$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa File: dc349e18-8ab9-3cef-be26-6418afc11db3.roa (raw, json) Hash identifier: FAZIugZyN4P/BU8CIY7rc4Td/V50uu+GjXL0O+K48Vk= Subject key identifier: 38:DC:53:10:FE:F0:9F:49:05:82:7A:DD:44:71:D2:1E:00:B6:0F:A1 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849754460C6809E67E06626C7C0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 63199 IP address blocks: 148.153.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:60:c6:80:9e:67:e0:66:26:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=6ec0fdd7-388d-4544-921b-f806de32b7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:15:b2:a8:ea:90:f2:24:d3:78:f1:12:ed:62: 86:d9:78:aa:36:f0:3f:79:b9:53:00:5c:98:d7:b8: 8d:19:49:d9:36:f1:0e:d8:55:b3:da:72:8e:bd:9a: 9d:24:df:fd:9d:c2:32:18:f3:9e:db:df:61:f9:e7: 32:9b:1d:a9:c0:d7:24:a9:a7:98:7a:eb:4b:8a:0f: 91:fe:20:e6:07:02:10:30:05:e9:57:88:52:29:a3: 23:db:13:21:4d:9c:f3:5b:61:d8:09:b3:1e:3c:d5: 49:0d:cc:90:75:83:1b:6c:08:dc:20:6f:59:83:12: 36:5c:65:39:a1:7f:1c:d7:c0:3b:ee:7a:33:a8:d1: ca:b0:66:44:e1:44:ce:bc:d8:0d:37:d6:70:1e:61: 50:cd:a4:c9:27:4a:68:ee:de:e1:19:5b:48:8d:c5: 2c:88:65:65:ac:fd:7f:e4:84:62:5f:5e:b7:b1:ca: 41:42:d2:5e:02:37:40:86:c3:7a:ae:93:94:73:07: 34:37:51:f1:33:be:6d:45:e6:e0:ef:b2:44:76:fa: fb:93:37:d7:3d:c9:22:d8:15:c6:42:b6:29:1d:b1: 77:d2:2e:0b:b5:e7:28:6c:a1:7e:40:45:b2:8a:68: b0:b8:ea:60:ca:cc:ee:a5:0d:fe:7d:55:df:8d:4e: 30:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DC:53:10:FE:F0:9F:49:05:82:7A:DD:44:71:D2:1E:00:B6:0F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b4:1d:da:c3:31:d9:66:19:2f:e7:1e:97:3a:a0:31:81:03: 92:89:f8:02:52:1b:97:02:47:a7:ec:5f:33:65:fb:e8:de:9f: 41:ff:b3:d4:84:a3:38:26:da:cf:8f:47:1f:ab:32:03:27:bb: f9:09:f3:b8:7a:6c:d6:c4:3a:87:8c:41:3a:94:2a:8f:be:13: 8e:74:9a:e5:6e:5c:a2:63:8b:fb:6d:b1:a2:19:51:93:65:3f: 1a:32:93:b4:72:d5:d1:c8:63:a7:9b:c6:3c:60:94:67:88:f4: 3f:f0:ac:be:26:0f:70:15:bc:5c:99:61:d2:4a:77:13:7b:ad: f3:fd:ee:f5:ad:bc:38:88:d4:a7:5d:89:c8:a8:e0:96:d7:10: 0b:96:f2:38:6e:e8:f6:95:d8:2a:c8:2a:62:07:ff:87:10:83: 4f:88:83:95:23:00:f8:48:9c:7d:37:e1:2b:5c:1f:2b:c6:e4: 63:f4:1d:fc:29:9b:6f:90:c0:a2:59:19:53:9b:bb:23:83:8d: e4:64:b9:36:0c:3f:6d:e9:b5:1e:95:e5:56:fd:23:28:71:fa: d1:da:31:b0:e1:e7:03:a7:4b:1a:c9:8d:18:1f:04:ec:85:39: b0:2a:49:00:68:27:b8:a3:cf:c4:69:05:40:14:97:a7:f5:48: 75:84:eb:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RGDGgJ5n4GYmx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk NmVjMGZkZDctMzg4ZC00NTQ0LTkyMWItZjgwNmRlMzJiN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xWyqOqQ8iTTePES7WKG2XiqNvA/eblTAFyY 17iNGUnZNvEO2FWz2nKOvZqdJN/9ncIyGPOe299h+ecymx2pwNckqaeYeutLig+R /iDmBwIQMAXpV4hSKaMj2xMhTZzzW2HYCbMePNVJDcyQdYMbbAjcIG9ZgxI2XGU5 oX8c18A77nozqNHKsGZE4UTOvNgNN9ZwHmFQzaTJJ0po7t7hGVtIjcUsiGVlrP1/ 5IRiX163scpBQtJeAjdAhsN6rpOUcwc0N1HxM75tRebg77JEdvr7kzfXPcki2BXG QrYpHbF30i4LtecobKF+QEWyimiwuOpgyszupQ3+fVXfjU4wsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjcUxD+8J9JBYJ63URx0h4Atg+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZGMzNDllMTgtOGFiOS0z Y2VmLWJlMjYtNjQxOGFmYzExZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADq0HdrDMdlmGS/nHpc6oDGBA5KJ+AJSG5cCR6fsXzNl++jen0H/s9SE ozgm2s+PRx+rMgMnu/kJ87h6bNbEOoeMQTqUKo++E450muVuXKJji/ttsaIZUZNl Pxoyk7Ry1dHIY6ebxjxglGeI9D/wrL4mD3AVvFyZYdJKdxN7rfP97vWtvDiI1Kdd icio4JbXEAuW8jhu6PaV2CrIKmIH/4cQg0+Ig5UjAPhInH034StcHyvG5GP0Hfwp m2+QwKJZGVObuyODjeRkuTYMP23ptR6V5Vb9Iyhx+tHaMbDh5wOnSxrJjRgfBOyF ObAqSQBoJ7ijz8RpBUAUl6f1SHWE69c= -----END CERTIFICATE-----Generated at Sun Apr 27 13:55:35 2025 by rpki-client