$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0a83b17-4b26-3f9d-b613-8ad0e72c3ab2.roa File: c0a83b17-4b26-3f9d-b613-8ad0e72c3ab2.roa (raw, json) Hash identifier: H1XB4zppoumTj6HrXrzzuIht9w6Feu48WZAtAWnK6S0= Subject key identifier: C2:0D:59:E0:0C:0E:87:E4:42:30:E3:CD:AC:57:17:B6:3C:DC:EC:DE Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849A1EF765B30F30328E4BA22C0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0a83b17-4b26-3f9d-b613-8ad0e72c3ab2.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 63199 IP address blocks: 148.153.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:76:5b:30:f3:03:28:e4:ba:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=cea23f9c-d365-4ecf-97d4-35c354394066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d9:12:e2:4a:1b:6e:21:9d:f7:85:b8:dd:cc: 37:1a:ff:bb:35:45:29:41:31:1b:7d:ed:d7:46:e1: 0e:80:f1:a6:fd:d5:6a:fd:16:88:0d:37:fa:db:d9: 65:d4:13:90:82:6b:ef:cc:f0:0e:71:14:c0:c6:cb: f7:b9:68:ac:a8:f5:c3:ef:70:1f:83:58:eb:ff:15: 1b:36:f3:7f:1b:5a:00:27:c7:03:1f:14:ff:eb:f5: 4d:71:35:67:b8:a5:7d:f6:3b:fd:87:95:0d:c2:01: 2d:14:2d:a1:fd:2c:87:f6:e1:da:7c:9d:10:2c:ee: 12:35:17:01:b0:b2:6a:b8:dc:c1:1e:c6:f5:e8:74: cf:b3:9b:5e:4a:d4:22:1f:06:b2:d5:bf:15:32:88: f7:e4:3f:78:d6:d8:83:27:30:2b:1d:57:d1:43:74: 00:f9:8d:92:8d:c5:fc:72:9c:1b:9a:2b:0d:69:de: d8:e2:ea:51:86:0b:4b:4f:28:f3:19:f5:ff:80:5a: e8:e7:e8:b8:5e:72:b9:61:b8:db:e1:db:fd:7f:77: 55:ff:ec:9e:43:c4:4e:0e:62:45:97:ae:95:61:68: d6:d1:0f:f6:6e:12:8e:5b:be:a8:1d:c7:dd:e7:f8: 94:cb:6e:f9:98:e9:58:e4:59:00:66:e9:38:f5:63: 74:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0D:59:E0:0C:0E:87:E4:42:30:E3:CD:AC:57:17:B6:3C:DC:EC:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0a83b17-4b26-3f9d-b613-8ad0e72c3ab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:5e:cb:f6:8b:85:84:fc:fa:6f:11:dd:13:16:dd:ca:bc:d1: 1a:3f:67:5a:cb:a9:80:15:01:65:16:19:39:0e:4d:e8:e9:d4: 2c:f5:a8:eb:e6:db:47:01:cf:b5:c2:c2:de:28:aa:39:33:55: de:40:8a:d2:93:36:17:04:06:24:87:2b:fa:2e:55:16:57:65: 70:2e:ee:e4:bd:c8:f9:a8:5a:5c:97:84:dd:13:7f:3f:ca:c6: c4:e4:9f:5f:56:8a:d6:98:c3:8f:23:96:0f:bf:86:35:44:19: 54:43:e6:c0:8e:6d:8a:f2:9c:65:cd:bf:92:bd:c8:4a:37:95: dd:d5:c3:aa:cf:93:f7:f4:13:62:66:13:0a:ec:91:cc:5e:e1: d2:8a:ce:c0:c8:26:03:9c:26:ea:59:ce:3e:9b:9b:7b:cf:73: 09:46:5e:8f:3c:60:5b:24:27:75:67:a4:39:88:ae:09:83:07: da:e4:5d:dc:c4:45:94:aa:21:3a:24:3e:90:e2:fe:1f:61:72: e6:1b:c5:db:0f:c6:dc:8b:c6:60:aa:f0:f8:53:51:7f:f8:72: 58:9c:8b:fc:5a:23:34:7c:87:e9:d6:4e:f0:f6:8a:d7:17:b9: f4:fd:ce:a6:d1:3b:ee:83:5c:48:0b:fb:60:45:8a:88:4e:83: a8:3c:ba:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73ZbMPMDKOS6IsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk Y2VhMjNmOWMtZDM2NS00ZWNmLTk3ZDQtMzVjMzU0Mzk0MDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9kS4kobbiGd94W43cw3Gv+7NUUpQTEbfe3X RuEOgPGm/dVq/RaIDTf629ll1BOQgmvvzPAOcRTAxsv3uWisqPXD73Afg1jr/xUb NvN/G1oAJ8cDHxT/6/VNcTVnuKV99jv9h5UNwgEtFC2h/SyH9uHafJ0QLO4SNRcB sLJquNzBHsb16HTPs5teStQiHway1b8VMoj35D941tiDJzArHVfRQ3QA+Y2SjcX8 cpwbmisNad7Y4upRhgtLTyjzGfX/gFro5+i4XnK5Ybjb4dv9f3dV/+yeQ8RODmJF l66VYWjW0Q/2bhKOW76oHcfd5/iUy275mOlY5FkAZuk49WN0UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMINWeAMDofkQjDjzaxXF7Y83OzeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYzBhODNiMTctNGIyNi0z ZjlkLWI2MTMtOGFkMGU3MmMzYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJlYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9ey/aLhYT8+m8R3RMW3cq80Ro/Z1rLqYAVAWUWGTkOTejp1Cz1qOvm 20cBz7XCwt4oqjkzVd5AitKTNhcEBiSHK/ouVRZXZXAu7uS9yPmoWlyXhN0Tfz/K xsTkn19WitaYw48jlg+/hjVEGVRD5sCObYrynGXNv5K9yEo3ld3Vw6rPk/f0E2Jm Ewrskcxe4dKKzsDIJgOcJupZzj6bm3vPcwlGXo88YFskJ3VnpDmIrgmDB9rkXdzE RZSqITokPpDi/h9hcuYbxdsPxtyLxmCq8PhTUX/4clici/xaIzR8h+nWTvD2itcX ufT9zqbRO+6DXEgL+2BFiohOg6g8uiY= -----END CERTIFICATE-----Generated at Mon Apr 28 12:32:35 2025 by rpki-client