$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa File: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (raw, json) Hash identifier: mm/Gt8mXHebIFoxO13txrgSnIJ9T3kerEQiUnvoJWvY= Subject key identifier: 6A:78:3F:F1:E7:AB:0F:5B:6E:2A:34:5D:CD:13:6B:2D:06:17:22:42 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584AE4610F03D29F12305A198E00 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 148.59.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:0f:03:d2:9f:12:30:5a:19:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=0fe9588e-1f7d-4e4c-8185-b68dc51fea63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5b:17:da:60:12:06:5f:81:77:4c:39:33:ea: 03:7f:5e:30:50:53:01:f2:f8:75:af:cf:79:09:81: f0:bc:00:19:79:0b:fa:3e:f7:82:3b:93:b3:c6:83: 23:1a:1e:5c:97:ef:02:68:97:c6:fa:ca:6e:a7:08: e9:7f:ad:39:6c:d4:36:d8:63:c6:0d:fa:a0:47:93: b9:ca:9e:7a:a6:f8:3b:3b:32:86:81:48:ab:43:e6: b1:f2:72:ad:7b:16:90:5d:f9:77:87:d3:6f:c0:22: d5:ae:d8:9c:5b:a2:d7:c1:44:45:7e:ab:19:9d:17: bf:d9:72:d4:d4:6b:a6:0b:17:b9:d7:d8:84:eb:9c: 1e:71:3c:07:74:f8:fb:26:d3:d8:0d:9f:e2:0b:8c: 3b:24:f3:7a:77:18:1f:3f:1f:54:6d:79:09:3d:92: 17:b8:7f:3b:b1:b9:fa:53:6b:b1:68:66:e3:19:d1: 7f:10:be:c3:59:eb:70:7b:6d:81:55:09:20:27:a7: b1:6e:0b:46:8e:50:14:82:3c:70:09:9b:20:45:4a: 1f:c9:d1:91:ce:30:25:22:d3:ca:0d:47:b4:bd:64: 92:8f:b8:53:b6:e4:ce:4d:48:bc:85:a8:ab:ff:42: 9c:ef:62:02:24:d6:76:39:52:8e:84:7f:7e:8b:48: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:78:3F:F1:E7:AB:0F:5B:6E:2A:34:5D:CD:13:6B:2D:06:17:22:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: 148.59.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:72:37:42:7f:4c:ab:c5:4c:8a:fa:5c:03:86:cd:7c:e6:53: 0e:92:e5:51:6f:4a:cb:6a:20:d8:ce:16:9e:ab:71:22:72:14: 9d:24:c2:86:f1:90:1b:0e:0d:9b:57:7d:76:ec:8b:49:1b:83: db:02:ca:be:73:5d:2c:be:c4:2e:68:d0:6a:86:8a:0c:e7:d6: 33:29:60:68:bc:19:aa:89:14:af:0b:69:16:13:8f:ba:a7:00: 0b:9a:33:1d:d5:36:51:71:76:e9:d1:44:54:9b:b4:f1:c9:b6: 8e:da:19:c7:cf:84:29:c2:d0:84:12:97:2f:57:41:84:bc:0a: be:06:4e:3a:a5:71:83:7d:c0:73:df:3b:f2:a3:56:25:c5:4a: e5:22:fd:f3:c2:07:fb:1d:3f:a4:8b:b2:e4:03:3a:51:68:98: 41:4b:b9:1a:71:0b:e2:4f:fb:7a:12:c6:43:e1:35:f0:df:11: d5:11:39:2c:c5:1c:b2:40:b0:9b:a4:63:15:9f:2e:a2:5e:ae: 68:dd:f2:99:28:85:98:77:6f:b5:c7:d0:1b:10:37:11:69:41: 36:d9:87:6e:cd:db:6a:6f:fe:de:5b:5d:f6:2a:1e:30:31:dd: 7c:e5:ce:1f:fd:7c:b6:f5:5e:14:9e:6d:7a:53:1e:21:fb:66: 5b:be:4c:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYQ8D0p8SMFoZjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MGZlOTU4OGUtMWY3ZC00ZTRjLTgxODUtYjY4ZGM1MWZlYTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FsX2mASBl+Bd0w5M+oDf14wUFMB8vh1r895 CYHwvAAZeQv6PveCO5OzxoMjGh5cl+8CaJfG+spupwjpf605bNQ22GPGDfqgR5O5 yp56pvg7OzKGgUirQ+ax8nKtexaQXfl3h9NvwCLVrticW6LXwURFfqsZnRe/2XLU 1GumCxe519iE65wecTwHdPj7JtPYDZ/iC4w7JPN6dxgfPx9UbXkJPZIXuH87sbn6 U2uxaGbjGdF/EL7DWetwe22BVQkgJ6exbgtGjlAUgjxwCZsgRUofydGRzjAlItPK DUe0vWSSj7hTtuTOTUi8hair/0Kc72ICJNZ2OVKOhH9+i0ibkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGp4P/Hnqw9bbio0Xc0Tay0GFyJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvMmVkMDRlNjAtMWU5Ny0z NjQ3LWIzOWEtOWE5M2JlOWUzY2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdyN0J/TKvFTIr6XAOGzXzmUw6S5VFvSstqINjOFp6rcSJyFJ0kwobx kBsODZtXfXbsi0kbg9sCyr5zXSy+xC5o0GqGigzn1jMpYGi8GaqJFK8LaRYTj7qn AAuaMx3VNlFxdunRRFSbtPHJto7aGcfPhCnC0IQSly9XQYS8Cr4GTjqlcYN9wHPf O/KjViXFSuUi/fPCB/sdP6SLsuQDOlFomEFLuRpxC+JP+3oSxkPhNfDfEdUROSzF HLJAsJukYxWfLqJermjd8pkohZh3b7XH0BsQNxFpQTbZh27N22pv/t5bXfYqHjAx 3Xzlzh/9fLb1XhSebXpTHiH7Zlu+TE4= -----END CERTIFICATE-----Generated at Wed Aug 20 10:45:30 2025 by rpki-client