$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa File: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (raw, json) Hash identifier: v43p5DeWsz6071iNdEeUuRrpCRyfYBtfIW+duV/QZwY= Subject key identifier: 0D:F9:2E:6E:62:04:F4:87:22:0C:14:DB:35:2A:7D:EB:D3:75:FB:E9 Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584A1E2AA5678F79169B52857580 Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 14618 IP address blocks: 148.59.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:a5:67:8f:79:16:9b:52:85:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=9d10cacb-7075-4f3b-a028-5c2de77b24e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:86:1e:38:e2:b3:9a:27:88:af:0b:cf:ac:66: 00:94:3f:4c:c7:8b:bb:d0:11:d8:a9:53:2b:a7:29: 24:2b:4a:f1:2a:6c:e0:8a:47:ba:fd:51:ad:46:a4: a3:98:75:3d:83:6e:db:4f:be:2a:17:06:af:1b:1a: 79:2d:f2:a1:d3:ff:76:9c:a4:07:a1:b3:4e:f0:05: a2:e2:78:93:b1:91:32:38:33:02:44:fe:95:47:57: 1e:c8:8a:d3:b5:1e:dd:74:8f:65:2f:ac:e4:68:74: 3b:90:15:ff:7e:44:e2:fb:76:19:3d:11:3b:5b:a8: e0:28:3c:4e:0c:c7:44:e1:17:8f:fd:98:1b:9d:0e: e2:7f:89:29:dc:1a:17:71:9a:57:ad:8e:97:e3:6d: c9:53:01:9b:20:3d:8f:23:b1:63:f3:f4:ac:11:dc: 36:4f:f1:03:e3:a0:88:52:d4:f5:90:39:40:2a:b5: cc:de:4b:c7:8b:b6:df:df:c7:d4:33:93:44:ee:81: 4e:5f:1e:f3:19:fa:ba:5f:e0:71:a0:65:71:19:d1: 6e:73:22:1f:bc:d1:3c:ad:f3:18:64:49:87:91:e9: c8:b4:ff:9b:17:2f:45:9e:70:67:04:a8:c3:f1:d7: bb:a1:31:f9:c3:6d:75:5d:8b:b2:b8:13:96:28:06: 58:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F9:2E:6E:62:04:F4:87:22:0C:14:DB:35:2A:7D:EB:D3:75:FB:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: 148.59.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:3c:31:c5:99:2f:25:6a:cb:ca:21:55:0d:39:09:fb:b6:e5: 46:f6:8a:df:20:34:37:b1:9d:8d:da:7f:f8:3e:2a:39:ed:1b: af:1f:86:b8:19:10:03:4a:e4:54:b8:dd:cc:cf:a6:7c:79:14: db:99:f5:4e:70:ec:db:5c:b9:ef:1b:01:a7:fc:27:70:b2:85: ad:a5:94:82:40:55:10:68:3d:52:fd:fa:0c:38:ce:76:25:76: 29:94:e7:5f:03:c0:ce:36:b9:0a:6a:c4:fe:01:57:6c:a0:b4: 3b:3b:b8:38:86:69:02:e5:0a:b4:c2:a4:f9:71:24:ff:b1:59: 50:48:7d:1e:5a:f8:a4:e2:8e:df:63:8a:ce:63:9f:bf:ac:94: 9e:a5:12:f5:29:68:4e:4c:b9:ef:81:24:a0:7a:7d:b0:8d:52: 0a:99:97:56:ff:83:09:d6:06:ad:88:83:43:83:62:37:ab:5b: 75:89:18:e8:56:53:2b:cd:25:97:e2:2c:c9:53:77:78:d0:8e: cd:14:b0:32:55:c2:34:7c:34:49:58:87:da:20:35:90:1b:d5: 74:ae:6a:2b:8b:59:90:ea:8b:9d:13:c2:9d:72:b7:98:2e:b3: c5:07:0a:81:93:13:94:a3:da:7a:12:52:b0:b0:1d:e8:17:87: b7:6e:ce:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqVnj3kWm1KFdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk OWQxMGNhY2ItNzA3NS00ZjNiLWEwMjgtNWMyZGU3N2IyNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYYeOOKzmieIrwvPrGYAlD9Mx4u70BHYqVMr pykkK0rxKmzgike6/VGtRqSjmHU9g27bT74qFwavGxp5LfKh0/92nKQHobNO8AWi 4niTsZEyODMCRP6VR1ceyIrTtR7ddI9lL6zkaHQ7kBX/fkTi+3YZPRE7W6jgKDxO DMdE4ReP/ZgbnQ7if4kp3BoXcZpXrY6X423JUwGbID2PI7Fj8/SsEdw2T/ED46CI UtT1kDlAKrXM3kvHi7bf38fUM5NE7oFOXx7zGfq6X+BxoGVxGdFucyIfvNE8rfMY ZEmHkenItP+bFy9FnnBnBKjD8de7oTH5w211XYuyuBOWKAZYewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA35Lm5iBPSHIgwU2zUqfevTdfvpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvM2NjNzEzMWQtN2E2MC0z NzEyLTkyZGQtMzUyODAyNjQzNmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA8McWZLyVqy8ohVQ05Cfu25Ub2it8gNDexnY3af/g+KjntG68fhrgZ EANK5FS43czPpnx5FNuZ9U5w7Ntcue8bAaf8J3Cyha2llIJAVRBoPVL9+gw4znYl dimU518DwM42uQpqxP4BV2ygtDs7uDiGaQLlCrTCpPlxJP+xWVBIfR5a+KTijt9j is5jn7+slJ6lEvUpaE5Mue+BJKB6fbCNUgqZl1b/gwnWBq2Ig0ODYjerW3WJGOhW UyvNJZfiLMlTd3jQjs0UsDJVwjR8NElYh9ogNZAb1XSuaiuLWZDqi50Twp1yt5gu s8UHCoGTE5Sj2noSUrCwHegXh7duzqU= -----END CERTIFICATE-----Generated at Mon Jun 16 09:59:43 2025 by rpki-client