$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/37219094-f4ad-3a5e-a5de-82c59292ef7c.roa File: 37219094-f4ad-3a5e-a5de-82c59292ef7c.roa (raw, json) Hash identifier: DWqlWyO8/yKMjoLQfVz4GtWvflv7wLeke+qTJ88vOmw= Subject key identifier: 9D:BE:D5:AA:60:F9:7F:3C:3E:35:A3:85:D6:EE:E9:D7:28:15:C0:C3 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584A268AABEC4A6AD4D3BB661B80 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/37219094-f4ad-3a5e-a5de-82c59292ef7c.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 23154 IP address blocks: 148.164.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:ab:ec:4a:6a:d4:d3:bb:66:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=40224ee3-328a-4804-8f56-5d084db429b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:8e:4f:fc:76:68:45:25:54:7d:cd:60:a4: fa:29:82:96:5d:71:b8:44:f7:21:0a:2f:2d:67:a7: ef:e9:f3:8a:f4:03:fc:db:55:c0:38:07:b8:37:dd: 94:81:b7:99:9a:df:06:fc:9f:56:91:8d:87:05:72: 5c:fa:da:be:ea:95:0d:19:92:40:d0:4b:1a:1a:41: ad:0e:dc:64:20:ba:d3:40:55:5f:24:44:82:4d:4b: 4b:80:ec:1d:04:68:44:64:30:94:54:fb:a8:9f:b8: 48:84:13:28:6d:ed:53:74:ca:5e:56:6a:c1:06:76: e7:bd:b1:87:98:85:b4:47:bb:f4:f5:88:bb:87:45: 6a:32:c5:c6:b6:6b:3c:d4:06:12:71:f3:f3:68:60: 80:a8:dc:e5:be:ee:71:63:a5:49:65:b9:b7:05:a3: 4a:0b:28:dd:36:97:5f:e4:04:9a:7a:c7:02:ad:7f: 33:12:32:07:33:7d:ce:2e:18:4f:e5:74:54:33:16: 18:2e:2a:7d:24:ef:da:ba:8f:87:f3:c7:d0:b6:e4: 8e:30:97:12:90:d7:84:67:71:e6:e4:fe:d8:cd:1b: ad:28:07:ed:27:b2:19:02:96:17:54:a2:57:5e:a5: 62:9f:e7:2c:fc:c7:9c:b0:81:79:bc:c3:65:98:57: 32:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BE:D5:AA:60:F9:7F:3C:3E:35:A3:85:D6:EE:E9:D7:28:15:C0:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/37219094-f4ad-3a5e-a5de-82c59292ef7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e2:86:06:a5:13:68:98:83:27:79:b9:bf:f0:c5:29:0b:03: 59:a6:4d:45:2e:23:79:d8:f8:61:3e:3d:bf:72:7c:0a:36:15: dd:45:b5:4d:f4:b5:87:14:37:0c:2a:5a:cb:f2:16:98:b1:96: fd:d0:65:21:2f:df:ad:94:1a:73:07:62:15:46:bc:b5:7e:2a: 7a:f7:5f:c6:b2:84:98:7e:6e:f7:47:ff:f4:c8:fb:1c:3f:34: 2f:91:8a:4c:62:31:9d:62:01:30:65:08:c9:fa:ab:bb:34:83: b9:44:ca:63:ea:c0:7d:e3:65:c3:62:9c:e0:13:df:e1:bb:8e: 73:f5:39:b6:c9:3b:7f:19:b3:4b:4c:fc:89:d1:f9:32:00:b5: 05:5b:ec:4f:af:73:b5:ae:e9:e1:be:5e:6b:1a:2f:5c:7b:f1: 84:5e:3e:78:59:1a:28:72:0b:67:19:80:4e:02:96:06:1d:6a: 2a:3c:84:52:af:49:8a:3f:42:fb:31:c7:11:19:dc:ed:73:a1: 4b:fc:42:53:5a:2f:0c:20:b5:50:8d:52:3a:a1:7e:46:82:6e: 8d:59:2a:b7:04:47:f6:09:f9:91:04:38:96:79:78:b6:58:34: 08:83:ba:44:20:f6:32:01:a3:f9:bc:9d:d4:8c:28:5e:30:d6: 4d:08:3a:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomiqvsSmrU07tmG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk NDAyMjRlZTMtMzI4YS00ODA0LThmNTYtNWQwODRkYjQyOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ziOT/x2aEUlVH3NYKT6KYKWXXG4RPchCi8t Z6fv6fOK9AP821XAOAe4N92UgbeZmt8G/J9WkY2HBXJc+tq+6pUNGZJA0EsaGkGt DtxkILrTQFVfJESCTUtLgOwdBGhEZDCUVPuon7hIhBMobe1TdMpeVmrBBnbnvbGH mIW0R7v09Yi7h0VqMsXGtms81AYScfPzaGCAqNzlvu5xY6VJZbm3BaNKCyjdNpdf 5ASaescCrX8zEjIHM33OLhhP5XRUMxYYLip9JO/auo+H88fQtuSOMJcSkNeEZ3Hm 5P7YzRutKAftJ7IZApYXVKJXXqVin+cs/MecsIF5vMNlmFcyfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2+1apg+X88PjWjhdbu6dcoFcDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvMzcyMTkwOTQtZjRhZC0z YTVlLWE1ZGUtODJjNTkyOTJlZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7ihgalE2iYgyd5ub/wxSkLA1mmTUUuI3nY+GE+Pb9yfAo2Fd1FtU30 tYcUNwwqWsvyFpixlv3QZSEv362UGnMHYhVGvLV+Knr3X8ayhJh+bvdH//TI+xw/ NC+RikxiMZ1iATBlCMn6q7s0g7lEymPqwH3jZcNinOAT3+G7jnP1ObbJO38Zs0tM /InR+TIAtQVb7E+vc7Wu6eG+XmsaL1x78YRePnhZGihyC2cZgE4ClgYdaio8hFKv SYo/QvsxxxEZ3O1zoUv8QlNaLwwgtVCNUjqhfkaCbo1ZKrcER/YJ+ZEEOJZ5eLZY NAiDukQg9jIBo/m8ndSMKF4w1k0IOjg= -----END CERTIFICATE-----Generated at Tue Jul 1 16:01:03 2025 by rpki-client