$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa File: 2abfa112-93c3-3da0-856a-28fad7798068.roa (raw, json) Hash identifier: Wpid3ty6FimczpxUmDiz7HNVinz2odWpz+9hYTIqgDE= Subject key identifier: C3:DB:3B:B8:3F:E9:64:6C:30:C9:FE:A1:1F:FF:ED:9A:58:B0:52:8E Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849A61F3E4B2B831D632E9F7200 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 63199 IP address blocks: 148.153.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3e:4b:2b:83:1d:63:2e:9f:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=61a236ea-f964-45b3-a408-915be61c77fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:36:0c:2a:f1:3f:54:56:63:f4:56:43:da:f4: 78:91:bf:1c:bd:e1:b5:f8:89:bc:91:aa:9f:6a:33: 33:57:c7:25:51:79:68:96:33:0a:61:92:2c:bf:12: df:c5:9f:3a:a3:99:c7:66:6e:26:b8:68:a7:53:1a: 95:91:3c:fc:c1:e6:9a:2e:9a:26:99:9f:98:9f:a7: 4a:1f:85:f5:58:b0:c7:d0:d2:24:16:5a:77:03:5c: 86:b1:84:d8:27:bd:f4:a4:5f:c6:63:e4:e1:a2:28: 14:d8:f8:ba:46:2e:7c:31:21:12:3e:f3:79:d3:8c: 1c:bd:00:01:3d:14:da:d3:ba:15:e2:ee:ad:60:dd: 1b:15:9c:63:68:14:26:7e:79:e9:68:7b:51:14:02: 83:64:2b:71:c6:22:c4:58:e4:90:d7:90:0c:72:d0: eb:cf:3b:61:ce:c0:85:90:93:58:96:6e:85:6f:59: 8e:2f:b7:98:ee:17:8d:4e:81:e7:49:cd:09:c0:eb: 2b:7f:8a:94:a9:ba:c6:da:e1:fb:dd:81:97:01:77: 33:15:e7:bd:6a:54:9b:3f:2d:31:3d:63:dc:79:70: 66:2b:a9:a9:b1:2f:b6:25:a5:e2:3c:c4:45:27:d5: 49:0d:62:c7:99:b3:e3:79:70:b8:b9:be:81:bc:7d: 1d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DB:3B:B8:3F:E9:64:6C:30:C9:FE:A1:1F:FF:ED:9A:58:B0:52:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:fb:89:2d:56:6f:0a:23:dd:16:34:5e:35:61:65:64:f6:31: 5f:fb:97:93:7f:e4:4e:2d:3e:31:49:f9:f6:31:44:f5:7c:4b: 09:ec:31:9b:5f:8f:cf:d0:84:a8:77:8e:ad:f6:48:09:04:76: 72:cb:1d:42:48:f9:06:2b:f1:6d:1b:fb:67:74:f0:74:38:df: 62:c6:74:92:d4:6d:c6:df:1d:a8:02:50:58:a2:67:be:7b:12: 20:b6:21:ad:53:7e:78:7b:16:5b:ee:18:e1:1c:c6:a1:15:bc: e9:48:79:9d:d5:98:91:54:51:dc:77:24:55:15:aa:c3:f1:c1: cd:0f:00:da:3f:c7:c8:22:cd:83:6b:56:f0:6e:24:ba:25:46: 5b:a0:0a:10:66:2a:c1:3b:08:f5:05:c3:54:61:08:46:fb:d6: 5f:fb:38:3d:60:10:da:e4:c2:ae:43:94:d5:26:74:e1:4f:99: fa:74:80:eb:4c:5a:95:3a:db:cf:0b:28:ca:94:ad:46:7f:e5: 12:b7:dc:4b:11:13:b9:07:34:1d:46:0f:c8:f0:c4:13:8a:16: d1:6c:54:b0:c6:bf:42:5c:81:91:fa:50:e1:26:60:c9:4f:e3: b7:27:ca:01:1f:7d:ae:1f:7f:94:cc:bf:8a:16:5b:8e:12:ed: a4:53:06:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHz5LK4MdYy6fcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk NjFhMjM2ZWEtZjk2NC00NWIzLWE0MDgtOTE1YmU2MWM3N2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjYMKvE/VFZj9FZD2vR4kb8cveG1+Im8kaqf ajMzV8clUXloljMKYZIsvxLfxZ86o5nHZm4muGinUxqVkTz8weaaLpommZ+Yn6dK H4X1WLDH0NIkFlp3A1yGsYTYJ730pF/GY+ThoigU2Pi6Ri58MSESPvN504wcvQAB PRTa07oV4u6tYN0bFZxjaBQmfnnpaHtRFAKDZCtxxiLEWOSQ15AMctDrzzthzsCF kJNYlm6Fb1mOL7eY7heNToHnSc0JwOsrf4qUqbrG2uH73YGXAXczFee9alSbPy0x PWPceXBmK6mpsS+2JaXiPMRFJ9VJDWLHmbPjeXC4ub6BvH0d+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPbO7g/6WRsMMn+oR//7ZpYsFKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmFiZmExMTItOTNjMy0z ZGEwLTg1NmEtMjhmYWQ3Nzk4MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz7iS1Wbwoj3RY0XjVhZWT2MV/7l5N/5E4tPjFJ+fYxRPV8SwnsMZtf j8/QhKh3jq32SAkEdnLLHUJI+QYr8W0b+2d08HQ432LGdJLUbcbfHagCUFiiZ757 EiC2Ia1Tfnh7FlvuGOEcxqEVvOlIeZ3VmJFUUdx3JFUVqsPxwc0PANo/x8gizYNr VvBuJLolRlugChBmKsE7CPUFw1RhCEb71l/7OD1gENrkwq5DlNUmdOFPmfp0gOtM WpU6288LKMqUrUZ/5RK33EsRE7kHNB1GD8jwxBOKFtFsVLDGv0JcgZH6UOEmYMlP 47cnygEffa4ff5TMv4oWW44S7aRTBgc= -----END CERTIFICATE-----Generated at Mon May 12 00:12:03 2025 by rpki-client