$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/114072c7-89f9-3c74-be2e-09dbdcf2e700.roa File: 114072c7-89f9-3c74-be2e-09dbdcf2e700.roa (raw, json) Hash identifier: 5csEkPptx31slS3y0FlrTg2B5ZNzDhauzUr5UXL9xOk= Subject key identifier: 19:2E:6C:5A:C6:4E:A2:96:E9:91:71:3A:B3:69:9B:B0:92:B2:95:72 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F43285848CC7B9FDDD8F3CEDAB612F440 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/114072c7-89f9-3c74-be2e-09dbdcf2e700.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 7764 IP address blocks: 148.129.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:9f:dd:d8:f3:ce:da:b6:12:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=1599412b-dc26-48ac-9485-9036274f3e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:83:c6:04:2c:8b:60:ce:14:8d:e9:b8:c9:2d: e7:7d:40:7e:8a:6e:de:7d:6d:b1:df:46:99:ea:19: 83:25:7f:dd:9f:b0:fb:03:b9:fe:26:37:65:cb:ed: b9:12:a5:2c:a9:94:2a:3a:33:48:b6:ac:da:20:11: 85:9c:6a:25:0a:12:28:8a:dd:05:62:a3:e1:18:55: 67:ad:51:14:34:39:bf:01:5e:a8:49:33:bf:66:f0: cc:2a:79:4c:cc:64:bd:d8:72:76:d9:e9:e8:d7:c3: d7:56:62:39:1c:47:84:95:c4:c5:a6:10:68:68:ca: 41:51:4c:91:56:dc:f9:33:bc:71:3a:63:a6:d9:e8: 1d:39:4d:7d:d9:ce:89:13:1d:ec:43:fd:62:3f:56: 8d:a6:62:1c:f2:82:22:d5:6d:bf:db:38:41:32:44: 44:e3:88:9b:4f:cc:c6:ee:16:58:5e:50:f2:95:8f: ba:5b:ae:67:43:97:7f:09:ff:81:81:bd:18:7a:e7: 5a:c2:f1:83:31:4f:b1:6a:13:b9:81:62:27:f8:c7: 59:23:1c:28:21:da:77:f6:ed:d7:a4:60:7b:58:77: 01:fb:c5:87:dd:c9:c6:09:69:a3:84:0c:e3:53:15: cc:87:f1:e7:a8:fa:79:eb:7e:51:ee:0e:70:bb:3d: 6e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2E:6C:5A:C6:4E:A2:96:E9:91:71:3A:B3:69:9B:B0:92:B2:95:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/114072c7-89f9-3c74-be2e-09dbdcf2e700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 148.129.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f8:fb:84:8d:5b:6e:e0:2f:07:13:79:92:f8:d1:bb:81:d4: 17:6a:ec:08:78:08:df:ac:0a:7f:6a:65:36:bd:69:8b:73:b8: e8:62:22:91:80:58:97:1a:61:77:2c:43:05:40:db:50:fa:69: ec:6e:49:91:d3:60:f5:1a:91:ed:4b:40:9b:9b:63:7f:f1:2f: 5f:79:d9:fc:1d:bc:01:08:89:0f:83:f2:48:1a:1d:37:dc:49: 42:52:7b:1e:fc:15:d0:44:85:f8:14:dc:9d:fa:b0:ff:0a:bf: cc:af:63:93:37:a0:e9:81:3a:74:b5:77:76:bb:b0:f2:8b:cc: 97:81:b1:41:1c:a0:ef:09:de:d7:db:bf:6c:0d:40:61:f1:e0: 3a:04:19:e8:88:c2:26:f9:2e:72:45:34:10:77:32:ad:f1:37: b6:fb:fc:03:27:3d:e9:da:9b:33:7e:92:d0:57:63:fa:44:20: 05:73:67:31:30:13:d8:2b:26:69:4f:60:fd:88:f5:01:0a:f2: 5f:b4:46:24:c3:24:11:78:d2:8f:6d:19:0f:b8:fc:65:ac:e3: 4b:47:1e:53:3a:ce:d0:4a:ff:d9:8f:ec:3c:82:3d:79:c7:c3: 63:1f:8b:61:53:6c:16:c0:04:89:62:c4:c5:3c:b5:19:e6:1f: 5b:23:ee:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5/d2PPO2rYS9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk MTU5OTQxMmItZGMyNi00OGFjLTk0ODUtOTAzNjI3NGYzZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIPGBCyLYM4Ujem4yS3nfUB+im7efW2x30aZ 6hmDJX/dn7D7A7n+Jjdly+25EqUsqZQqOjNItqzaIBGFnGolChIoit0FYqPhGFVn rVEUNDm/AV6oSTO/ZvDMKnlMzGS92HJ22eno18PXVmI5HEeElcTFphBoaMpBUUyR Vtz5M7xxOmOm2egdOU192c6JEx3sQ/1iP1aNpmIc8oIi1W2/2zhBMkRE44ibT8zG 7hZYXlDylY+6W65nQ5d/Cf+Bgb0YeudawvGDMU+xahO5gWIn+MdZIxwoIdp39u3X pGB7WHcB+8WH3cnGCWmjhAzjUxXMh/HnqPp5635R7g5wuz1u3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkubFrGTqKW6ZFxOrNpm7CSspVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvMTE0MDcyYzctODlmOS0z Yzc0LWJlMmUtMDlkYmRjZjJlNzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlIEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP4+4SNW27gLwcTeZL40buB1Bdq7Ah4CN+sCn9qZTa9aYtzuOhiIpGA WJcaYXcsQwVA21D6aexuSZHTYPUake1LQJubY3/xL1952fwdvAEIiQ+D8kgaHTfc SUJSex78FdBEhfgU3J36sP8Kv8yvY5M3oOmBOnS1d3a7sPKLzJeBsUEcoO8J3tfb v2wNQGHx4DoEGeiIwib5LnJFNBB3Mq3xN7b7/AMnPenamzN+ktBXY/pEIAVzZzEw E9grJmlPYP2I9QEK8l+0RiTDJBF40o9tGQ+4/GWs40tHHlM6ztBK/9mP7DyCPXnH w2Mfi2FTbBbABIlixMU8tRnmH1sj7lY= -----END CERTIFICATE-----Generated at Sun Apr 6 04:33:38 2025 by rpki-client