$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa File: 251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa (raw, json) Hash identifier: zOYB3Sj7tC0LhwCn4dk2RdmaC4WEZ1uLWfnmaPpxiME= Subject key identifier: 85:C7:04:3A:9A:8C:DE:B1:0C:69:8C:8A:95:B1:94:4C:46:D1:5D:44 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584A10354930DA92047EE7D6B840 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 63199 IP address blocks: 148.153.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:49:30:da:92:04:7e:e7:d6:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=6fba5c89-5202-447b-a629-86cffdadbad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:22:b3:6b:84:61:b1:79:8b:0a:6c:eb:ed:05: 9f:96:99:e9:a7:79:29:87:f5:81:1c:89:24:52:4a: df:47:63:16:a4:69:80:64:90:d3:ab:26:ba:97:50: 7e:96:d2:96:e3:54:36:df:43:1d:6f:c1:f6:49:85: ee:3d:9d:79:86:8a:5a:96:68:36:28:66:2f:fa:02: 7d:5d:46:f5:cc:6c:91:28:ad:e1:19:2b:8d:92:55: 69:87:09:17:91:13:29:fd:ba:36:ba:03:94:8a:74: 48:72:84:c3:ce:c4:b9:8b:93:6d:84:84:0e:35:de: 30:84:84:72:d6:3e:53:3c:fb:12:43:e3:99:8f:40: 5f:f1:d0:ac:9f:62:20:b7:ed:8e:c3:76:4c:71:75: c7:03:d0:72:a6:ee:22:47:bc:2d:98:52:23:b6:f8: 55:fd:51:46:3c:c3:bb:a3:99:30:d5:40:73:3b:af: 64:f3:77:27:bb:ba:6f:68:a8:f4:3d:45:a9:9f:af: c5:9b:42:cb:fb:4d:13:35:20:7c:42:e0:38:fe:cd: 4b:39:04:e0:bd:2a:bf:81:cb:77:7e:60:27:7e:9a: 3e:fb:ad:2c:36:11:be:a8:d0:5e:69:1f:00:69:5b: b6:20:09:14:ff:02:f3:1c:ca:e3:9d:a4:ae:f7:c5: 07:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C7:04:3A:9A:8C:DE:B1:0C:69:8C:8A:95:B1:94:4C:46:D1:5D:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a8:a8:82:45:04:94:bc:4c:34:f5:1b:c1:ec:c8:9f:13:e8: 95:e2:73:97:d0:71:3d:cc:37:0f:f2:d7:75:85:e2:4c:1f:d4: 28:e0:5a:bb:bf:5c:f3:a3:91:f0:da:cc:f1:bd:0d:6d:75:01: bf:06:a9:12:f4:35:70:8a:3c:d6:ee:e3:fb:53:62:d6:7b:3f: 80:58:ca:6e:34:76:44:9b:00:93:8f:6b:64:1d:fa:11:b3:19: 44:81:b3:3b:0f:36:1d:ff:48:fc:21:ca:69:57:f5:15:96:d4: 09:2c:c6:d9:fc:52:04:f5:db:d3:e6:e1:e7:44:d1:53:7b:82: bd:d7:fb:7b:cc:54:0b:9a:f7:7a:7a:e2:19:79:f6:a5:ab:ac: 8e:d3:37:b8:e9:b0:8a:95:38:0a:a2:2f:78:a8:65:27:d3:ae: 74:90:74:d7:62:2d:55:e7:06:a1:bf:34:bd:d3:37:cc:d8:2d: dd:19:9e:58:00:d5:c3:d6:b9:a4:77:98:57:e2:b6:f6:8c:73: da:95:0a:6a:ad:a5:1b:00:43:4e:cb:ca:28:7f:df:2f:24:a2: a0:47:b1:11:0a:0e:79:55:d5:d9:9f:91:de:e4:b0:bc:06:9d: 66:f8:69:f0:58:c0:54:9c:ed:b6:0d:7d:6f:d3:55:2c:cc:2b: f9:29:7f:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUkw2pIEfufWuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk NmZiYTVjODktNTIwMi00NDdiLWE2MjktODZjZmZkYWRiYWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyKza4RhsXmLCmzr7QWflpnpp3kph/WBHIkk UkrfR2MWpGmAZJDTqya6l1B+ltKW41Q230Mdb8H2SYXuPZ15hopalmg2KGYv+gJ9 XUb1zGyRKK3hGSuNklVphwkXkRMp/bo2ugOUinRIcoTDzsS5i5NthIQONd4whIRy 1j5TPPsSQ+OZj0Bf8dCsn2Igt+2Ow3ZMcXXHA9Bypu4iR7wtmFIjtvhV/VFGPMO7 o5kw1UBzO69k83cnu7pvaKj0PUWpn6/Fm0LL+00TNSB8QuA4/s1LOQTgvSq/gct3 fmAnfpo++60sNhG+qNBeaR8AaVu2IAkU/wLzHMrjnaSu98UH+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXHBDqajN6xDGmMipWxlExG0V1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMjUxYWFhMWQtNDk2Zi0z MGFlLThhZWEtZDc1YmY2MDIwY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+oqIJFBJS8TDT1G8HsyJ8T6JXic5fQcT3MNw/y13WF4kwf1CjgWru/ XPOjkfDazPG9DW11Ab8GqRL0NXCKPNbu4/tTYtZ7P4BYym40dkSbAJOPa2Qd+hGz GUSBszsPNh3/SPwhymlX9RWW1Aksxtn8UgT129Pm4edE0VN7gr3X+3vMVAua93p6 4hl59qWrrI7TN7jpsIqVOAqiL3ioZSfTrnSQdNdiLVXnBqG/NL3TN8zYLd0ZnlgA 1cPWuaR3mFfitvaMc9qVCmqtpRsAQ07Lyih/3y8koqBHsREKDnlV1dmfkd7ksLwG nWb4afBYwFSc7bYNfW/TVSzMK/kpf+o= -----END CERTIFICATE-----Generated at Sun Jun 15 16:45:25 2025 by rpki-client