$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa File: 00a67443-0fc8-3ea5-9b70-edf9d806b098.roa (raw, json) Hash identifier: SuAR3jiUpUE4dkpqIt1GNF2jslwLKNvAXrlJiCBscQA= Subject key identifier: 5A:D7:C2:AD:55:BF:7F:37:41:87:7A:6E:C5:D8:92:DA:A6:EC:AE:C2 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285848C2B63BF1F8AE8BEE897401B0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 63199 IP address blocks: 148.153.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:3b:f1:f8:ae:8b:ee:89:74:01:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=ffd29e70-7409-4eeb-b9a6-13634c8ecfa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4f:ab:9f:cb:03:23:a5:33:ac:87:2d:52:11: 91:20:d2:57:2b:e9:36:11:72:c2:a9:2a:21:4f:71: ae:04:c1:fe:4e:45:a8:30:be:5f:a3:84:4f:d7:8e: 83:43:25:22:4a:32:f0:6a:91:1c:b4:38:72:6e:e7: fc:6e:40:38:10:88:b9:c7:39:65:7b:bd:af:c2:37: 4c:08:e6:db:97:b9:cb:0b:0d:62:6c:05:30:a6:bf: 8f:c8:8c:74:32:a8:7f:43:fd:3c:99:1d:76:fc:23: 1e:51:67:e5:a8:7a:9f:a0:3c:92:3b:d0:1e:11:06: ec:5d:42:94:52:93:54:9c:2a:4a:33:93:d1:e5:d0: 0b:4d:8d:c0:ab:ac:dc:b9:c9:3a:21:35:e4:2c:d8: 1e:85:12:97:2d:c5:e5:4c:c1:36:2f:7b:04:bc:0f: cc:91:c3:a9:d7:0e:0a:eb:47:57:a3:ec:80:a4:11: 0e:c5:db:9f:ad:39:9b:33:b5:fd:68:53:1f:cd:92: c1:57:1a:27:0e:2e:6d:88:b6:cb:fe:d3:63:4f:8d: 86:80:d6:d7:23:ac:0f:bf:ba:af:5b:c9:e1:c8:4a: ea:03:c9:bc:68:f8:22:02:9e:39:92:dc:aa:37:d5: bd:c9:e9:7c:e1:19:5f:cb:f3:29:41:3a:14:7c:1e: 9f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D7:C2:AD:55:BF:7F:37:41:87:7A:6E:C5:D8:92:DA:A6:EC:AE:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:21:e0:c6:6e:19:c5:09:d3:69:d7:16:ac:18:a6:07:43:f5: 84:0e:d2:40:9d:f2:f7:ec:36:71:50:24:3e:95:5b:ca:92:42: 51:52:3c:b6:14:9f:cd:fb:af:58:b3:89:1b:5c:0e:c3:95:35: a3:a8:a3:a7:6c:2a:c5:56:39:76:5a:50:5d:25:96:6d:7a:f3: 6a:c0:50:d6:ed:7a:ed:ee:79:82:f9:a9:6b:49:58:41:52:e7: f6:94:af:23:df:06:7e:9f:a3:d6:34:41:64:2d:43:2c:da:38: df:70:fa:69:f3:c0:54:27:be:14:4d:77:1c:27:cc:f2:fe:84: 7f:43:54:a3:77:5f:ea:b0:20:5e:7b:f5:53:3d:bb:25:de:e1: 0a:51:8b:6d:74:c9:26:22:1b:b2:e0:3b:63:d1:97:8f:a9:4b: 17:90:88:a1:6c:07:02:08:f6:02:d3:10:0f:08:de:2f:7a:43: 19:05:e1:99:a1:29:be:39:53:fa:9b:12:2d:49:9f:58:24:85: 08:ee:c4:75:f7:01:b3:b2:7e:24:e3:53:d8:11:80:54:fa:e5: ab:4b:0a:b1:e1:36:f5:5c:7f:43:3a:9d:57:c3:d8:81:12:b4: 66:f2:91:88:26:58:6e:e4:3a:de:47:ac:16:0c:b5:a3:59:07: 48:ae:03:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtjvx+K6L7ol0AbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZmZkMjllNzAtNzQwOS00ZWViLWI5YTYtMTM2MzRjOGVjZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E+rn8sDI6UzrIctUhGRINJXK+k2EXLCqSoh T3GuBMH+TkWoML5fo4RP146DQyUiSjLwapEctDhybuf8bkA4EIi5xzlle72vwjdM CObbl7nLCw1ibAUwpr+PyIx0Mqh/Q/08mR12/CMeUWflqHqfoDySO9AeEQbsXUKU UpNUnCpKM5PR5dALTY3Aq6zcuck6ITXkLNgehRKXLcXlTME2L3sEvA/MkcOp1w4K 60dXo+yApBEOxdufrTmbM7X9aFMfzZLBVxonDi5tiLbL/tNjT42GgNbXI6wPv7qv W8nhyErqA8m8aPgiAp45ktyqN9W9yel84Rlfy/MpQToUfB6fUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrXwq1Vv383QYd6bsXYktqm7K7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDBhNjc0NDMtMGZjOC0z ZWE1LTliNzAtZWRmOWQ4MDZiMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJlWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUh4MZuGcUJ02nXFqwYpgdD9YQO0kCd8vfsNnFQJD6VW8qSQlFSPLYU n837r1iziRtcDsOVNaOoo6dsKsVWOXZaUF0llm1682rAUNbteu3ueYL5qWtJWEFS 5/aUryPfBn6fo9Y0QWQtQyzaON9w+mnzwFQnvhRNdxwnzPL+hH9DVKN3X+qwIF57 9VM9uyXe4QpRi210ySYiG7LgO2PRl4+pSxeQiKFsBwII9gLTEA8I3i96QxkF4Zmh Kb45U/qbEi1Jn1gkhQjuxHX3AbOyfiTjU9gRgFT65atLCrHhNvVcf0M6nVfD2IES tGbykYgmWG7kOt5HrBYMtaNZB0iuAxk= -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:14 2025 by rpki-client