$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa File: 2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa (raw, json) Hash identifier: KPI+ncXk9sh0kfS56NbFrCfDNmG+wXzeA0QDeNxOwHY= Subject key identifier: 67:4C:18:26:C7:31:2E:68:D9:E0:AE:DD:94:9E:EF:4A:09:B1:2B:E5 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285848FD56CDED4C80A3B63A96DAE0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 63199 IP address blocks: 148.153.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:cd:ed:4c:80:a3:b6:3a:96:da:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=75292564-95ba-4469-8d9c-61fc9f15d896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:4c:9a:46:de:b3:e3:6a:f4:67:ba:72:9b: c6:f9:0a:20:78:89:51:ac:88:31:84:f3:60:c8:39: b5:44:bc:99:ab:89:3b:13:18:14:e5:4a:f0:c5:a8: 39:1f:cb:55:51:7c:ef:47:c7:17:f6:b5:26:f5:7f: 57:34:4b:31:c2:47:7b:9d:85:a0:52:11:6d:c5:76: c6:f7:fc:bf:0d:08:be:2c:c8:d5:ea:d8:b7:72:39: 0f:c4:38:3c:8a:a9:e1:df:01:5a:5c:c1:2e:c1:dc: 04:fe:1d:0b:4b:e9:a4:73:61:2e:4f:f1:64:6e:c4: 18:bc:b2:be:d5:06:cd:03:ce:fc:58:be:0c:87:55: 10:83:cc:08:58:c5:c0:29:6e:42:08:5e:01:bd:3a: 3c:18:e4:9a:0d:08:67:94:60:84:bd:54:65:c4:80: d0:3a:a1:3b:a4:f0:9a:f5:a5:3b:1d:ec:b2:b5:99: d4:f8:f8:a7:a7:36:9b:8e:b8:87:21:99:c0:ab:88: 8f:6e:d9:0e:08:00:67:ca:a8:02:4b:af:e7:64:77: 0d:23:83:2a:f4:ad:85:a6:cd:ff:5b:21:7b:d4:92: 63:b0:93:33:60:8d:1f:45:41:26:5c:73:01:91:86: 7a:0c:d8:ab:5c:5e:3c:d7:fa:5c:70:5b:3b:56:a0: 9d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4C:18:26:C7:31:2E:68:D9:E0:AE:DD:94:9E:EF:4A:09:B1:2B:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:70:8a:12:02:84:11:36:2c:6e:d1:f9:ee:ed:14:28:c1:82: c7:e1:5d:80:d0:99:46:a6:a5:a5:8b:54:f8:78:32:d5:30:f3: 3f:6b:a9:ed:cd:e7:af:9e:cd:d7:19:7d:f1:0e:d3:9c:ab:23: 24:77:a9:8d:b4:c5:a3:a2:70:6a:c2:2b:93:0b:29:18:34:7e: a8:f4:4b:1b:03:72:8d:52:02:c1:10:f4:4d:50:2d:ce:08:70: 1a:9e:63:7f:e8:90:47:e1:4c:e2:5c:c4:a5:ba:56:3f:a4:28: 25:27:4d:63:0a:e0:86:5d:83:80:e4:f2:09:ee:83:1e:ee:c2: 33:8a:65:dd:53:89:f2:d6:b7:1f:a7:08:7e:9b:ae:39:dc:1c: 3f:68:b9:78:8a:74:e5:e4:40:11:80:68:dc:ba:14:91:ec:83: f6:9e:67:20:33:1b:10:56:43:ca:a7:1f:7f:76:53:73:39:d9: 5c:65:63:13:a1:0f:3b:ea:6f:7e:28:3d:4b:4c:ad:8b:aa:8b: c9:66:92:d9:fe:3b:1f:f1:f8:13:81:76:63:a2:84:b3:5e:1d: ab:01:e2:32:59:20:38:53:77:ab:c4:6d:8b:58:97:32:31:2d: b2:b8:dd:f6:8a:f6:8a:14:39:79:ef:1e:02:4b:6d:89:8c:f9: 0f:4b:68:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vs3tTICjtjqW2uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NzUyOTI1NjQtOTViYS00NDY5LThkOWMtNjFmYzlmMTVkODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbRMmkbes+Nq9Ge6cpvG+QogeIlRrIgxhPNg yDm1RLyZq4k7ExgU5Urwxag5H8tVUXzvR8cX9rUm9X9XNEsxwkd7nYWgUhFtxXbG 9/y/DQi+LMjV6ti3cjkPxDg8iqnh3wFaXMEuwdwE/h0LS+mkc2EuT/FkbsQYvLK+ 1QbNA878WL4Mh1UQg8wIWMXAKW5CCF4BvTo8GOSaDQhnlGCEvVRlxIDQOqE7pPCa 9aU7HeyytZnU+PinpzabjriHIZnAq4iPbtkOCABnyqgCS6/nZHcNI4Mq9K2Fps3/ WyF71JJjsJMzYI0fRUEmXHMBkYZ6DNirXF481/pccFs7VqCd/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdMGCbHMS5o2eCu3ZSe70oJsSvlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmMyMGQyMWItOGEwZS0z ZGY0LTkxMTMtYzg2NmY1Yjk4MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJm5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxwihIChBE2LG7R+e7tFCjBgsfhXYDQmUampaWLVPh4MtUw8z9rqe3N 56+ezdcZffEO05yrIyR3qY20xaOicGrCK5MLKRg0fqj0SxsDco1SAsEQ9E1QLc4I cBqeY3/okEfhTOJcxKW6Vj+kKCUnTWMK4IZdg4Dk8gnugx7uwjOKZd1TifLWtx+n CH6brjncHD9ouXiKdOXkQBGAaNy6FJHsg/aeZyAzGxBWQ8qnH392U3M52VxlYxOh Dzvqb34oPUtMrYuqi8lmktn+Ox/x+BOBdmOihLNeHasB4jJZIDhTd6vEbYtYlzIx LbK43faK9ooUOXnvHgJLbYmM+Q9LaPk= -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:30 2025 by rpki-client