$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa File: f43e8308-d375-3574-bde0-f0f8e725d68c.roa (raw, json) Hash identifier: 2aSxw10xygM6+jkBf+Ylwv1Mzqb52JDyT7KyKDLNUo8= Subject key identifier: A4:D1:41:42:20:B9:62:C4:1F:F0:00:45:4F:2B:15:5F:DE:30:1E:69 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F432858494733E25BDB52547A529BBD00 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 23154 IP address blocks: 148.164.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:e2:5b:db:52:54:7a:52:9b:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=1cbc3577-20bf-44ba-b009-cd59848d2d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:36:7e:12:aa:45:25:eb:aa:af:5b:22:ed:70: c1:29:9b:de:97:3c:ef:a1:24:06:77:70:a9:cb:61: 45:09:83:13:b8:1f:fb:19:eb:d4:2f:fa:03:f8:c9: 03:12:9a:71:a5:f6:9f:2e:3c:81:fc:e5:2d:5f:be: e5:e6:e9:d6:13:14:ef:ff:b3:41:82:b7:d4:03:96: 18:42:32:a9:be:0d:32:a7:e1:95:47:a6:a5:20:a3: 3f:ad:fc:e1:1a:e1:54:14:02:4d:e6:60:d6:8d:ca: 4e:9a:76:1b:da:f7:f1:50:43:36:cd:9e:b1:36:24: 83:cc:cb:06:28:eb:65:4d:37:4a:67:ec:2e:76:a7: ef:2f:1f:9e:ed:16:ae:08:97:aa:b8:3f:f6:ad:8e: 71:d6:36:01:37:20:aa:4e:73:af:bb:58:49:9b:67: e5:89:e4:a5:31:9c:25:fe:ca:57:b6:d2:97:36:22: e1:4f:e0:76:d8:b9:dc:91:95:c2:99:0f:47:01:ee: 74:1c:d3:8c:0f:9e:44:e0:07:f9:1e:c3:08:b0:5e: 79:88:60:f9:b0:75:61:94:b5:12:34:ed:df:3e:78: 3e:46:4d:14:17:29:de:5f:8f:19:f6:dd:42:34:f7: 3e:c0:44:e5:0c:74:ac:59:f4:cf:14:9d:89:6e:0a: 73:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D1:41:42:20:B9:62:C4:1F:F0:00:45:4F:2B:15:5F:DE:30:1E:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:7c:5e:b3:6d:07:1a:f2:6c:f2:9f:a3:08:19:d0:b7:1d:9d: d6:92:3a:53:a7:65:f0:e9:54:70:64:0d:cd:d2:f5:6c:58:9c: c9:10:1c:ea:51:48:30:7c:c9:0f:9c:63:b4:5e:fd:b1:8a:82: 74:b0:37:92:d2:1d:7e:de:4e:37:7a:66:0a:93:63:a8:8e:a2: 7b:b6:d0:3e:bc:8c:35:e3:c2:f1:7a:d6:3a:cb:18:43:62:27: 44:7c:0e:98:db:9f:55:a5:b6:90:44:56:fb:91:87:2a:98:4e: e6:0c:58:4f:ad:85:a1:91:f7:78:2a:dc:c7:a9:ac:bf:cf:f6: 87:ee:cd:d2:22:2d:d3:6b:f1:25:cc:46:39:17:db:1d:d6:f3: bc:5f:96:f4:25:6d:f7:ed:80:ab:94:59:89:1e:df:6b:23:ab: 51:1f:ac:51:43:31:bf:22:d4:0e:7d:19:02:c9:6b:c1:ef:e1: c0:b5:23:48:d6:ff:dd:24:eb:67:42:dc:ea:c7:e7:2b:0c:78: c0:84:3a:49:f3:30:a5:8d:0b:4a:09:17:bc:51:9d:9c:eb:66: 4a:38:7d:f7:24:7f:ac:a7:7f:39:f1:ce:ca:14:85:07:9d:9d: e7:40:73:28:87:8a:2a:79:83:f5:6b:52:fb:5d:76:1d:1d:e3: 30:86:dd:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+Jb21JUelKbvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk MWNiYzM1NzctMjBiZi00NGJhLWIwMDktY2Q1OTg0OGQyZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizZ+EqpFJeuqr1si7XDBKZvelzzvoSQGd3Cp y2FFCYMTuB/7GevUL/oD+MkDEppxpfafLjyB/OUtX77l5unWExTv/7NBgrfUA5YY QjKpvg0yp+GVR6alIKM/rfzhGuFUFAJN5mDWjcpOmnYb2vfxUEM2zZ6xNiSDzMsG KOtlTTdKZ+wudqfvLx+e7RauCJequD/2rY5x1jYBNyCqTnOvu1hJm2flieSlMZwl /spXttKXNiLhT+B22LnckZXCmQ9HAe50HNOMD55E4Af5HsMIsF55iGD5sHVhlLUS NO3fPng+Rk0UFyneX48Z9t1CNPc+wETlDHSsWfTPFJ2JbgpzFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTRQUIguWLEH/AARU8rFV/eMB5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvZjQzZTgzMDgtZDM3NS0z NTc0LWJkZTAtZjBmOGU3MjVkNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt8XrNtBxrybPKfowgZ0LcdndaSOlOnZfDpVHBkDc3S9WxYnMkQHOpR SDB8yQ+cY7Re/bGKgnSwN5LSHX7eTjd6ZgqTY6iOonu20D68jDXjwvF61jrLGENi J0R8Dpjbn1WltpBEVvuRhyqYTuYMWE+thaGR93gq3MeprL/P9ofuzdIiLdNr8SXM RjkX2x3W87xflvQlbfftgKuUWYke32sjq1EfrFFDMb8i1A59GQLJa8Hv4cC1I0jW /90k62dC3OrH5ysMeMCEOknzMKWNC0oJF7xRnZzrZko4ffckf6ynfznxzsoUhQed nedAcyiHiip5g/VrUvtddh0d4zCG3UE= -----END CERTIFICATE-----Generated at Sat Apr 5 12:37:18 2025 by rpki-client