$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa File: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (raw, json) Hash identifier: SPgueYvQaAn9kHRjy08CWgTrSsg0s0i8FVMkoHJqsTs= Subject key identifier: 43:B6:2D:D7:C4:2C:C2:08:D0:E7:97:28:82:D0:8B:1B:3F:E2:9B:55 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F43285849244E7AC27B125E3FD8F5B400 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 14618 IP address blocks: 148.59.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7a:c2:7b:12:5e:3f:d8:f5:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=e880f61e-bca4-4043-b874-8f9a37f6b891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:35:88:b4:1a:fb:30:b6:63:f7:db:62:7c:b5: ab:e7:e3:09:d1:dd:10:a7:4d:0c:8b:43:cb:9d:fb: db:23:3c:69:44:57:ce:ee:e7:b8:04:e6:e1:f1:0a: 2e:6e:a3:76:a3:f8:b9:40:14:f1:80:64:25:52:16: cf:ae:54:b6:11:47:cf:b7:ee:73:29:5d:69:ac:5a: e7:21:86:d7:2f:7f:1e:8e:d4:43:1f:df:bb:23:00: 2a:5f:b9:70:2b:c4:25:7f:49:d4:dd:d7:ee:f7:93: 93:ce:31:a0:6d:87:0a:d8:f0:8b:20:b4:4c:d2:89: d8:4a:b0:2d:01:aa:33:5e:82:6c:22:9e:27:04:fb: f7:76:49:6e:60:08:a7:47:5c:8e:4b:f1:aa:b3:a0: 98:56:bf:2d:f7:ec:cf:37:df:ac:f4:b2:4a:ac:c6: 11:2d:d4:ff:b0:9e:35:d7:92:e5:3c:b5:4a:aa:8c: 39:96:41:96:8d:0b:03:a3:4c:54:ab:2c:cf:c5:12: 4f:da:be:d4:89:a1:af:75:a0:c7:30:a6:dc:a9:07: 41:1d:77:57:22:3e:d5:d6:63:91:4e:11:f7:1c:23: 49:08:e1:ac:a0:8c:40:5d:39:d3:ab:8b:fc:a2:fa: bb:c0:27:8a:ca:b2:c6:95:9e:4e:26:67:f0:f8:f0: c7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B6:2D:D7:C4:2C:C2:08:D0:E7:97:28:82:D0:8B:1B:3F:E2:9B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: 148.59.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3b:44:e8:3b:3f:4f:36:82:d9:4b:19:b5:d9:6e:02:7c:43: 92:36:23:89:f1:14:1d:64:0e:4a:03:8c:a0:45:f5:3b:f6:44: af:36:f3:3e:00:21:ee:52:a4:a3:a1:d0:ad:d3:18:3d:66:2c: 7d:cc:ab:5d:77:44:80:f3:b1:03:ca:d6:75:0d:e7:c2:5f:89: 5c:a0:fd:d1:be:61:86:56:b3:ae:d4:b6:46:d2:7f:d1:35:87: 46:8a:14:62:ef:16:fb:45:1a:63:91:58:34:36:a0:e3:9b:e9: 27:62:69:99:04:1a:20:e7:f6:7f:5a:28:10:df:cc:ee:f1:04: e8:f2:9e:87:e4:c5:28:55:b9:8d:44:b9:80:11:91:2e:b1:0c: 87:14:98:b0:b0:72:be:39:d1:4a:7a:c4:4c:c6:3b:74:6e:81: 06:ae:55:1f:ef:75:1c:e2:ea:6b:53:d5:3c:57:ea:6a:c2:18: 1d:f7:70:fe:f5:cc:cb:27:35:22:97:ef:62:09:0d:46:81:1a: 7d:d1:98:18:97:53:c2:d2:b2:5a:a7:6d:79:5e:f1:21:05:d9: 01:01:2f:90:13:05:9c:2c:c5:3d:7e:10:60:1d:9c:59:48:53: db:31:01:f5:d7:f3:ac:82:f8:d0:79:da:2a:5c:4d:0c:16:57: 65:3f:2e:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnrCexJeP9j1tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZTg4MGY2MWUtYmNhNC00MDQzLWI4NzQtOGY5YTM3ZjZiODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTWItBr7MLZj99tifLWr5+MJ0d0Qp00Mi0PL nfvbIzxpRFfO7ue4BObh8QoubqN2o/i5QBTxgGQlUhbPrlS2EUfPt+5zKV1prFrn IYbXL38ejtRDH9+7IwAqX7lwK8Qlf0nU3dfu95OTzjGgbYcK2PCLILRM0onYSrAt AaozXoJsIp4nBPv3dkluYAinR1yOS/Gqs6CYVr8t9+zPN9+s9LJKrMYRLdT/sJ41 15LlPLVKqow5lkGWjQsDo0xUqyzPxRJP2r7UiaGvdaDHMKbcqQdBHXdXIj7V1mOR ThH3HCNJCOGsoIxAXTnTq4v8ovq7wCeKyrLGlZ5OJmfw+PDHIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEO2LdfELMII0OeXKILQixs/4ptVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvODZjZTc5NWQtYzU4NC0z MTBiLTk2OTMtMjFjYjI2YjZlOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU7ROg7P082gtlLGbXZbgJ8Q5I2I4nxFB1kDkoDjKBF9Tv2RK828z4A Ie5SpKOh0K3TGD1mLH3Mq113RIDzsQPK1nUN58JfiVyg/dG+YYZWs67UtkbSf9E1 h0aKFGLvFvtFGmORWDQ2oOOb6SdiaZkEGiDn9n9aKBDfzO7xBOjynofkxShVuY1E uYARkS6xDIcUmLCwcr450Up6xEzGO3RugQauVR/vdRzi6mtT1TxX6mrCGB33cP71 zMsnNSKX72IJDUaBGn3RmBiXU8LSslqnbXle8SEF2QEBL5ATBZwsxT1+EGAdnFlI U9sxAfXX86yC+NB52ipcTQwWV2U/Lh8= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:05 2025 by rpki-client