$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa File: 34356240-b9ca-32e3-ba11-33750e597e1e.roa (raw, json) Hash identifier: vI66tClKXclpweWRyyfIXg5P4UNc/qYO8H98gsrK3Ww= Subject key identifier: 56:0B:FF:ED:6D:4C:91:B3:56:4E:DA:C7:3B:7F:65:1F:A9:C9:92:FF Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F43285849ABB4ABA2BD6878B0B780C500 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7764 IP address blocks: 148.129.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ab:a2:bd:68:78:b0:b7:80:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=a72d59ea-324c-4f08-ad85-b984c07c2866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:40:48:eb:5e:4d:8c:78:41:20:1d:da:fd: 66:ca:23:82:de:8a:13:d9:3e:9e:c8:1f:7b:9e:eb: f5:a7:37:ef:60:6e:0b:9e:dd:2d:2d:d1:cf:a5:71: b6:a5:10:b3:90:ef:a1:49:be:55:65:b3:5c:64:ab: 1c:0f:2b:70:c5:dc:2b:d5:1b:29:1f:3f:a2:98:cf: 46:c4:2a:3f:58:03:16:29:8e:0c:43:ec:4a:52:20: a8:a2:6d:d8:cb:bf:af:bb:85:39:3a:8e:d4:18:39: ae:94:f0:b3:9b:6a:7b:f7:dc:12:3f:8f:1d:d4:82: b8:34:f7:a2:91:03:da:3c:24:e8:63:c8:05:09:cf: ef:11:82:74:c4:d4:36:79:a3:e5:2f:69:9e:9c:a2: e9:28:ec:c2:c7:ab:45:84:de:d2:66:28:0c:47:51: 0e:df:a1:8e:c6:7b:1e:35:41:33:5c:d6:5a:5a:57: 52:75:cf:1c:b9:45:e8:d2:5e:c3:4a:06:94:b5:7d: f5:11:bd:b5:e3:7c:24:ee:48:5c:ff:57:fe:ed:66: a8:f9:b8:84:d3:26:33:f8:b7:1f:cb:58:2d:c6:f9: 38:aa:39:8d:26:d7:6e:97:a6:28:0e:4d:9c:dc:db: a9:ca:49:5b:ab:e0:e7:dd:f8:db:e2:3e:44:8c:68: f1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0B:FF:ED:6D:4C:91:B3:56:4E:DA:C7:3B:7F:65:1F:A9:C9:92:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 148.129.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:db:89:3e:48:20:19:83:17:84:07:5e:7d:05:f9:54:fa:1b: 76:e6:a4:d0:36:c1:04:ba:72:a9:03:12:0f:f9:d3:c2:f7:65: 6f:f0:04:d0:77:e7:0f:f5:78:36:8a:cd:f9:24:55:4d:44:4b: af:fe:46:15:b1:62:c1:3c:b8:fe:14:39:bb:84:16:8f:f0:e3: 3a:02:f2:0c:0c:f7:c6:09:45:a9:0f:2c:34:4e:8b:74:03:7c: 7c:06:95:e6:8f:64:a7:ae:65:1d:94:4b:42:80:df:a6:66:d6: 66:72:b0:3f:eb:ed:8a:cd:98:41:02:2e:4b:51:db:bf:fc:0b: e1:e6:a0:a9:f3:7f:5c:36:7e:ff:8e:81:96:b3:69:9d:f6:48: 35:a7:9f:05:50:78:db:f9:33:66:db:f6:88:a6:d9:02:a7:e7: 4c:5e:1b:8c:8c:b6:00:c5:fe:12:b4:46:52:3c:20:00:79:ec: 48:9f:5b:83:74:c1:5c:51:3b:dc:c4:07:04:b1:30:c7:54:5b: 63:46:fb:a6:28:7a:b4:ed:4b:4d:e3:5a:54:9d:fa:85:c6:62: 9d:c0:2a:51:91:fe:e0:5b:8b:6f:27:7c:22:4b:09:7d:7c:62: c1:cc:50:7b:b1:2b:7b:49:5e:46:aa:ae:f1:ab:09:b6:6c:2a: d7:bf:da:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKuivWh4sLeAxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YTcyZDU5ZWEtMzI0Yy00ZjA4LWFkODUtYjk4NGMwN2MyODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEFASOteTYx4QSAd2v1myiOC3ooT2T6eyB97 nuv1pzfvYG4Lnt0tLdHPpXG2pRCzkO+hSb5VZbNcZKscDytwxdwr1RspHz+imM9G xCo/WAMWKY4MQ+xKUiCoom3Yy7+vu4U5Oo7UGDmulPCzm2p799wSP48d1IK4NPei kQPaPCToY8gFCc/vEYJ0xNQ2eaPlL2menKLpKOzCx6tFhN7SZigMR1EO36GOxnse NUEzXNZaWldSdc8cuUXo0l7DSgaUtX31Eb2143wk7khc/1f+7Wao+biE0yYz+Lcf y1gtxvk4qjmNJtdul6YoDk2c3Nupyklbq+Dn3fjb4j5EjGjxCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYL/+1tTJGzVk7axzt/ZR+pyZL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvMzQzNTYyNDAtYjljYS0z MmUzLWJhMTEtMzM3NTBlNTk3ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGlIFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrbiT5IIBmDF4QHXn0F+VT6G3bmpNA2wQS6cqkDEg/508L3ZW/wBNB3 5w/1eDaKzfkkVU1ES6/+RhWxYsE8uP4UObuEFo/w4zoC8gwM98YJRakPLDROi3QD fHwGleaPZKeuZR2US0KA36Zm1mZysD/r7YrNmEECLktR27/8C+HmoKnzf1w2fv+O gZazaZ32SDWnnwVQeNv5M2bb9oim2QKn50xeG4yMtgDF/hK0RlI8IAB57EifW4N0 wVxRO9zEBwSxMMdUW2NG+6YoerTtS03jWlSd+oXGYp3AKlGR/uBbi28nfCJLCX18 YsHMUHuxK3tJXkaqrvGrCbZsKte/2lI= -----END CERTIFICATE-----Generated at Sat May 10 16:37:16 2025 by rpki-client