$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa File: 00a67443-0fc8-3ea5-9b70-edf9d806b098.roa (raw, json) Hash identifier: QupSl6HucPk+oV4NY1yYnq19O0HujoiunfA+uxSu/fg= Subject key identifier: 84:E8:8E:95:30:94:B3:59:CA:76:E8:4A:42:6B:10:E5:D6:24:82:EC Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849A1EF764AF3D2567049C27800 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 63199 IP address blocks: 148.153.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:76:4a:f3:d2:56:70:49:c2:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=3128841d-6294-45d7-b078-d08d9284f40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:97:d2:81:5c:89:45:ce:db:71:da:f8:ba:5b: 19:50:30:44:ae:8f:a9:71:06:59:42:0d:cb:1f:a2: 33:f1:19:e5:55:0e:26:9b:d0:88:54:9e:20:34:ec: 9a:9d:23:b5:d6:da:78:34:ca:d4:99:6e:9f:13:af: 00:80:c6:b6:8e:fc:25:7b:01:5b:a3:97:86:de:09: 44:3c:3f:28:c5:b2:f0:a5:e8:86:a1:7f:67:0b:bf: 07:d5:3a:ce:cd:71:09:13:83:d3:a9:5f:16:8c:9b: 08:29:d7:c6:bb:23:09:53:96:05:71:61:89:f6:8a: 13:3a:12:11:f2:f0:b2:88:5f:72:e8:c9:43:f4:80: fe:75:0b:32:4f:2c:a9:9b:fc:c5:fe:d5:7f:5a:ea: 6d:c9:7a:42:e8:bb:e2:56:7a:c6:0f:b2:3d:54:cb: 32:6f:8a:dc:34:16:7e:7a:03:ac:47:d4:99:da:47: 11:b5:08:0d:cf:0c:7c:d1:4c:e9:53:36:1a:c0:ee: 9c:54:c8:b4:d9:43:00:c5:33:bb:fb:5d:00:4f:9d: aa:c6:24:c7:15:25:27:f1:97:f1:3d:83:8f:5d:14: 3f:22:41:1d:ad:1c:72:cd:e1:5e:1f:13:f4:e0:95: a7:8d:38:8d:de:bc:50:86:3a:d8:90:29:ee:e4:aa: e7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E8:8E:95:30:94:B3:59:CA:76:E8:4A:42:6B:10:E5:D6:24:82:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ad:3e:38:8a:b6:0e:0c:54:bf:9e:0c:09:30:41:bd:b4:ce: 92:63:11:b7:b9:8c:d6:35:00:9f:fc:69:31:5f:b3:75:bd:66: f0:46:61:93:01:d4:7a:11:76:43:9a:af:7d:2e:14:db:a0:c3: ed:b5:b3:a2:62:a3:e6:00:e6:8d:f2:9d:1b:9e:cb:d7:8e:09: ed:d6:e5:d0:9b:d6:fe:b3:09:75:90:0e:41:ed:ae:b1:f9:2a: d1:14:3e:4a:b7:d1:34:1e:b9:f5:e7:29:18:28:68:4a:d5:0a: 24:72:71:43:c4:a6:20:87:8b:93:6f:3c:e8:fb:4a:90:80:f3: 92:f8:61:d3:33:fe:c8:d3:ee:22:19:ba:bb:19:9e:5e:72:f4: 1e:dd:ce:a3:f5:ff:47:10:a1:7d:ba:68:b2:a7:24:91:e2:17: b7:c5:7e:6f:48:f1:e2:b1:fb:92:51:e9:01:c1:be:ef:1e:7f: 28:ce:08:ab:5f:70:1c:aa:06:b5:0a:8f:5e:ec:11:94:83:5c: 42:8f:3b:c4:8b:01:e6:30:8d:f2:ef:22:33:ab:2b:9b:97:c3: 7c:27:7e:c2:27:d5:ca:4f:5a:54:8d:0b:a3:d5:c1:b5:a7:f2: 8b:38:81:3e:1e:fd:31:12:e4:86:02:bb:93:b4:99:e1:8c:fc: 1b:f9:02:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73ZK89JWcEnCeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MzEyODg0MWQtNjI5NC00NWQ3LWIwNzgtZDA4ZDkyODRmNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpfSgVyJRc7bcdr4ulsZUDBEro+pcQZZQg3L H6Iz8RnlVQ4mm9CIVJ4gNOyanSO11tp4NMrUmW6fE68AgMa2jvwlewFbo5eG3glE PD8oxbLwpeiGoX9nC78H1TrOzXEJE4PTqV8WjJsIKdfGuyMJU5YFcWGJ9ooTOhIR 8vCyiF9y6MlD9ID+dQsyTyypm/zF/tV/WuptyXpC6LviVnrGD7I9VMsyb4rcNBZ+ egOsR9SZ2kcRtQgNzwx80UzpUzYawO6cVMi02UMAxTO7+10AT52qxiTHFSUn8Zfx PYOPXRQ/IkEdrRxyzeFeHxP04JWnjTiN3rxQhjrYkCnu5KrnBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITojpUwlLNZynboSkJrEOXWJILsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDBhNjc0NDMtMGZjOC0z ZWE1LTliNzAtZWRmOWQ4MDZiMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJlWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOtPjiKtg4MVL+eDAkwQb20zpJjEbe5jNY1AJ/8aTFfs3W9ZvBGYZMB 1HoRdkOar30uFNugw+21s6Jio+YA5o3ynRuey9eOCe3W5dCb1v6zCXWQDkHtrrH5 KtEUPkq30TQeufXnKRgoaErVCiRycUPEpiCHi5NvPOj7SpCA85L4YdMz/sjT7iIZ ursZnl5y9B7dzqP1/0cQoX26aLKnJJHiF7fFfm9I8eKx+5JR6QHBvu8efyjOCKtf cByqBrUKj17sEZSDXEKPO8SLAeYwjfLvIjOrK5uXw3wnfsIn1cpPWlSNC6PVwbWn 8os4gT4e/TES5IYCu5O0meGM/Bv5Au4= -----END CERTIFICATE-----Generated at Sun Apr 27 19:29:38 2025 by rpki-client