$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/3cc847b9-4797-32f2-9e8a-55b4b5fdfc20.roa File: 3cc847b9-4797-32f2-9e8a-55b4b5fdfc20.roa (raw, json) Hash identifier: Bl1Sp2PiAeMXgrufsJFwfmP3+rwsfP8BjVoKkxRuvs4= Subject key identifier: 90:42:C2:8F:EF:74:21:29:7A:0B:24:6D:95:D8:14:71:E6:7A:BE:8F Certificate issuer: /CN=adce5ac3-c559-48fc-8577-223c6ed88a3e Certificate serial: 010D0C9F432858497279B19EE39B4929D5ACD7C0 Authority key identifier: 9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/3cc847b9-4797-32f2-9e8a-55b4b5fdfc20.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 21527 IP address blocks: 148.59.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:b1:9e:e3:9b:49:29:d5:ac:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adce5ac3-c559-48fc-8577-223c6ed88a3e Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=1799efbf-4ea5-4ad0-a3c8-b6462247191f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a4:fa:02:1a:dc:b7:fc:01:d6:7a:f3:8a:65: 12:79:e0:2b:d0:5a:e7:d3:85:b6:62:52:02:35:80: 5c:5b:d1:ce:fc:15:de:5c:e2:c4:5d:13:73:6f:46: 70:aa:a0:e4:7b:36:ab:f5:6f:11:73:7c:71:a8:fa: cc:f6:e2:e1:39:5a:01:e2:04:e6:01:41:93:f3:af: b4:0f:c1:d1:60:50:e7:34:eb:42:af:6a:0d:27:ef: e7:f2:08:72:fc:8e:bf:11:61:ad:04:5f:87:48:74: 62:32:e2:98:50:ae:0b:32:b9:34:5e:d2:e9:5a:e2: 84:a6:b3:ec:56:4b:5b:83:3b:be:0f:bf:3c:f3:b4: 5e:a4:df:36:4a:d3:d8:08:35:1b:0e:9d:18:84:3f: 2e:ba:32:ff:96:de:5b:2d:0c:09:61:be:6a:c7:cd: e4:1c:64:48:c0:e1:2a:54:8a:3c:36:80:66:56:da: 6e:2c:d6:13:aa:26:91:85:9d:6d:94:1d:28:88:bf: e2:04:79:81:76:71:c7:cb:52:40:58:04:94:b9:97: cc:8a:34:ac:68:f0:90:05:8c:b6:f3:75:b1:ac:ae: f6:18:d8:c1:ea:9e:08:73:f8:08:d4:6e:9d:a9:cb: f3:e3:f7:91:e3:a5:fb:01:fc:5a:04:a5:fc:30:aa: 43:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:42:C2:8F:EF:74:21:29:7A:0B:24:6D:95:D8:14:71:E6:7A:BE:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/3cc847b9-4797-32f2-9e8a-55b4b5fdfc20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl X509v3 Authority Key Identifier: keyid:9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer sbgp-ipAddrBlock: critical IPv4: 148.59.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:dc:60:88:69:57:5a:aa:60:37:32:d1:4f:aa:b7:b5:2e:08: 29:ca:bc:f3:e0:a2:70:55:56:c9:b4:50:e4:ce:91:3b:75:27: 51:e7:01:12:3e:eb:7a:c1:6f:70:52:54:7f:16:a9:2c:11:68: 1b:15:90:06:45:18:4d:c0:86:e9:d4:86:49:2c:13:2c:2f:ac: 04:17:e4:17:35:ef:14:34:b7:92:56:3a:9c:60:34:71:5a:ca: 1a:33:76:82:cd:72:e7:f4:c8:0b:8f:74:49:4a:40:9f:ac:1c: 7a:5f:65:e1:89:4c:ca:8d:fa:2b:86:9e:28:2e:85:be:df:42: 70:df:d3:37:b5:9a:c5:fb:6e:b8:dd:75:08:9f:38:ec:48:b2: df:4f:b3:3b:55:3a:79:e1:13:ed:0f:fe:50:eb:86:67:34:de: 12:ea:75:0b:36:e1:96:0c:6f:37:d2:f8:b6:80:26:89:a3:36: 6e:4a:92:3e:ce:31:be:f8:97:2d:8e:37:00:69:04:e5:7d:69: ec:44:4b:12:1f:9a:e3:e3:65:05:f6:79:80:36:b3:13:47:65: c3:10:30:d0:12:42:ff:66:6d:63:81:71:a6:e3:6f:84:c6:c1: e2:de:2c:3d:2b:9f:21:88:2d:ba:71:bb:25:bd:00:df:3a:ce: e4:4d:a8:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyebGe45tJKdWs18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRjZTVhYzMtYzU1OS00OGZjLTg1NzctMjIzYzZlZDg4 YTNlMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk MTc5OWVmYmYtNGVhNS00YWQwLWEzYzgtYjY0NjIyNDcxOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaT6Ahrct/wB1nrzimUSeeAr0Frn04W2YlIC NYBcW9HO/BXeXOLEXRNzb0ZwqqDkezar9W8Rc3xxqPrM9uLhOVoB4gTmAUGT86+0 D8HRYFDnNOtCr2oNJ+/n8ghy/I6/EWGtBF+HSHRiMuKYUK4LMrk0XtLpWuKEprPs Vktbgzu+D78887RepN82StPYCDUbDp0YhD8uujL/lt5bLQwJYb5qx83kHGRIwOEq VIo8NoBmVtpuLNYTqiaRhZ1tlB0oiL/iBHmBdnHHy1JAWASUuZfMijSsaPCQBYy2 83WxrK72GNjB6p4Ic/gI1G6dqcvz4/eR46X7AfxaBKX8MKpDDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBCwo/vdCEpegskbZXYFHHmer6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZGNl NWFjMy1jNTU5LTQ4ZmMtODU3Ny0yMjNjNmVkODhhM2UvM2NjODQ3YjktNDc5Ny0z MmYyLTllOGEtNTViNGI1ZmRmYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWRjZTVhYzMtYzU1OS00OGZjLTg1 NzctMjIzYzZlZDg4YTNlL2FkY2U1YWMzLWM1NTktNDhmYy04NTc3LTIyM2M2ZWQ4 OGEzZS5jcmwwHwYDVR0jBBgwFoAUmhnasHlgX4KJItHBGKHq+9J/ZmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZGNlNWFjMy1jNTU5LTQ4ZmMtODU3Ny0yMjNj NmVkODhhM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3cYIhpV1qqYDcy0U+qt7UuCCnKvPPgonBVVsm0UOTOkTt1J1HnARI+ 63rBb3BSVH8WqSwRaBsVkAZFGE3AhunUhkksEywvrAQX5Bc17xQ0t5JWOpxgNHFa yhozdoLNcuf0yAuPdElKQJ+sHHpfZeGJTMqN+iuGniguhb7fQnDf0ze1msX7brjd dQifOOxIst9PsztVOnnhE+0P/lDrhmc03hLqdQs24ZYMbzfS+LaAJomjNm5Kkj7O Mb74ly2ONwBpBOV9aexESxIfmuPjZQX2eYA2sxNHZcMQMNASQv9mbWOBcabjb4TG weLeLD0rnyGILbpxuyW9AN86zuRNqNA= -----END CERTIFICATE-----Generated at Sat Apr 12 00:49:30 2025 by rpki-client