$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6367678a-e23c-33d0-8e43-2013d216b88a.roa File: 6367678a-e23c-33d0-8e43-2013d216b88a.roa (raw, json) Hash identifier: z6cE77gCsyKkHv+NdDIZbQ04CtkICcizSfbXNLEw01E= Subject key identifier: 83:DA:27:97:08:CB:DF:BE:B0:6D:B7:66:71:54:FB:84:83:32:F0:F6 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849D1650EC44700ABA904981B00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6367678a-e23c-33d0-8e43-2013d216b88a.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 63199 IP address blocks: 148.153.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:0e:c4:47:00:ab:a9:04:98:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=fa5c3206-51d5-4040-9321-265c7f88718c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b2:98:d0:06:f6:ed:4d:cd:fe:6e:f5:48:cc: 46:04:d3:82:9d:ab:d8:e6:e3:a2:04:78:f9:b7:ee: 67:23:9a:45:05:8f:22:f3:72:af:b4:a5:41:84:49: c3:bb:d4:e2:f6:f3:fe:61:81:d8:53:30:de:64:1d: 0d:86:c3:ad:d4:48:2e:fe:ef:db:29:b1:00:20:dd: 04:34:96:8f:8f:2d:87:ec:cd:15:07:fa:26:02:00: 2d:d5:c5:10:fa:72:f5:ea:bc:2b:cf:d1:e1:7f:1a: e4:a2:ab:10:d1:64:cf:a0:4d:11:51:40:29:07:6a: ea:9b:60:a8:fa:71:8c:c6:04:19:23:eb:6c:ed:e9: 53:ff:7c:2f:05:7c:7f:91:34:74:b5:f2:4f:57:d4: a9:22:34:a4:a9:0c:22:b0:67:0b:8f:bf:38:5b:fb: 56:cd:46:35:8c:0c:61:07:bf:6a:f2:4f:fe:09:60: c4:c2:98:55:95:4f:39:a0:d2:05:c1:b6:b8:ea:30: 06:c4:34:da:c6:56:7d:b6:e3:3e:9a:f2:6f:d1:7a: a2:87:89:43:0c:6b:0c:f1:79:d1:da:1d:84:cc:90: 22:a0:5b:6d:69:11:1c:e2:82:5b:8a:ec:48:72:27: cb:d7:4e:62:29:c4:c4:d1:20:cb:27:65:fb:99:cd: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DA:27:97:08:CB:DF:BE:B0:6D:B7:66:71:54:FB:84:83:32:F0:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6367678a-e23c-33d0-8e43-2013d216b88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a5:f5:19:d0:69:cb:48:0a:a2:12:db:0b:5b:43:f0:26:6a: 97:8d:20:51:58:e8:9e:98:c9:29:2b:d7:42:f0:c9:02:a2:a7: cf:36:38:6d:4f:12:b1:6f:5b:1a:a0:4f:e7:37:5d:a7:79:e9: c3:12:73:f3:48:c0:fc:24:01:77:33:76:49:82:08:45:1c:9a: fc:f9:bb:dc:9a:6b:0c:47:c6:fe:bd:75:25:e3:4a:16:77:e3: c2:00:f7:e4:dc:a7:e2:32:36:8c:7b:36:62:a1:45:26:10:7d: 8d:e0:c9:b8:2d:4c:a9:51:60:83:5e:2b:ca:2a:72:05:3c:3d: 00:b4:8a:37:39:01:7a:b4:e9:7e:4c:8f:af:77:b5:1a:0f:37: 53:98:60:93:c5:97:8b:c9:61:21:03:6a:17:0e:10:7e:33:44: 53:d4:d0:2e:db:57:69:35:d7:0e:5f:15:a4:1a:4e:50:ce:e2: b4:99:ef:2a:c9:72:46:1f:8b:f5:33:2a:ec:22:b2:95:5c:5b: 07:70:70:9e:5d:cf:14:41:7f:b8:df:f5:03:75:16:ce:b1:ad: c7:4c:ad:dc:6d:ee:4b:ed:42:ea:c2:39:5a:6d:3d:ff:7b:ac: 8f:db:b1:da:1f:c0:2c:cc:82:a9:e0:bd:ba:f8:a6:ea:37:46: 95:20:f3:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQ7ERwCrqQSYGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZmE1YzMyMDYtNTFkNS00MDQwLTkzMjEtMjY1YzdmODg3MThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7KY0Ab27U3N/m71SMxGBNOCnavY5uOiBHj5 t+5nI5pFBY8i83KvtKVBhEnDu9Ti9vP+YYHYUzDeZB0NhsOt1Egu/u/bKbEAIN0E NJaPjy2H7M0VB/omAgAt1cUQ+nL16rwrz9HhfxrkoqsQ0WTPoE0RUUApB2rqm2Co +nGMxgQZI+ts7elT/3wvBXx/kTR0tfJPV9SpIjSkqQwisGcLj784W/tWzUY1jAxh B79q8k/+CWDEwphVlU85oNIFwba46jAGxDTaxlZ9tuM+mvJv0Xqih4lDDGsM8XnR 2h2EzJAioFttaREc4oJbiuxIcifL105iKcTE0SDLJ2X7mc1cywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPaJ5cIy9++sG23ZnFU+4SDMvD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNjM2NzY3OGEtZTIzYy0z M2QwLThlNDMtMjAxM2QyMTZiODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGl9RnQactICqIS2wtbQ/AmapeNIFFY6J6YySkr10LwyQKip882OG1P ErFvWxqgT+c3Xad56cMSc/NIwPwkAXczdkmCCEUcmvz5u9yaawxHxv69dSXjShZ3 48IA9+Tcp+IyNox7NmKhRSYQfY3gybgtTKlRYINeK8oqcgU8PQC0ijc5AXq06X5M j693tRoPN1OYYJPFl4vJYSEDahcOEH4zRFPU0C7bV2k11w5fFaQaTlDO4rSZ7yrJ ckYfi/UzKuwispVcWwdwcJ5dzxRBf7jf9QN1Fs6xrcdMrdxt7kvtQurCOVptPf97 rI/bsdofwCzMgqngvbr4puo3RpUg860= -----END CERTIFICATE-----Generated at Sun May 11 23:32:08 2025 by rpki-client