$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa File: 251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa (raw, json) Hash identifier: M2HKTsAfVZm5jPPDPBkaT4O5Gm3hbIWu+hJ5WosvYo0= Subject key identifier: C0:3F:74:4F:AC:9E:4A:D3:81:D4:30:E2:E7:E1:A3:B8:E0:B7:39:78 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584930DE75FAA61F2F9CAF087280 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 63199 IP address blocks: 148.153.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:75:fa:a6:1f:2f:9c:af:08:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=a3dd97b0-6add-46fa-8680-6baa41900619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:06:75:01:16:cc:95:78:b7:d2:18:63:81: 74:54:18:98:69:db:51:25:df:bc:2f:72:87:65:75: 4e:2e:a3:d6:46:92:15:b3:08:7d:4a:85:3e:9a:f5: af:39:2c:20:be:b1:86:36:bc:b9:6e:25:70:a4:1b: ee:62:55:79:42:11:67:29:ad:f2:b3:ef:c9:e0:cf: 48:d9:16:55:d1:f5:c1:f4:5d:48:ad:f7:69:90:f4: 0b:6f:eb:f1:69:d1:c5:a9:fb:d2:e4:b0:47:c3:dc: af:2d:fc:07:c2:90:90:8b:2e:2d:2a:e9:53:40:dc: 4b:19:e8:3c:a3:ad:22:91:77:23:75:de:6b:c6:05: 68:f4:11:f0:08:96:17:7a:8c:41:43:55:b0:eb:29: ea:e6:90:4d:52:85:78:65:63:24:27:89:ec:ca:de: ec:38:73:5a:96:b3:e4:2b:e4:42:d9:45:43:32:7c: 08:4f:a8:a2:26:55:d4:a5:fc:ee:92:4b:f9:fc:4f: 97:38:fd:1b:81:1f:7f:d2:a5:cf:37:da:9f:e8:4b: 97:6e:b8:20:a2:6f:2b:48:e9:ed:fb:74:a7:63:8c: 9b:eb:db:e9:71:d6:19:a3:33:42:89:77:93:50:ea: a0:d4:39:a2:fe:8d:4d:0d:a6:36:3e:3e:77:11:fe: 27:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3F:74:4F:AC:9E:4A:D3:81:D4:30:E2:E7:E1:A3:B8:E0:B7:39:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:8c:2f:80:08:3b:be:2d:a5:e8:bb:c8:c9:84:67:94:e7:c3: 30:81:8d:fe:67:c0:03:2c:93:db:bb:2e:15:03:0d:b2:83:4e: ad:8f:7a:38:b1:f8:34:cc:9a:9d:e0:3f:05:b4:d2:54:9d:4e: 0d:91:07:18:5f:42:d2:5a:80:b5:1f:33:e4:68:2d:89:d2:86: 43:eb:7b:f8:74:11:67:b3:fa:12:d8:e3:9b:a7:e2:9a:8e:d6: c7:fc:43:57:28:ff:dd:a4:c0:d1:3a:a5:cd:23:25:7d:a7:54: 2b:f1:2b:aa:d2:f6:95:93:06:cc:df:11:c6:0f:f8:82:94:83: 1f:78:30:bb:5c:67:d7:60:28:85:ce:af:a0:c8:a0:da:2f:8e: a5:cc:b9:89:55:4e:c5:c4:57:83:98:dd:14:73:bf:20:ea:c7: e3:95:eb:72:1c:43:5c:76:ae:a3:4d:4c:ee:b9:5b:d4:77:3e: b8:9c:c0:56:20:85:df:de:29:d5:19:c1:05:c9:47:b1:82:03: 46:21:90:ce:a9:77:00:4e:04:b7:21:19:a6:dd:fe:a9:cc:1e: 54:3d:d1:05:d5:3a:94:e4:a0:24:f3:5e:eb:62:58:e1:39:3f: 2e:72:ea:19:6a:89:6f:8d:c4:6d:45:77:2b:f8:53:7d:a6:e9: 7f:30:e6:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nX6ph8vnK8IcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk YTNkZDk3YjAtNmFkZC00NmZhLTg2ODAtNmJhYTQxOTAwNjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8wGdQEWzJV4t9IYY4F0VBiYadtRJd+8L3KH ZXVOLqPWRpIVswh9SoU+mvWvOSwgvrGGNry5biVwpBvuYlV5QhFnKa3ys+/J4M9I 2RZV0fXB9F1IrfdpkPQLb+vxadHFqfvS5LBHw9yvLfwHwpCQiy4tKulTQNxLGeg8 o60ikXcjdd5rxgVo9BHwCJYXeoxBQ1Ww6ynq5pBNUoV4ZWMkJ4nsyt7sOHNalrPk K+RC2UVDMnwIT6iiJlXUpfzukkv5/E+XOP0bgR9/0qXPN9qf6EuXbrggom8rSOnt +3SnY4yb69vpcdYZozNCiXeTUOqg1Dmi/o1NDaY2Pj53Ef4nsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMA/dE+snkrTgdQw4ufho7jgtzl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMjUxYWFhMWQtNDk2Zi0z MGFlLThhZWEtZDc1YmY2MDIwY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCML4AIO74tpei7yMmEZ5TnwzCBjf5nwAMsk9u7LhUDDbKDTq2Pejix +DTMmp3gPwW00lSdTg2RBxhfQtJagLUfM+RoLYnShkPre/h0EWez+hLY45un4pqO 1sf8Q1co/92kwNE6pc0jJX2nVCvxK6rS9pWTBszfEcYP+IKUgx94MLtcZ9dgKIXO r6DIoNovjqXMuYlVTsXEV4OY3RRzvyDqx+OV63IcQ1x2rqNNTO65W9R3PricwFYg hd/eKdUZwQXJR7GCA0YhkM6pdwBOBLchGabd/qnMHlQ90QXVOpTkoCTzXutiWOE5 Py5y6hlqiW+NxG1Fdyv4U32m6X8w5sw= -----END CERTIFICATE-----Generated at Sat Apr 5 20:38:30 2025 by rpki-client