$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/22f2a491-5aba-30ba-8bc5-08890e1745f9.roa File: 22f2a491-5aba-30ba-8bc5-08890e1745f9.roa (raw, json) Hash identifier: kkm0mKWXLk4zmBgcTwRYF61Ua0rjsiXuTJRmzZ1GVCo= Subject key identifier: 7B:B7:63:56:4F:BA:0A:88:3E:E0:43:EB:2A:C8:D0:C3:E4:58:42:A4 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285848F926ABE0CA071EBA3665E380 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/22f2a491-5aba-30ba-8bc5-08890e1745f9.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 63199 IP address blocks: 148.153.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:ab:e0:ca:07:1e:ba:36:65:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=d228f143-7b1e-458d-8e1b-2970737899b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:09:d2:cd:e3:14:fb:53:6e:8b:0b:bd:58:e7: eb:7b:fa:c4:fa:ac:57:6b:26:5b:43:e0:90:45:a2: 11:4b:55:bd:52:21:12:e7:56:87:44:8e:da:b4:e5: d4:ed:98:6b:ca:1a:00:82:8b:19:eb:98:b3:85:15: bf:70:ed:02:1a:9a:a9:e6:c0:d9:0c:96:09:24:ab: ca:9f:62:1f:91:01:9a:56:51:23:e0:a0:37:18:26: fe:63:53:d2:f6:ff:e0:fc:a5:83:46:7a:2b:46:5a: 9d:67:6c:70:ae:40:0b:ae:79:79:9a:88:fc:f0:43: 22:38:c2:6f:65:8e:6d:50:b6:c4:b3:8e:ac:0d:17: 16:da:2b:0b:9b:37:d9:10:16:eb:4c:ff:55:8b:3f: 71:9c:54:c6:4c:4b:9c:15:f0:07:e9:71:ff:15:b7: 25:15:90:3e:dc:35:9e:16:c0:42:40:d8:a9:e9:4a: c1:bc:05:f1:e3:e3:90:e6:2f:84:c1:ae:a4:aa:c9: 48:9e:44:50:83:8d:90:a8:ff:80:e1:32:cd:c1:04: 29:c9:2c:54:bc:b5:7c:f8:7f:96:f2:ad:4c:b9:03: 13:17:4f:b8:e7:d6:cf:68:b5:c3:47:3e:a1:24:5f: 9c:a9:48:c4:45:19:68:7b:9a:00:4b:06:71:ea:64: 09:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B7:63:56:4F:BA:0A:88:3E:E0:43:EB:2A:C8:D0:C3:E4:58:42:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/22f2a491-5aba-30ba-8bc5-08890e1745f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:52:cc:2c:9f:6b:1d:ec:2f:2e:b1:f4:3c:f6:cc:64:6d:c9: 0a:3b:fe:69:a4:7b:fb:76:54:86:b9:ad:80:b1:ab:bd:b1:6b: f8:a1:c6:ba:78:00:9c:5a:74:ad:6e:d7:4e:08:a6:fc:77:69: f6:44:67:6f:5d:20:2d:dd:5c:a4:07:6e:6c:df:81:73:03:7c: 03:cc:8f:6d:76:0b:b8:43:9b:c9:46:da:d7:4a:00:db:ca:01: 4f:09:12:97:11:34:6d:9b:ea:fe:4d:31:5d:7e:a7:1a:ed:e0: 7a:55:aa:91:a9:e2:30:21:f6:a0:ea:68:cb:2f:83:c6:ed:2b: e5:84:dc:54:d2:e5:d6:7e:0a:12:bb:db:9e:ea:3e:8e:1a:c8: a8:f6:c5:5a:a4:95:78:74:8f:66:0c:4e:18:81:82:2b:c8:cc: 4e:1f:59:c6:8a:21:bf:1c:c1:34:e1:4e:87:c4:9e:51:f4:cc: 89:95:61:f8:86:3f:45:b5:90:81:13:90:f4:c1:9f:3c:fe:af: 2d:9f:aa:67:28:4f:46:9d:6b:da:e9:c5:44:81:96:9e:08:af: 1b:c7:ce:09:96:cd:55:80:af:12:27:08:8e:ed:79:7e:55:22: e9:f8:ad:43:64:7b:6e:7a:4a:20:0d:a3:15:3a:cb:8d:ea:dc: 91:20:33:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqvgygceujZl44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDIyOGYxNDMtN2IxZS00NThkLThlMWItMjk3MDczNzg5OWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQnSzeMU+1Nuiwu9WOfre/rE+qxXayZbQ+CQ RaIRS1W9UiES51aHRI7atOXU7ZhryhoAgosZ65izhRW/cO0CGpqp5sDZDJYJJKvK n2IfkQGaVlEj4KA3GCb+Y1PS9v/g/KWDRnorRlqdZ2xwrkALrnl5moj88EMiOMJv ZY5tULbEs46sDRcW2isLmzfZEBbrTP9Viz9xnFTGTEucFfAH6XH/FbclFZA+3DWe FsBCQNip6UrBvAXx4+OQ5i+Ewa6kqslInkRQg42QqP+A4TLNwQQpySxUvLV8+H+W 8q1MuQMTF0+459bPaLXDRz6hJF+cqUjERRloe5oASwZx6mQJQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHu3Y1ZPugqIPuBD6yrI0MPkWEKkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMjJmMmE0OTEtNWFiYS0z MGJhLThiYzUtMDg4OTBlMTc0NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZSzCyfax3sLy6x9Dz2zGRtyQo7/mmke/t2VIa5rYCxq72xa/ihxrp4 AJxadK1u104Ipvx3afZEZ29dIC3dXKQHbmzfgXMDfAPMj212C7hDm8lG2tdKANvK AU8JEpcRNG2b6v5NMV1+pxrt4HpVqpGp4jAh9qDqaMsvg8btK+WE3FTS5dZ+ChK7 257qPo4ayKj2xVqklXh0j2YMThiBgivIzE4fWcaKIb8cwTThTofEnlH0zImVYfiG P0W1kIETkPTBnzz+ry2fqmcoT0ada9rpxUSBlp4IrxvHzgmWzVWArxInCI7teX5V Iun4rUNke256SiANoxU6y43q3JEgM3E= -----END CERTIFICATE-----Generated at Sat Apr 5 23:21:12 2025 by rpki-client