$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/993582d7-04a2-3e94-9de9-9c420f0e0614.roa File: 993582d7-04a2-3e94-9de9-9c420f0e0614.roa (raw, json) Hash identifier: JtnSQuYqlZY11hLvZYBvhgzcyvxWdxXFOdcg6ODz+80= Subject key identifier: 6A:56:09:5F:20:ED:52:6D:BF:07:82:2A:4D:78:73:19:51:F6:86:AB Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849DC8FC6B5B78C4FC141A4DF80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/993582d7-04a2-3e94-9de9-9c420f0e0614.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 63199 IP address blocks: 148.153.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c6:b5:b7:8c:4f:c1:41:a4:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=cf5894ff-bd86-4a30-b572-7a7c142678bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d9:f7:6d:d8:48:49:ff:d2:3b:12:af:13:05: 53:38:2b:7c:a9:8d:c3:68:a1:6e:be:eb:2c:20:56: 39:ff:77:c5:d5:79:8b:2a:47:49:e3:6a:d9:36:48: e8:75:43:99:93:e3:5d:c9:7a:88:ad:f4:ae:23:30: ce:88:22:53:84:b2:16:2d:ae:5e:57:0e:7d:1f:f3: 7b:4b:16:49:f5:36:30:9a:63:02:dc:f4:d4:a7:ff: c2:f3:b4:6f:f5:c6:79:72:d0:0e:c1:41:de:63:d2: 83:42:e3:2f:0a:21:47:8f:59:c5:18:e5:6c:bc:bd: 99:6c:96:84:2a:06:ee:cc:aa:36:df:13:6a:e7:86: 4e:17:6c:be:b4:18:26:c2:50:55:98:85:d0:33:00: bc:c1:ab:c3:22:ce:bb:95:15:3a:3b:92:2f:ae:ab: 9c:2e:a1:99:af:a8:bd:91:57:89:e6:5b:a7:4d:6f: cc:56:4c:2e:6c:d7:1f:df:03:e7:a0:41:aa:f0:fc: c0:7c:65:49:62:fc:a9:01:de:5c:d4:10:13:d4:41: 6e:80:e2:11:81:15:d2:6e:db:e9:37:8e:ff:26:57: 96:29:0a:15:52:ba:fa:ec:43:db:52:bf:4e:37:7b: 3f:2f:86:13:14:78:db:ab:f4:29:37:b1:44:72:99: 9c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:56:09:5F:20:ED:52:6D:BF:07:82:2A:4D:78:73:19:51:F6:86:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/993582d7-04a2-3e94-9de9-9c420f0e0614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:0e:d4:ed:97:ec:08:fd:51:ea:21:f9:53:7a:92:1a:67:23: 0f:96:17:70:9f:f3:88:06:4f:75:91:73:7a:af:4b:74:48:a3: 61:a5:02:84:64:30:8e:3d:b5:a1:95:00:60:f1:65:51:d4:57: 35:e9:66:60:7e:0e:d1:b7:a5:52:e8:cb:88:92:b2:d2:52:3f: b7:96:37:0e:2a:fd:53:c0:96:e8:83:20:b3:78:34:7d:10:c8: 1d:75:1c:7f:64:ed:24:c5:99:03:b2:40:b4:27:09:ea:cb:04: 88:66:76:e5:d1:5a:42:ba:4b:93:e8:16:9e:52:40:c9:26:44: c4:b9:43:c0:a6:6d:20:59:62:44:19:cb:0c:dc:93:df:6b:a2: 67:cc:c8:cd:86:b2:2e:7c:ac:ae:7f:11:8f:b2:95:31:bc:3f: 18:a9:bc:bb:41:3e:9c:dd:9e:49:1c:72:47:ee:e0:be:7b:58: 48:9b:91:4e:26:c8:de:3d:7b:52:99:90:3d:02:92:6f:d5:ab: ca:e2:bd:95:f6:7f:ba:a3:e0:8b:90:62:c8:ab:0b:37:6e:9d: 25:c0:f5:79:d8:71:31:d6:42:11:38:8d:d3:5b:53:d1:99:f3: 8c:43:1d:4b:07:fc:ea:c4:e9:08:9f:9e:63:ca:03:e8:ae:fe: a1:cb:3a:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8a1t4xPwUGk34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk Y2Y1ODk0ZmYtYmQ4Ni00YTMwLWI1NzItN2E3YzE0MjY3OGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNn3bdhISf/SOxKvEwVTOCt8qY3DaKFuvuss IFY5/3fF1XmLKkdJ42rZNkjodUOZk+NdyXqIrfSuIzDOiCJThLIWLa5eVw59H/N7 SxZJ9TYwmmMC3PTUp//C87Rv9cZ5ctAOwUHeY9KDQuMvCiFHj1nFGOVsvL2ZbJaE KgbuzKo23xNq54ZOF2y+tBgmwlBVmIXQMwC8wavDIs67lRU6O5IvrqucLqGZr6i9 kVeJ5lunTW/MVkwubNcf3wPnoEGq8PzAfGVJYvypAd5c1BAT1EFugOIRgRXSbtvp N47/JleWKQoVUrr67EPbUr9ON3s/L4YTFHjbq/QpN7FEcpmcwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpWCV8g7VJtvweCKk14cxlR9oarMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvOTkzNTgyZDctMDRhMi0z ZTk0LTlkZTktOWM0MjBmMGUwNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJliMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQO1O2X7Aj9Ueoh+VN6khpnIw+WF3Cf84gGT3WRc3qvS3RIo2GlAoRk MI49taGVAGDxZVHUVzXpZmB+DtG3pVLoy4iSstJSP7eWNw4q/VPAluiDILN4NH0Q yB11HH9k7STFmQOyQLQnCerLBIhmduXRWkK6S5PoFp5SQMkmRMS5Q8CmbSBZYkQZ ywzck99romfMyM2Gsi58rK5/EY+ylTG8PxipvLtBPpzdnkkcckfu4L57WEibkU4m yN49e1KZkD0Ckm/Vq8rivZX2f7qj4IuQYsirCzdunSXA9XnYcTHWQhE4jdNbU9GZ 84xDHUsH/OrE6QifnmPKA+iu/qHLOl0= -----END CERTIFICATE-----Generated at Sun Jun 15 16:12:18 2025 by rpki-client