$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa File: 88f21b14-08fd-3634-835b-99b37c6e1f52.roa (raw, json) Hash identifier: 7tnKup4UUi3gX4G2rsxsZyIIclwTeHxQBfUk8wc9VKg= Subject key identifier: AB:E0:A5:0D:C8:4E:88:7E:2A:76:06:B8:22:BE:C2:59:79:4F:80:13 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285848D7A64CC784AE011843B2EE40 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 63199 IP address blocks: 148.153.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:4c:c7:84:ae:01:18:43:b2:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=2d2df953-d7f8-4c43-bf63-2926e137831e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:86:df:28:5f:d0:c6:63:fa:01:d6:50:f5:b3: 7a:ae:1b:fe:1d:9e:60:51:40:ab:a8:8a:fe:b1:90: 88:9a:26:aa:87:b6:33:c3:fd:60:2b:5a:1d:29:7d: b6:dc:d7:13:50:f7:56:d9:a7:57:f5:8a:10:4e:bb: 4d:40:5d:2e:d1:b2:71:99:d6:10:1d:e3:79:25:3a: 74:53:bd:06:ce:d6:69:69:ab:73:2c:54:55:1f:2d: b9:f6:eb:65:4b:76:9d:31:09:79:c8:1f:ee:31:04: 7b:af:0c:1b:3b:5c:29:eb:93:aa:a0:f1:15:9e:9b: f3:c4:98:1b:1b:cb:cf:63:5b:bb:b1:6e:32:6b:cd: 16:c4:b1:7f:53:84:96:dc:ec:c7:b5:32:64:76:6a: 56:08:eb:4a:4b:49:96:ad:a7:2e:a3:a2:ca:9e:4c: 10:7c:88:b6:9e:a2:86:bb:e3:d9:c7:09:53:1e:93: 8c:9e:b2:ed:5e:24:41:69:ef:d6:27:8d:05:bb:7e: fb:9c:d1:6a:2d:b2:49:b5:8d:17:f0:94:ec:57:05: e1:14:ce:71:39:53:10:fe:88:9d:92:22:ca:6b:1a: ab:f2:3b:57:97:ed:d8:d4:a0:dd:c4:49:d7:98:62: 30:a1:d1:16:56:b2:ad:b6:51:2c:e3:b7:9e:c6:30: ea:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E0:A5:0D:C8:4E:88:7E:2A:76:06:B8:22:BE:C2:59:79:4F:80:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:4e:3d:a6:56:86:73:cd:57:79:85:4e:b7:96:f8:14:3d:27: b6:d9:61:28:07:25:16:9c:57:4d:49:32:d8:54:c1:44:98:99: db:32:e5:44:8c:61:9b:43:ba:e5:a4:eb:6a:26:49:85:aa:df: 15:7f:1e:d9:d0:cd:ac:f7:b8:2b:18:d4:c6:74:7b:dd:12:95: 1b:30:65:4d:68:d5:9f:c2:9a:91:2a:2d:04:3a:c9:c1:57:0a: f8:b0:df:9f:53:ea:06:db:38:8d:32:e0:c4:6e:22:5b:73:28: 8c:24:33:be:a3:fa:50:42:51:49:5c:aa:e3:15:cc:47:ba:c8: b6:b2:3c:97:d3:e2:2e:bc:1c:47:d3:fe:f4:18:9f:73:8c:08: 9f:09:88:76:8c:04:3b:68:81:91:58:c7:62:f6:72:3d:96:ed: 69:69:40:5d:57:bb:e1:11:75:c6:a2:ca:53:b0:fc:89:e0:ea: 2e:ba:2b:a9:7e:8f:ba:f0:e0:38:6f:34:54:96:0e:29:3f:59: 5f:44:00:e3:91:2b:8a:78:1f:5b:1b:2c:aa:67:f7:55:c0:13: 05:ea:dc:76:67:2f:02:62:46:33:6c:06:a5:62:7f:6c:a6:50: 7f:83:44:0d:91:ed:b2:82:20:e4:e0:89:4f:42:b1:3d:1b:13: c6:3f:29:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpkzHhK4BGEOy7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk MmQyZGY5NTMtZDdmOC00YzQzLWJmNjMtMjkyNmUxMzc4MzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4bfKF/QxmP6AdZQ9bN6rhv+HZ5gUUCrqIr+ sZCImiaqh7Yzw/1gK1odKX223NcTUPdW2adX9YoQTrtNQF0u0bJxmdYQHeN5JTp0 U70GztZpaatzLFRVHy259utlS3adMQl5yB/uMQR7rwwbO1wp65OqoPEVnpvzxJgb G8vPY1u7sW4ya80WxLF/U4SW3OzHtTJkdmpWCOtKS0mWracuo6LKnkwQfIi2nqKG u+PZxwlTHpOMnrLtXiRBae/WJ40Fu377nNFqLbJJtY0X8JTsVwXhFM5xOVMQ/oid kiLKaxqr8jtXl+3Y1KDdxEnXmGIwodEWVrKttlEs47eexjDqOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvgpQ3IToh+KnYGuCK+wll5T4ATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvODhmMjFiMTQtMDhmZC0z NjM0LTgzNWItOTliMzdjNmUxZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJl+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZOPaZWhnPNV3mFTreW+BQ9J7bZYSgHJRacV01JMthUwUSYmdsy5USM YZtDuuWk62omSYWq3xV/HtnQzaz3uCsY1MZ0e90SlRswZU1o1Z/CmpEqLQQ6ycFX Cviw359T6gbbOI0y4MRuIltzKIwkM76j+lBCUUlcquMVzEe6yLayPJfT4i68HEfT /vQYn3OMCJ8JiHaMBDtogZFYx2L2cj2W7WlpQF1Xu+ERdcaiylOw/Ing6i66K6l+ j7rw4DhvNFSWDik/WV9EAOORK4p4H1sbLKpn91XAEwXq3HZnLwJiRjNsBqVif2ym UH+DRA2R7bKCIOTgiU9CsT0bE8Y/KXI= -----END CERTIFICATE-----Generated at Sat Apr 5 20:43:55 2025 by rpki-client