$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa File: 3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa (raw, json) Hash identifier: km95J2zz1NEa4k4WAEP2oTtJ26vMcBmdgkPyAr4LGxU= Subject key identifier: C5:88:F7:28:25:40:55:40:85:81:A2:AF:F1:AD:F4:0D:71:8B:AA:E4 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F432858494733E26E50FA873CA4C24300 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 23154 IP address blocks: 148.164.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:e2:6e:50:fa:87:3c:a4:c2:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=b428d47f-4db1-4e13-b121-853dcab1a861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d9:a2:72:ab:32:0c:d9:6d:12:56:5f:54:49: c2:1d:c9:f2:45:d4:1a:5e:87:ce:ee:b5:b9:30:25: a4:cd:d2:30:17:bd:e0:18:d1:09:86:96:fa:f5:56: a5:81:68:e0:3e:75:55:b6:55:ec:46:8d:36:18:17: 77:36:d0:da:15:bc:04:3c:32:c1:65:ec:46:37:f8: 26:c2:f8:fd:89:82:89:b6:30:c5:94:9c:3e:e4:aa: 4d:03:35:bd:18:23:e0:f9:5d:0d:60:c5:fa:d0:f4: 93:5a:20:f8:03:43:2c:14:f9:04:df:13:c3:45:2b: 7c:ce:a4:12:c0:42:7d:02:e6:da:0d:38:1d:c8:4b: 49:b4:c9:8c:f8:3e:56:87:05:e0:a9:b7:c4:08:f0: 76:ea:a8:9e:20:23:31:70:fd:43:51:9d:fc:09:0d: 99:e0:58:15:0e:ea:e7:ed:81:8d:b1:91:a2:56:b8: 27:d2:c1:cd:2d:b3:e2:15:35:5d:7e:c3:5b:21:91: a3:fc:38:b1:11:ba:1b:0d:bc:b4:94:4d:e6:90:22: 29:65:b9:7f:bd:ad:c6:ae:d0:f7:2b:e1:97:ad:e9: e0:5d:9d:49:3c:35:64:5e:76:65:bc:80:79:fd:df: 02:af:17:16:dd:75:29:c1:2f:cc:a2:38:37:5e:3a: 73:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:88:F7:28:25:40:55:40:85:81:A2:AF:F1:AD:F4:0D:71:8B:AA:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:38:90:03:74:61:b3:54:b6:d5:58:fe:f7:f4:68:bf:09:c5: 98:72:77:c2:8f:12:67:a1:9d:51:3e:4f:c6:00:5a:ae:d4:99: 28:1b:f9:08:fc:87:8f:00:67:eb:23:a9:b6:bc:d7:2a:1f:2b: 94:c5:2f:26:b9:28:9f:06:10:e5:5a:cb:1b:5c:36:6f:b1:34: d0:d1:15:cb:a3:da:2c:ae:fe:35:69:6b:1b:16:74:4f:e0:8f: a7:3d:73:2b:37:82:c6:64:e5:f8:90:38:44:a0:a7:00:01:93: fb:f2:e6:6d:9a:30:3d:01:c4:a4:43:96:06:04:79:e5:0a:8d: 4b:42:0d:18:4a:20:21:8f:89:13:71:36:8f:92:7c:40:37:0c: d4:c0:5c:31:e1:15:b5:97:85:4d:67:59:8f:31:53:33:6f:59: 15:85:b6:8f:10:a8:7a:82:dd:53:5b:44:b1:29:76:d3:0e:5d: 4b:07:cf:05:67:f9:b9:ce:73:65:81:50:4d:88:77:1a:e0:7c: f3:51:3b:db:3d:8b:88:5b:25:41:cd:ea:d7:5b:f0:7a:3b:75: d4:d9:15:2b:58:4e:5e:2f:28:23:96:4a:aa:f4:40:25:68:09: 40:05:b8:ed:40:ac:c5:0e:ee:b6:34:54:4a:37:85:dd:8a:ee: ec:40:e9:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+JuUPqHPKTCQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk YjQyOGQ0N2YtNGRiMS00ZTEzLWIxMjEtODUzZGNhYjFhODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dmicqsyDNltElZfVEnCHcnyRdQaXofO7rW5 MCWkzdIwF73gGNEJhpb69ValgWjgPnVVtlXsRo02GBd3NtDaFbwEPDLBZexGN/gm wvj9iYKJtjDFlJw+5KpNAzW9GCPg+V0NYMX60PSTWiD4A0MsFPkE3xPDRSt8zqQS wEJ9AubaDTgdyEtJtMmM+D5WhwXgqbfECPB26qieICMxcP1DUZ38CQ2Z4FgVDurn 7YGNsZGiVrgn0sHNLbPiFTVdfsNbIZGj/DixEbobDby0lE3mkCIpZbl/va3GrtD3 K+GXrengXZ1JPDVkXnZlvIB5/d8CrxcW3XUpwS/Mojg3XjpzdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWI9yglQFVAhYGir/Gt9A1xi6rkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvM2IwZTRlYjctMDJiMS0z ODYxLThlODgtNGU4NTQ3Mjc3YjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD84kAN0YbNUttVY/vf0aL8JxZhyd8KPEmehnVE+T8YAWq7UmSgb+Qj8 h48AZ+sjqba81yofK5TFLya5KJ8GEOVayxtcNm+xNNDRFcuj2iyu/jVpaxsWdE/g j6c9cys3gsZk5fiQOESgpwABk/vy5m2aMD0BxKRDlgYEeeUKjUtCDRhKICGPiRNx No+SfEA3DNTAXDHhFbWXhU1nWY8xUzNvWRWFto8QqHqC3VNbRLEpdtMOXUsHzwVn +bnOc2WBUE2IdxrgfPNRO9s9i4hbJUHN6tdb8Ho7ddTZFStYTl4vKCOWSqr0QCVo CUAFuO1ArMUO7rY0VEo3hd2K7uxA6RM= -----END CERTIFICATE-----Generated at Sat Apr 5 12:43:12 2025 by rpki-client