$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa File: ca4000da-8aab-337b-9ec7-04cc1a336133.roa (raw, json) Hash identifier: Xq1HWK9WLWIWHUJ8EL6iMZyxZ3PhuFnZL/T0EXyK0gI= Subject key identifier: 8A:12:8B:23:F0:DD:72:AF:C9:5B:5A:5E:C1:16:99:32:16:F6:43:20 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285848FD56CDDE2476A19ECA327F00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 63199 IP address blocks: 148.153.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:cd:de:24:76:a1:9e:ca:32:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=76a10721-6a5d-4fdf-ad64-9e68147616e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:95:b2:6d:51:f1:b0:2f:61:f2:bd:77:e3: 80:bf:df:db:c6:c0:72:06:df:68:05:2f:26:57:6d: 03:74:2c:5b:37:f3:da:03:0b:e2:20:53:cb:63:9f: 4d:84:7c:c9:ab:7b:46:01:b2:a6:54:78:90:79:41: a3:d8:1b:af:5e:53:e4:a5:24:7d:b0:47:07:0d:48: fd:bb:84:c9:ba:2e:ad:20:e5:12:cb:4f:6e:d9:82: 6c:ef:f3:0b:40:74:39:63:8b:11:c3:9c:11:b2:c0: 3e:26:e1:31:1a:13:d0:bf:58:8c:16:c1:12:57:54: 3b:77:e8:97:c7:1f:dc:93:26:9d:68:d9:46:54:fe: bf:6b:56:a4:fd:ce:44:0c:28:3f:82:2c:14:45:9b: fc:1e:47:f6:6a:dc:0e:49:54:40:f1:6a:16:18:82: 34:6a:ae:cf:c0:5c:a9:a7:b9:8f:66:bf:ba:ed:fd: b9:46:3e:3d:91:5d:bf:29:3c:31:6a:38:56:98:66: 7a:15:ec:7c:60:be:4d:61:02:12:06:9a:9e:45:61: 68:90:4a:d9:84:08:fc:cf:56:bf:c0:f6:7d:47:b6: 62:99:1e:ac:69:9a:24:49:6d:2a:60:42:9f:17:0b: f6:a0:67:8c:b9:44:bf:e9:11:78:1f:b6:0d:df:75: 7a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:12:8B:23:F0:DD:72:AF:C9:5B:5A:5E:C1:16:99:32:16:F6:43:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:18:e1:c7:a0:46:c3:dc:bd:e0:db:58:46:12:2b:fb:08:55: 41:06:61:3f:40:d3:24:c9:f6:a4:b4:44:c0:71:b4:e3:7f:d4: dc:2b:96:ff:de:56:a6:74:f2:2e:8d:bd:4c:a9:ee:08:cf:7e: 18:d7:05:32:06:72:a0:13:96:b3:da:df:10:1e:6b:97:a6:5b: 44:99:4e:cc:c5:da:d5:3e:6c:48:0c:b3:36:f1:17:f7:0e:3d: 7a:6f:64:20:5b:72:e1:56:93:86:cd:8f:03:84:1b:20:41:53: f8:94:3a:8f:21:79:72:6e:72:ed:7b:f5:87:fa:a6:a7:26:65: a0:06:5f:b4:7b:0f:ae:d3:8f:1a:fb:0a:9b:e3:43:77:b9:4f: 48:d0:b5:a9:e9:3e:ed:92:cd:81:a1:2c:40:d5:fd:19:4d:0f: 1f:75:68:fa:43:c4:e7:8e:19:7b:10:3c:92:cb:34:6f:19:10: f7:6c:eb:f5:24:b9:e6:b5:0d:43:21:26:f1:a4:3a:20:2a:b4: 29:5b:af:8d:d1:fc:26:53:41:c9:7b:d7:1b:93:0f:dd:67:67: db:3e:ab:c8:43:fc:bc:d7:69:49:c4:53:92:50:1c:94:b0:75: 39:f5:90:b5:70:57:57:0f:f5:fb:48:c0:9c:5a:54:43:7f:08: 51:08:36:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vs3eJHahnsoyfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NzZhMTA3MjEtNmE1ZC00ZmRmLWFkNjQtOWU2ODE0NzYxNmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyeVsm1R8bAvYfK9d+OAv9/bxsByBt9oBS8m V20DdCxbN/PaAwviIFPLY59NhHzJq3tGAbKmVHiQeUGj2BuvXlPkpSR9sEcHDUj9 u4TJui6tIOUSy09u2YJs7/MLQHQ5Y4sRw5wRssA+JuExGhPQv1iMFsESV1Q7d+iX xx/ckyadaNlGVP6/a1ak/c5EDCg/giwURZv8Hkf2atwOSVRA8WoWGII0aq7PwFyp p7mPZr+67f25Rj49kV2/KTwxajhWmGZ6Fex8YL5NYQISBpqeRWFokErZhAj8z1a/ wPZ9R7ZimR6saZokSW0qYEKfFwv2oGeMuUS/6RF4H7YN33V67wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoSiyPw3XKvyVtaXsEWmTIW9kMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2E0MDAwZGEtOGFhYi0z MzdiLTllYzctMDRjYzFhMzM2MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsY4cegRsPcveDbWEYSK/sIVUEGYT9A0yTJ9qS0RMBxtON/1Nwrlv/e VqZ08i6NvUyp7gjPfhjXBTIGcqATlrPa3xAea5emW0SZTszF2tU+bEgMszbxF/cO PXpvZCBbcuFWk4bNjwOEGyBBU/iUOo8heXJucu179Yf6pqcmZaAGX7R7D67Tjxr7 CpvjQ3e5T0jQtanpPu2SzYGhLEDV/RlNDx91aPpDxOeOGXsQPJLLNG8ZEPds6/Uk uea1DUMhJvGkOiAqtClbr43R/CZTQcl71xuTD91nZ9s+q8hD/LzXaUnEU5JQHJSw dTn1kLVwV1cP9ftIwJxaVEN/CFEINkA= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:41 2025 by rpki-client