$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa File: acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa (raw, json) Hash identifier: fI1FPATCIxVf0UtSxHX99saK//qJVwaqTFdCmOrefKQ= Subject key identifier: 0C:F6:2B:C5:F8:CB:67:9F:F0:38:FF:E9:77:A4:C1:5F:B4:58:7C:F8 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F43285849C20A17F7849B8EF3A7C7E000 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 192.161.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:17:f7:84:9b:8e:f3:a7:c7:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=392b138c-a669-447c-94b2-74dada0c80b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e3:c9:bc:35:3e:b2:1a:e8:fb:6a:96:e2:5e: 54:ad:49:7d:ae:96:0a:e7:fe:20:87:59:49:70:4c: cf:3a:26:9c:1e:b6:cc:c1:9c:2d:86:00:f3:87:1b: 5a:1e:95:a0:3c:92:aa:e3:6c:3f:52:54:e0:bd:a3: 29:1b:4e:51:76:2a:82:1a:71:53:e0:f0:c6:90:8d: f6:92:0d:c4:0a:a2:0c:f9:4f:db:1e:82:f4:aa:70: e7:e8:5e:ab:f7:45:8c:45:3f:36:9b:08:57:0f:01: 20:b0:5f:24:2e:64:e5:58:53:c8:33:a9:2b:c7:fd: da:37:6e:47:91:2a:ba:5e:4d:1e:53:8a:ff:72:f7: eb:82:6c:8c:f7:27:ec:bb:b1:5d:ce:97:15:77:c9: 4e:ad:0d:64:8e:c7:db:79:b2:b6:c6:3f:8e:66:02: b4:1b:8d:97:a3:94:0b:3e:c1:23:06:09:66:2d:0d: f7:36:cb:02:8b:d2:fe:0e:9b:ba:98:05:54:25:dd: 5a:a0:a4:e5:f9:7f:11:dd:12:9f:25:2f:60:6c:9d: 93:31:37:4b:cf:99:8c:f0:c3:68:cd:da:c2:2b:51: 39:3d:d4:9b:38:e7:f0:4e:37:48:84:7e:a7:72:c0: 21:8d:7c:21:bd:15:a0:c1:2a:5b:e8:3f:46:23:85: 1c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F6:2B:C5:F8:CB:67:9F:F0:38:FF:E9:77:A4:C1:5F:B4:58:7C:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:47:c1:7b:e3:22:39:37:1f:37:bb:25:0e:f6:5d:13:4a:22: 6c:a0:d4:ba:9c:22:74:38:dd:69:e8:ad:55:46:68:fc:f6:93: 82:d0:be:75:d7:c4:f6:a4:52:08:66:48:be:fb:05:10:90:fb: b8:78:bf:5b:61:3b:73:63:12:16:5e:d5:76:ef:67:8b:a7:9c: ef:87:f9:55:eb:04:19:f4:6a:0e:cd:ec:ad:e0:15:3d:18:6d: 07:62:d4:94:94:10:b7:91:19:9c:09:63:34:41:87:7a:0a:39: 39:37:ce:08:44:f1:65:7f:52:3b:4a:db:ee:cc:37:23:cb:79: 37:c3:ca:ff:86:11:5d:8c:15:a2:c2:3e:c8:73:4e:c7:f4:6b: f2:be:40:33:ed:a0:31:f3:47:19:e5:c5:86:8c:57:55:70:11: 4d:d9:8d:b0:b2:45:b3:d3:09:6d:5d:73:eb:86:04:a3:1c:8d: 5b:78:ee:e7:e6:f2:5b:84:87:c4:7f:0b:48:21:3a:f6:c7:bb: b9:ed:35:8e:dc:4d:3f:5c:10:da:41:09:d5:e4:f3:dc:8e:ef: cd:bc:59:c5:f5:f2:ea:eb:08:15:ea:46:77:5a:ca:30:a6:04: 57:28:0f:24:a6:5b:e7:25:51:cb:5f:6d:4e:ca:90:8a:0a:d4: 0b:da:62:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChf3hJuO86fH4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MzkyYjEzOGMtYTY2OS00NDdjLTk0YjItNzRkYWRhMGM4MGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOPJvDU+shro+2qW4l5UrUl9rpYK5/4gh1lJ cEzPOiacHrbMwZwthgDzhxtaHpWgPJKq42w/UlTgvaMpG05RdiqCGnFT4PDGkI32 kg3ECqIM+U/bHoL0qnDn6F6r90WMRT82mwhXDwEgsF8kLmTlWFPIM6krx/3aN25H kSq6Xk0eU4r/cvfrgmyM9yfsu7FdzpcVd8lOrQ1kjsfbebK2xj+OZgK0G42Xo5QL PsEjBglmLQ33NssCi9L+Dpu6mAVUJd1aoKTl+X8R3RKfJS9gbJ2TMTdLz5mM8MNo zdrCK1E5PdSbOOfwTjdIhH6ncsAhjXwhvRWgwSpb6D9GI4UcOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAz2K8X4y2ef8Dj/6XekwV+0WHz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvYWNlYzZhMjgtMzNkMy0z MmE4LWFhM2EtOWZlMjE2YzA5ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpHwXvjIjk3Hze7JQ72XRNKImyg1LqcInQ43WnorVVGaPz2k4LQvnXX xPakUghmSL77BRCQ+7h4v1thO3NjEhZe1XbvZ4unnO+H+VXrBBn0ag7N7K3gFT0Y bQdi1JSUELeRGZwJYzRBh3oKOTk3zghE8WV/UjtK2+7MNyPLeTfDyv+GEV2MFaLC PshzTsf0a/K+QDPtoDHzRxnlxYaMV1VwEU3ZjbCyRbPTCW1dc+uGBKMcjVt47ufm 8luEh8R/C0ghOvbHu7ntNY7cTT9cENpBCdXk89yO7828WcX18urrCBXqRndayjCm BFcoDySmW+clUctfbU7KkIoK1AvaYiw= -----END CERTIFICATE-----Generated at Sat May 10 13:21:11 2025 by rpki-client