$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa File: c0d325d4-637f-36da-a8b1-3933c07dd546.roa (raw, json) Hash identifier: Y42mkmyX+09w4OW+zrBUHllITdgGMGXkys26kHT5o9w= Subject key identifier: 88:3D:BD:C9:45:15:16:11:2F:26:F6:64:12:0F:E9:FF:8A:C4:45:80 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F432858495C243AAF4D497BDC3FAE4900 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 63199 IP address blocks: 148.153.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:3a:af:4d:49:7b:dc:3f:ae:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=2fbf70b2-6e8e-4c0d-9267-142c8ab35534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:68:d4:e8:ba:f4:fa:9f:90:58:b4:97:3d:e5: b8:09:5b:c5:e1:99:43:72:ba:33:85:c6:9a:e2:05: 16:65:f7:34:74:59:e9:24:76:10:c0:be:38:6b:d0: 30:b5:c2:46:b5:95:d3:bc:f0:cd:44:2a:28:ed:35: fb:8e:bc:71:ab:ff:91:87:5d:ba:4d:96:99:8d:49: 62:61:b1:6d:20:6c:15:42:c2:26:19:14:14:a1:fe: 8d:b8:a4:02:ff:b1:8b:64:34:e9:3d:3e:4f:c7:b6: 5e:55:2b:08:32:43:d7:e5:bc:ca:64:1e:7b:df:53: b2:a2:01:c9:ab:5d:95:9e:1e:65:3a:b7:0a:88:c8: b7:40:ab:22:89:11:b3:31:7d:dd:5f:54:b9:62:1a: 9d:e7:0a:f7:12:b6:49:27:c8:0b:50:57:32:f2:9d: a1:3e:15:9b:4f:89:0b:4a:d8:61:18:ad:53:dd:99: f3:1c:0d:ae:79:08:df:54:d0:dc:bb:ef:4d:8c:16: 07:ca:cd:2b:83:26:f6:fa:8d:02:de:da:53:83:dc: cd:51:ae:32:5f:89:cd:41:44:41:9f:85:fd:e3:8b: 90:40:8e:ac:04:5e:e2:f3:40:d9:39:f4:23:5c:5b: 79:4a:46:5b:4f:21:a8:95:ec:5e:d9:3d:bc:f0:96: 8a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3D:BD:C9:45:15:16:11:2F:26:F6:64:12:0F:E9:FF:8A:C4:45:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:27:3b:42:3d:cb:08:16:2f:df:94:ad:34:5f:c5:d5:35:7c: 95:49:f6:1f:33:d9:30:d1:4c:c0:75:30:9c:e8:70:a0:a7:90: 48:98:b6:b7:40:de:fb:2d:66:89:3b:dc:0e:99:95:e3:fe:c2: 80:ef:af:c5:ca:ff:63:2b:c7:8d:a7:56:ee:58:9b:43:12:b7: e1:b3:e1:b4:9c:e6:17:23:15:f3:fc:ae:77:a7:52:fc:37:82: 50:10:a4:fa:77:10:5b:2f:15:8e:17:43:91:6a:3f:60:d6:a2: 29:2b:64:64:31:1c:0a:8f:b8:e2:82:3a:57:67:b6:5d:2d:ef: 07:85:3a:f8:26:e3:a0:01:70:13:dc:76:75:07:c6:14:a6:10: 75:a4:3b:fc:9d:cd:8d:ba:68:b2:46:30:71:01:55:69:ea:63: 4d:87:bd:80:f6:51:02:69:6a:67:c6:01:c0:23:f9:05:4e:e1: 04:25:a7:ba:77:60:50:82:b3:8c:1c:d1:49:26:cc:5a:02:81: 76:8d:7d:59:44:75:97:f6:92:0b:81:b7:96:8a:0e:34:ff:a9: 51:da:74:82:cf:bb:d7:42:03:30:56:b8:b2:01:2e:0f:7e:6f: bf:e4:11:3b:c3:57:6a:c6:76:05:cf:17:d0:ce:59:1f:79:fc: f3:1f:56:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDqvTUl73D+uSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MmZiZjcwYjItNmU4ZS00YzBkLTkyNjctMTQyYzhhYjM1NTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWjU6Lr0+p+QWLSXPeW4CVvF4ZlDcrozhcaa 4gUWZfc0dFnpJHYQwL44a9AwtcJGtZXTvPDNRCoo7TX7jrxxq/+Rh126TZaZjUli YbFtIGwVQsImGRQUof6NuKQC/7GLZDTpPT5Px7ZeVSsIMkPX5bzKZB5731OyogHJ q12Vnh5lOrcKiMi3QKsiiRGzMX3dX1S5Yhqd5wr3ErZJJ8gLUFcy8p2hPhWbT4kL SthhGK1T3ZnzHA2ueQjfVNDcu+9NjBYHys0rgyb2+o0C3tpTg9zNUa4yX4nNQURB n4X944uQQI6sBF7i80DZOfQjXFt5SkZbTyGolexe2T288JaKJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIg9vclFFRYRLyb2ZBIP6f+KxEWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYzBkMzI1ZDQtNjM3Zi0z NmRhLWE4YjEtMzkzM2MwN2RkNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClJlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQnO0I9ywgWL9+UrTRfxdU1fJVJ9h8z2TDRTMB1MJzocKCnkEiYtrdA 3vstZok73A6ZleP+woDvr8XK/2Mrx42nVu5Ym0MSt+Gz4bSc5hcjFfP8rnenUvw3 glAQpPp3EFsvFY4XQ5FqP2DWoikrZGQxHAqPuOKCOldntl0t7weFOvgm46ABcBPc dnUHxhSmEHWkO/ydzY26aLJGMHEBVWnqY02HvYD2UQJpamfGAcAj+QVO4QQlp7p3 YFCCs4wc0UkmzFoCgXaNfVlEdZf2kguBt5aKDjT/qVHadILPu9dCAzBWuLIBLg9+ b7/kETvDV2rGdgXPF9DOWR95/PMfVts= -----END CERTIFICATE-----Generated at Sat Apr 5 22:32:37 2025 by rpki-client