$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/854f0b13-0526-3986-a284-6ca1d255b066.roa File: 854f0b13-0526-3986-a284-6ca1d255b066.roa (raw, json) Hash identifier: 5Mg6t4dk/8SiO0Hn09uHOXHjc2Rnjt8zNm5keL4Kcco= Subject key identifier: 23:15:BE:56:DC:E3:F1:11:3A:B1:59:0A:61:23:A8:D2:7F:09:DA:ED Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584913AC38F992D2DC24925DA480 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/854f0b13-0526-3986-a284-6ca1d255b066.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 63199 IP address blocks: 148.153.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:38:f9:92:d2:dc:24:92:5d:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=117e0ef5-069f-4d2b-a640-f686f87ab1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:c3:55:7d:92:bf:bf:ac:8a:90:ad:f7:3b: 23:d7:6e:26:a0:78:27:d0:68:7e:a4:c7:41:63:35: 9a:62:ee:93:ef:61:1e:b3:ae:f6:5a:50:a5:e8:0d: 2e:87:74:67:81:64:56:64:ad:67:2c:9d:05:d1:5d: f8:a4:2e:39:58:d8:69:9e:03:ba:e1:82:54:55:bd: 3e:48:64:68:a2:5d:40:29:8c:ff:f4:e3:9c:78:d0: 03:9a:15:8d:ff:b9:78:62:8b:53:c6:d6:e5:bc:12: 3a:c5:44:5d:b7:6b:11:e6:e2:b8:bd:c6:90:38:88: de:ba:93:1d:42:d5:22:44:52:93:91:6d:7a:e1:a5: 8f:cf:b1:4f:bf:3f:60:41:cb:26:1e:62:98:d7:47: 9d:e5:40:d2:85:f5:7c:4a:cf:d5:2e:91:b0:4d:67: 5e:b7:a3:7a:c6:8d:c4:8a:53:6e:3f:ee:c0:b0:a8: 6d:d2:9b:af:c8:8f:ab:17:ae:1e:4b:1f:7a:7c:8b: 58:af:ab:bb:7a:17:90:0b:f3:98:2c:9a:82:8c:98: e3:62:ae:c8:95:6d:9e:97:1c:e3:b1:1f:61:79:23: 1c:83:76:b9:74:cb:15:5b:06:8e:34:5b:1b:72:84: 0a:8a:1f:83:b0:c1:06:bc:92:2c:ce:c4:e6:3e:9e: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:15:BE:56:DC:E3:F1:11:3A:B1:59:0A:61:23:A8:D2:7F:09:DA:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/854f0b13-0526-3986-a284-6ca1d255b066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ed:c3:42:4e:42:fd:fe:61:af:4d:07:66:88:88:97:72:65: 82:8b:c3:96:35:e5:1a:42:66:73:e6:94:aa:cb:06:28:0f:75: 5e:f1:91:94:e8:eb:47:ea:f5:df:68:81:69:d0:fe:c6:49:c7: 4f:6d:be:44:b1:33:0c:aa:c5:b1:1a:0d:43:bd:10:ce:35:84: 0d:4a:20:cd:38:5e:15:07:e9:3d:5f:d5:09:10:c4:1d:b9:ab: 2e:40:1e:61:79:1b:30:e1:46:55:18:c4:bc:10:6c:2d:ef:2f: ce:f6:bd:c9:af:cf:0d:d1:34:05:f6:78:d4:57:b1:e6:7f:ad: ef:9d:e8:61:6a:ab:b3:fa:b7:bf:91:46:22:10:63:07:0f:dd: 46:0c:5e:2d:be:cf:e4:3a:79:dc:d3:5b:64:c3:77:cd:39:02: 7e:22:f6:a8:6a:5b:a1:8e:0c:58:b3:d4:f4:3d:96:01:e0:ab: 7f:9a:9e:d0:c1:d0:7b:38:50:aa:cc:c2:be:ec:6a:4e:b6:80: a8:d9:31:b1:b7:ad:d3:4e:37:bf:8b:9a:7f:e7:db:9d:3b:be: 9e:ee:ba:22:91:c3:c2:70:8e:3c:45:69:eb:0c:15:ad:8d:2c: 15:0c:a2:18:17:12:c5:7d:9c:dd:4c:5c:49:8e:77:b4:d4:8f: 41:a3:7b:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrDj5ktLcJJJdpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MTE3ZTBlZjUtMDY5Zi00ZDJiLWE2NDAtZjY4NmY4N2FiMWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7rDVX2Sv7+sipCt9zsj124moHgn0Gh+pMdB YzWaYu6T72Ees672WlCl6A0uh3RngWRWZK1nLJ0F0V34pC45WNhpngO64YJUVb0+ SGRool1AKYz/9OOceNADmhWN/7l4YotTxtblvBI6xURdt2sR5uK4vcaQOIjeupMd QtUiRFKTkW164aWPz7FPvz9gQcsmHmKY10ed5UDShfV8Ss/VLpGwTWdet6N6xo3E ilNuP+7AsKht0puvyI+rF64eSx96fItYr6u7eheQC/OYLJqCjJjjYq7IlW2elxzj sR9heSMcg3a5dMsVWwaONFsbcoQKih+DsMEGvJIszsTmPp4bYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMVvlbc4/EROrFZCmEjqNJ/CdrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvODU0ZjBiMTMtMDUyNi0z OTg2LWEyODQtNmNhMWQyNTViMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTtw0JOQv3+Ya9NB2aIiJdyZYKLw5Y15RpCZnPmlKrLBigPdV7xkZTo 60fq9d9ogWnQ/sZJx09tvkSxMwyqxbEaDUO9EM41hA1KIM04XhUH6T1f1QkQxB25 qy5AHmF5GzDhRlUYxLwQbC3vL872vcmvzw3RNAX2eNRXseZ/re+d6GFqq7P6t7+R RiIQYwcP3UYMXi2+z+Q6edzTW2TDd805An4i9qhqW6GODFiz1PQ9lgHgq3+antDB 0Hs4UKrMwr7sak62gKjZMbG3rdNON7+Lmn/n2507vp7uuiKRw8JwjjxFaesMFa2N LBUMohgXEsV9nN1MXEmOd7TUj0Gje8I= -----END CERTIFICATE-----Generated at Sat Apr 5 23:21:12 2025 by rpki-client