$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa File: a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa (raw, json) Hash identifier: fULmXuI6q2r0UC3Vurxgdo4X8noaE8qyksPJxBREEzU= Subject key identifier: 17:1C:85:44:9D:26:55:3B:B0:AF:51:AE:A0:83:9B:E3:70:8B:B1:71 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285848CB1648719F44DD6487D53F80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 63199 IP address blocks: 148.153.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:48:71:9f:44:dd:64:87:d5:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=32e08659-134b-4996-828a-7e0a55a257e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:9c:a0:f5:9e:d1:22:d6:d7:80:b3:08:30: cf:75:fa:e8:52:ba:d9:79:fb:2d:af:75:cd:5c:9e: 67:af:aa:38:ff:a8:56:4d:5c:e0:8f:1e:96:43:6e: b5:1a:8f:01:6a:b5:e1:cc:4c:cb:81:7f:35:72:b7: 79:5d:d5:6b:93:20:1c:88:5e:e4:29:ad:71:96:59: 4b:49:4c:35:3c:a8:ae:48:b3:4f:83:1c:fb:6f:b3: 71:96:e4:12:6a:9a:00:62:67:21:33:9a:44:0f:4f: b8:80:5c:31:ad:d0:bb:f6:5d:a3:92:ec:7c:46:ed: d0:cd:9e:35:65:c6:83:c3:d0:fb:60:3e:b4:9a:ea: 55:ee:a0:3e:3e:5f:59:66:0c:e9:91:f4:e4:64:99: 74:c1:37:af:31:4e:0b:8a:4c:36:d6:5b:f8:e2:31: fe:b0:1c:ca:f9:97:1b:50:39:4d:7f:35:ae:6c:48: 8b:6c:5b:00:11:7f:95:c6:33:58:62:30:bb:ed:27: 11:ca:86:d8:7c:d8:30:84:23:9d:28:fb:39:cf:d0: 07:76:d3:30:ac:96:d4:e2:62:c5:a5:99:b8:0d:6e: f5:bc:66:20:09:97:f4:78:4d:31:11:2b:ee:c5:53: 6b:cb:ef:32:ab:ee:6a:b5:f8:ec:0a:38:3e:cc:8b: de:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1C:85:44:9D:26:55:3B:B0:AF:51:AE:A0:83:9B:E3:70:8B:B1:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:3c:b9:3e:8b:02:69:fd:3e:93:23:20:57:28:38:1a:79:28: fb:81:f5:da:c5:17:1c:9f:95:7c:09:a3:86:cf:3b:ef:9b:a9: 2b:19:c2:01:43:8e:6c:72:65:30:ed:0f:e3:4c:86:da:70:74: 8e:a1:34:98:2b:f4:d2:86:b9:c6:3b:5c:97:2d:9e:b9:7b:5e: f7:25:e1:d7:ea:b8:65:ee:b1:9b:51:ac:73:74:ce:68:27:0a: 9c:b6:c7:d6:3a:33:31:92:09:fd:a2:92:0b:91:bf:2d:7f:49: ef:53:f5:59:98:06:dd:3e:ee:d2:6d:6d:f0:94:1f:91:5a:91: 03:44:a2:c7:92:06:98:20:0f:a2:1b:cc:48:79:c3:13:ce:70: 9c:3e:72:fc:e7:62:7f:81:a3:9f:27:8a:bb:9b:cc:aa:7a:3d: f0:da:ac:ac:61:c0:1c:84:c4:fa:f6:59:ef:6c:35:ad:ad:1c: 04:13:c6:2d:ff:ca:3a:1a:06:3f:cd:79:d1:b9:15:0e:5b:d4: 24:bd:2d:ba:e3:a5:eb:08:b7:8c:66:69:5d:a9:c2:67:af:92: 0a:21:0e:6c:c4:02:f7:d0:e4:b8:7c:23:9e:86:84:16:1b:34: 8a:71:ea:1c:0f:e7:c1:41:91:6d:7c:7e:4c:fb:f9:98:a0:49: 85:e6:46:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFkhxn0TdZIfVP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk MzJlMDg2NTktMTM0Yi00OTk2LTgyOGEtN2UwYTU1YTI1N2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TqcoPWe0SLW14CzCDDPdfroUrrZefstr3XN XJ5nr6o4/6hWTVzgjx6WQ261Go8BarXhzEzLgX81crd5XdVrkyAciF7kKa1xlllL SUw1PKiuSLNPgxz7b7NxluQSapoAYmchM5pED0+4gFwxrdC79l2jkux8Ru3QzZ41 ZcaDw9D7YD60mupV7qA+Pl9ZZgzpkfTkZJl0wTevMU4Likw21lv44jH+sBzK+Zcb UDlNfzWubEiLbFsAEX+VxjNYYjC77ScRyobYfNgwhCOdKPs5z9AHdtMwrJbU4mLF pZm4DW71vGYgCZf0eE0xESvuxVNry+8yq+5qtfjsCjg+zIve5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcchUSdJlU7sK9RrqCDm+Nwi7FxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTdmODU2ZDItNDFkNi0z NmViLTk2MGEtY2MxNWZjZTllMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo8uT6LAmn9PpMjIFcoOBp5KPuB9drFFxyflXwJo4bPO++bqSsZwgFD jmxyZTDtD+NMhtpwdI6hNJgr9NKGucY7XJctnrl7Xvcl4dfquGXusZtRrHN0zmgn Cpy2x9Y6MzGSCf2ikguRvy1/Se9T9VmYBt0+7tJtbfCUH5FakQNEoseSBpggD6Ib zEh5wxPOcJw+cvznYn+Bo58nirubzKp6PfDarKxhwByExPr2We9sNa2tHAQTxi3/ yjoaBj/NedG5FQ5b1CS9LbrjpesIt4xmaV2pwmevkgohDmzEAvfQ5Lh8I56GhBYb NIpx6hwP58FBkW18fkz7+ZigSYXmRsY= -----END CERTIFICATE-----Generated at Sat Apr 5 22:30:51 2025 by rpki-client