$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/22f2a491-5aba-30ba-8bc5-08890e1745f9.roa File: 22f2a491-5aba-30ba-8bc5-08890e1745f9.roa (raw, json) Hash identifier: CNqNAN80apWHvfERf9XUQnGu2bE2GxBHxGxN16UXQS8= Subject key identifier: 02:E4:6B:61:08:62:D9:4E:BC:B8:14:F3:53:D0:BB:CF:45:CD:9B:30 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849D85F9F731E63A858EC015400 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/22f2a491-5aba-30ba-8bc5-08890e1745f9.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 63199 IP address blocks: 148.153.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:9f:73:1e:63:a8:58:ec:01:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=e3f60241-e4c6-485a-8fd3-72a62923aaf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:75:aa:d4:ca:fb:7b:c1:e8:54:51:f1:38:34: 4e:6e:4f:b9:78:25:39:6f:cd:a9:e9:fa:94:48:a3: 3c:ea:c4:f0:5a:63:b8:f4:68:c0:60:db:20:b0:e2: 8c:a6:78:7f:24:11:35:3c:36:45:a0:33:7f:54:10: ca:82:29:33:1d:07:b2:9c:18:ac:b9:b0:d7:92:08: 4c:89:ca:61:41:c4:70:35:53:d6:4c:87:05:08:b9: 2c:cb:aa:13:32:3c:ae:8e:c2:4c:9d:a4:42:d8:f1: 2a:42:b0:a0:20:cf:3c:c6:02:70:55:bb:c3:e9:5a: e7:56:6d:2a:09:77:7e:81:ef:f3:f1:30:3a:45:87: 6f:58:7c:24:0b:de:ae:cb:ce:65:1f:a0:f5:75:cc: d3:48:27:c7:b7:7c:94:cb:be:94:d2:32:43:56:97: 2f:e4:40:97:56:e3:c7:01:aa:ab:37:d2:4e:f4:c8: 51:22:07:ff:d8:88:c0:af:85:f5:d6:15:dc:0b:6d: e9:0e:03:aa:f8:a1:d3:14:7e:82:45:fd:a5:97:ae: ae:1f:41:ac:61:a6:30:ae:3d:ab:42:20:b6:0e:96: 85:5d:5b:ca:26:b3:d5:63:b7:00:5f:3d:f7:0c:b0: 22:1b:0b:23:23:6f:97:3e:4f:83:a1:18:1f:87:90: 2e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E4:6B:61:08:62:D9:4E:BC:B8:14:F3:53:D0:BB:CF:45:CD:9B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/22f2a491-5aba-30ba-8bc5-08890e1745f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:9a:9b:be:2e:01:1e:bc:37:68:c9:51:fe:aa:65:b5:1d:a2: 3f:4a:f0:aa:8b:6b:a9:04:99:58:c6:47:e3:dd:a2:8e:c8:83: 88:7a:e5:85:98:cd:4b:51:1e:23:52:d2:54:47:be:56:98:b6: 10:c0:54:92:27:30:31:5a:a5:f4:b4:33:52:42:0e:c0:2c:93: 1f:73:31:09:94:ae:d0:d0:67:df:24:aa:47:7d:cc:80:83:03: e8:82:bf:a1:90:c4:19:31:c6:49:11:77:2b:fd:da:8e:70:6d: 44:7d:7c:ae:d1:36:62:37:e2:31:01:69:70:d3:8d:d2:d8:5a: 65:20:d5:b4:0f:3a:26:76:68:10:dd:82:87:10:f6:52:de:39: 56:76:6d:a0:af:bb:5b:e3:bb:80:bd:4d:af:4c:a2:49:09:84: 53:4f:f1:35:26:61:b7:5e:ba:c0:6e:73:06:42:aa:e5:03:59: 2a:15:3d:4f:6a:dd:a7:58:c4:8f:ac:c2:16:13:c9:e7:71:a0: c4:40:1a:f3:b7:b0:49:f1:69:c6:35:84:07:9c:7c:a8:a1:30: 8a:9d:d3:76:0b:76:44:69:f0:80:8a:70:85:6e:61:af:7b:2a: f2:2c:99:59:6c:02:5f:b9:11:6a:3d:57:8a:57:a8:56:1a:02: 22:2e:eb:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX59zHmOoWOwBVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZTNmNjAyNDEtZTRjNi00ODVhLThmZDMtNzJhNjI5MjNhYWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XWq1Mr7e8HoVFHxODRObk+5eCU5b82p6fqU SKM86sTwWmO49GjAYNsgsOKMpnh/JBE1PDZFoDN/VBDKgikzHQeynBisubDXkghM icphQcRwNVPWTIcFCLksy6oTMjyujsJMnaRC2PEqQrCgIM88xgJwVbvD6VrnVm0q CXd+ge/z8TA6RYdvWHwkC96uy85lH6D1dczTSCfHt3yUy76U0jJDVpcv5ECXVuPH AaqrN9JO9MhRIgf/2IjAr4X11hXcC23pDgOq+KHTFH6CRf2ll66uH0GsYaYwrj2r QiC2DpaFXVvKJrPVY7cAXz33DLAiGwsjI2+XPk+DoRgfh5AunwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALka2EIYtlOvLgU81PQu89FzZswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMjJmMmE0OTEtNWFiYS0z MGJhLThiYzUtMDg4OTBlMTc0NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCam74uAR68N2jJUf6qZbUdoj9K8KqLa6kEmVjGR+Pdoo7Ig4h65YWY zUtRHiNS0lRHvlaYthDAVJInMDFapfS0M1JCDsAskx9zMQmUrtDQZ98kqkd9zICD A+iCv6GQxBkxxkkRdyv92o5wbUR9fK7RNmI34jEBaXDTjdLYWmUg1bQPOiZ2aBDd gocQ9lLeOVZ2baCvu1vju4C9Ta9MokkJhFNP8TUmYbdeusBucwZCquUDWSoVPU9q 3adYxI+swhYTyedxoMRAGvO3sEnxacY1hAecfKihMIqd03YLdkRp8ICKcIVuYa97 KvIsmVlsAl+5EWo9V4pXqFYaAiIu6xk= -----END CERTIFICATE-----Generated at Mon Jun 16 05:32:19 2025 by rpki-client