$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/f10ae46d-4815-3f89-bd37-894fc302b67c.roa File: f10ae46d-4815-3f89-bd37-894fc302b67c.roa (raw, json) Hash identifier: /InEw9mvYAXK3SEgdwKYeb2ULtjHU5UCK8IOOmuFNBw= Subject key identifier: F5:88:48:87:2B:EE:22:E0:1C:13:90:2B:0F:DC:24:55:AA:29:46:E7 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849FE0FF64E06087550553606A8 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/f10ae46d-4815-3f89-bd37-894fc302b67c.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 63199 IP address blocks: 148.153.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:f6:4e:06:08:75:50:55:36:06:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=70b73e86-5481-4fd1-acb4-7a3ca677facf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a3:3a:0f:31:2b:29:c5:0f:a5:5c:50:41:78: 45:d4:a5:21:b1:02:1e:26:aa:d8:45:ac:ad:93:c9: 2e:27:bb:c5:1f:42:9a:fe:9b:81:49:d1:83:8a:77: 31:1a:aa:09:5c:63:5d:12:eb:95:7d:23:f4:fd:49: f1:23:f6:da:b9:54:d6:4e:17:a3:dc:b9:1e:d2:46: e3:97:c0:9b:48:b0:c4:2d:0f:7f:54:57:6d:a5:ff: 29:82:cd:21:b5:81:94:8d:03:f7:dd:b6:2a:2b:cd: 80:1a:bf:49:dd:63:34:55:ad:27:02:54:a4:82:4b: ef:f7:3d:de:71:ea:59:9b:6f:7e:38:16:41:1c:24: 48:4d:69:9f:b4:85:53:50:6a:5b:83:fd:8c:03:67: 7b:aa:c1:bf:63:51:93:91:2d:d2:7a:10:f9:f9:e8: fa:06:de:49:96:3d:09:99:38:54:b1:a0:30:f1:86: 93:f9:92:f6:8b:da:8a:7a:81:e6:d6:55:dd:54:e9: bd:4e:61:e8:d1:47:ec:e1:a6:04:26:8b:d2:1a:7e: 65:d9:eb:90:1e:18:04:a0:dc:99:6a:91:5d:43:26: a7:17:fb:d0:f6:d8:db:5b:20:3f:ac:38:6f:ad:c9: ed:25:4c:4f:65:96:f2:0e:25:a7:ff:8e:10:12:ea: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:88:48:87:2B:EE:22:E0:1C:13:90:2B:0F:DC:24:55:AA:29:46:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/f10ae46d-4815-3f89-bd37-894fc302b67c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:cd:53:70:97:00:4e:5a:f5:33:1f:49:c2:03:b7:23:cb:a6: 29:50:f8:ec:3c:13:4b:82:76:ec:e5:ef:9d:1c:b3:70:e3:df: 56:29:78:1d:8e:c4:e1:8a:2f:b2:42:0a:b5:25:7c:fc:28:be: 80:97:28:44:92:67:8e:88:f7:ee:f5:cc:03:65:65:23:8e:eb: 51:88:29:45:5c:71:1f:9d:bc:f3:e5:0b:e2:61:f1:30:25:5b: f8:54:e5:2f:ec:99:f2:79:2c:7c:19:91:08:57:cf:be:25:82: 84:4e:be:e2:b5:b9:27:28:04:36:90:03:00:27:22:ff:12:50: c4:56:c0:7c:50:17:c6:6e:75:3a:50:f3:af:9d:84:71:37:e0: f4:ab:c4:f1:ad:bd:0a:02:da:eb:00:1b:d5:84:97:86:d7:9b: 02:47:65:c5:ff:04:6e:cf:9d:15:fe:1d:e1:c2:32:5d:65:cd: 7d:99:ac:ec:32:d2:28:36:91:21:10:1f:6a:7d:7b:de:54:fe: 3d:c4:d9:fe:86:1d:11:ad:98:13:b4:f8:ae:9c:b4:9d:8b:a8: d4:0b:a4:25:af:89:da:b3:79:11:de:30:49:03:09:77:96:aa: cb:f2:01:fa:06:67:22:6b:92:e4:1f:f9:99:06:e8:26:7c:d8: 8f:cd:40:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/ZOBgh1UFU2BqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NzBiNzNlODYtNTQ4MS00ZmQxLWFjYjQtN2EzY2E2NzdmYWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqM6DzErKcUPpVxQQXhF1KUhsQIeJqrYRayt k8kuJ7vFH0Ka/puBSdGDincxGqoJXGNdEuuVfSP0/UnxI/bauVTWThej3Lke0kbj l8CbSLDELQ9/VFdtpf8pgs0htYGUjQP33bYqK82AGr9J3WM0Va0nAlSkgkvv9z3e cepZm29+OBZBHCRITWmftIVTUGpbg/2MA2d7qsG/Y1GTkS3SehD5+ej6Bt5Jlj0J mThUsaAw8YaT+ZL2i9qKeoHm1lXdVOm9TmHo0Ufs4aYEJovSGn5l2euQHhgEoNyZ apFdQyanF/vQ9tjbWyA/rDhvrcntJUxPZZbyDiWn/44QEurbwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWISIcr7iLgHBOQKw/cJFWqKUbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZjEwYWU0NmQtNDgxNS0z Zjg5LWJkMzctODk0ZmMzMDJiNjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXNU3CXAE5a9TMfScIDtyPLpilQ+Ow8E0uCduzl750cs3Dj31YpeB2O xOGKL7JCCrUlfPwovoCXKESSZ46I9+71zANlZSOO61GIKUVccR+dvPPlC+Jh8TAl W/hU5S/smfJ5LHwZkQhXz74lgoROvuK1uScoBDaQAwAnIv8SUMRWwHxQF8ZudTpQ 86+dhHE34PSrxPGtvQoC2usAG9WEl4bXmwJHZcX/BG7PnRX+HeHCMl1lzX2ZrOwy 0ig2kSEQH2p9e95U/j3E2f6GHRGtmBO0+K6ctJ2LqNQLpCWvidqzeRHeMEkDCXeW qsvyAfoGZyJrkuQf+ZkG6CZ82I/NQFY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:43:07 2025 by rpki-client