$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa File: a5fade6e-275c-3ed2-a0be-b21ddef61294.roa (raw, json) Hash identifier: ANjqJBK4z9TwPwQp3E8adkjjj0YaDUuIntjC+7kz/wM= Subject key identifier: EC:00:6A:20:11:64:54:36:FF:10:C6:17:63:D2:BA:30:63:66:34:C8 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285848C2B63C39039F75452789C300 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 63199 IP address blocks: 148.153.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:3c:39:03:9f:75:45:27:89:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=d3ebe079-24f3-4de6-8253-33b4bc68f3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:70:90:f0:2a:ae:54:0a:67:a7:af:8f:6c: 80:37:3b:ce:5f:9c:ed:89:69:5a:ef:43:f8:a7:db: 2b:f9:46:63:88:a0:4b:a8:27:bc:c4:7c:41:9e:38: c0:ff:99:39:41:c5:b8:b5:69:1f:34:9a:33:a7:a1: 0c:aa:85:8c:4f:8f:93:70:e7:08:69:ac:b9:5e:bf: d1:80:0f:0d:5d:80:58:c4:e7:ba:91:35:c9:e3:30: 79:ac:8c:01:fe:2e:93:6d:b7:16:b1:9a:ae:76:af: 97:11:94:e6:e6:76:2d:a9:1d:11:91:69:23:98:2a: 72:cf:0b:dd:9a:56:34:64:71:ec:96:eb:f6:64:17: 1b:db:82:27:dd:91:18:52:91:52:ab:07:75:4b:d1: fe:28:7a:75:09:ba:09:a3:5e:63:3e:31:73:b5:f4: b0:d2:90:81:38:d7:8d:16:72:8e:a5:cd:4b:a2:59: 07:02:29:fb:06:c5:92:44:5a:e0:b8:d3:4e:55:1e: 46:16:0c:d3:35:b1:ec:0c:c1:50:a9:16:9a:a0:b5: d3:6f:71:8b:87:7d:1c:d0:7c:18:2b:37:76:70:ed: b9:06:2d:06:4c:f6:c6:85:35:02:b6:91:1a:64:b9: 78:73:aa:16:c2:66:71:ed:06:97:1d:40:d8:82:80: d3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:00:6A:20:11:64:54:36:FF:10:C6:17:63:D2:BA:30:63:66:34:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e5:96:aa:78:32:c2:9c:8a:d6:32:d6:c8:b6:e2:c2:64:b0: df:0e:f8:4b:dc:44:76:f6:a5:dd:ce:6b:e5:db:c3:3d:cc:6f: 13:5b:6d:ac:e7:d7:cb:75:15:15:b8:28:52:f9:e3:b5:56:80: b6:5b:22:9c:9e:ec:fd:34:69:b6:bd:ff:37:61:7e:a1:c7:c7: 88:7b:f2:da:85:c7:af:8d:7d:74:9f:97:96:d0:e0:ea:9b:f2: 4b:76:de:d5:32:97:40:d5:45:6d:30:53:d3:22:3b:f7:7f:1f: 25:19:79:a2:38:5d:c2:71:cf:05:4f:c1:f8:5d:10:64:b4:20: b7:04:d4:de:8a:f9:f3:ae:13:f2:1a:72:e4:ee:28:c9:2f:e2: 1b:64:c3:67:fe:0a:3b:9f:31:0b:9f:20:5b:97:87:a5:0c:8d: aa:ce:2b:f6:0c:e1:81:5d:c9:f8:b9:70:e3:e1:bb:98:84:26: 1b:e0:13:44:f3:75:df:22:5e:6e:70:5f:62:21:a7:59:d9:30: 74:39:58:7f:d4:05:e2:21:1e:7e:82:ef:60:f5:24:1b:41:9d: 20:49:ba:11:cb:92:34:00:a8:23:a5:af:6e:82:7e:0e:e0:a0: 0d:02:35:0b:45:c0:78:9c:28:16:4c:f7:14:f0:8f:d2:69:97: 9c:56:8a:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtjw5A591RSeJwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZDNlYmUwNzktMjRmMy00ZGU2LTgyNTMtMzNiNGJjNjhmM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsENwkPAqrlQKZ6evj2yANzvOX5ztiWla70P4 p9sr+UZjiKBLqCe8xHxBnjjA/5k5QcW4tWkfNJozp6EMqoWMT4+TcOcIaay5Xr/R gA8NXYBYxOe6kTXJ4zB5rIwB/i6TbbcWsZqudq+XEZTm5nYtqR0RkWkjmCpyzwvd mlY0ZHHsluv2ZBcb24In3ZEYUpFSqwd1S9H+KHp1CboJo15jPjFztfSw0pCBONeN FnKOpc1LolkHAin7BsWSRFrguNNOVR5GFgzTNbHsDMFQqRaaoLXTb3GLh30c0HwY Kzd2cO25Bi0GTPbGhTUCtpEaZLl4c6oWwmZx7QaXHUDYgoDTuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwAaiARZFQ2/xDGF2PSujBjZjTIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTVmYWRlNmUtMjc1Yy0z ZWQyLWEwYmUtYjIxZGRlZjYxMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzllqp4MsKcitYy1si24sJksN8O+EvcRHb2pd3Oa+Xbwz3MbxNbbazn 18t1FRW4KFL547VWgLZbIpye7P00aba9/zdhfqHHx4h78tqFx6+NfXSfl5bQ4Oqb 8kt23tUyl0DVRW0wU9MiO/d/HyUZeaI4XcJxzwVPwfhdEGS0ILcE1N6K+fOuE/Ia cuTuKMkv4htkw2f+CjufMQufIFuXh6UMjarOK/YM4YFdyfi5cOPhu5iEJhvgE0Tz dd8iXm5wX2Ihp1nZMHQ5WH/UBeIhHn6C72D1JBtBnSBJuhHLkjQAqCOlr26Cfg7g oA0CNQtFwHicKBZM9xTwj9Jpl5xWiqc= -----END CERTIFICATE-----Generated at Sat Apr 5 20:22:05 2025 by rpki-client