$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/81bb65a3-069f-3f93-a8c2-2b32b151491a.roa File: 81bb65a3-069f-3f93-a8c2-2b32b151491a.roa (raw, json) Hash identifier: YdmWS+joWCmCjPNLnEC9+UQIcmn1TR/Ndtfpnc4jZdY= Subject key identifier: BB:54:96:70:C5:AE:B4:5B:BA:DC:55:AB:DA:B5:D2:6D:14:29:20:AB Certificate issuer: /CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23 Certificate serial: 010D0C9F4328584950F96AEBBBECBDCC013C5680 Authority key identifier: FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/81bb65a3-069f-3f93-a8c2-2b32b151491a.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 14618 IP address blocks: 148.59.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:6a:eb:bb:ec:bd:cc:01:3c:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=15d1c1fe-7abe-439f-a08a-f058c0f60ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:10:f6:2d:41:29:e8:78:2f:47:04:66:c8:52: 30:ff:dc:22:f1:a8:1a:de:ba:72:80:3b:dd:e4:84: e2:88:0d:47:25:d5:19:e9:6a:a6:96:b9:bc:ff:7f: c9:3b:7b:33:05:81:be:09:3f:f2:72:96:43:30:e3: 00:80:c7:a2:43:8a:9e:a2:75:e0:8b:bd:24:55:62: c8:4b:f6:72:ea:7f:ed:d8:ff:8f:a6:52:c8:73:90: ee:fb:69:f0:ad:c5:f9:33:e5:cf:4f:08:82:11:72: 40:6d:f2:21:a7:bd:ff:7a:a7:e7:6a:59:3c:26:d6: e7:00:c6:ea:56:c3:7e:56:b0:b6:54:84:f2:41:36: b3:f4:f3:80:de:cb:89:3b:20:32:a6:d9:5c:75:60: 8e:75:0c:61:45:1f:fd:ef:44:b2:f5:11:1e:cf:3d: 2f:a4:e3:aa:ca:a1:fc:12:95:f6:9c:84:f0:90:0b: f5:10:97:f0:e0:2e:5f:ba:72:da:f6:29:c7:48:55: df:94:2e:99:0f:6b:71:51:42:6b:96:da:20:c9:b9: 0e:a3:5b:c2:d6:6d:00:f4:36:fa:c3:5a:d0:87:e4: 30:ae:b5:c0:18:18:3c:c3:6b:0c:a2:f8:3f:3c:af: b1:b5:fa:25:20:b3:c7:ea:ef:8a:ba:c5:76:1d:b5: 0d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:54:96:70:C5:AE:B4:5B:BA:DC:55:AB:DA:B5:D2:6D:14:29:20:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/81bb65a3-069f-3f93-a8c2-2b32b151491a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.crl X509v3 Authority Key Identifier: keyid:FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer sbgp-ipAddrBlock: critical IPv4: 148.59.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0b:15:51:3f:a4:67:f0:3c:42:26:85:05:83:ed:a8:de:f9: 8b:e7:51:7c:07:1b:97:53:88:91:64:1a:ca:29:02:d6:f7:f8: 77:73:97:fa:78:3b:98:4b:24:f9:73:51:0f:82:26:55:5d:a8: cb:60:fc:2c:b6:68:ec:ea:be:1d:b7:76:96:ac:24:6b:82:70: 75:a4:0a:4b:18:49:7e:c6:b2:86:01:cf:b7:8f:1d:0c:ec:06: cb:28:9e:19:4d:c6:26:25:86:10:4b:ce:8e:af:52:15:98:9c: f4:10:af:bc:ba:09:1a:99:56:9d:9a:94:c7:ae:90:30:5f:c9: 8a:48:95:8c:02:29:ae:5e:74:a9:9c:1a:d7:0d:3b:48:8b:c4: 06:74:5d:3a:ca:41:d1:2f:01:2a:28:4b:fb:e9:da:dd:04:69: 3e:d6:25:63:00:9c:f7:f3:30:1a:cc:f1:b6:a8:bb:04:41:e6: 28:cb:89:7e:bf:bd:20:c0:33:b6:0f:2c:b5:19:1d:44:35:5f: 4f:7a:9b:df:35:d9:0d:3e:53:9d:52:a9:ac:d7:90:aa:a7:39: 31:6e:76:4c:76:d3:7f:23:80:15:d1:aa:50:41:a6:93:14:b0: 14:d1:44:71:2e:4f:e5:22:03:32:ab:c4:ed:22:33:9c:6f:0c: f3:18:29:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+Wrru+y9zAE8VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNlM2MyMmUtMjQ0OS00MzY3LWJjYzktOTZlYzg3N2Yz ZTIzMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk MTVkMWMxZmUtN2FiZS00MzlmLWEwOGEtZjA1OGMwZjYwZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBD2LUEp6HgvRwRmyFIw/9wi8aga3rpygDvd 5ITiiA1HJdUZ6Wqmlrm8/3/JO3szBYG+CT/ycpZDMOMAgMeiQ4qeonXgi70kVWLI S/Zy6n/t2P+PplLIc5Du+2nwrcX5M+XPTwiCEXJAbfIhp73/eqfnalk8JtbnAMbq VsN+VrC2VITyQTaz9POA3suJOyAyptlcdWCOdQxhRR/970Sy9REezz0vpOOqyqH8 EpX2nITwkAv1EJfw4C5funLa9inHSFXflC6ZD2txUUJrltogybkOo1vC1m0A9Db6 w1rQh+QwrrXAGBg8w2sMovg/PK+xtfolILPH6u+KusV2HbUN+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtUlnDFrrRbutxVq9q10m0UKSCrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80Y2Uz YzIyZS0yNDQ5LTQzNjctYmNjOS05NmVjODc3ZjNlMjMvODFiYjY1YTMtMDY5Zi0z ZjkzLWE4YzItMmIzMmIxNTE0OTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGNlM2MyMmUtMjQ0OS00MzY3LWJj YzktOTZlYzg3N2YzZTIzLzRjZTNjMjJlLTI0NDktNDM2Ny1iY2M5LTk2ZWM4Nzdm M2UyMy5jcmwwHwYDVR0jBBgwFoAU+l+3Lo6Fgc+b3cfdouBMfcQQirowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80Y2UzYzIyZS0yNDQ5LTQzNjctYmNjOS05NmVj ODc3ZjNlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDurMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACALFVE/pGfwPEImhQWD7aje+YvnUXwHG5dTiJFkGsopAtb3+Hdzl/p4 O5hLJPlzUQ+CJlVdqMtg/Cy2aOzqvh23dpasJGuCcHWkCksYSX7GsoYBz7ePHQzs BssonhlNxiYlhhBLzo6vUhWYnPQQr7y6CRqZVp2alMeukDBfyYpIlYwCKa5edKmc GtcNO0iLxAZ0XTrKQdEvASooS/vp2t0EaT7WJWMAnPfzMBrM8baouwRB5ijLiX6/ vSDAM7YPLLUZHUQ1X096m9812Q0+U51SqazXkKqnOTFudkx2038jgBXRqlBBppMU sBTRRHEuT+UiAzKrxO0iM5xvDPMYKUY= -----END CERTIFICATE-----Generated at Fri Apr 4 23:24:27 2025 by rpki-client