$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a36da157-b4f8-3fa1-861a-594dc015fe56.roa File: a36da157-b4f8-3fa1-861a-594dc015fe56.roa (raw, json) Hash identifier: KrE+Gy9j/ttYvbxfwONuG/wGwv7ikypM1OTM14HCU9M= Subject key identifier: F0:3A:1B:BC:B4:07:76:65:B7:62:C2:82:95:EE:24:7B:F4:F4:08:39 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848BBBB7EE8DA19D86255277600 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a36da157-b4f8-3fa1-861a-594dc015fe56.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 64267 IP address blocks: 148.59.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:7e:e8:da:19:d8:62:55:27:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=0a5ccf88-57f3-4b20-a222-e453fd85cd44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ee:4b:dc:4c:17:6f:d7:20:7e:f0:ee:dc:4a: 6c:ee:1d:f0:cc:df:be:8f:5c:49:d8:c9:f9:10:01: dd:47:2e:93:58:fd:a0:7c:0f:f7:19:bd:15:4d:d7: aa:35:ca:ff:0e:27:26:bd:cc:14:51:9a:04:f0:91: b2:9c:af:de:fb:8a:08:47:b8:c1:4f:d2:94:dc:9e: 3c:a5:7d:73:16:ec:92:c0:a3:5b:1f:60:b5:9c:57: ba:a6:20:be:61:36:cc:f7:ce:79:fd:29:01:90:05: 71:72:56:8e:04:67:22:95:9e:5f:46:d5:d1:a5:0e: ab:42:09:b4:1d:cc:1a:e9:1e:d9:d7:b4:36:5c:32: 0e:6d:37:a6:8e:25:49:93:4d:71:46:ff:71:8e:74: ca:bf:2d:f9:6d:b6:22:ab:a9:76:d6:e1:c5:22:5e: 33:24:3b:6c:74:f8:1d:ec:9c:29:ff:8f:c5:31:96: 0c:80:a0:1f:73:ba:37:c7:e6:87:43:8b:23:42:cb: 20:e4:79:6c:30:4e:33:f0:e6:d7:10:6c:a8:d0:84: c2:b2:1c:80:60:5d:e1:08:1b:ca:d1:28:21:28:46: aa:68:60:6e:7a:52:6a:ae:0f:ba:d1:68:10:f2:d5: fc:fb:8d:a8:91:ae:55:1e:e7:c0:49:9a:f3:6c:44: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3A:1B:BC:B4:07:76:65:B7:62:C2:82:95:EE:24:7B:F4:F4:08:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a36da157-b4f8-3fa1-861a-594dc015fe56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 148.59.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:30:95:89:64:da:3b:cf:35:f2:f7:5d:f6:51:b1:b1:62:83: 73:9e:9b:60:b0:2b:88:2b:43:4b:ad:dc:d1:ff:1e:d7:97:a6: a3:f3:2b:d9:9c:dc:43:de:53:e0:e6:35:21:5c:ea:f1:2b:4e: 68:f9:0a:af:10:a5:87:98:e1:00:58:6f:6a:f4:1e:5e:e1:f8: ce:a0:f7:4e:0f:f2:0b:48:56:85:05:62:b0:90:a1:de:76:02: ef:b1:81:2f:b4:95:fb:a7:f2:d7:54:fd:c1:0b:db:ff:cc:b5: ff:5b:20:05:37:19:dc:31:bf:97:54:73:aa:77:8e:99:72:a3: 07:6a:bf:08:e7:0b:6e:c0:86:a9:fd:4e:b6:0f:25:2a:23:a6: b4:b1:95:18:ba:42:e0:0a:a3:72:7d:5b:8d:75:4e:6f:0c:53: 8d:58:5f:20:e6:ae:0a:83:e2:ef:3f:45:58:15:78:f3:b1:d6: 88:d9:02:fd:47:e3:16:b1:2f:3b:17:c9:2a:bb:2e:6b:45:1f: bd:b9:c3:4a:96:3b:b3:d9:87:fe:6a:a2:09:34:f2:e5:88:55: a3:46:51:2c:4c:d3:b3:d1:e0:85:35:62:b5:47:a8:10:22:88: e3:40:12:02:31:bd:20:0a:aa:67:73:d5:41:50:d0:c2:66:74: 7e:54:b5:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u37o2hnYYlUndgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk MGE1Y2NmODgtNTdmMy00YjIwLWEyMjItZTQ1M2ZkODVjZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO5L3EwXb9cgfvDu3Eps7h3wzN++j1xJ2Mn5 EAHdRy6TWP2gfA/3Gb0VTdeqNcr/DicmvcwUUZoE8JGynK/e+4oIR7jBT9KU3J48 pX1zFuySwKNbH2C1nFe6piC+YTbM9855/SkBkAVxclaOBGcilZ5fRtXRpQ6rQgm0 Hcwa6R7Z17Q2XDIObTemjiVJk01xRv9xjnTKvy35bbYiq6l21uHFIl4zJDtsdPgd 7Jwp/4/FMZYMgKAfc7o3x+aHQ4sjQssg5HlsME4z8ObXEGyo0ITCshyAYF3hCBvK 0SghKEaqaGBuelJqrg+60WgQ8tX8+42oka5VHufASZrzbERzhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA6G7y0B3Zlt2LCgpXuJHv09Ag5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYTM2ZGExNTctYjRmOC0z ZmExLTg2MWEtNTk0ZGMwMTVmZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDuSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAswlYlk2jvPNfL3XfZRsbFig3Oem2CwK4grQ0ut3NH/HteXpqPzK9mc 3EPeU+DmNSFc6vErTmj5Cq8QpYeY4QBYb2r0Hl7h+M6g904P8gtIVoUFYrCQod52 Au+xgS+0lfun8tdU/cEL2//Mtf9bIAU3Gdwxv5dUc6p3jplyowdqvwjnC27Ahqn9 TrYPJSojprSxlRi6QuAKo3J9W411Tm8MU41YXyDmrgqD4u8/RVgVePOx1ojZAv1H 4xaxLzsXySq7LmtFH725w0qWO7PZh/5qogk08uWIVaNGUSxM07PR4IU1YrVHqBAi iONAEgIxvSAKqmdz1UFQ0MJmdH5UtaQ= -----END CERTIFICATE-----Generated at Sat Apr 5 10:30:31 2025 by rpki-client