$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa File: ca4000da-8aab-337b-9ec7-04cc1a336133.roa (raw, json) Hash identifier: AjZxuL4G6RQmO5r6lVM1h3IsJdENdI5eghYeTp95N9I= Subject key identifier: 47:12:7F:3A:49:83:7D:E0:31:A4:EC:C0:81:E5:0E:F6:42:8B:A1:0E Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849DC8FC68EB77FF98507008680 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 63199 IP address blocks: 148.153.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c6:8e:b7:7f:f9:85:07:00:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=5f318fb2-20d5-4538-97e4-553f42d08094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:90:99:01:f6:07:f7:79:7a:a5:b8:37:df: 30:8f:47:9e:a4:04:89:55:26:40:62:68:a0:2d:d2: bc:da:02:4a:e8:dd:10:59:85:18:e8:58:4a:73:43: f1:29:84:8b:ee:61:a5:c0:a3:2e:89:53:59:17:70: 9c:61:c4:c3:e8:f2:fe:84:41:31:6d:dc:15:16:5f: 41:d7:ec:55:af:db:d5:d2:68:e7:69:72:0d:58:05: 3c:d0:a4:77:b9:50:05:0b:9e:d7:e7:c6:20:ad:32: 6a:5a:57:b2:71:0c:af:b8:4e:64:f1:d3:a5:00:98: 16:02:83:72:22:55:8d:72:61:63:58:96:02:71:e0: 0f:40:75:63:c0:e9:ab:fe:e1:13:53:64:cf:f1:ac: 49:2a:c4:ec:d8:5e:16:7e:f4:39:cf:06:e4:cd:64: 57:1f:1b:cd:9a:dc:9d:27:9b:4c:33:c0:09:6d:f1: 75:02:c7:18:1d:45:1c:09:a3:ca:6b:a2:12:bb:3d: 5b:82:33:bd:4b:d7:0c:d6:26:75:61:2c:0d:61:04: 8d:ff:8b:a5:57:68:ac:76:97:74:c8:52:80:df:4b: 06:24:7f:f5:7c:3d:7e:92:d1:ea:92:11:ef:be:81: 11:a2:cf:8b:de:ff:4c:b0:d6:8e:ba:8f:62:5c:ae: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:12:7F:3A:49:83:7D:E0:31:A4:EC:C0:81:E5:0E:F6:42:8B:A1:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a9:20:41:69:a6:5b:6e:38:fc:4e:f8:40:6f:17:06:46:b6: 06:dc:40:7e:a5:60:b0:38:be:2a:23:57:14:73:1e:f5:86:37: f9:29:38:6e:62:85:03:02:27:7f:d7:dc:06:b2:0b:92:60:64: 12:0e:63:d3:3a:6f:97:d1:d5:a2:bf:3d:14:34:2f:bc:e4:49: 7d:b4:6a:1e:6f:59:82:c1:74:be:d1:22:61:ed:18:50:25:90: cb:5f:a9:4e:74:c8:b1:db:e3:c7:50:34:c1:57:da:b8:74:3b: 69:47:36:e3:f4:19:13:d4:2d:ed:1b:74:fd:ef:cb:9b:97:c3: 41:57:df:b3:65:57:fa:a8:f9:28:20:5e:d9:5b:4e:88:c3:8f: 48:ca:97:a5:d8:39:8d:f1:db:98:c5:70:d4:bf:5a:cc:ac:6e: 5b:b4:10:88:1d:38:0b:d4:d4:76:4d:89:ed:3c:24:da:8e:e2: e2:58:69:83:60:c4:09:fa:33:c8:1f:7d:48:d2:1f:a3:a9:34: 6a:6f:f7:db:22:d2:09:8a:50:df:28:63:5b:cc:81:86:90:ec: b4:83:ba:db:ba:04:1e:79:73:47:ff:c5:88:34:57:04:1a:eb: 20:27:0c:30:c4:a1:3d:39:a2:32:16:31:77:bf:32:6b:c2:02: 63:65:b1:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8aOt3/5hQcAhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk NWYzMThmYjItMjBkNS00NTM4LTk3ZTQtNTUzZjQyZDA4MDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTmQmQH2B/d5eqW4N98wj0eepASJVSZAYmig LdK82gJK6N0QWYUY6FhKc0PxKYSL7mGlwKMuiVNZF3CcYcTD6PL+hEExbdwVFl9B 1+xVr9vV0mjnaXINWAU80KR3uVAFC57X58YgrTJqWleycQyvuE5k8dOlAJgWAoNy IlWNcmFjWJYCceAPQHVjwOmr/uETU2TP8axJKsTs2F4WfvQ5zwbkzWRXHxvNmtyd J5tMM8AJbfF1AscYHUUcCaPKa6ISuz1bgjO9S9cM1iZ1YSwNYQSN/4ulV2isdpd0 yFKA30sGJH/1fD1+ktHqkhHvvoERos+L3v9MsNaOuo9iXK5r1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcSfzpJg33gMaTswIHlDvZCi6EOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2E0MDAwZGEtOGFhYi0z MzdiLTllYzctMDRjYzFhMzM2MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWpIEFppltuOPxO+EBvFwZGtgbcQH6lYLA4viojVxRzHvWGN/kpOG5i hQMCJ3/X3AayC5JgZBIOY9M6b5fR1aK/PRQ0L7zkSX20ah5vWYLBdL7RImHtGFAl kMtfqU50yLHb48dQNMFX2rh0O2lHNuP0GRPULe0bdP3vy5uXw0FX37NlV/qo+Sgg XtlbTojDj0jKl6XYOY3x25jFcNS/Wsysblu0EIgdOAvU1HZNie08JNqO4uJYaYNg xAn6M8gffUjSH6OpNGpv99si0gmKUN8oY1vMgYaQ7LSDutu6BB55c0f/xYg0VwQa 6yAnDDDEoT05ojIWMXe/MmvCAmNlsSg= -----END CERTIFICATE-----Generated at Sun Jun 15 19:14:18 2025 by rpki-client