$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa File: 04adc8be-6949-381f-85ec-0ef42f2d5286.roa (raw, json) Hash identifier: QcbyvPbXLlDxJl6N7WEa8Vylf7wMeProplxdlfkG+ys= Subject key identifier: 67:6D:65:10:77:BB:52:3F:52:E3:34:9E:BA:91:45:56:81:71:CE:95 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849C20A21BCC8017474A82C4900 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 63199 IP address blocks: 148.153.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:21:bc:c8:01:74:74:a8:2c:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=77038316-0b65-4c24-9107-5bebba81552d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b7:35:8c:e4:be:cd:9b:ac:c8:26:14:64:00: dc:70:b3:93:cb:bc:28:00:61:28:b5:d2:2b:60:43: 4d:10:63:62:be:6a:57:fa:fe:f7:a9:5f:79:f3:41: f1:c7:0c:83:6f:e6:cc:f7:fa:80:bb:98:09:a3:fb: 0c:f8:52:be:29:bc:e3:40:40:db:0f:75:89:f8:36: 07:04:77:33:c8:f5:e3:aa:2f:0f:37:d3:18:dc:37: 7f:e7:c4:ff:e0:48:0d:1c:45:6b:44:70:ff:08:cc: 9d:b8:f4:04:5a:1e:cb:7c:7e:b0:dd:c3:76:fb:0a: 23:97:87:f9:87:a5:7f:36:a1:99:81:2e:ad:65:74: 49:44:59:5e:fb:71:ac:22:9e:0c:85:46:b9:6d:9f: a9:db:8f:85:1d:63:89:39:ff:ec:60:7e:99:61:88: 5b:94:42:c7:84:04:25:7c:da:a3:4f:ea:db:72:45: db:34:42:72:2d:61:53:c6:82:7d:ec:e5:b5:ee:96: 3c:56:b9:85:da:59:35:98:e3:17:11:4a:90:31:b8: 04:54:9f:75:c7:77:73:3a:b6:61:02:6c:fb:c3:5e: 85:6e:a5:21:77:aa:34:ee:da:cf:a0:c4:ea:65:a3: ef:13:fc:ca:8a:91:3d:cf:9a:87:08:25:92:f4:0b: 7d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6D:65:10:77:BB:52:3F:52:E3:34:9E:BA:91:45:56:81:71:CE:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:59:3a:ae:a9:46:a9:4d:d4:c4:48:c3:f4:b5:0c:c0:71:e4: 52:2c:63:62:34:db:cd:38:62:d3:5d:fe:c5:37:af:77:66:39: ac:5d:73:1c:98:62:9f:9c:df:b4:27:e3:a8:f7:ed:a8:78:0f: fc:0f:f2:70:ca:99:f8:ad:0e:1a:3f:0b:58:31:6d:48:73:8a: 55:28:31:5a:80:41:2e:13:c3:f0:53:2a:ca:ff:64:c4:47:5d: 0f:49:15:18:f2:b8:1d:d5:52:f4:32:c4:d8:0a:68:82:dc:fe: f8:df:08:d6:72:cc:9e:ee:39:04:43:4f:d4:27:51:53:bf:95: e6:84:89:a6:4e:65:0b:27:f1:d2:38:09:38:b8:93:d3:af:57: 0b:40:6a:64:a7:46:63:70:20:84:cb:1a:77:26:2d:59:f8:6a: 3d:c4:9c:9b:0b:1b:a6:4a:8b:5c:d6:ee:b7:bd:b6:1b:34:b6: e2:72:d1:29:95:b5:d8:70:66:1e:dc:1b:cf:e1:1f:25:d7:ad: 94:47:b8:51:be:34:88:09:8c:9e:b5:f2:c6:d3:3a:4d:4f:d1: fd:87:4f:bd:bd:56:33:e7:72:5f:5f:ad:bb:5f:71:e9:31:2f: 8c:04:59:f8:52:ad:ca:ee:03:cc:3e:d7:eb:41:8a:09:63:a9: a1:1a:c3:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCiG8yAF0dKgsSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NzcwMzgzMTYtMGI2NS00YzI0LTkxMDctNWJlYmJhODE1NTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7c1jOS+zZusyCYUZADccLOTy7woAGEotdIr YENNEGNivmpX+v73qV9580HxxwyDb+bM9/qAu5gJo/sM+FK+KbzjQEDbD3WJ+DYH BHczyPXjqi8PN9MY3Dd/58T/4EgNHEVrRHD/CMyduPQEWh7LfH6w3cN2+wojl4f5 h6V/NqGZgS6tZXRJRFle+3GsIp4MhUa5bZ+p24+FHWOJOf/sYH6ZYYhblELHhAQl fNqjT+rbckXbNEJyLWFTxoJ97OW17pY8VrmF2lk1mOMXEUqQMbgEVJ91x3dzOrZh Amz7w16FbqUhd6o07trPoMTqZaPvE/zKipE9z5qHCCWS9At9VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdtZRB3u1I/UuM0nrqRRVaBcc6VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDRhZGM4YmUtNjk0OS0z ODFmLTg1ZWMtMGVmNDJmMmQ1Mjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVZOq6pRqlN1MRIw/S1DMBx5FIsY2I02804YtNd/sU3r3dmOaxdcxyY Yp+c37Qn46j37ah4D/wP8nDKmfitDho/C1gxbUhzilUoMVqAQS4Tw/BTKsr/ZMRH XQ9JFRjyuB3VUvQyxNgKaILc/vjfCNZyzJ7uOQRDT9QnUVO/leaEiaZOZQsn8dI4 CTi4k9OvVwtAamSnRmNwIITLGncmLVn4aj3EnJsLG6ZKi1zW7re9ths0tuJy0SmV tdhwZh7cG8/hHyXXrZRHuFG+NIgJjJ618sbTOk1P0f2HT729VjPncl9frbtfcekx L4wEWfhSrcruA8w+1+tBigljqaEawz0= -----END CERTIFICATE-----Generated at Mon May 12 02:30:54 2025 by rpki-client