$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6984b833-7006-3068-befa-e5584294fc77.roa File: 6984b833-7006-3068-befa-e5584294fc77.roa (raw, json) Hash identifier: 9Knh0W3ZzJDGRdw9DZ2EI/Offigp1JBQMA2u5pFrCKk= Subject key identifier: 28:91:C5:6E:41:BA:0A:DD:41:23:5E:26:6E:E8:07:2D:3B:37:89:EC Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849C20A21E824B2C6787F9D8780 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6984b833-7006-3068-befa-e5584294fc77.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 63199 IP address blocks: 148.153.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:21:e8:24:b2:c6:78:7f:9d:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=21a94ecd-ab6a-4452-8b08-5e681460fe1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:f5:04:39:7c:ae:de:f2:68:6b:8e:a2:f4: 13:8e:26:f3:f0:ad:ed:64:8b:ea:65:c3:57:74:35: 66:c5:82:e8:d0:69:63:13:6f:54:bb:b5:00:95:a2: e6:86:a1:39:38:2b:28:10:bc:1a:f8:f1:67:ee:42: a0:d9:35:66:08:ec:58:f0:0e:1d:54:2b:28:84:c1: 61:e0:df:b7:72:8f:b2:21:00:42:a0:79:1a:ec:07: 81:93:1b:8a:27:79:eb:38:8e:0e:2d:6d:8a:54:c1: 02:d1:64:64:4c:dd:ba:fa:31:cd:b3:69:89:9e:80: 95:c1:fc:2e:34:44:5c:21:c7:b7:7b:cc:1f:e4:a8: bb:02:e3:ac:66:12:47:5c:d9:7f:02:e9:d3:ea:0a: 10:f0:89:1a:ac:2c:dc:fd:fd:6f:08:e3:df:fd:0d: 41:d7:78:1d:45:63:29:0d:80:47:7c:16:eb:42:97: 49:c5:34:19:2b:53:13:d5:92:34:ae:73:1f:1f:09: 7d:7e:77:b3:0c:91:b2:01:bc:ca:87:d6:23:ec:48: 4f:d1:c8:9f:b9:8a:b5:ae:1f:76:0a:18:5a:79:53: 45:54:e7:22:f9:33:8f:82:2f:91:f3:f8:22:c2:58: 19:56:16:f4:4b:0f:fe:9a:e1:77:57:2a:d0:f6:19: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:91:C5:6E:41:BA:0A:DD:41:23:5E:26:6E:E8:07:2D:3B:37:89:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6984b833-7006-3068-befa-e5584294fc77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:82:1d:9f:de:e7:77:a7:cd:bc:37:ac:d6:18:b1:08:a7:80: 7f:fa:7f:60:6a:6a:ab:1a:76:36:96:cb:91:83:4f:8b:80:35: 78:77:ec:e2:65:2d:44:ee:cf:53:49:cb:f5:45:b2:51:27:ef: 3b:be:a3:25:5c:31:86:99:98:c4:89:38:4a:3c:8b:61:4c:b5: 63:ef:7a:64:b7:d8:bc:15:d3:ab:77:88:cf:76:dd:f4:82:8a: 12:f2:03:17:3a:09:27:7a:66:89:85:bc:70:7f:97:f1:ff:fc: 2c:0c:49:84:4a:06:c5:04:f4:42:d1:4c:d2:b8:2c:a5:d7:24: a4:24:8f:45:94:70:33:dc:93:57:c5:ec:d8:45:4d:e3:25:37: 41:0d:81:2c:22:76:35:6a:7b:32:1d:18:ac:95:cf:a6:76:32: 52:a3:3e:04:62:37:d5:c9:e9:c5:46:d4:3f:83:e7:ed:d2:90: 3a:fa:83:66:0e:94:20:96:b3:0f:f8:df:3c:84:07:7b:19:e3: 7d:f4:3c:7d:40:2f:c9:d2:ab:b7:87:9b:56:e3:a4:95:51:26: 72:32:28:de:a8:3a:53:86:76:5a:c3:d4:ec:9b:69:65:55:f4: 22:4f:fd:f4:ed:b2:f6:67:6f:d6:f8:72:b6:8c:28:43:ef:f2: 10:22:9f:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCiHoJLLGeH+dh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MjFhOTRlY2QtYWI2YS00NDUyLThiMDgtNWU2ODE0NjBmZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hf1BDl8rt7yaGuOovQTjibz8K3tZIvqZcNX dDVmxYLo0GljE29Uu7UAlaLmhqE5OCsoELwa+PFn7kKg2TVmCOxY8A4dVCsohMFh 4N+3co+yIQBCoHka7AeBkxuKJ3nrOI4OLW2KVMEC0WRkTN26+jHNs2mJnoCVwfwu NERcIce3e8wf5Ki7AuOsZhJHXNl/AunT6goQ8IkarCzc/f1vCOPf/Q1B13gdRWMp DYBHfBbrQpdJxTQZK1MT1ZI0rnMfHwl9fnezDJGyAbzKh9Yj7EhP0cifuYq1rh92 ChhaeVNFVOci+TOPgi+R8/giwlgZVhb0Sw/+muF3VyrQ9hlKNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiRxW5BugrdQSNeJm7oBy07N4nsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNjk4NGI4MzMtNzAwNi0z MDY4LWJlZmEtZTU1ODQyOTRmYzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCCHZ/e53enzbw3rNYYsQingH/6f2BqaqsadjaWy5GDT4uANXh37OJl LUTuz1NJy/VFslEn7zu+oyVcMYaZmMSJOEo8i2FMtWPvemS32LwV06t3iM923fSC ihLyAxc6CSd6ZomFvHB/l/H//CwMSYRKBsUE9ELRTNK4LKXXJKQkj0WUcDPck1fF 7NhFTeMlN0ENgSwidjVqezIdGKyVz6Z2MlKjPgRiN9XJ6cVG1D+D5+3SkDr6g2YO lCCWsw/43zyEB3sZ4330PH1AL8nSq7eHm1bjpJVRJnIyKN6oOlOGdlrD1OybaWVV 9CJP/fTtsvZnb9b4craMKEPv8hAin40= -----END CERTIFICATE-----Generated at Mon May 12 03:26:40 2025 by rpki-client