$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/c85b3eda-5f77-368f-8183-14bcda949a05.roa File: c85b3eda-5f77-368f-8183-14bcda949a05.roa (raw, json) Hash identifier: vzMUwEdyZ4DlTCJ8vD7yV6fHbgLCERUDSK1ziYgt/1o= Subject key identifier: 5D:CE:BD:F2:76:86:00:43:E5:5E:63:1E:A2:C9:F8:42:4A:87:56:9C Certificate issuer: /CN=91ace6e0-bca2-4daa-81c3-2e936814cc5d Certificate serial: 010D0C9F43285849BDDA1EDB748D0E3662FB7900 Authority key identifier: E2:F5:7C:2D:02:96:52:D5:D3:46:73:3B:13:AC:43:60:E7:5F:E9:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/c85b3eda-5f77-368f-8183-14bcda949a05.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 11817 IP address blocks: 148.59.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/91ace6e0-bca2-4daa-81c3-2e936814cc5d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/91ace6e0-bca2-4daa-81c3-2e936814cc5d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:1e:db:74:8d:0e:36:62:fb:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91ace6e0-bca2-4daa-81c3-2e936814cc5d Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=dae2b0fd-6662-436d-843c-1036a00502e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:3e:3c:cc:65:f2:0b:fd:73:9e:77:26:3f: c9:7d:d5:b8:91:9f:c2:25:c9:bf:23:19:72:21:aa: d7:a7:3d:52:bd:f7:65:1b:2c:bf:46:51:0f:b1:1f: d1:92:2c:fb:47:4a:07:aa:38:40:24:9d:a0:56:c1: 1d:1b:31:4b:3e:a3:0b:2a:22:27:5b:2a:aa:e3:37: df:1f:d8:99:7f:7e:3d:40:5f:9c:16:9f:30:5d:20: a8:cf:fc:42:1f:8a:22:ce:34:6e:f4:df:2e:22:2e: 47:a1:1f:13:fc:83:a3:2c:05:24:62:bd:56:01:e5: d6:5e:d0:ac:0f:0b:f0:b0:9f:9d:79:87:69:e2:6d: 09:ce:9b:1c:c3:74:a0:38:f6:61:cc:77:bc:94:04: 44:fe:99:94:45:d4:22:d5:92:c3:66:86:7f:87:ff: b8:85:6f:1d:21:31:8a:b7:59:31:3f:c0:98:e0:d6: a5:37:20:4f:d9:e8:6f:f8:50:a5:c0:90:ce:ab:9b: 3a:2a:10:19:25:85:f5:ca:53:e1:8e:f4:88:06:a0: 58:6f:4f:69:03:f4:bd:2b:75:09:2c:84:6e:df:ba: 00:28:77:75:e4:51:d4:d7:91:ec:69:a5:7f:7e:2f: e6:97:aa:70:cf:b4:c3:a4:44:2e:61:a9:a3:3b:6a: d0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CE:BD:F2:76:86:00:43:E5:5E:63:1E:A2:C9:F8:42:4A:87:56:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/c85b3eda-5f77-368f-8183-14bcda949a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d/91ace6e0-bca2-4daa-81c3-2e936814cc5d.crl X509v3 Authority Key Identifier: keyid:E2:F5:7C:2D:02:96:52:D5:D3:46:73:3B:13:AC:43:60:E7:5F:E9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91ace6e0-bca2-4daa-81c3-2e936814cc5d.cer sbgp-ipAddrBlock: critical IPv4: 148.59.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:e7:b7:28:de:10:4b:1e:02:93:48:95:39:37:9a:c2:bf:30: 71:c5:0c:e3:65:03:cc:6a:09:74:6e:5b:4b:4b:82:1c:e8:1b: 83:13:1b:e3:bc:e2:ca:d2:50:d1:7d:98:db:24:8f:a8:5c:29: 48:eb:06:dc:03:d8:0f:9e:9b:78:2b:c8:bd:c9:43:12:c3:10: 77:eb:88:68:8c:54:e3:fe:d3:2f:16:48:bf:a4:1a:be:ab:7b: ea:d7:f2:fe:7d:ec:92:c9:cb:e0:33:11:18:2a:be:16:dd:67: 42:35:64:90:7e:33:66:c4:24:34:3e:f3:8f:e0:5a:bc:92:89: d8:12:fc:fa:12:2f:c7:ff:34:1a:5e:b1:e9:55:32:ff:48:7c: 63:1c:a9:3c:1b:f2:93:05:d9:19:40:39:41:0a:b5:44:7d:49: 5e:aa:4b:eb:3b:9e:b0:33:a8:03:74:b3:9a:97:e0:38:e1:73: cc:81:b8:90:89:85:d2:82:b5:c6:a4:07:20:5e:72:14:1f:62: 39:6f:78:9b:9a:ff:9c:3b:df:30:60:47:25:33:32:70:47:12: 8d:5a:27:bc:74:a7:c6:e5:f7:41:c7:64:04:ab:1f:dd:20:27: 01:33:6f:14:8f:53:c1:91:78:b3:31:1f:52:cf:dc:81:0c:90: c7:d3:bd:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92h7bdI0ONmL7eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhY2U2ZTAtYmNhMi00ZGFhLTgxYzMtMmU5MzY4MTRj YzVkMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZGFlMmIwZmQtNjY2Mi00MzZkLTg0M2MtMTAzNmEwMDUwMmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGY+PMxl8gv9c553Jj/JfdW4kZ/CJcm/Ixly IarXpz1SvfdlGyy/RlEPsR/Rkiz7R0oHqjhAJJ2gVsEdGzFLPqMLKiInWyqq4zff H9iZf349QF+cFp8wXSCoz/xCH4oizjRu9N8uIi5HoR8T/IOjLAUkYr1WAeXWXtCs DwvwsJ+deYdp4m0Jzpscw3SgOPZhzHe8lARE/pmURdQi1ZLDZoZ/h/+4hW8dITGK t1kxP8CY4NalNyBP2ehv+FClwJDOq5s6KhAZJYX1ylPhjvSIBqBYb09pA/S9K3UJ LIRu37oAKHd15FHU15HsaaV/fi/ml6pwz7TDpEQuYamjO2rQmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3OvfJ2hgBD5V5jHqLJ+EJKh1acMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWFj ZTZlMC1iY2EyLTRkYWEtODFjMy0yZTkzNjgxNGNjNWQvYzg1YjNlZGEtNWY3Ny0z NjhmLTgxODMtMTRiY2RhOTQ5YTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhY2U2ZTAtYmNhMi00ZGFhLTgx YzMtMmU5MzY4MTRjYzVkLzkxYWNlNmUwLWJjYTItNGRhYS04MWMzLTJlOTM2ODE0 Y2M1ZC5jcmwwHwYDVR0jBBgwFoAU4vV8LQKWUtXTRnM7E6xDYOdf6cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWFjZTZlMC1iY2EyLTRkYWEtODFjMy0yZTkz NjgxNGNjNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlDu6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTntyjeEEseApNIlTk3msK/MHHFDONlA8xqCXRuW0tLghzoG4MTG+O8 4srSUNF9mNskj6hcKUjrBtwD2A+em3gryL3JQxLDEHfriGiMVOP+0y8WSL+kGr6r e+rX8v597JLJy+AzERgqvhbdZ0I1ZJB+M2bEJDQ+84/gWrySidgS/PoSL8f/NBpe selVMv9IfGMcqTwb8pMF2RlAOUEKtUR9SV6qS+s7nrAzqAN0s5qX4Djhc8yBuJCJ hdKCtcakByBechQfYjlveJua/5w73zBgRyUzMnBHEo1aJ7x0p8bl90HHZASrH90g JwEzbxSPU8GReLMxH1LP3IEMkMfTvXY= -----END CERTIFICATE-----Generated at Thu May 8 17:05:40 2025 by rpki-client