$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/700e458d-b871-3d96-a213-ce09bd907b87.roa File: 700e458d-b871-3d96-a213-ce09bd907b87.roa (raw, json) Hash identifier: 6kVDDUpMFdFbw42mwfKITckFFjn1cXt1VX9lIU1FkDs= Subject key identifier: 17:FC:03:49:00:0C:4E:55:D7:6E:C5:EF:12:2E:81:D6:FC:BD:1D:1B Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285848960B5C4E3AE26764C0FABD40 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/700e458d-b871-3d96-a213-ce09bd907b87.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 63199 IP address blocks: 148.153.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:5c:4e:3a:e2:67:64:c0:fa:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=f1f35808-975c-4e56-a8c0-67ef4aee042d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:4c:47:7e:f2:14:1b:93:82:0e:1a:f6:33: 76:da:ae:7a:23:32:4d:8e:94:6f:29:5c:00:ca:9e: 12:00:a9:eb:c9:3c:77:36:32:ab:bb:76:68:1d:bc: 37:79:5d:e3:ec:24:4b:6b:16:f0:04:92:8d:84:50: 74:d7:65:11:7b:ae:cf:97:e2:4c:a2:da:62:0c:66: 9d:c6:13:7a:65:80:7c:14:02:10:06:91:87:ec:5c: 23:4e:34:77:72:10:e6:be:71:b8:c8:3b:d6:b2:de: 1d:a0:35:d9:9f:73:92:f3:44:19:95:61:3c:dc:6e: 6d:c2:78:5f:83:25:a3:b9:26:23:b2:f9:0c:09:3a: 0c:98:1e:d0:84:d6:d4:28:99:ae:6d:e4:99:ff:dc: 6c:1c:29:a8:73:73:fc:24:f8:0d:a7:e7:10:07:70: 0b:6a:34:dd:7d:41:ed:39:04:41:01:85:18:6e:fb: d9:c7:0f:e7:83:8a:a9:99:cd:07:b2:04:ca:8f:c8: 82:17:ce:b7:03:c4:2a:c2:1f:16:7b:d0:96:d4:3f: 1d:e7:a7:01:d4:80:56:13:53:aa:b4:1b:b8:0e:2d: 3e:81:d5:c3:51:e1:1c:ac:df:a3:72:0b:85:54:a5: 2e:da:ed:76:71:67:6b:cf:01:ec:33:ff:46:fb:14: 5d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FC:03:49:00:0C:4E:55:D7:6E:C5:EF:12:2E:81:D6:FC:BD:1D:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/700e458d-b871-3d96-a213-ce09bd907b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c2:6c:88:96:f6:94:64:f2:02:f6:dd:cf:20:35:25:c9:87: ba:a8:1d:b5:2f:14:cc:e9:55:2c:b9:41:e9:52:ca:29:c7:76: 39:45:e4:26:3d:a3:e1:7c:7f:e1:bc:67:b7:db:79:60:52:87: d2:79:82:3f:7c:b6:fa:a7:67:95:f5:03:12:5b:20:ad:1c:e4: c9:a2:08:81:b3:30:8b:45:33:fe:bb:f9:a0:2e:98:48:74:41: 86:13:8a:da:5b:22:c4:10:72:4e:90:30:df:d1:7e:e1:00:e4: b3:04:1d:c5:59:ac:50:eb:ca:d5:7f:0d:7c:43:5f:cc:e1:f0: 9a:f5:c2:1b:f5:43:ab:91:4b:c1:9a:79:ea:e0:b6:67:81:bd: 08:b8:88:6f:ea:1c:88:d3:97:4d:3a:b1:f4:02:a3:ea:c5:d9: 6f:f0:24:39:9e:de:ff:ff:0e:59:a7:f9:20:6b:78:37:60:31: 7c:78:31:95:48:fc:7e:af:99:35:82:dc:fd:8b:f5:4c:68:0f: 5a:46:25:11:0f:54:20:23:e8:86:15:47:58:1a:8f:64:99:a5: 82:7f:ea:c6:26:81:68:57:2f:5c:d4:5c:69:9c:8a:e0:f5:0e: af:94:8c:60:60:5a:ee:81:94:2b:d6:14:b5:2c:e5:f7:8d:14: 65:62:33:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1xOOuJnZMD6vUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk ZjFmMzU4MDgtOTc1Yy00ZTU2LWE4YzAtNjdlZjRhZWUwNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6JMR37yFBuTgg4a9jN22q56IzJNjpRvKVwA yp4SAKnryTx3NjKru3ZoHbw3eV3j7CRLaxbwBJKNhFB012URe67Pl+JMotpiDGad xhN6ZYB8FAIQBpGH7FwjTjR3chDmvnG4yDvWst4doDXZn3OS80QZlWE83G5twnhf gyWjuSYjsvkMCToMmB7QhNbUKJmubeSZ/9xsHCmoc3P8JPgNp+cQB3ALajTdfUHt OQRBAYUYbvvZxw/ng4qpmc0HsgTKj8iCF863A8Qqwh8We9CW1D8d56cB1IBWE1Oq tBu4Di0+gdXDUeEcrN+jcguFVKUu2u12cWdrzwHsM/9G+xRd1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBf8A0kADE5V127F7xIugdb8vR0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNzAwZTQ1OGQtYjg3MS0z ZDk2LWEyMTMtY2UwOWJkOTA3Yjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClJnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTCbIiW9pRk8gL23c8gNSXJh7qoHbUvFMzpVSy5QelSyinHdjlF5CY9 o+F8f+G8Z7fbeWBSh9J5gj98tvqnZ5X1AxJbIK0c5MmiCIGzMItFM/67+aAumEh0 QYYTitpbIsQQck6QMN/RfuEA5LMEHcVZrFDrytV/DXxDX8zh8Jr1whv1Q6uRS8Ga eergtmeBvQi4iG/qHIjTl006sfQCo+rF2W/wJDme3v//Dlmn+SBreDdgMXx4MZVI /H6vmTWC3P2L9UxoD1pGJREPVCAj6IYVR1gaj2SZpYJ/6sYmgWhXL1zUXGmciuD1 Dq+UjGBgWu6BlCvWFLUs5feNFGViM5Q= -----END CERTIFICATE-----Generated at Sun Apr 6 07:09:12 2025 by rpki-client