$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa File: cef491ba-6998-36c3-9897-80eae0b6f79b.roa (raw, json) Hash identifier: gRtGwY+WYTuISqBjLuKEULA62e/QpRRFDt0U8/k1T8Q= Subject key identifier: FA:A4:A8:0D:A1:11:E4:9B:F3:85:BD:97:A0:AB:22:89:CC:29:18:31 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285848C6E63126F37BA54F49991C08 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 63199 IP address blocks: 148.153.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:31:26:f3:7b:a5:4f:49:99:1c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=64cea2b2-11e8-4885-ba27-fa8488077846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:0a:23:03:8d:55:e2:8f:83:6f:00:ba:5c: 3f:25:66:f6:05:51:97:ad:8b:f9:9c:9f:cf:56:c4: 8b:24:e5:be:b1:b0:de:30:82:a9:02:dd:c5:94:a0: 38:2a:56:bb:8d:f4:ba:fa:4e:b9:4b:88:26:20:78: 2b:ce:8f:0c:80:20:43:cb:97:68:df:11:85:7e:3d: e3:75:03:ae:e9:e4:16:d9:2c:28:c6:e8:b6:7b:2b: d3:98:53:93:85:75:82:ab:6a:07:23:05:1a:a7:a4: a4:b5:ad:23:c5:29:1a:f9:75:8a:3b:30:9b:b4:9f: 1e:62:0b:9b:56:0b:ee:16:d0:c3:32:f8:42:eb:a9: 03:5f:0b:60:61:66:88:26:76:73:54:31:ad:e5:88: 3c:5b:e3:f2:5d:6c:76:4a:59:e0:9e:37:58:3a:80: ca:92:9b:5e:d5:28:0b:ed:5e:49:9f:47:ca:79:c1: 76:75:30:37:27:0c:9f:ff:96:a3:43:44:85:b1:9b: e7:5e:dc:ef:fb:7d:d7:06:0c:5b:15:99:33:0d:15: a8:36:61:13:6f:0e:e0:87:1b:19:03:b3:d2:00:ae: af:74:f3:7f:78:17:58:50:dc:a2:bc:4a:3e:34:67: 42:d2:fc:13:e1:f6:b3:50:52:99:38:dd:fd:f8:1e: 8c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A4:A8:0D:A1:11:E4:9B:F3:85:BD:97:A0:AB:22:89:CC:29:18:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c0:82:22:69:f9:76:b0:e9:bd:77:72:bc:46:10:e4:cc:f1: 76:6c:9e:16:29:43:bd:ba:13:9c:a1:7e:c9:b3:4e:09:a5:6e: a1:c9:8e:ae:a6:e6:c0:12:36:7d:99:b6:63:81:bb:fa:c5:97: 65:94:5c:95:b6:27:27:be:09:3e:1c:68:13:5c:01:7d:f3:8a: d3:3d:50:ab:b2:b3:f0:ca:b4:fb:b7:b0:62:8e:ff:30:ff:a7: 5c:00:f9:b9:fc:3d:6a:13:5c:3e:8e:97:6d:53:1c:e2:da:0f: ce:5c:a4:e9:62:09:00:7d:f6:44:3b:9a:31:d2:a9:0f:ac:a6: 78:48:2e:00:7a:1b:8e:7e:7d:0c:c4:23:ee:84:b0:20:f9:b1: 7d:22:2c:a8:7f:01:45:ec:88:47:a9:54:5b:62:c7:da:87:ba: 6e:b5:bf:56:79:93:9e:ac:de:80:39:50:6e:ff:da:61:a6:d7: 47:a6:e8:bf:68:b1:16:6d:d9:9d:a8:ec:f2:2d:79:76:73:cd: 0c:db:c7:d9:20:0b:34:86:ee:05:2d:4b:04:c7:94:3e:50:db: fe:69:6b:f3:4c:13:57:2b:ef:eb:b2:1c:9c:62:3c:c7:17:ee: e4:6c:c4:f3:fa:bf:20:a3:38:19:e8:5b:d7:3c:0c:e2:04:c2: 26:07:7e:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jEm83ulT0mZHAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk NjRjZWEyYjItMTFlOC00ODg1LWJhMjctZmE4NDg4MDc3ODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXMKIwONVeKPg28Aulw/JWb2BVGXrYv5nJ/P VsSLJOW+sbDeMIKpAt3FlKA4Kla7jfS6+k65S4gmIHgrzo8MgCBDy5do3xGFfj3j dQOu6eQW2Swoxui2eyvTmFOThXWCq2oHIwUap6Skta0jxSka+XWKOzCbtJ8eYgub VgvuFtDDMvhC66kDXwtgYWaIJnZzVDGt5Yg8W+PyXWx2SlngnjdYOoDKkpte1SgL 7V5Jn0fKecF2dTA3Jwyf/5ajQ0SFsZvnXtzv+33XBgxbFZkzDRWoNmETbw7ghxsZ A7PSAK6vdPN/eBdYUNyivEo+NGdC0vwT4fazUFKZON39+B6MJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqkqA2hEeSb84W9l6CrIonMKRgxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2VmNDkxYmEtNjk5OC0z NmMzLTk4OTctODBlYWUwYjZmNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXAgiJp+Xaw6b13crxGEOTM8XZsnhYpQ726E5yhfsmzTgmlbqHJjq6m 5sASNn2ZtmOBu/rFl2WUXJW2Jye+CT4caBNcAX3zitM9UKuys/DKtPu3sGKO/zD/ p1wA+bn8PWoTXD6Ol21THOLaD85cpOliCQB99kQ7mjHSqQ+spnhILgB6G45+fQzE I+6EsCD5sX0iLKh/AUXsiEepVFtix9qHum61v1Z5k56s3oA5UG7/2mGm10em6L9o sRZt2Z2o7PIteXZzzQzbx9kgCzSG7gUtSwTHlD5Q2/5pa/NME1cr7+uyHJxiPMcX 7uRsxPP6vyCjOBnoW9c8DOIEwiYHfrY= -----END CERTIFICATE-----Generated at Sat Apr 5 23:21:15 2025 by rpki-client