$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/d06bb805-d96a-3412-bcf9-7f09d8d1d58a.roa File: d06bb805-d96a-3412-bcf9-7f09d8d1d58a.roa (raw, json) Hash identifier: nWuFj3MvMg4AmEawgTtaGcmR8fzk+Rqhwoln4RKwZXU= Subject key identifier: 64:3E:E5:7A:BE:59:64:A0:21:35:47:82:D7:9E:6A:44:90:1B:D0:7A Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F43285849E4EFB6C57990C2F26CDD44C0 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/d06bb805-d96a-3412-bcf9-7f09d8d1d58a.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 27471 IP address blocks: 148.64.24.0/24 maxlen: 24 148.64.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:b6:c5:79:90:c2:f2:6c:dd:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=40e3be8a-9997-46f7-9ab8-f8a026c8bff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:88:a1:35:02:67:80:95:bc:32:90:6d:3d: 80:84:2e:d3:d3:e3:29:47:0c:47:37:d8:6c:4f:b4: f3:0d:54:89:b3:23:fe:d6:99:2d:5d:2f:5b:b5:bb: 0e:6e:c8:1a:d4:4c:5b:b3:f2:10:10:45:49:92:18: ee:a4:f3:5c:b3:a8:ce:24:89:19:20:98:50:0d:3c: 09:0f:25:87:d4:10:ef:ec:6f:2f:ab:28:9c:3e:16: 13:4f:ce:91:f8:6f:c4:d6:df:0c:72:2f:b1:81:eb: 6b:10:78:07:1c:2b:c7:9a:89:90:f9:af:63:44:42: c2:3d:b7:58:e1:90:8d:6e:8e:95:e7:7d:b8:51:3f: be:25:c8:39:8a:59:40:b0:fa:a4:09:94:be:e7:08: 64:a3:e6:23:2d:07:ef:b3:2e:6b:65:e9:12:95:d9: 8f:4b:00:e3:8e:e9:6e:36:b8:5f:50:ed:f3:ea:3e: 57:f8:32:5c:bc:b8:28:3d:54:6c:eb:d5:69:62:62: 4d:e7:0b:0b:c7:73:d0:04:be:13:e2:65:22:02:76: 3e:f9:e7:77:00:ca:35:e3:c9:99:48:54:51:dc:8e: a6:45:8b:be:6c:5b:f1:25:3b:be:6a:c5:4a:6e:bd: 7d:7b:36:f4:7b:e6:6a:0a:5b:db:bd:87:fa:08:c6: 3d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3E:E5:7A:BE:59:64:A0:21:35:47:82:D7:9E:6A:44:90:1B:D0:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/d06bb805-d96a-3412-bcf9-7f09d8d1d58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 148.64.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d3:47:ce:a5:9f:8e:3d:3d:27:ae:d3:fa:fa:b1:57:a5:53: 37:70:8f:ab:07:99:57:7f:c4:a8:da:73:f4:e3:70:0d:0b:4e: 7e:f6:c9:7f:8d:88:75:14:5b:18:48:98:63:f3:42:a4:fa:cb: db:f5:6e:3a:e3:a3:17:74:f7:65:0d:07:97:91:c0:8f:53:e5: 2b:db:cd:cd:99:1c:22:87:2e:e5:7d:f2:5e:14:b2:1d:5e:b3: b9:b1:e7:68:a1:1c:ee:a8:50:8f:7e:da:51:17:82:f3:ba:ca: dc:c6:36:f1:d9:59:a9:e8:56:6b:da:ab:36:3c:0e:74:45:c9: 31:6a:b2:58:ba:ba:bd:5e:3a:50:1e:8d:b4:f7:07:f5:0d:08: e2:2f:22:ed:5b:47:21:61:35:30:10:d0:28:71:31:f3:ac:b2: 1b:c1:2e:12:84:fc:08:cd:7e:13:27:38:79:c6:85:00:70:5e: 47:3b:96:86:63:72:e1:08:ab:8d:c7:2f:9b:ca:55:28:f2:f5: da:19:c0:a7:bc:e9:5b:8f:14:55:c4:26:87:68:a0:bf:9e:e9: 3d:65:d7:e8:78:fc:51:1a:4c:07:b4:fc:9a:96:6c:76:9e:42: 29:e7:f0:1a:49:40:9d:f3:b3:e9:6e:97:da:e9:d2:c4:ba:93: 90:44:38:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk77bFeZDC8mzdRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NDBlM2JlOGEtOTk5Ny00NmY3LTlhYjgtZjhhMDI2YzhiZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+yIoTUCZ4CVvDKQbT2AhC7T0+MpRwxHN9hs T7TzDVSJsyP+1pktXS9btbsObsga1Exbs/IQEEVJkhjupPNcs6jOJIkZIJhQDTwJ DyWH1BDv7G8vqyicPhYTT86R+G/E1t8Mci+xgetrEHgHHCvHmomQ+a9jRELCPbdY 4ZCNbo6V5324UT++Jcg5illAsPqkCZS+5whko+YjLQfvsy5rZekSldmPSwDjjulu NrhfUO3z6j5X+DJcvLgoPVRs69VpYmJN5wsLx3PQBL4T4mUiAnY++ed3AMo148mZ SFRR3I6mRYu+bFvxJTu+asVKbr19ezb0e+ZqClvbvYf6CMY96wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQ+5Xq+WWSgITVHgteeakSQG9B6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvZDA2YmI4MDUtZDk2YS0z NDEyLWJjZjktN2YwOWQ4ZDFkNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlEAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXTR86ln449PSeu0/r6sVelUzdwj6sHmVd/xKjac/TjcA0LTn72yX+N iHUUWxhImGPzQqT6y9v1bjrjoxd092UNB5eRwI9T5Svbzc2ZHCKHLuV98l4Ush1e s7mx52ihHO6oUI9+2lEXgvO6ytzGNvHZWanoVmvaqzY8DnRFyTFqsli6ur1eOlAe jbT3B/UNCOIvIu1bRyFhNTAQ0ChxMfOsshvBLhKE/AjNfhMnOHnGhQBwXkc7loZj cuEIq43HL5vKVSjy9doZwKe86VuPFFXEJodooL+e6T1l1+h4/FEaTAe0/JqWbHae Qinn8BpJQJ3zs+lul9rp0sS6k5BEOI4= -----END CERTIFICATE-----Generated at Sun Jun 29 23:57:00 2025 by rpki-client