$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/acdfc857-b60f-31a5-a03d-714b58be33d7.roa File: acdfc857-b60f-31a5-a03d-714b58be33d7.roa (raw, json) Hash identifier: oLj+TyUPZ1LsvKSLhc5NG/dPZvHIubOnMK8TPT8zkL4= Subject key identifier: 74:13:25:4E:06:5E:94:4F:7E:E0:73:F1:6E:4C:B2:C0:2D:84:0C:6B Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285848D3765A6FFDCEFF2E84E9DE00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/acdfc857-b60f-31a5-a03d-714b58be33d7.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 63199 IP address blocks: 148.153.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:5a:6f:fd:ce:ff:2e:84:e9:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=f451cae3-d567-49cc-8f2b-f981d50fe245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:22:4d:4a:68:8e:e5:b4:11:f6:bc:d3:0d:24: d6:c4:11:6c:60:c3:09:e5:18:70:31:6e:06:28:84: a3:61:9b:8c:2a:31:70:ff:56:91:6a:10:80:12:c5: 29:a6:a1:ae:34:70:c5:a0:f7:f3:92:aa:d5:c1:fb: b4:b2:01:38:90:5a:eb:52:a6:54:e8:f7:63:67:75: 26:95:37:23:13:a2:48:7f:92:fd:0e:43:a4:0e:79: 8e:b8:4c:62:70:8a:0c:7b:80:5c:b6:9f:60:65:95: 0c:e4:cc:34:6e:09:67:6e:dd:d3:1d:86:b0:c0:6f: 68:55:52:a6:4f:1a:22:95:e3:1b:09:2f:99:48:85: 1b:ed:47:c4:a9:8a:3c:89:d4:24:fd:13:e3:a0:5f: c9:b2:2c:0a:02:82:c8:5b:98:a6:63:bb:05:33:81: 63:6e:a9:a5:c0:cc:e4:9d:0f:48:c7:f9:07:e1:bc: 0f:92:86:10:d5:23:da:d4:ed:44:2f:06:fe:13:17: 48:d3:25:00:4d:6f:ef:65:1e:4f:f8:05:e9:e0:08: e3:dd:4f:30:e3:b4:85:e8:63:a7:3c:48:42:ba:2e: 55:76:6c:ee:48:38:5c:7d:ce:fa:fc:4a:ed:81:7b: fc:51:17:8b:99:c2:7d:04:6e:74:c2:74:85:6c:7b: d1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:13:25:4E:06:5E:94:4F:7E:E0:73:F1:6E:4C:B2:C0:2D:84:0C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/acdfc857-b60f-31a5-a03d-714b58be33d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e0:23:6e:bb:43:85:20:ad:19:a8:a1:79:bb:25:1a:9f:6f: bc:86:8e:56:79:a8:02:86:dc:aa:45:de:55:3c:07:b9:3f:96: 08:7a:4b:8f:8b:93:ae:d6:5d:f9:fb:22:0a:3b:96:51:c6:6c: ed:60:19:d6:d3:e6:24:f9:82:3b:38:14:7c:46:80:85:d7:e6: bd:50:4b:73:e2:26:fe:b6:a8:2c:de:01:3b:d2:1e:96:7f:82: ee:03:cd:7c:98:19:5f:20:db:d6:54:d8:d5:6d:4f:90:ef:e8: ed:e1:cb:ec:fb:73:99:b0:84:52:56:e6:6e:02:3c:b5:0d:57: 0f:4f:be:58:b4:d5:5b:b7:21:a2:e0:65:12:35:1d:d5:76:0d: 7f:4f:09:95:0a:d1:da:3c:dd:67:a6:c3:4d:fe:b6:c4:7d:61: 3f:28:87:65:d7:83:39:53:f0:8f:9e:0e:cf:f7:26:ce:4e:37: 93:00:83:f8:3b:2f:7f:42:77:47:f6:15:35:c6:d4:4d:02:35: de:a5:1f:99:69:0e:b2:23:a9:d0:05:3c:f6:f1:45:40:ca:a6: 89:1f:51:04:b5:59:9e:d7:dd:25:28:be:b4:d7:ae:50:18:b1: e3:44:d8:be:71:f2:0e:e7:de:3f:07:6b:2b:41:6c:0b:a4:9a: be:ea:e2:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdlpv/c7/LoTp3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk ZjQ1MWNhZTMtZDU2Ny00OWNjLThmMmItZjk4MWQ1MGZlMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCJNSmiO5bQR9rzTDSTWxBFsYMMJ5RhwMW4G KISjYZuMKjFw/1aRahCAEsUppqGuNHDFoPfzkqrVwfu0sgE4kFrrUqZU6PdjZ3Um lTcjE6JIf5L9DkOkDnmOuExicIoMe4Bctp9gZZUM5Mw0bglnbt3THYawwG9oVVKm TxoileMbCS+ZSIUb7UfEqYo8idQk/RPjoF/JsiwKAoLIW5imY7sFM4FjbqmlwMzk nQ9Ix/kH4bwPkoYQ1SPa1O1ELwb+ExdI0yUATW/vZR5P+AXp4Ajj3U8w47SF6GOn PEhCui5VdmzuSDhcfc76/ErtgXv8UReLmcJ9BG50wnSFbHvRUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQTJU4GXpRPfuBz8W5MssAthAxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYWNkZmM4NTctYjYwZi0z MWE1LWEwM2QtNzE0YjU4YmUzM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJmWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILgI267Q4UgrRmooXm7JRqfb7yGjlZ5qAKG3KpF3lU8B7k/lgh6S4+L k67WXfn7Igo7llHGbO1gGdbT5iT5gjs4FHxGgIXX5r1QS3PiJv62qCzeATvSHpZ/ gu4DzXyYGV8g29ZU2NVtT5Dv6O3hy+z7c5mwhFJW5m4CPLUNVw9Pvli01Vu3IaLg ZRI1HdV2DX9PCZUK0do83Wemw03+tsR9YT8oh2XXgzlT8I+eDs/3Js5ON5MAg/g7 L39Cd0f2FTXG1E0CNd6lH5lpDrIjqdAFPPbxRUDKpokfUQS1WZ7X3SUovrTXrlAY seNE2L5x8g7n3j8HaytBbAukmr7q4pU= -----END CERTIFICATE-----Generated at Sat Apr 5 22:28:13 2025 by rpki-client