$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a4df4226-b7a6-378c-a2c6-0a3e65851339.roa File: a4df4226-b7a6-378c-a2c6-0a3e65851339.roa (raw, json) Hash identifier: 4vKqfi0V+LKOKF3Zb1zEQ7fox/b7o5vOjXyY2of3gWA= Subject key identifier: 69:57:0F:6F:74:31:30:62:E3:4C:DD:B6:12:0F:7D:01:0C:42:87:F9 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849A1EF768B755E13A3E0905A00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a4df4226-b7a6-378c-a2c6-0a3e65851339.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 63199 IP address blocks: 148.153.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:76:8b:75:5e:13:a3:e0:90:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=96da2c47-157a-4fa3-b9a8-a5a9de957b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:c4:a9:54:2c:51:49:d7:09:c1:15:5c:25: 4b:7b:72:0f:4a:d0:08:52:34:d9:24:bc:f4:6a:d1: 51:f6:3d:fa:b1:e3:b4:a6:7a:e1:5d:70:b4:ce:38: 2d:04:f5:f1:41:c8:bf:7a:4c:10:4c:d9:73:e1:42: 27:0b:18:f7:a0:68:3c:31:86:1b:6a:9a:64:2b:44: ab:6b:d7:a5:be:6b:6a:ad:aa:0e:e9:d6:84:61:cc: dd:94:f9:1e:9f:3e:c4:fb:30:f7:16:7b:5d:e9:95: 6c:dc:c0:e2:c1:fc:ea:0e:a3:ed:60:20:b8:94:b2: 23:a5:a8:e4:e5:da:3e:84:32:55:b7:fc:de:48:af: a1:19:04:c6:01:e1:68:7e:45:a3:a6:d8:93:6e:6f: 9b:ff:ab:96:67:27:6a:88:40:4d:11:c0:f1:00:21: fe:4f:32:37:5b:30:8c:b5:c1:09:b1:37:d3:c9:1c: 9b:03:9c:ea:49:ac:62:ed:37:19:15:78:57:2a:72: 34:4d:df:7c:9b:db:6c:c6:c5:9f:e3:25:2a:a3:14: fb:96:83:df:7d:37:4b:06:98:3d:c4:77:89:b8:b1: 6b:4e:82:5e:00:f4:ac:a4:b5:e1:bf:58:98:72:90: df:3f:64:bd:e5:a6:30:bf:05:d9:fb:88:ce:ad:d6: 13:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:57:0F:6F:74:31:30:62:E3:4C:DD:B6:12:0F:7D:01:0C:42:87:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a4df4226-b7a6-378c-a2c6-0a3e65851339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b9:0e:9c:1b:7a:29:11:e3:54:cb:23:a1:61:7b:fc:5f:6b: a4:e1:ff:ef:e6:ef:ef:a8:14:93:d9:66:8d:37:50:e9:db:a6: 30:ba:ed:0e:6e:d7:88:6d:66:59:dc:ab:15:8b:35:3f:e2:db: da:45:8c:ad:74:f8:1b:52:b1:42:d8:23:2f:6f:e2:2a:33:96: 1d:e2:47:18:95:38:cb:b1:4e:f9:35:30:41:2d:77:6e:d5:1b: 9f:02:d1:08:62:86:03:8a:53:b4:a3:be:d5:b2:e5:d9:59:81: 3f:4c:ec:72:8d:3e:a0:13:75:6c:5d:45:24:75:31:24:e2:e8: a2:e0:ee:d7:e0:8e:42:1c:4b:37:e0:7d:2b:a2:f3:29:f7:96: 4c:fa:71:73:26:f1:48:77:99:51:ff:b7:36:0a:12:95:7d:0e: b7:bc:e5:ef:08:ee:e4:9e:ec:bd:ca:60:e1:f3:a5:ad:5b:b7: f0:03:eb:f5:34:cf:b5:03:cc:f2:59:db:02:02:71:98:ab:53: 59:9e:25:aa:de:9f:b4:a5:d5:3a:e6:9e:aa:23:99:c4:a9:43: e1:84:f5:04:85:10:be:77:eb:36:d2:11:67:a1:f3:61:f4:4b: 8d:2d:7f:2e:26:85:31:c1:7e:33:d0:c9:c3:df:0a:40:c3:60: 6e:12:33:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73aLdV4To+CQWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk OTZkYTJjNDctMTU3YS00ZmEzLWI5YTgtYTVhOWRlOTU3YjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJDEqVQsUUnXCcEVXCVLe3IPStAIUjTZJLz0 atFR9j36seO0pnrhXXC0zjgtBPXxQci/ekwQTNlz4UInCxj3oGg8MYYbappkK0Sr a9elvmtqraoO6daEYczdlPkenz7E+zD3Fntd6ZVs3MDiwfzqDqPtYCC4lLIjpajk 5do+hDJVt/zeSK+hGQTGAeFofkWjptiTbm+b/6uWZydqiEBNEcDxACH+TzI3WzCM tcEJsTfTyRybA5zqSaxi7TcZFXhXKnI0Td98m9tsxsWf4yUqoxT7loPffTdLBpg9 xHeJuLFrToJeAPSspLXhv1iYcpDfP2S95aYwvwXZ+4jOrdYTXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlXD290MTBi40zdthIPfQEMQof5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTRkZjQyMjYtYjdhNi0z NzhjLWEyYzYtMGEzZTY1ODUxMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJm+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi5DpwbeikR41TLI6Fhe/xfa6Th/+/m7++oFJPZZo03UOnbpjC67Q5u 14htZlncqxWLNT/i29pFjK10+BtSsULYIy9v4iozlh3iRxiVOMuxTvk1MEEtd27V G58C0QhihgOKU7SjvtWy5dlZgT9M7HKNPqATdWxdRSR1MSTi6KLg7tfgjkIcSzfg fSui8yn3lkz6cXMm8Uh3mVH/tzYKEpV9Dre85e8I7uSe7L3KYOHzpa1bt/AD6/U0 z7UDzPJZ2wICcZirU1meJaren7Sl1TrmnqojmcSpQ+GE9QSFEL536zbSEWeh82H0 S40tfy4mhTHBfjPQycPfCkDDYG4SM0I= -----END CERTIFICATE-----Generated at Sun Apr 27 14:17:44 2025 by rpki-client