$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa File: 725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa (raw, json) Hash identifier: ZxYg+GRg47aBYDJLlICoB6wOvFCW8cZ5Qk/NgMpfNxE= Subject key identifier: AE:22:D0:AA:8C:37:BF:5B:CD:00:F9:FF:ED:4A:B7:EB:D9:5C:AA:44 Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283 Certificate serial: 010D0C9F4328584953C41CDE58555E7315F08B40 Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 46165 IP address blocks: 148.59.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:1c:de:58:55:5e:73:15:f0:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=773864d7-0b93-436a-b629-16734f85476f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4d:90:3e:2a:f7:07:ec:ae:84:24:16:f3:dd: c2:45:03:3c:a3:98:12:0f:38:6b:8d:ec:d4:ce:54: 08:f7:d5:85:e0:41:ea:9e:d0:e3:2c:3f:ce:42:17: 0b:78:83:fa:36:05:08:c0:47:fa:25:f8:7e:3a:5e: 54:b5:f6:29:12:94:62:5f:1a:b7:ee:8c:63:ab:e3: fc:22:a9:ec:5f:d0:9f:e9:6e:34:f1:74:d2:d6:63: 55:5f:79:76:af:3a:60:8c:84:29:72:d7:0f:5f:23: 22:00:ac:f2:56:14:4b:83:36:43:1c:69:2c:67:7c: da:5e:09:23:24:55:42:35:11:24:b9:09:bf:fb:e4: e6:eb:07:b6:ef:e5:75:ac:c8:1b:09:aa:3c:e8:c7: bb:29:9d:8b:72:58:14:31:b0:83:c0:5e:9e:6c:3a: 89:4d:a6:ca:18:d0:8f:58:e7:c1:da:3f:7d:d0:6d: ba:68:f1:f2:ab:a6:14:88:d1:e3:1e:43:6b:65:0e: c7:21:14:d8:e9:c8:d8:95:68:2e:f0:02:6a:64:96: 30:d0:d2:67:a2:e6:bf:ab:3c:5c:05:25:9b:21:58: f3:55:d0:6a:82:f3:1e:d9:f5:0e:c4:75:07:8b:3f: 98:67:c8:7f:af:4c:8a:8d:9d:12:df:3d:df:7d:2a: 09:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:22:D0:AA:8C:37:BF:5B:CD:00:F9:FF:ED:4A:B7:EB:D9:5C:AA:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl X509v3 Authority Key Identifier: keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer sbgp-ipAddrBlock: critical IPv4: 148.59.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e6:cd:9c:7a:f5:79:51:e0:bf:62:b7:8e:3f:b3:99:c9:38: eb:09:8d:9a:38:eb:35:3a:9b:fa:32:07:fa:5e:94:7c:8d:69: 22:e9:e4:06:17:ff:2e:51:7c:9d:04:19:44:81:b5:d4:cd:bc: a4:d6:13:f7:63:69:04:0f:4d:15:61:44:53:b1:ad:6d:a6:31: ec:74:6a:75:33:6e:23:80:3d:fa:90:a0:25:b6:ea:01:06:18: 6e:59:3e:49:a7:b7:66:ab:af:bd:e6:1b:ba:05:bc:41:35:bb: f0:26:00:91:21:04:6c:ec:46:8b:43:02:6d:1c:94:bb:47:1d: 83:37:16:4e:e4:d7:6c:67:17:78:62:d1:cc:be:e1:13:b5:e3: 77:da:93:c8:b1:0e:29:9f:12:40:c4:78:d2:80:3f:53:f8:6a: e0:03:a7:b0:ca:93:92:a4:f4:63:4a:95:cb:1e:39:2e:1b:0b: 12:be:5b:fd:4d:d0:48:44:55:71:82:74:e1:2e:1d:29:0b:a8: 83:82:fc:e6:7a:e5:ec:90:db:cf:37:32:2c:12:b0:1e:89:3a: 3a:0e:47:31:9a:ca:f0:5c:d0:e1:cb:28:e7:82:b3:bb:d0:88: 94:c7:2e:90:e9:89:2d:bf:6e:4c:b3:86:9e:4f:be:9d:52:2c: 17:b0:16:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBzeWFVecxXwi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw MjgzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NzczODY0ZDctMGI5My00MzZhLWI2MjktMTY3MzRmODU0NzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE2QPir3B+yuhCQW893CRQM8o5gSDzhrjezU zlQI99WF4EHqntDjLD/OQhcLeIP6NgUIwEf6Jfh+Ol5UtfYpEpRiXxq37oxjq+P8 IqnsX9Cf6W408XTS1mNVX3l2rzpgjIQpctcPXyMiAKzyVhRLgzZDHGksZ3zaXgkj JFVCNREkuQm/++Tm6we27+V1rMgbCao86Me7KZ2LclgUMbCDwF6ebDqJTabKGNCP WOfB2j990G26aPHyq6YUiNHjHkNrZQ7HIRTY6cjYlWgu8AJqZJYw0NJnoua/qzxc BSWbIVjzVdBqgvMe2fUOxHUHiz+YZ8h/r0yKjZ0S3z3ffSoJbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4i0KqMN79bzQD5/+1Kt+vZXKpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1 OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvNzI1ZTQ1ZmUtZjAwYi0z OWIyLWE5ZGYtMmEzNGU5YjBhMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDuPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvmzZx69XlR4L9it44/s5nJOOsJjZo46zU6m/oyB/pelHyNaSLp5AYX /y5RfJ0EGUSBtdTNvKTWE/djaQQPTRVhRFOxrW2mMex0anUzbiOAPfqQoCW26gEG GG5ZPkmnt2arr73mG7oFvEE1u/AmAJEhBGzsRotDAm0clLtHHYM3Fk7k12xnF3hi 0cy+4RO143fak8ixDimfEkDEeNKAP1P4auADp7DKk5Kk9GNKlcseOS4bCxK+W/1N 0EhEVXGCdOEuHSkLqIOC/OZ65eyQ2883MiwSsB6JOjoORzGayvBc0OHLKOeCs7vQ iJTHLpDpiS2/bkyzhp5Pvp1SLBewFow= -----END CERTIFICATE-----Generated at Fri Apr 11 23:43:45 2025 by rpki-client