$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/993582d7-04a2-3e94-9de9-9c420f0e0614.roa File: 993582d7-04a2-3e94-9de9-9c420f0e0614.roa (raw, json) Hash identifier: fqyFcOsWuR940Ul6BiyLUXr7LpSs8yHts157g7WceX0= Subject key identifier: 4D:CF:8D:AF:A0:2C:E2:67:17:9C:ED:DF:F0:BF:BD:9F:61:38:60:73 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285848FD56CDF9C33E4D91598D6EE0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/993582d7-04a2-3e94-9de9-9c420f0e0614.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 63199 IP address blocks: 148.153.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:cd:f9:c3:3e:4d:91:59:8d:6e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=bb35fba6-99a1-4659-aee1-91d1c2cafa79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:ad:51:d4:91:e5:49:85:6c:0c:b1:bf:31: 69:83:ce:62:13:07:c8:e3:c6:bb:d7:67:7f:75:c5: 43:62:60:dd:87:d2:43:e9:73:2b:6b:6b:7b:e8:f3: 11:94:ad:8c:06:15:d0:ec:1d:b0:8e:5f:3b:aa:7d: d3:bf:58:07:dd:d5:ba:a6:cc:8a:3b:11:51:7a:da: ed:3f:c2:95:cb:e3:3d:69:8d:12:57:78:a7:f3:f1: 4d:34:58:28:ce:f1:05:af:e7:da:35:b3:a7:32:81: 5b:f5:fe:bd:e1:35:d7:32:00:ed:47:1c:b3:bd:4a: 95:2a:a1:85:f7:04:f7:fe:77:1f:cc:d5:46:55:bf: 96:59:bb:47:21:61:92:bd:30:f5:aa:8e:f0:9e:52: 49:2a:65:bb:b3:db:ff:90:6f:68:1e:3b:f2:8f:9a: 16:40:f5:dc:2b:7a:0a:50:99:fb:1d:e9:03:27:11: b6:12:91:52:22:64:d0:f4:9f:a9:d1:ce:c5:f5:a1: a0:e1:ad:7e:a0:58:63:d8:8e:61:0f:61:c0:fd:67: 33:16:fb:a3:d7:cc:a8:ad:77:65:a9:af:5a:39:83: 04:ac:bd:b3:f4:3c:e8:e6:34:6a:cb:e2:4f:96:05: 7f:16:46:90:20:f8:e4:45:d9:45:7d:01:18:02:65: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CF:8D:AF:A0:2C:E2:67:17:9C:ED:DF:F0:BF:BD:9F:61:38:60:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/993582d7-04a2-3e94-9de9-9c420f0e0614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b8:e8:8b:3d:06:17:ad:25:1f:59:68:25:76:7a:a2:ab:cb: fe:a7:ed:4c:3c:45:e9:02:69:8c:1b:f5:8c:7e:82:d0:24:6a: 62:7a:c4:1a:e9:d0:82:82:1e:bd:cd:b5:bc:73:39:41:81:9c: 14:a8:77:50:65:08:02:c9:ac:7f:29:82:b3:b0:fd:b6:dc:7b: 1a:55:1b:90:79:a6:87:e5:a5:b3:62:1f:c8:77:4c:ba:2d:31: 7c:65:e9:52:e1:5d:3e:ab:2a:a3:9d:35:98:bd:bc:33:ab:7b: 1d:a3:38:0b:22:e8:12:a0:f4:20:ac:73:94:e2:53:ee:42:e6: da:31:9c:fa:eb:cb:ea:99:70:02:2a:d4:9a:c0:c3:2f:9e:b2: fb:f3:21:7e:8f:b7:a3:5f:05:15:11:93:39:1b:cb:9a:52:4c: bd:45:22:fd:e7:36:dd:c4:b7:d4:35:31:38:40:3f:c8:27:3a: dd:45:07:1d:84:64:96:c0:43:d1:50:a1:cf:51:c9:7f:db:82: 04:37:77:73:c1:9b:4b:93:f4:10:8a:b1:8c:3f:cb:5e:2e:24: 9a:f0:9e:84:7b:51:36:d9:19:64:06:dc:ca:91:c0:e8:5f:9c: 95:f0:15:fc:a2:47:fb:7f:78:15:92:cf:36:ca:e8:24:e4:bf: 8d:11:19:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vs35wz5NkVmNbuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk YmIzNWZiYTYtOTlhMS00NjU5LWFlZTEtOTFkMWMyY2FmYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNGtUdSR5UmFbAyxvzFpg85iEwfI48a712d/ dcVDYmDdh9JD6XMra2t76PMRlK2MBhXQ7B2wjl87qn3Tv1gH3dW6psyKOxFRetrt P8KVy+M9aY0SV3in8/FNNFgozvEFr+faNbOnMoFb9f694TXXMgDtRxyzvUqVKqGF 9wT3/ncfzNVGVb+WWbtHIWGSvTD1qo7wnlJJKmW7s9v/kG9oHjvyj5oWQPXcK3oK UJn7HekDJxG2EpFSImTQ9J+p0c7F9aGg4a1+oFhj2I5hD2HA/WczFvuj18yorXdl qa9aOYMErL2z9Dzo5jRqy+JPlgV/FkaQIPjkRdlFfQEYAmU3zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3Pja+gLOJnF5zt3/C/vZ9hOGBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvOTkzNTgyZDctMDRhMi0z ZTk0LTlkZTktOWM0MjBmMGUwNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJliMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+46Is9BhetJR9ZaCV2eqKry/6n7Uw8RekCaYwb9Yx+gtAkamJ6xBrp 0IKCHr3NtbxzOUGBnBSod1BlCALJrH8pgrOw/bbcexpVG5B5poflpbNiH8h3TLot MXxl6VLhXT6rKqOdNZi9vDOrex2jOAsi6BKg9CCsc5TiU+5C5toxnPrry+qZcAIq 1JrAwy+esvvzIX6Pt6NfBRURkzkby5pSTL1FIv3nNt3Et9Q1MThAP8gnOt1FBx2E ZJbAQ9FQoc9RyX/bggQ3d3PBm0uT9BCKsYw/y14uJJrwnoR7UTbZGWQG3MqRwOhf nJXwFfyiR/t/eBWSzzbK6CTkv40RGXc= -----END CERTIFICATE-----Generated at Sun Apr 6 04:48:12 2025 by rpki-client