$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa File: 7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa (raw, json) Hash identifier: HMIBrj5T94o12pvvFymxNtZM6gY8l+Ky+uZ97ntt1WI= Subject key identifier: 61:76:F9:E1:BE:65:E7:FB:35:6E:9C:8D:3C:85:0D:F7:8B:CB:98:D2 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285848E2D11DEEBA1A265AFD0FC980 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 63199 IP address blocks: 148.153.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:1d:ee:ba:1a:26:5a:fd:0f:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=e6d3bb4e-2b77-4af7-b745-dc14a77b9c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:ea:dc:50:e0:78:87:24:8d:88:00:6d:9c: 9e:b4:49:f8:2c:ee:f3:14:1e:c3:ed:65:50:9a:25: 95:04:09:97:49:0d:97:3e:27:c3:9a:79:af:75:96: ed:01:3a:3e:e3:24:e4:27:35:3c:1d:bb:31:12:9b: 59:87:bf:7f:3c:b3:68:57:08:6a:10:e8:97:07:5e: 85:cd:06:25:86:bf:cb:e6:32:16:ed:bd:3d:01:d0: 94:55:0c:cf:aa:22:04:c9:fe:19:5b:a7:50:24:58: e0:d9:c6:0c:ce:4a:cc:92:b8:1a:0c:60:9d:c5:0e: 8e:17:5d:81:49:61:9b:70:37:98:54:48:4a:32:16: 9f:17:13:15:f5:a0:1a:5f:25:91:a6:60:1d:7d:41: ad:f7:c8:4d:ed:8e:77:fe:0c:9a:e3:3a:d7:49:fb: 82:59:21:18:c6:81:55:59:de:cb:42:30:92:07:82: 1e:d1:38:d2:18:30:80:67:0b:d2:97:21:5e:91:8b: cc:8b:47:83:9e:c0:6a:73:8c:84:a4:b5:33:6d:45: 06:0b:d8:13:fe:50:a5:15:0a:4c:e3:2e:27:44:9a: 65:fd:06:f0:9d:77:1e:95:6e:a6:54:84:01:e9:ad: 8b:64:b4:2d:f5:42:22:74:29:8f:18:53:9b:e9:e2: a1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:76:F9:E1:BE:65:E7:FB:35:6E:9C:8D:3C:85:0D:F7:8B:CB:98:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:2d:f5:93:0e:40:4d:4f:ff:88:2c:d0:dd:44:d1:d8:3f:32: ca:69:7a:73:ae:43:e7:ea:22:0a:a9:74:76:3b:ac:8e:2f:37: fa:b3:d8:a4:67:a7:b8:f8:69:9e:84:ce:ae:a7:6e:c0:45:63: 2e:df:d4:c7:ef:8b:bc:f0:4e:39:34:1a:2c:8e:2b:dc:6b:b7: 04:73:63:96:64:83:7a:78:d2:34:ca:6f:73:d8:40:2d:68:35: f0:8a:80:98:8e:20:7d:a6:1e:07:a8:d8:bf:49:32:34:1e:1a: fa:96:26:48:83:09:d0:4b:f9:00:b0:c0:c1:42:47:21:e6:7b: df:46:47:0b:ee:7a:e8:90:50:36:cf:19:7c:e7:ad:ed:a7:ba: a1:96:2e:62:67:85:69:2b:cc:f0:d0:ce:d4:48:24:78:6c:7f: 6f:a0:33:35:92:07:03:ce:5a:96:fc:06:23:ea:f3:10:26:e6: 06:6e:c0:a8:29:ab:b5:f0:8c:eb:f3:95:a6:48:2f:07:8c:a7: 9d:eb:5d:f7:d5:d7:0f:7d:a5:c5:77:36:c6:4f:bf:20:28:aa: 43:b3:5c:89:63:5d:92:cf:92:70:be:c8:eb:e1:ca:c2:fb:91: 1d:24:aa:b1:a3:43:38:b9:c8:ea:31:8f:85:2e:f5:0a:8b:5c: 63:60:3e:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0R3uuhomWv0PyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZTZkM2JiNGUtMmI3Ny00YWY3LWI3NDUtZGMxNGE3N2I5YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUjq3FDgeIckjYgAbZyetEn4LO7zFB7D7WVQ miWVBAmXSQ2XPifDmnmvdZbtATo+4yTkJzU8HbsxEptZh79/PLNoVwhqEOiXB16F zQYlhr/L5jIW7b09AdCUVQzPqiIEyf4ZW6dQJFjg2cYMzkrMkrgaDGCdxQ6OF12B SWGbcDeYVEhKMhafFxMV9aAaXyWRpmAdfUGt98hN7Y53/gya4zrXSfuCWSEYxoFV Wd7LQjCSB4Ie0TjSGDCAZwvSlyFekYvMi0eDnsBqc4yEpLUzbUUGC9gT/lClFQpM 4y4nRJpl/QbwnXcelW6mVIQB6a2LZLQt9UIidCmPGFOb6eKhIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGF2+eG+Zef7NW6cjTyFDfeLy5jSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNzE1M2EyYjYtM2ZiOS0z ZDA3LWE4NzItZDljZTM5MmZhNjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8t9ZMOQE1P/4gs0N1E0dg/MsppenOuQ+fqIgqpdHY7rI4vN/qz2KRn p7j4aZ6Ezq6nbsBFYy7f1Mfvi7zwTjk0GiyOK9xrtwRzY5Zkg3p40jTKb3PYQC1o NfCKgJiOIH2mHgeo2L9JMjQeGvqWJkiDCdBL+QCwwMFCRyHme99GRwvueuiQUDbP GXznre2nuqGWLmJnhWkrzPDQztRIJHhsf2+gMzWSBwPOWpb8BiPq8xAm5gZuwKgp q7XwjOvzlaZILweMp53rXffV1w99pcV3NsZPvyAoqkOzXIljXZLPknC+yOvhysL7 kR0kqrGjQzi5yOoxj4Uu9QqLXGNgPvA= -----END CERTIFICATE-----Generated at Sat Apr 5 22:31:15 2025 by rpki-client