$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa File: a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa (raw, json) Hash identifier: DfmO/24871Qq2+cmFUtpdnYOYsEg/ir94TaWRLeaFMI= Subject key identifier: AF:EB:13:43:18:B8:ED:3E:96:EC:AD:DE:82:BF:82:50:CB:63:AB:82 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849AA4F7025EA2729D6A6F7C880 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 63199 IP address blocks: 148.153.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:70:25:ea:27:29:d6:a6:f7:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=609df4a2-5791-45bf-bb40-5b712ebf76a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d4:42:dd:0d:35:f0:c9:eb:73:a6:03:1f:97: 34:3d:78:b6:5a:76:68:5e:66:19:33:69:a8:5a:04: d3:ee:60:69:94:43:52:91:a7:1c:ed:5c:46:0b:17: 4c:c6:56:79:da:68:ee:ad:d6:a5:47:d3:62:f3:d3: fd:d4:a6:79:c7:04:09:ea:c4:45:bd:b6:5d:69:5a: 40:c7:54:f0:9d:33:80:8c:d6:2b:4f:24:a8:a8:d4: 31:b1:56:47:69:7f:9b:f9:14:c8:ae:4e:55:41:48: 07:d0:d3:4d:27:76:a5:35:24:9d:b0:81:96:d5:1d: da:3f:f8:68:0e:68:92:af:69:53:61:db:29:ab:18: 3a:6c:db:53:6c:99:b0:8a:1d:d4:16:e0:f3:a7:a8: 58:a2:0e:a1:2c:ed:da:b2:f7:eb:37:f1:c1:cb:b6: d9:1b:3e:b4:0e:f2:33:4d:d4:ca:f6:ea:3f:bb:e1: e6:a1:fc:17:d5:5b:80:48:34:91:71:fc:a9:46:09: c9:6e:70:87:bf:85:45:4a:bd:4c:b5:6b:68:42:b6: ae:09:02:3e:21:cb:f8:90:65:6d:d3:bd:86:cf:f6: d7:f2:4c:ca:98:ba:3a:9c:3c:f0:2d:47:59:ea:62: 1d:6f:e9:70:d5:df:28:00:11:0c:5b:cc:1f:85:4d: dc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EB:13:43:18:B8:ED:3E:96:EC:AD:DE:82:BF:82:50:CB:63:AB:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:47:94:e7:fb:89:a1:05:9c:cf:5d:c7:01:f5:a1:a5:3a:13: 6d:f9:6e:80:f7:56:c4:e2:b7:8a:20:18:88:23:f7:f7:d1:55: 26:27:68:84:63:65:54:db:52:01:be:3f:33:0e:1e:2f:b8:a1: 73:5b:97:dc:62:f9:d2:03:e1:1e:9e:bc:c6:a5:62:1b:3e:a5: ac:3f:73:f2:6f:46:b8:cc:f1:98:08:f9:01:6b:e1:1f:6a:0e: 91:08:41:70:d6:17:f7:be:cf:f5:cc:4c:bd:07:62:10:de:19: 08:82:b8:46:d6:1f:8b:ea:38:a7:4f:c1:1e:bd:8d:99:18:a8: 6d:7d:49:59:ed:65:b3:f5:d1:17:7b:c6:f8:59:94:0e:ec:9f: a1:ac:f7:34:c9:4a:0f:a5:58:1d:d1:6e:b2:5d:5e:b6:9d:d7: 86:65:2c:d5:06:2e:ad:80:a4:72:9f:ad:b7:a7:4b:dc:91:e2: 45:c4:85:c5:6c:f8:fb:c7:91:13:0b:b1:5a:6c:a3:ec:d2:c4: 80:4e:20:8f:92:bc:e7:a4:85:46:59:da:ab:7f:d3:3b:79:b0: c7:65:37:ad:62:d2:12:c9:06:c7:6a:11:75:94:01:7c:21:a6: 37:3e:4a:76:f8:4d:63:56:75:69:84:c2:a4:47:19:62:9b:fd: 3a:d1:ec:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3Al6icp1qb3yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk NjA5ZGY0YTItNTc5MS00NWJmLWJiNDAtNWI3MTJlYmY3NmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9RC3Q018Mnrc6YDH5c0PXi2WnZoXmYZM2mo WgTT7mBplENSkacc7VxGCxdMxlZ52mjurdalR9Ni89P91KZ5xwQJ6sRFvbZdaVpA x1TwnTOAjNYrTySoqNQxsVZHaX+b+RTIrk5VQUgH0NNNJ3alNSSdsIGW1R3aP/ho DmiSr2lTYdspqxg6bNtTbJmwih3UFuDzp6hYog6hLO3asvfrN/HBy7bZGz60DvIz TdTK9uo/u+HmofwX1VuASDSRcfypRgnJbnCHv4VFSr1MtWtoQrauCQI+Icv4kGVt 072Gz/bX8kzKmLo6nDzwLUdZ6mIdb+lw1d8oABEMW8wfhU3cBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/rE0MYuO0+luyt3oK/glDLY6uCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTdmODU2ZDItNDFkNi0z NmViLTk2MGEtY2MxNWZjZTllMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpHlOf7iaEFnM9dxwH1oaU6E235boD3VsTit4ogGIgj9/fRVSYnaIRj ZVTbUgG+PzMOHi+4oXNbl9xi+dID4R6evMalYhs+paw/c/JvRrjM8ZgI+QFr4R9q DpEIQXDWF/e+z/XMTL0HYhDeGQiCuEbWH4vqOKdPwR69jZkYqG19SVntZbP10Rd7 xvhZlA7sn6Gs9zTJSg+lWB3RbrJdXrad14ZlLNUGLq2ApHKfrbenS9yR4kXEhcVs +PvHkRMLsVpso+zSxIBOII+SvOekhUZZ2qt/0zt5sMdlN61i0hLJBsdqEXWUAXwh pjc+Snb4TWNWdWmEwqRHGWKb/TrR7C0= -----END CERTIFICATE-----Generated at Mon Apr 28 02:16:54 2025 by rpki-client