$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa File: 04adc8be-6949-381f-85ec-0ef42f2d5286.roa (raw, json) Hash identifier: Awb+BNfohRK+WF6g5J4DvCMJSai21AvddWqjeOUmrs0= Subject key identifier: 69:F0:0D:F4:F9:4F:06:21:48:59:52:37:C0:DD:FF:FD:F4:CC:03:C7 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285848E2D11DCD1B2F56A637754B00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 63199 IP address blocks: 148.153.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:1d:cd:1b:2f:56:a6:37:75:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=d4ff78d3-2bbf-4076-80b3-f26c3468e0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b2:b7:76:5c:d4:4b:33:3e:18:7e:d9:60:25: f4:e5:24:ee:2a:eb:73:9e:33:53:46:c0:09:e1:bc: b8:28:66:f5:14:ce:8c:43:ea:dc:95:05:6b:54:01: 5e:1c:bd:d3:da:32:9c:ec:e9:a3:4f:9a:f1:46:46: 3a:c1:06:82:8e:28:ac:74:b6:d2:ee:98:f8:17:29: 7b:e9:3b:f0:9d:d5:26:c3:ff:05:93:93:41:5e:e9: 61:b4:82:ea:4a:f8:94:c4:d8:17:4b:c2:f1:0c:5b: 8f:31:39:13:39:f6:bc:77:22:b2:47:eb:0b:09:aa: 07:71:1c:1b:76:b8:24:63:55:42:33:c4:28:89:9a: 18:e7:36:20:48:84:44:71:c4:4b:14:bf:3f:88:10: 88:c6:54:39:13:47:13:a6:76:e9:73:bb:f7:77:59: 8c:ac:a8:9b:9a:9a:5b:76:d1:7e:08:99:20:12:ed: 9c:6d:74:29:d7:65:cd:8f:92:81:6f:26:52:17:b1: a7:f2:1b:c2:07:de:6a:a6:5e:e2:25:8a:95:6c:5b: 71:56:d6:15:a9:5e:89:b0:dd:93:18:e0:94:df:18: 66:7f:20:be:10:9d:d1:95:9c:03:34:b4:d8:85:b9: 52:5b:83:bc:06:fb:03:65:69:07:90:37:4d:08:de: 96:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F0:0D:F4:F9:4F:06:21:48:59:52:37:C0:DD:FF:FD:F4:CC:03:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ec:a3:b6:0c:dd:82:60:aa:f8:6b:50:ce:dd:63:e1:92:15: 3f:12:51:f9:30:a0:d9:cf:45:f6:2f:e4:84:20:a2:3f:a8:7b: c0:87:8c:2f:38:26:d3:49:ac:9a:f3:7d:b5:68:c4:97:28:2d: 01:4d:8a:1d:2d:fd:8b:71:8c:81:02:3d:ef:63:d9:97:2c:fd: 8e:8b:8c:70:48:62:e4:fb:fd:6e:13:9b:1e:7a:b5:e7:d8:e2: 95:a9:c9:3d:22:c9:6d:6d:67:03:4c:32:46:b4:e6:d1:35:b3: 93:b5:ca:7e:b4:a1:85:07:c5:00:a7:95:7e:74:74:94:2f:23: 74:a5:d2:02:01:da:60:22:7b:24:92:b2:bd:9c:92:ff:fa:c3: 03:e5:a5:23:2d:eb:e1:98:26:88:7f:c2:26:82:25:ea:6d:f1: 03:f7:63:c9:d8:1f:1d:6b:c7:dd:b8:b5:63:16:5c:1e:bb:ca: 48:69:5b:54:a7:ca:39:f0:33:70:29:42:ae:32:3e:bc:2b:b6: 9a:cc:f3:71:57:bd:cb:c1:fc:9c:96:cf:7a:5c:1b:38:70:f6: b3:2f:76:ea:63:20:83:e7:49:75:44:40:dc:b7:50:6c:d9:ef: bf:9d:73:35:63:1f:c2:51:44:d0:d4:0c:45:02:f2:3a:8f:50: 73:dc:33:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0R3NGy9Wpjd1SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZDRmZjc4ZDMtMmJiZi00MDc2LTgwYjMtZjI2YzM0NjhlMGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrK3dlzUSzM+GH7ZYCX05STuKutznjNTRsAJ 4by4KGb1FM6MQ+rclQVrVAFeHL3T2jKc7OmjT5rxRkY6wQaCjiisdLbS7pj4Fyl7 6TvwndUmw/8Fk5NBXulhtILqSviUxNgXS8LxDFuPMTkTOfa8dyKyR+sLCaoHcRwb drgkY1VCM8QoiZoY5zYgSIREccRLFL8/iBCIxlQ5E0cTpnbpc7v3d1mMrKibmppb dtF+CJkgEu2cbXQp12XNj5KBbyZSF7Gn8hvCB95qpl7iJYqVbFtxVtYVqV6JsN2T GOCU3xhmfyC+EJ3RlZwDNLTYhblSW4O8BvsDZWkHkDdNCN6W3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnwDfT5TwYhSFlSN8Dd//30zAPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDRhZGM4YmUtNjk0OS0z ODFmLTg1ZWMtMGVmNDJmMmQ1Mjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3so7YM3YJgqvhrUM7dY+GSFT8SUfkwoNnPRfYv5IQgoj+oe8CHjC84 JtNJrJrzfbVoxJcoLQFNih0t/YtxjIECPe9j2Zcs/Y6LjHBIYuT7/W4Tmx56tefY 4pWpyT0iyW1tZwNMMka05tE1s5O1yn60oYUHxQCnlX50dJQvI3Sl0gIB2mAieySS sr2ckv/6wwPlpSMt6+GYJoh/wiaCJept8QP3Y8nYHx1rx924tWMWXB67ykhpW1Sn yjnwM3ApQq4yPrwrtprM83FXvcvB/JyWz3pcGzhw9rMvdupjIIPnSXVEQNy3UGzZ 77+dczVjH8JRRNDUDEUC8jqPUHPcM7U= -----END CERTIFICATE-----Generated at Sat Apr 26 22:06:43 2025 by rpki-client