$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa File: cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa (raw, json) Hash identifier: xvdhW/EnzwdlA1iYWgf4usGEVwDL6/sGFd/6JR7EvaI= Subject key identifier: 72:62:2B:D7:A5:75:A9:EB:2D:0A:E6:6A:7D:75:61:47:47:56:19:FC Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285848A6CB647F5EE40B5AA9E62FC0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa Signing time: Fri 24 Jan 2025 14:00:52 +0000 ROA not before: Fri 24 Jan 2025 14:00:52 +0000 ROA not after: Thu 24 Apr 2025 13:00:52 +0000 asID: 63199 IP address blocks: 148.153.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:cb:64:7f:5e:e4:0b:5a:a9:e6:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jan 24 14:00:52 2025 GMT Not After : Apr 24 13:00:52 2025 GMT Subject: CN=43398492-543b-4d80-b607-070b59fbea91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:65:07:3b:a2:a1:b8:cc:42:c5:7f:fc:c0:da: 68:53:4e:bd:84:45:6b:ba:24:64:1b:c8:f6:4a:1b: fc:48:85:f3:2e:a4:97:fe:83:3b:b3:2c:65:55:4d: 28:de:e4:b7:0e:14:0f:e5:27:b0:1b:cc:da:a6:b0: 84:41:5e:96:0e:94:ca:1b:7d:38:b1:d0:e6:3f:b4: dd:f5:ce:d4:d6:98:97:aa:72:12:80:c1:58:ce:02: 22:12:b9:1b:55:94:13:4f:8a:02:ba:8c:dd:f7:70: bf:91:3a:8b:33:44:52:51:38:e1:be:d3:21:c4:b3: c4:1e:8b:eb:6c:b8:6f:d3:db:15:29:56:17:92:0e: 14:91:d4:76:f4:78:0e:b4:3f:e1:aa:60:76:6f:04: 16:70:11:f8:8d:ac:ef:93:51:6d:cf:5e:a4:a7:78: 3c:b9:f5:35:09:d6:46:44:c8:b4:b4:87:7c:69:35: 49:7e:15:ee:47:96:a0:e3:95:73:5d:74:d6:ba:e9: 73:3f:da:46:66:d4:6a:aa:cc:5d:d1:79:1d:c0:73: 2e:ea:eb:67:bc:18:74:3e:21:ef:c3:db:fa:70:3f: 16:4a:36:8c:ab:c2:03:4a:bd:f8:12:22:38:41:09: 72:e2:82:ad:7a:b9:fd:98:55:fc:8e:3e:3a:fb:43: c1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:62:2B:D7:A5:75:A9:EB:2D:0A:E6:6A:7D:75:61:47:47:56:19:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:0f:67:af:d6:db:42:88:db:b7:e4:67:ba:7c:c5:ec:99:22: 92:8c:bd:f7:3c:c7:19:49:97:91:cd:e1:d6:4f:95:de:7f:80: b8:37:60:e9:e5:d6:4f:7c:ec:0f:fd:2a:1c:72:45:76:01:2b: d9:aa:09:ef:8b:88:77:2a:89:cb:c5:2f:c0:65:c3:16:3e:18: e6:40:56:2b:53:65:fe:43:a0:b9:a6:dc:06:6f:ff:23:8e:d0: 9c:66:26:f4:fc:4d:35:7d:ad:7f:ed:ea:a9:5b:3b:ec:e1:9a: 96:ad:7f:66:f7:83:31:d2:a5:d7:fd:b6:c2:f9:b3:50:03:ea: e1:c5:d5:ed:b9:ee:69:17:e0:ef:e9:e6:94:d5:fc:ec:a5:cb: 26:bb:0b:dc:81:fa:63:bd:0b:e8:b9:11:c1:de:a7:8e:ce:5d: ae:a7:18:3a:20:9f:8e:60:2e:08:24:5c:ae:d1:ee:c7:a7:00: db:17:17:73:98:aa:c7:11:92:9c:e0:fc:55:70:a9:90:f7:97: ba:61:90:f1:bc:52:58:84:55:47:d7:b5:1e:6b:f0:90:59:12: 3e:32:1c:a2:18:15:0e:57:2f:44:f6:00:e7:8f:f2:11:aa:3f: 0f:44:95:9b:a6:24:72:77:e0:66:5b:32:d4:77:68:66:bb:69: 7e:ff:c2:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEimy2R/XuQLWqnmL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk NDMzOTg0OTItNTQzYi00ZDgwLWI2MDctMDcwYjU5ZmJlYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimUHO6KhuMxCxX/8wNpoU069hEVruiRkG8j2 Shv8SIXzLqSX/oM7syxlVU0o3uS3DhQP5SewG8zaprCEQV6WDpTKG304sdDmP7Td 9c7U1piXqnISgMFYzgIiErkbVZQTT4oCuozd93C/kTqLM0RSUTjhvtMhxLPEHovr bLhv09sVKVYXkg4UkdR29HgOtD/hqmB2bwQWcBH4jazvk1Ftz16kp3g8ufU1CdZG RMi0tId8aTVJfhXuR5ag45VzXXTWuulzP9pGZtRqqsxd0XkdwHMu6utnvBh0PiHv w9v6cD8WSjaMq8IDSr34EiI4QQly4oKtern9mFX8jj46+0PB3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJiK9eldanrLQrman11YUdHVhn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2RmMGRiZTMtYjRkYi0z OTliLWI2ZDItMmEyMjk4OThmMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJlmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4PZ6/W20KI27fkZ7p8xeyZIpKMvfc8xxlJl5HN4dZPld5/gLg3YOnl 1k987A/9KhxyRXYBK9mqCe+LiHcqicvFL8BlwxY+GOZAVitTZf5DoLmm3AZv/yOO 0JxmJvT8TTV9rX/t6qlbO+zhmpatf2b3gzHSpdf9tsL5s1AD6uHF1e257mkX4O/p 5pTV/Oylyya7C9yB+mO9C+i5EcHep47OXa6nGDogn45gLggkXK7R7senANsXF3OY qscRkpzg/FVwqZD3l7phkPG8UliEVUfXtR5r8JBZEj4yHKIYFQ5XL0T2AOeP8hGq Pw9ElZumJHJ34GZbMtR3aGa7aX7/wnI= -----END CERTIFICATE-----Generated at Sun Apr 6 00:02:11 2025 by rpki-client