$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa File: 8c1d8561-e377-394b-ad52-2f543980d885.roa (raw, json) Hash identifier: egH3akfS2jCDftWd2uJ8CgjUBjGSAUAphq+hCeQuZzA= Subject key identifier: 42:54:C7:2B:F5:0B:F0:00:DA:C1:B5:5E:A3:1E:63:65:C9:C8:94:16 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F432858494733DBA3405C8CBE8B6B7400 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 23154 IP address blocks: 148.164.48.0/23 maxlen: 23 148.164.48.0/24 maxlen: 24 148.164.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:db:a3:40:5c:8c:be:8b:6b:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=f58693b9-73f6-4556-a31e-56e3500ce109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:b5:cf:ba:87:e2:d9:b1:ae:c0:a2:62:d9: 47:d6:c3:c2:0a:a4:d0:5e:60:1b:3d:1f:60:eb:ef: 65:40:ca:02:d0:3a:c7:20:a1:84:73:33:57:03:cf: 47:ed:6d:ed:f3:84:b8:e4:0c:59:db:af:de:e3:13: 7c:fd:24:6b:b8:88:5f:f9:ce:d8:1a:bd:98:ee:ad: 18:a2:d1:cc:a2:fd:66:74:f0:ec:d5:f1:9a:14:af: 68:34:e0:dd:88:34:8b:74:96:dd:9b:af:3c:75:e2: fd:26:93:35:88:26:ff:4b:f7:9f:7c:21:68:89:05: 40:16:5a:8f:38:32:08:32:f9:6b:ef:09:81:8b:ea: 7e:29:50:62:66:10:7f:ae:dc:d0:a9:6b:19:64:8c: 18:94:5c:aa:bf:19:8e:ef:9e:c5:5d:f5:7f:53:3f: a1:65:a1:cf:a6:f3:bf:ef:6b:39:eb:00:d6:14:8e: d5:fb:48:d3:b3:05:7f:d4:8c:b5:af:e5:05:68:e6: 9b:aa:dc:2e:d3:73:9f:ea:c9:84:ae:91:d8:6f:d3: 72:02:11:a1:5f:58:5a:e9:36:51:9e:85:7d:3e:44: 52:74:41:47:6d:bd:44:8e:15:c8:4e:75:a0:c0:5e: 57:b7:57:6b:e6:a4:db:85:85:6c:4c:77:af:32:4a: 3b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:54:C7:2B:F5:0B:F0:00:DA:C1:B5:5E:A3:1E:63:65:C9:C8:94:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:eb:fb:6b:2e:8b:50:38:28:0c:47:12:e2:68:35:3a:b7:32: 30:1d:6d:3f:fa:6d:ad:4e:c1:1f:25:d1:31:a3:9f:23:19:5f: 0e:9c:00:46:ab:62:7c:b4:6e:81:fa:1e:65:2c:2c:08:5a:30: 4d:7d:30:01:c7:16:3d:95:ff:dc:e2:54:b5:44:c0:49:6c:9a: 72:34:e8:e3:eb:20:50:31:88:e8:28:95:da:8e:1d:ce:5a:3e: 9f:e5:fc:9f:27:0b:62:54:69:b0:6f:f4:78:a7:21:41:cb:e4: 7b:5c:b9:ea:15:d4:cd:f7:c6:34:fb:c6:a8:fc:d8:1f:49:f8: ed:d9:cc:85:4a:50:1a:5f:9a:61:e3:66:c6:60:51:0f:b1:18: 35:3a:30:1f:ac:bb:07:39:ef:d7:55:26:10:fb:76:c1:f4:b4: a6:95:89:b7:9d:a7:b0:e1:f4:4b:f0:47:ab:f1:f1:db:c4:96: 27:2f:dc:e1:c3:82:b6:31:09:5e:aa:2e:9e:16:1e:13:92:b1: 32:56:39:03:5c:e9:1b:c4:db:ad:32:84:b0:e9:e6:7b:48:4a: 07:dc:a6:cc:05:77:82:6b:60:79:26:29:ae:c8:c5:1d:0c:c1: f3:97:f7:34:f2:c3:94:52:6f:4c:84:e2:b0:9c:ea:ca:2d:91: 9f:b3:c6:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM9ujQFyMvotrdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZjU4NjkzYjktNzNmNi00NTU2LWEzMWUtNTZlMzUwMGNlMTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8y1z7qH4tmxrsCiYtlH1sPCCqTQXmAbPR9g 6+9lQMoC0DrHIKGEczNXA89H7W3t84S45AxZ26/e4xN8/SRruIhf+c7YGr2Y7q0Y otHMov1mdPDs1fGaFK9oNODdiDSLdJbdm688deL9JpM1iCb/S/effCFoiQVAFlqP ODIIMvlr7wmBi+p+KVBiZhB/rtzQqWsZZIwYlFyqvxmO757FXfV/Uz+hZaHPpvO/ 72s56wDWFI7V+0jTswV/1Iy1r+UFaOabqtwu03Of6smErpHYb9NyAhGhX1ha6TZR noV9PkRSdEFHbb1EjhXITnWgwF5Xt1dr5qTbhYVsTHevMko7HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJUxyv1C/AA2sG1XqMeY2XJyJQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvOGMxZDg1NjEtZTM3Ny0z OTRiLWFkNTItMmY1NDM5ODBkODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlKQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITr+2sui1A4KAxHEuJoNTq3MjAdbT/6ba1OwR8l0TGjnyMZXw6cAEar Yny0boH6HmUsLAhaME19MAHHFj2V/9ziVLVEwElsmnI06OPrIFAxiOgoldqOHc5a Pp/l/J8nC2JUabBv9HinIUHL5HtcueoV1M33xjT7xqj82B9J+O3ZzIVKUBpfmmHj ZsZgUQ+xGDU6MB+suwc579dVJhD7dsH0tKaVibedp7Dh9EvwR6vx8dvElicv3OHD grYxCV6qLp4WHhOSsTJWOQNc6RvE260yhLDp5ntISgfcpswFd4JrYHkmKa7IxR0M wfOX9zTyw5RSb0yE4rCc6sotkZ+zxrA= -----END CERTIFICATE-----Generated at Sun Apr 6 06:04:49 2025 by rpki-client