$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/700e458d-b871-3d96-a213-ce09bd907b87.roa File: 700e458d-b871-3d96-a213-ce09bd907b87.roa (raw, json) Hash identifier: D1Vgf7IDG56lSkrdKegeZhWqjobRr+iBUR3RVHtAQ8A= Subject key identifier: E0:70:73:26:F5:EE:78:49:1B:15:0F:8B:0F:CF:2B:8F:FA:A0:EB:26 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F432858497544608343CC4967DA9E4EE0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/700e458d-b871-3d96-a213-ce09bd907b87.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 63199 IP address blocks: 148.153.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:60:83:43:cc:49:67:da:9e:4e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=6c008a18-38d7-4877-9b1a-6cbbc2a87972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2d:10:a3:a2:b8:03:14:c2:63:9f:3d:ac:95: b1:d0:d2:06:1a:73:43:04:a2:c3:b6:d7:c8:68:f6: 10:e8:92:33:46:3e:b7:08:20:bb:05:39:62:59:fe: 81:f7:42:ca:ba:da:74:b3:50:0a:e4:6e:81:40:2a: f1:a8:25:d4:e8:30:51:80:1a:bf:d3:a1:6c:cc:cc: 71:29:d6:69:f8:6f:61:f0:d0:a9:fb:2e:15:02:26: 1a:56:99:0e:c6:d8:83:5f:91:2f:84:c5:6b:2b:94: fa:97:1e:37:86:4d:19:28:ac:40:e5:1d:62:41:e4: aa:ae:60:ca:de:56:cc:2e:c5:73:92:f0:31:c0:fa: 2a:c1:8f:b2:b6:41:fd:8f:ff:08:c8:2f:ed:e2:b5: 56:33:28:0d:09:8c:d5:d7:cc:96:6c:05:83:f5:88: 71:3a:95:09:31:ca:27:bc:3b:6c:53:37:e5:96:97: f8:79:e8:9f:ce:66:f0:cf:15:ba:29:6e:4e:87:9b: 4d:d8:9c:0e:47:ec:40:39:07:bc:eb:fc:e6:9f:9c: c4:96:b8:9d:78:63:c7:ea:e1:9e:e5:7a:49:8c:3c: 8f:00:37:e4:35:2f:ce:16:2b:dc:a1:d9:a8:d6:aa: 7d:d4:17:f8:c7:20:a3:eb:8b:58:0c:7a:73:a7:8e: 45:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:70:73:26:F5:EE:78:49:1B:15:0F:8B:0F:CF:2B:8F:FA:A0:EB:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/700e458d-b871-3d96-a213-ce09bd907b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:75:24:34:e3:ef:84:35:30:73:60:7d:f8:4d:e4:69:9c:e2: 5b:3f:3e:e1:e5:47:c5:e6:c5:82:67:e9:83:3d:a6:81:e9:50: 2b:16:2a:c4:55:56:2f:0a:d8:81:d8:d2:a9:95:ac:ec:10:5a: c0:4f:5c:a7:16:46:95:67:17:33:7e:a3:37:42:74:62:c5:ef: 5e:65:a6:8b:5f:c7:ee:e1:fc:7a:f6:24:85:6b:6c:e2:81:9c: b6:96:8c:45:6c:a9:8c:b2:f1:95:6e:59:6d:41:2a:8c:03:87: 78:f5:d5:39:db:0f:c2:db:98:97:d5:bd:fd:52:63:76:9f:53: 6f:17:4b:62:56:bb:71:06:6f:c8:4d:73:86:8b:cd:22:79:3c: 77:12:03:c2:e8:08:c2:44:2a:fd:76:77:f8:42:eb:b1:76:77: 4e:78:c4:31:87:f3:c9:23:48:ad:96:e2:f9:91:3e:fd:29:de: 54:be:87:89:21:8b:fc:4e:fa:63:6c:07:bc:90:c3:25:53:8d: aa:96:84:e4:3e:73:9e:29:e3:fd:ad:7a:be:a3:ea:cf:41:8c: 1c:3c:cd:a0:df:b1:f5:31:da:8c:2f:1f:c1:8b:77:35:67:db: e3:97:dd:54:cf:65:6a:3a:ad:b7:71:45:05:8c:56:ad:e3:ea: a5:7f:68:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RGCDQ8xJZ9qeTuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk NmMwMDhhMTgtMzhkNy00ODc3LTliMWEtNmNiYmMyYTg3OTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7i0Qo6K4AxTCY589rJWx0NIGGnNDBKLDttfI aPYQ6JIzRj63CCC7BTliWf6B90LKutp0s1AK5G6BQCrxqCXU6DBRgBq/06FszMxx KdZp+G9h8NCp+y4VAiYaVpkOxtiDX5EvhMVrK5T6lx43hk0ZKKxA5R1iQeSqrmDK 3lbMLsVzkvAxwPoqwY+ytkH9j/8IyC/t4rVWMygNCYzV18yWbAWD9YhxOpUJMcon vDtsUzfllpf4eeifzmbwzxW6KW5Oh5tN2JwOR+xAOQe86/zmn5zElrideGPH6uGe 5XpJjDyPADfkNS/OFivcodmo1qp91Bf4xyCj64tYDHpzp45FLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBwcyb17nhJGxUPiw/PK4/6oOsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNzAwZTQ1OGQtYjg3MS0z ZDk2LWEyMTMtY2UwOWJkOTA3Yjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClJnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE11JDTj74Q1MHNgffhN5Gmc4ls/PuHlR8XmxYJn6YM9poHpUCsWKsRV Vi8K2IHY0qmVrOwQWsBPXKcWRpVnFzN+ozdCdGLF715lpotfx+7h/Hr2JIVrbOKB nLaWjEVsqYyy8ZVuWW1BKowDh3j11TnbD8LbmJfVvf1SY3afU28XS2JWu3EGb8hN c4aLzSJ5PHcSA8LoCMJEKv12d/hC67F2d054xDGH88kjSK2W4vmRPv0p3lS+h4kh i/xO+mNsB7yQwyVTjaqWhOQ+c54p4/2ter6j6s9BjBw8zaDfsfUx2owvH8GLdzVn 2+OX3VTPZWo6rbdxRQWMVq3j6qV/aF4= -----END CERTIFICATE-----Generated at Sun Apr 27 11:23:14 2025 by rpki-client