$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0d01bd33-7e08-326f-a0a3-2cc096265d22.roa File: 0d01bd33-7e08-326f-a0a3-2cc096265d22.roa (raw, json) Hash identifier: u98AQJVKfkx5sfS43T/NVSmNypV6/t6yO1bpTILVsnc= Subject key identifier: 07:9E:31:28:46:BD:45:ED:04:E8:48:2D:F8:39:2A:16:B8:94:5D:22 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F432858491676BEC8AAD93177A3EC8C00 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0d01bd33-7e08-326f-a0a3-2cc096265d22.roa Signing time: Wed 05 Mar 2025 14:00:51 +0000 ROA not before: Wed 05 Mar 2025 14:00:51 +0000 ROA not after: Tue 03 Jun 2025 13:00:51 +0000 asID: 6195 IP address blocks: 148.86.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:16:76:be:c8:aa:d9:31:77:a3:ec:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Mar 5 14:00:51 2025 GMT Not After : Jun 3 13:00:51 2025 GMT Subject: CN=fcd002d1-3206-4664-9c21-da3d89c225f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8f:54:2e:b6:18:0a:ec:c5:5a:a6:0c:e2:a0: 0f:56:14:95:a7:28:69:29:ec:3c:43:c4:fb:97:3c: 8b:61:a1:08:64:05:69:ea:44:e9:d4:02:26:d1:e5: 06:0b:9f:81:73:07:1e:77:47:77:fc:23:77:64:45: a5:d5:86:fd:b3:fc:c8:4c:93:2c:bb:86:00:a8:85: 97:e8:c2:67:a2:f9:c1:d7:47:96:4f:d6:99:91:06: ed:7e:6f:12:51:6f:f9:e2:fa:09:c2:03:ca:03:9a: 97:ad:aa:fa:67:e8:0e:5e:8e:45:67:e2:a9:23:fe: 61:9b:31:d9:a4:5b:b3:5e:b4:1e:89:74:d9:18:e2: ce:db:72:cc:55:5a:79:0f:73:31:b6:ad:be:61:d8: 06:d8:a6:99:cc:7a:22:69:94:0e:d1:e7:7d:82:8d: 5d:d1:d6:20:19:ee:86:1d:07:b2:21:eb:f0:0b:c0: 1e:11:3b:fc:7e:53:1f:79:d5:6b:5d:fc:50:e7:13: 84:2a:68:57:4f:d2:7a:46:d0:bb:c9:4f:05:08:a4: d5:5c:bd:55:62:da:4c:5b:70:5f:18:51:55:ab:b2: 0b:be:1f:3a:b0:6a:95:d2:e4:ef:eb:05:07:cc:1f: f6:40:1c:b4:f5:1e:d3:d5:ee:6b:35:af:c0:ca:53: 86:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9E:31:28:46:BD:45:ED:04:E8:48:2D:F8:39:2A:16:B8:94:5D:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/0d01bd33-7e08-326f-a0a3-2cc096265d22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 148.86.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:8d:4b:6a:f8:15:aa:5f:57:b1:f4:2c:b9:ae:1a:b9:15:00: 2e:c9:95:83:5e:1d:bb:9b:56:20:d4:f4:9e:a1:fa:89:25:74: 78:42:96:de:a2:b6:84:65:c3:86:5c:c5:71:b8:1b:4f:9e:dc: 01:3d:75:fa:c9:9c:16:5c:18:7c:03:fa:2b:25:01:0c:2a:53: 30:2b:57:5e:c5:89:e7:56:ac:b1:5e:e2:f9:31:54:01:12:0b: 7c:7c:e1:d7:4f:87:56:9c:cb:7d:88:4f:71:a2:ce:3e:4a:96: 55:3c:ee:fc:c1:ad:bc:36:6d:ad:9f:dc:21:d2:17:39:ac:69: f4:89:5e:65:d2:82:e8:3b:11:52:86:c9:d5:92:17:4f:62:0c: 48:8f:35:d1:03:1f:b0:f4:3e:81:51:0c:8c:55:60:40:5f:f0: d0:82:ae:49:e1:93:32:af:a9:ed:a1:89:92:08:61:11:ad:7f: db:3e:60:a6:e3:a3:21:3d:2f:80:bb:a3:3a:8c:3f:13:79:0c: 70:d1:0d:fa:90:37:4f:fe:de:33:e6:c1:00:db:da:a4:f3:d1: 31:01:81:a2:e2:3c:83:05:00:19:ed:5e:86:3a:69:d5:6f:19: 59:77:a3:c5:76:0d:4e:cc:fd:02:c6:07:72:82:17:df:22:95: ed:ce:67:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkWdr7Iqtkxd6PsjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDMwNTE0MDA1MVoXDTI1MDYwMzEzMDA1MVowLzEtMCsGA1UEAxMk ZmNkMDAyZDEtMzIwNi00NjY0LTljMjEtZGEzZDg5YzIyNWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg49ULrYYCuzFWqYM4qAPVhSVpyhpKew8Q8T7 lzyLYaEIZAVp6kTp1AIm0eUGC5+Bcwced0d3/CN3ZEWl1Yb9s/zITJMsu4YAqIWX 6MJnovnB10eWT9aZkQbtfm8SUW/54voJwgPKA5qXrar6Z+gOXo5FZ+KpI/5hmzHZ pFuzXrQeiXTZGOLO23LMVVp5D3Mxtq2+YdgG2KaZzHoiaZQO0ed9go1d0dYgGe6G HQeyIevwC8AeETv8flMfedVrXfxQ5xOEKmhXT9J6RtC7yU8FCKTVXL1VYtpMW3Bf GFFVq7ILvh86sGqV0uTv6wUHzB/2QBy09R7T1e5rNa/AylOGXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeeMShGvUXtBOhILfg5Kha4lF0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMGQwMWJkMzMtN2UwOC0z MjZmLWEwYTMtMmNjMDk2MjY1ZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlFYLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGNS2r4FapfV7H0LLmuGrkVAC7JlYNeHbubViDU9J6h+okldHhClt6i toRlw4ZcxXG4G0+e3AE9dfrJnBZcGHwD+islAQwqUzArV17FiedWrLFe4vkxVAES C3x84ddPh1acy32IT3Gizj5KllU87vzBrbw2ba2f3CHSFzmsafSJXmXSgug7EVKG ydWSF09iDEiPNdEDH7D0PoFRDIxVYEBf8NCCrknhkzKvqe2hiZIIYRGtf9s+YKbj oyE9L4C7ozqMPxN5DHDRDfqQN0/+3jPmwQDb2qTz0TEBgaLiPIMFABntXoY6adVv GVl3o8V2DU7M/QLGB3KCF98ile3OZ2A= -----END CERTIFICATE-----Generated at Thu May 8 20:24:11 2025 by rpki-client