$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/e366a16a-cab0-3fcf-8540-e9a5e01d8b1c.roa File: e366a16a-cab0-3fcf-8540-e9a5e01d8b1c.roa (raw, json) Hash identifier: RtERpJvtMC7z6jXVEovYuHmMqXJyEPUeKuiMQydNz84= Subject key identifier: 25:5D:94:6A:68:4D:B9:D3:86:8E:5E:3A:50:A7:F6:D7:1A:41:71:71 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F432858494733DACAF787C09E022A9380 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/e366a16a-cab0-3fcf-8540-e9a5e01d8b1c.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 23154 IP address blocks: 148.164.0.0/23 maxlen: 23 148.164.0.0/24 maxlen: 24 148.164.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:da:ca:f7:87:c0:9e:02:2a:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=402e5722-8e4f-49d4-b7f2-9b5f925be179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:24:e3:bd:16:ea:d2:f2:b6:06:d5:41:38:e4: ce:a5:b6:9b:5b:00:46:81:64:d6:1c:55:74:41:91: e6:90:dd:f1:c3:12:f2:78:99:fd:65:69:df:5b:1e: dd:72:ed:15:a5:78:98:45:6a:86:3b:df:9a:d8:eb: 7c:95:e4:b4:74:61:fe:05:4d:51:47:b5:0a:80:ea: 74:86:49:0d:cc:07:50:fe:d2:fc:1f:7b:9f:ff:3a: 86:50:27:ed:db:db:0d:56:28:cc:70:dd:6a:5d:db: e4:c0:65:58:c9:9d:65:8c:fb:d1:f0:53:b1:c4:63: 55:dd:b6:d7:53:f3:76:e9:ab:72:cc:04:1c:68:2a: 6d:df:d3:95:39:92:ad:69:d7:cb:b2:6c:50:8b:2c: ed:fd:ad:8e:9d:a5:d3:d5:4b:96:6c:ac:a8:3d:2c: 76:37:24:a5:76:e6:4a:8b:88:d4:47:26:c6:12:95: e7:b2:22:b0:11:00:e2:aa:83:29:4a:84:cf:ee:0c: e4:44:a0:a8:18:b3:17:7d:ec:ec:d4:7a:23:6f:87: 11:33:0a:c6:ca:c3:b3:ce:ae:a0:32:a1:6d:68:25: f2:c8:7e:81:13:f4:d5:d1:ae:83:a5:0c:77:2e:a9: 9b:57:51:72:c1:69:4d:c5:27:a6:d1:65:06:a2:64: 85:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5D:94:6A:68:4D:B9:D3:86:8E:5E:3A:50:A7:F6:D7:1A:41:71:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/e366a16a-cab0-3fcf-8540-e9a5e01d8b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:c8:93:42:75:56:8f:19:9a:bf:97:f9:46:b1:81:d9:d5:64: eb:6e:a1:a6:d6:5c:f1:34:f4:0e:a5:c7:af:42:73:de:87:c9: c0:2f:c2:00:58:b6:33:81:a9:6c:d1:2d:6e:fb:43:73:99:5e: d6:bb:7d:b0:13:02:e7:93:fe:50:5b:70:76:dc:03:a1:81:5d: 28:05:4e:ed:87:f2:73:74:48:64:6e:48:e6:c4:57:61:c5:3c: 56:94:14:d5:f8:cc:5b:da:a7:92:45:c7:ef:33:4a:82:bd:e4: 00:2a:0c:b5:0c:97:78:ec:45:63:4d:33:6c:7c:27:ba:dc:ec: 45:ba:2a:ab:03:c0:5e:8d:8a:17:57:92:c5:f4:f4:87:1a:35: 74:9f:eb:60:26:87:2d:38:0c:ca:41:74:80:bf:a5:07:29:24: c0:42:75:01:06:45:1b:79:c1:91:45:0d:78:89:6c:d1:8e:79: fb:d1:f7:36:8e:ba:41:07:9e:06:31:cb:3a:2c:78:95:f2:7a: 3a:b2:e9:28:43:76:76:4c:30:a1:d2:ce:fd:63:3c:98:12:97: ca:40:9a:28:c6:d9:d4:5a:79:5e:87:32:09:ef:9a:cc:97:8c: af:89:b8:26:cb:aa:6f:0d:e0:ac:58:59:f1:4b:c4:80:c4:f0: fd:72:35:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM9rK94fAngIqk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk NDAyZTU3MjItOGU0Zi00OWQ0LWI3ZjItOWI1ZjkyNWJlMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiTjvRbq0vK2BtVBOOTOpbabWwBGgWTWHFV0 QZHmkN3xwxLyeJn9ZWnfWx7dcu0VpXiYRWqGO9+a2Ot8leS0dGH+BU1RR7UKgOp0 hkkNzAdQ/tL8H3uf/zqGUCft29sNVijMcN1qXdvkwGVYyZ1ljPvR8FOxxGNV3bbX U/N26atyzAQcaCpt39OVOZKtadfLsmxQiyzt/a2OnaXT1UuWbKyoPSx2NySlduZK i4jURybGEpXnsiKwEQDiqoMpSoTP7gzkRKCoGLMXfezs1Hojb4cRMwrGysOzzq6g MqFtaCXyyH6BE/TV0a6DpQx3LqmbV1FywWlNxSem0WUGomSFgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVdlGpoTbnTho5eOlCn9tcaQXFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvZTM2NmExNmEtY2FiMC0z ZmNmLTg1NDAtZTlhNWUwMWQ4YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlKQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvIk0J1Vo8Zmr+X+UaxgdnVZOtuoabWXPE09A6lx69Cc96HycAvwgBY tjOBqWzRLW77Q3OZXta7fbATAueT/lBbcHbcA6GBXSgFTu2H8nN0SGRuSObEV2HF PFaUFNX4zFvap5JFx+8zSoK95AAqDLUMl3jsRWNNM2x8J7rc7EW6KqsDwF6NihdX ksX09IcaNXSf62Amhy04DMpBdIC/pQcpJMBCdQEGRRt5wZFFDXiJbNGOefvR9zaO ukEHngYxyzoseJXyejqy6ShDdnZMMKHSzv1jPJgSl8pAmijG2dRaeV6HMgnvmsyX jK+JuCbLqm8N4KxYWfFLxIDE8P1yNfU= -----END CERTIFICATE-----Generated at Sat Apr 5 12:28:38 2025 by rpki-client