$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/1eea4eac-6dad-36cf-b5b6-f87a155ee31c.roa File: 1eea4eac-6dad-36cf-b5b6-f87a155ee31c.roa (raw, json) Hash identifier: tByp6DhZ9LfjLNXvqALDLeVPsUmPSZFrJl2kQT6lrOY= Subject key identifier: 37:2E:CA:58:DA:9A:A1:A5:21:0C:54:D3:FA:DC:0E:83:5B:37:72:28 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F43285848CC7B9FAFC7BB7A7224E8E680 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/1eea4eac-6dad-36cf-b5b6-f87a155ee31c.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 7764 IP address blocks: 148.129.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:9f:af:c7:bb:7a:72:24:e8:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=063f3571-bf07-4b2d-9dcf-4f1be5379650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9b:57:05:d0:37:6e:e9:a3:c0:d5:63:08:e5: 63:71:28:f9:84:98:0d:4d:cc:c0:b7:1d:2e:e0:82: 4e:93:1f:98:6b:db:d1:d3:81:84:5f:99:18:4f:47: 96:45:b2:9d:90:ab:8d:79:ae:46:7e:e1:9c:36:33: a1:1d:a4:21:26:6c:02:b1:d9:a9:ec:67:77:15:96: c7:8c:d8:74:af:4f:a9:ff:5a:4b:12:97:e2:09:45: 13:6f:11:6a:74:70:70:90:e0:71:9c:ad:cf:12:38: 92:f9:95:16:43:39:70:4e:a3:86:1e:f1:f4:5b:d7: 16:0b:2e:55:5a:73:f9:9b:54:bc:89:c7:10:e6:8a: bf:e5:d1:ce:18:27:ba:b0:fa:38:7c:97:2a:51:b3: d9:98:08:96:db:97:1c:f8:bb:fb:b7:63:90:ca:21: fc:5a:f9:68:7f:d6:10:b7:5b:33:bf:b9:2a:42:61: b8:00:2f:d6:f1:4d:2e:50:50:94:55:b1:56:ca:02: 76:7e:49:d1:61:ac:d3:c7:33:55:44:a8:e6:bd:6b: e6:8b:05:ed:80:24:b5:cd:2c:03:10:f7:4d:b4:d3: 03:4d:e0:09:da:c7:5a:ef:7b:33:20:d4:fb:40:f1: 72:82:45:49:20:ef:bd:42:a8:a3:75:93:2f:6f:51: 84:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2E:CA:58:DA:9A:A1:A5:21:0C:54:D3:FA:DC:0E:83:5B:37:72:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/1eea4eac-6dad-36cf-b5b6-f87a155ee31c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 148.129.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:7b:04:e0:e9:af:f0:81:9f:64:1b:c3:bc:58:f4:b7:19:57: 8f:a8:3d:c2:db:21:ba:f9:7c:cb:0a:b1:9e:f3:70:7a:b2:07: 47:e3:ba:66:93:e0:26:1a:ef:df:15:f9:4f:63:db:4a:c7:04: bc:70:6e:57:ce:c9:d4:6f:1f:ff:91:a0:35:88:2b:59:c2:76: 94:de:b5:ab:d0:d9:be:3c:80:76:24:a2:34:e5:e3:aa:c4:f8: 56:af:f7:59:99:1d:51:b2:b1:8c:9e:65:75:fb:c7:49:1b:f0: 15:10:ae:a4:a6:f0:05:8e:e1:5c:d2:b3:c0:13:61:17:3c:53: 1a:0a:85:24:67:fe:48:8f:dc:f9:6c:bf:d6:91:bf:ef:c2:26: 6f:1c:84:f8:6b:7f:ad:39:1a:63:97:ed:fe:00:ec:07:83:c4: 8f:53:34:4c:92:59:fc:de:3d:58:18:72:55:f1:b3:5d:82:94: e9:dc:22:28:df:7b:07:3c:2e:97:38:b2:3b:64:a4:2c:10:b7: e6:b8:af:5f:22:f9:4a:69:76:70:7a:50:e2:88:02:4e:46:bb: b3:87:d0:cb:bf:04:de:b8:84:99:15:c6:f4:6a:21:4c:36:71: 15:04:91:96:90:4a:79:85:8c:27:63:14:a4:4d:af:1c:b5:35: fb:2d:35:6b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjMe5+vx7t6ciTo5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk MDYzZjM1NzEtYmYwNy00YjJkLTlkY2YtNGYxYmU1Mzc5NjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJtXBdA3bumjwNVjCOVjcSj5hJgNTczAtx0u 4IJOkx+Ya9vR04GEX5kYT0eWRbKdkKuNea5GfuGcNjOhHaQhJmwCsdmp7Gd3FZbH jNh0r0+p/1pLEpfiCUUTbxFqdHBwkOBxnK3PEjiS+ZUWQzlwTqOGHvH0W9cWCy5V WnP5m1S8iccQ5oq/5dHOGCe6sPo4fJcqUbPZmAiW25cc+Lv7t2OQyiH8Wvlof9YQ t1szv7kqQmG4AC/W8U0uUFCUVbFWygJ2fknRYazTxzNVRKjmvWvmiwXtgCS1zSwD EPdNtNMDTeAJ2sda73szINT7QPFygkVJIO+9QqijdZMvb1GEHwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDcuyljamqGlIQxU0/rcDoNbN3IoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvMWVlYTRlYWMtNmRhZC0z NmNmLWI1YjYtZjg3YTE1NWVlMzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlIEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPXsE4Omv8IGfZBvDvFj0txlXj6g9wtshuvl8ywqxnvNwerIHR+O6ZpPg Jhrv3xX5T2PbSscEvHBuV87J1G8f/5GgNYgrWcJ2lN61q9DZvjyAdiSiNOXjqsT4 Vq/3WZkdUbKxjJ5ldfvHSRvwFRCupKbwBY7hXNKzwBNhFzxTGgqFJGf+SI/c+Wy/ 1pG/78ImbxyE+Gt/rTkaY5ft/gDsB4PEj1M0TJJZ/N49WBhyVfGzXYKU6dwiKN97 BzwulziyO2SkLBC35rivXyL5Sml2cHpQ4ogCTka7s4fQy78E3riEmRXG9GohTDZx FQSRlpBKeYWMJ2MUpE2vHLU1+y01aw== -----END CERTIFICATE-----Generated at Sat Apr 5 20:16:21 2025 by rpki-client