b:79:27:84:f5:e7:7f: 5f:e9:0d:7c:3a:8f:c3:d7:bc:d6:d7:4d:c7:09:dd:e6:be:86: a5:44:25:99:0f:93:a8:eb:42:4a:22:28:3b:fb:ab:8b:8f:c0: 56:0d:d3:6a:9b:2e:e9:2b:52:66:95:13:8a:06:db:4e:64:15: 12:0e:a0:d4:79:78:91:cc:ad:4e:32:32:6f:c9:f0:24:cb:c6: f5:e8:13:c3:17:d8:80:5b:48:6f:79:8e:f7:24:6e:ff:a3:6a: bf:43:e8:52:e4:6a:89:63:a7:0f:6c:72:a0:7c:43:b9:b7:86: b0:3c:9e:9e:00:ce:e3:ef:f8:c9:83:28:c6:76:01:a2:72:64: 82:0e:6b:d0:40:5a:89:f2:99:74:44:bc:7f:63:e7:09:a5:13: 2c:91:e3:87:a1:bc:bb:b9:b2:e4:89:61:e6:cc:9a:b3:ac:75: d7:ef:65:75:64:30:10:bd:0f:80:85:07:a1:5c:fc:35:e4:89: bd:bf:30:6d:69:d3:4d:30:37:65:94:24:99:7c:4b:51:ea:7a: 40:98:76:ba:f3:e1:25:31:de:89:b5:7a:85:a3:d4:af:90:6b: 0b:e5:e2:2c:7a:d3:dd:f3:e4:80:f3:9a:69:c4:5a:c4:1e:21: 06:95:f9:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUPboFPftIbPpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZTcxYjFmMDItNmI0Zi00NTMzLTlmOGEtMjdiMjMyMWNjMzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5RQUS1XtKAq9cPGcO+DWyHzsSpywSC3rEP1 /sCuCyL67yorgb4iNmDB80xJ2Q2OxEmoc7Bxld8Of4eazvkr4evx64yFyaXiEIgY YUVAVehVQj3XGPGsJ1WbvhDFfInEV+u9qvJtPsgelFd2kXCRxiI0VpG/lUvtZwXQ ojCCRkg+Tlsde7dPNY3xhWnYCbza9TNLauS4pb8SGgtLNz0euvcgXP8yjNETDoca 5n3mpEkAMYR+L7O9rBEu3CTisPLfeJH2hoU8+6KQR25K9dAG42kb6bA2/II9k0v3 Pn/CFVJW6ulwu8j61szuUYmTOsJEzcRsp2t3EZvJUfXURag+KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFU5Ys2o0R5kLPAdl1aLjAmpR4mnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvODZjZTc5NWQtYzU4NC0z MTBiLTk2OTMtMjFjYjI2YjZlOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1aWEjhxIllj5kfG3knhPXnf1/pDXw6j8PXvNbXTccJ3ea+hqVEJZkP k6jrQkoiKDv7q4uPwFYN02qbLukrUmaVE4oG205kFRIOoNR5eJHMrU4yMm/J8CTL xvXoE8MX2IBbSG95jvckbv+jar9D6FLkaoljpw9scqB8Q7m3hrA8np4AzuPv+MmD KMZ2AaJyZIIOa9BAWonymXREvH9j5wmlEyyR44ehvLu5suSJYebMmrOsddfvZXVk MBC9D4CFB6Fc/DXkib2/MG1p000wN2WUJJl8S1HqekCYdrrz4SUx3om1eoWj1K+Q awvl4ix6093z5IDzmmnEWsQeIQaV+VM= -----END CERTIFICATE-----Generated at Sun Jun 15 00:30:30 2025 by rpki-client