$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa File: 33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa (raw, json) Hash identifier: ZRjm+rlXc9JxbWlhRRt/Ztyn4F03qMkUjBcDVNN9Yg4= Subject key identifier: 6A:30:97:AA:BF:7B:2D:74:4A:39:C3:05:C2:E5:59:76:D1:9F:79:73 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F432858493FE1E0367E11891B3079B300 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa Signing time: Thu 20 Mar 2025 10:04:52 +0000 ROA not before: Thu 20 Mar 2025 10:04:52 +0000 ROA not after: Wed 18 Jun 2025 10:04:52 +0000 asID: 63199 IP address blocks: 148.153.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3f:e1:e0:36:7e:11:89:1b:30:79:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 20 10:04:52 2025 GMT Not After : Jun 18 10:04:52 2025 GMT Subject: CN=86856c8c-afe5-4732-9d5b-5602c734c57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a5:74:5a:a4:03:2c:91:36:5a:87:d0:00:6d: 90:f5:32:0f:3a:84:8c:81:d4:7b:89:ca:1d:7a:bb: dc:72:09:e0:f6:0b:69:df:64:a1:b6:06:f4:c7:ec: 78:87:60:95:7e:b4:68:55:f9:c0:1c:4c:ca:2c:b9: 44:ba:41:29:9b:df:ab:c8:8a:6f:d2:00:b6:6e:5d: 27:7b:9b:9c:fd:de:c4:0a:77:62:b9:d8:92:73:e1: b9:c3:63:1e:02:18:4d:43:6f:5e:c0:40:73:4e:db: 5c:b9:bd:62:16:6a:ac:02:ad:9b:23:83:fc:15:49: 7c:be:e7:db:44:14:84:9f:81:a3:26:ad:36:7c:2a: a8:62:28:00:62:c8:f7:f3:c1:9b:73:65:cf:0d:fd: dd:65:37:92:1f:27:1b:04:06:0f:c4:15:4f:1e:51: 52:73:d4:12:81:5d:6f:1d:0b:a2:0f:74:08:5d:f4: ce:a8:49:e1:24:b8:51:0b:08:86:a7:1c:1c:0a:09: 74:74:c1:75:0a:a1:8e:4b:25:11:09:36:59:76:8b: ca:23:79:11:14:02:8b:5a:8c:b0:e5:05:88:d7:3b: 25:0a:59:2b:4d:5f:48:48:ed:f7:da:f0:ad:fc:3a: 64:39:11:a8:e2:51:e5:48:d2:26:aa:d9:77:99:14: d5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:30:97:AA:BF:7B:2D:74:4A:39:C3:05:C2:E5:59:76:D1:9F:79:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:10:0f:ff:aa:89:eb:80:82:1f:b1:87:82:01:13:77:0c:61: 92:95:a5:dc:fa:0b:96:05:b2:08:24:2a:b1:e3:59:09:26:3b: f7:44:28:88:03:4b:a3:ae:c1:3d:41:ce:16:eb:77:df:d4:dd: 3e:19:21:d4:e2:e1:3e:82:07:a9:a9:aa:d1:5a:2a:ec:98:b0: 59:3a:22:3a:d7:b7:11:9e:9c:36:90:d9:a3:cf:a4:74:7c:5d: ca:62:93:9e:ca:07:b7:42:9e:01:e6:1c:dc:b1:6e:e3:6d:7b: 46:93:85:fb:5a:c6:dc:f3:38:2e:1b:73:1c:a5:70:cf:11:52: 7c:77:04:03:70:26:39:1b:b3:20:be:16:2c:31:e7:c6:fd:40: 40:1d:b9:e9:60:59:cf:c5:33:79:c8:19:d5:b3:4e:a5:96:dd: f9:29:40:c1:9e:16:ab:85:3a:9a:00:65:ed:a1:d4:16:28:8b: 1e:07:d4:6b:bf:a9:a0:40:2d:db:cd:6c:6b:a0:28:5b:00:01: a5:35:27:d7:f2:58:29:f6:0e:1e:e2:7a:a9:89:20:49:c6:bf: 10:c7:ab:0e:58:95:37:aa:ad:31:a9:c6:63:c4:81:71:9a:0d: e5:fa:ab:7b:f1:8d:26:7d:e5:88:c4:6d:6f:20:7d:cf:36:55: 34:2b:ae:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk/4eA2fhGJGzB5swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDMyMDEwMDQ1MloXDTI1MDYxODEwMDQ1MlowLzEtMCsGA1UEAxMk ODY4NTZjOGMtYWZlNS00NzMyLTlkNWItNTYwMmM3MzRjNTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6V0WqQDLJE2WofQAG2Q9TIPOoSMgdR7icod ervccgng9gtp32Shtgb0x+x4h2CVfrRoVfnAHEzKLLlEukEpm9+ryIpv0gC2bl0n e5uc/d7ECndiudiSc+G5w2MeAhhNQ29ewEBzTttcub1iFmqsAq2bI4P8FUl8vufb RBSEn4GjJq02fCqoYigAYsj388Gbc2XPDf3dZTeSHycbBAYPxBVPHlFSc9QSgV1v HQuiD3QIXfTOqEnhJLhRCwiGpxwcCgl0dMF1CqGOSyURCTZZdovKI3kRFAKLWoyw 5QWI1zslClkrTV9ISO332vCt/DpkORGo4lHlSNImqtl3mRTV2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGowl6q/ey10SjnDBcLlWXbRn3lzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMzNhNjE2YmUtY2U4MC0z NWMyLWI3ZjctZWE5YzAwYTJhNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJljMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQQD/+qieuAgh+xh4IBE3cMYZKVpdz6C5YFsggkKrHjWQkmO/dEKIgD S6OuwT1Bzhbrd9/U3T4ZIdTi4T6CB6mpqtFaKuyYsFk6IjrXtxGenDaQ2aPPpHR8 Xcpik57KB7dCngHmHNyxbuNte0aThftaxtzzOC4bcxylcM8RUnx3BANwJjkbsyC+ Fiwx58b9QEAduelgWc/FM3nIGdWzTqWW3fkpQMGeFquFOpoAZe2h1BYoix4H1Gu/ qaBALdvNbGugKFsAAaU1J9fyWCn2Dh7ieqmJIEnGvxDHqw5YlTeqrTGpxmPEgXGa DeX6q3vxjSZ95YjEbW8gfc82VTQrrj0= -----END CERTIFICATE-----Generated at Sun Apr 27 17:46:48 2025 by rpki-client