$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa File: dc349e18-8ab9-3cef-be26-6418afc11db3.roa (raw, json) Hash identifier: SXBgPPs7yzJ2fnASI5eZjU05XLu3bdx92xvV8zGpuaE= Subject key identifier: AD:8B:AE:B1:0E:76:14:04:28:DF:C6:32:D7:EF:0A:D0:19:B4:0F:79 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285848960B5C7771DEFB092964AB80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 63199 IP address blocks: 148.153.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:5c:77:71:de:fb:09:29:64:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=5158fb5b-56d0-43d7-a080-11cac7aeedf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d8:a6:ac:68:27:5a:42:bc:34:ea:10:b3:39: 01:92:13:67:ae:c1:19:62:82:19:87:1e:8c:4e:15: 56:c1:e8:16:15:47:43:af:09:a8:14:8e:fc:19:57: 32:1b:23:3e:60:db:c0:ba:6b:ce:e4:e8:cc:18:5c: 61:b4:29:4c:e6:0b:93:c5:b9:d3:2f:80:44:5f:b7: 4d:bf:87:e3:ce:05:62:ce:02:2d:63:61:ab:59:6f: 71:90:73:d3:a8:51:27:80:0c:06:27:73:e2:a8:2f: 4f:95:fb:7c:15:30:ca:44:01:68:fe:8d:c4:94:95: 94:f1:35:df:02:54:8a:ef:52:4c:78:ed:da:97:b8: f6:64:f8:e7:2c:09:ec:79:78:f7:e4:43:8a:c6:2c: ef:5a:83:07:a1:8e:ff:14:8f:65:87:e1:7a:87:71: 00:4c:79:4c:d8:71:21:14:43:87:f5:52:2b:c0:dc: f7:d7:a0:ed:a1:bc:bd:7e:1a:83:f8:5c:0e:a7:7d: 80:1a:ab:48:17:12:70:ca:a3:e2:a9:7a:8d:c1:83: f9:86:6d:00:82:50:7b:d2:72:67:19:00:03:17:77: fd:83:d2:b3:53:ff:8b:a4:8d:e8:1d:7b:30:bd:65: 76:f6:13:ad:4a:b0:97:ca:78:c9:c0:95:19:35:f6: e4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8B:AE:B1:0E:76:14:04:28:DF:C6:32:D7:EF:0A:D0:19:B4:0F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ab:1c:8b:e8:74:4d:c2:53:8b:d0:c8:59:94:4d:e7:b3:dd: 00:42:c2:ff:32:05:f0:6c:5d:de:69:f1:dd:38:82:51:38:02: 42:4a:33:82:cb:0e:8b:71:ae:a7:13:5d:46:60:22:4a:06:70: 4d:c0:bb:fc:be:c6:46:15:bd:ea:3b:0d:bc:36:4d:a2:73:1c: eb:6b:c5:b6:1c:7d:f8:5b:f8:71:2e:94:92:de:55:90:c2:27: 88:ee:98:1c:39:80:06:58:d5:b1:45:32:b5:8c:51:34:74:94: 3a:8d:a0:15:98:24:d4:11:8b:e0:f9:b7:62:e0:b0:47:1a:93: 30:ad:2c:48:57:5f:2b:8b:fb:74:95:38:c0:f9:8c:8b:52:d7: ff:48:2b:21:37:e0:5a:7b:f6:96:7c:1b:b2:92:26:ba:75:3c: e5:d5:b2:96:49:b5:b6:ce:a2:04:fe:87:df:5c:38:5d:aa:16: 91:ee:e1:6a:c3:f8:8f:c5:a9:28:8e:fe:25:10:cf:cd:74:67: 52:7e:74:99:9c:b1:86:ae:70:b5:9d:6b:96:7e:40:6f:5a:92: 88:88:f6:75:43:ab:1a:02:88:08:8f:b4:3b:83:6e:1f:63:03: 71:e7:c3:3d:7d:ac:bd:b4:c5:0a:06:f4:6e:90:4e:20:8f:36: c9:1c:f0:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1x3cd77CSlkq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk NTE1OGZiNWItNTZkMC00M2Q3LWEwODAtMTFjYWM3YWVlZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NimrGgnWkK8NOoQszkBkhNnrsEZYoIZhx6M ThVWwegWFUdDrwmoFI78GVcyGyM+YNvAumvO5OjMGFxhtClM5guTxbnTL4BEX7dN v4fjzgVizgItY2GrWW9xkHPTqFEngAwGJ3PiqC9Plft8FTDKRAFo/o3ElJWU8TXf AlSK71JMeO3al7j2ZPjnLAnseXj35EOKxizvWoMHoY7/FI9lh+F6h3EATHlM2HEh FEOH9VIrwNz316Dtoby9fhqD+FwOp32AGqtIFxJwyqPiqXqNwYP5hm0AglB70nJn GQADF3f9g9KzU/+LpI3oHXswvWV29hOtSrCXynjJwJUZNfbkowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2LrrEOdhQEKN/GMtfvCtAZtA95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZGMzNDllMTgtOGFiOS0z Y2VmLWJlMjYtNjQxOGFmYzExZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACarHIvodE3CU4vQyFmUTeez3QBCwv8yBfBsXd5p8d04glE4AkJKM4LL DotxrqcTXUZgIkoGcE3Au/y+xkYVveo7Dbw2TaJzHOtrxbYcffhb+HEulJLeVZDC J4jumBw5gAZY1bFFMrWMUTR0lDqNoBWYJNQRi+D5t2LgsEcakzCtLEhXXyuL+3SV OMD5jItS1/9IKyE34Fp79pZ8G7KSJrp1POXVspZJtbbOogT+h99cOF2qFpHu4WrD +I/FqSiO/iUQz810Z1J+dJmcsYaucLWda5Z+QG9akoiI9nVDqxoCiAiPtDuDbh9j A3Hnwz19rL20xQoG9G6QTiCPNskc8DU= -----END CERTIFICATE-----Generated at Sat Apr 5 20:38:53 2025 by rpki-client