$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6bc53289-b90e-34be-bcd9-c39465f48c2f.roa File: 6bc53289-b90e-34be-bcd9-c39465f48c2f.roa (raw, json) Hash identifier: Xm9e/9GEZLO/qHYhwmBrbJhLJ/oBqBiPmcF93eJ+SsU= Subject key identifier: AE:F6:49:0A:50:46:07:2F:45:E0:27:BB:E9:F9:50:F7:61:67:5E:14 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849A61F3FD067B542B2F7D57E00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6bc53289-b90e-34be-bcd9-c39465f48c2f.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 63199 IP address blocks: 148.153.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3f:d0:67:b5:42:b2:f7:d5:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=7b57100e-010e-49ab-bb94-0d8f3d5468d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:92:fc:30:08:f3:dd:a4:10:78:4a:7e:38:9f: af:58:d2:8a:e5:7a:48:a9:1e:2f:af:21:33:aa:2d: 4d:fd:b0:91:f4:0d:d5:05:db:f4:cb:ea:19:8a:ff: 37:61:28:91:f5:4a:34:f8:3c:6d:69:e8:2d:59:0d: 6a:09:46:a3:d2:52:2d:62:15:57:5a:51:87:aa:79: 1a:e7:d2:8a:a3:57:db:a4:c9:49:7e:56:5d:f3:44: 83:3b:57:b5:9b:9e:ed:11:82:65:c6:59:f1:18:58: 73:b8:29:b1:37:c4:2f:64:4d:2d:5c:a3:46:02:e4: ff:0e:5e:a4:ff:21:a0:15:f7:61:cf:5a:ed:bd:49: 84:40:06:33:27:64:ab:14:c5:bc:46:bb:cb:4e:23: 77:03:47:29:25:89:39:1e:19:88:c5:f2:07:da:db: e2:03:81:75:be:4c:a1:32:2a:c7:ef:02:2e:9e:dd: f9:c9:ba:39:4b:3a:89:f6:8a:d5:93:2a:ef:19:e4: 29:5c:9e:5e:1c:31:05:01:d4:ea:68:ba:41:22:07: 61:4b:0f:5a:7e:ee:40:49:98:83:68:f9:a2:6d:aa: 50:00:db:73:a8:d9:d1:62:bb:60:69:37:fa:4d:f6: bd:09:85:46:4b:b3:18:b5:d9:cc:b7:9f:71:fe:7b: 34:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F6:49:0A:50:46:07:2F:45:E0:27:BB:E9:F9:50:F7:61:67:5E:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6bc53289-b90e-34be-bcd9-c39465f48c2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:0e:be:c0:24:01:c2:2a:3c:6f:a9:27:8a:ab:66:dd:bb:06: a8:d0:c0:8b:cb:e7:a6:d1:a4:93:73:3f:68:57:72:0b:46:88: 25:d0:d5:64:90:e1:8e:30:37:00:bb:03:66:f3:af:e6:f4:cf: 5f:71:58:0c:b2:b1:96:23:fa:94:e7:84:e0:3f:0f:d5:f7:0e: 02:3c:0d:6d:69:b7:eb:94:fb:0b:9e:03:1c:6a:d7:c2:aa:a1: 4d:b0:ad:b4:3a:4c:94:24:45:13:7f:4a:85:14:58:2d:c1:ad: d9:cc:e5:95:7e:1c:b8:bb:3a:b0:ea:5a:46:74:05:01:cf:3d: 9c:01:67:18:42:05:4d:24:9e:c9:94:4d:0c:b0:9e:ae:68:9f: 6b:ce:bc:4d:33:b4:8c:5c:b9:ac:81:44:ab:0e:99:a7:87:dd: e7:d6:18:fe:78:36:d5:70:c4:1c:90:f8:ac:90:5f:3d:c5:34: 23:ff:23:7e:ee:80:b9:31:9c:b2:2b:3a:ef:a3:a4:d2:17:1b: 3d:e3:6a:17:cf:a3:ae:db:fa:44:27:16:e4:57:04:ee:c3:f8: 86:83:e8:7d:27:7f:1d:3f:a8:b1:7c:aa:5d:de:9a:61:9b:aa: 8f:f8:27:1b:3a:c7:ba:53:53:1f:47:0d:d0:73:8a:92:bb:7c: 22:15:30:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHz/QZ7VCsvfVfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk N2I1NzEwMGUtMDEwZS00OWFiLWJiOTQtMGQ4ZjNkNTQ2OGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZL8MAjz3aQQeEp+OJ+vWNKK5XpIqR4vryEz qi1N/bCR9A3VBdv0y+oZiv83YSiR9Uo0+DxtaegtWQ1qCUaj0lItYhVXWlGHqnka 59KKo1fbpMlJflZd80SDO1e1m57tEYJlxlnxGFhzuCmxN8QvZE0tXKNGAuT/Dl6k /yGgFfdhz1rtvUmEQAYzJ2SrFMW8RrvLTiN3A0cpJYk5HhmIxfIH2tviA4F1vkyh MirH7wIunt35ybo5SzqJ9orVkyrvGeQpXJ5eHDEFAdTqaLpBIgdhSw9afu5ASZiD aPmibapQANtzqNnRYrtgaTf6Tfa9CYVGS7MYtdnMt59x/ns02wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK72SQpQRgcvReAnu+n5UPdhZ14UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNmJjNTMyODktYjkwZS0z NGJlLWJjZDktYzM5NDY1ZjQ4YzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgOvsAkAcIqPG+pJ4qrZt27BqjQwIvL56bRpJNzP2hXcgtGiCXQ1WSQ 4Y4wNwC7A2bzr+b0z19xWAyysZYj+pTnhOA/D9X3DgI8DW1pt+uU+wueAxxq18Kq oU2wrbQ6TJQkRRN/SoUUWC3BrdnM5ZV+HLi7OrDqWkZ0BQHPPZwBZxhCBU0knsmU TQywnq5on2vOvE0ztIxcuayBRKsOmaeH3efWGP54NtVwxByQ+KyQXz3FNCP/I37u gLkxnLIrOu+jpNIXGz3jahfPo67b+kQnFuRXBO7D+IaD6H0nfx0/qLF8ql3emmGb qo/4Jxs6x7pTUx9HDdBzipK7fCIVMGE= -----END CERTIFICATE-----Generated at Sun May 11 23:40:01 2025 by rpki-client