$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa File: 7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa (raw, json) Hash identifier: jlsCEDdh4e3Bg44ryPLq1VcSjZxVlazZtnU/uZDMMTg= Subject key identifier: B2:59:D5:D9:41:A9:A6:FE:3F:BF:23:58:C7:B7:31:CD:F7:B0:C2:D5 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849C20A21CD054CCCFB5F55D980 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 63199 IP address blocks: 148.153.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:21:cd:05:4c:cc:fb:5f:55:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=b8d04baa-f08f-41d9-a807-ddd813761eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0a:f8:17:45:83:06:6b:55:bf:12:9d:70:1e: 21:ba:4e:23:6e:61:35:6e:7a:99:5e:88:96:80:ef: 34:ee:20:16:11:78:9b:ea:11:1c:d6:31:8d:5e:28: 50:a4:57:ca:9d:3f:1c:c6:17:46:d3:51:99:82:24: 49:50:8d:ed:e7:52:11:df:ef:1e:d6:65:99:50:f3: 8e:66:d0:23:9f:c4:c7:ee:82:dd:eb:eb:a9:79:29: 1c:a6:bc:db:3a:ab:5e:84:2d:10:27:73:2a:ba:3e: 3c:ec:80:2c:09:05:df:93:ea:0d:79:3d:78:5d:8a: 26:2f:ca:4b:a4:85:61:5c:44:95:7e:79:35:ea:34: 25:ae:d0:32:d9:c1:ca:0d:96:84:fd:7e:00:10:19: 73:72:0f:d3:15:d9:fd:d5:d9:d3:dc:b7:b8:f8:0c: c8:e3:71:7e:86:f5:30:e0:2e:39:79:07:9d:77:ba: be:52:eb:52:57:62:d3:3c:4d:8e:ac:b8:00:ab:ab: ff:b2:b4:8b:92:bb:1d:19:93:d0:1a:f3:dc:10:60: 52:71:e4:00:7c:99:b2:1d:57:6d:07:97:3a:b1:ed: 6e:b0:64:7e:d6:94:cf:b4:54:60:a1:68:ae:fd:8a: f5:cf:71:1e:91:27:e2:a9:2c:9a:c6:9a:52:80:9c: 31:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:59:D5:D9:41:A9:A6:FE:3F:BF:23:58:C7:B7:31:CD:F7:B0:C2:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0d:a1:78:bd:45:e6:92:dc:ad:87:f7:f6:01:4f:6b:f3:c8: 07:5d:e5:f2:32:0c:e8:68:37:6e:28:f0:3a:19:ba:ed:19:7e: 8c:8c:80:0a:22:83:f4:12:c4:65:77:f3:4d:0a:44:70:d3:e0: 41:5e:18:ec:f8:21:1c:11:2f:b6:c2:51:1c:a8:a8:2b:88:63: dd:ec:5a:f6:5f:a3:aa:0c:10:3a:42:4e:5f:36:64:cc:2f:93: 52:2c:b1:b5:b5:7c:41:d6:8c:42:c0:19:39:05:0a:c7:15:42: 1a:9b:6f:93:7f:b4:d5:fd:f8:9c:d6:be:32:7c:7b:dc:19:73: 25:75:26:b6:df:3c:0c:03:2a:50:35:80:4e:45:73:d8:24:b2: 9c:c8:01:da:01:f6:9d:5d:e6:49:63:05:ed:38:c9:46:78:81: 5a:6a:d0:3b:0e:0e:c0:ff:3c:ff:9e:b1:7a:e0:4c:7c:b6:d2: e6:f7:25:61:6a:da:e7:67:30:0d:43:55:f4:b7:71:c6:39:58: 56:a2:c2:fd:1d:59:bf:9f:fa:2a:72:9b:e8:d0:c9:39:52:1c: 06:eb:1d:eb:9e:33:63:90:96:7e:b2:ee:1e:8d:e0:2a:e0:3b: f3:d8:e6:ac:3a:48:60:21:13:89:ea:b0:e7:e7:98:e1:39:e4: c1:b4:43:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCiHNBUzM+19V2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YjhkMDRiYWEtZjA4Zi00MWQ5LWE4MDctZGRkODEzNzYxZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgr4F0WDBmtVvxKdcB4huk4jbmE1bnqZXoiW gO807iAWEXib6hEc1jGNXihQpFfKnT8cxhdG01GZgiRJUI3t51IR3+8e1mWZUPOO ZtAjn8TH7oLd6+upeSkcprzbOqtehC0QJ3Mquj487IAsCQXfk+oNeT14XYomL8pL pIVhXESVfnk16jQlrtAy2cHKDZaE/X4AEBlzcg/TFdn91dnT3Le4+AzI43F+hvUw 4C45eQedd7q+UutSV2LTPE2OrLgAq6v/srSLkrsdGZPQGvPcEGBSceQAfJmyHVdt B5c6se1usGR+1pTPtFRgoWiu/Yr1z3EekSfiqSyaxppSgJwxnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJZ1dlBqab+P78jWMe3Mc33sMLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNzE1M2EyYjYtM2ZiOS0z ZDA3LWE4NzItZDljZTM5MmZhNjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkNoXi9ReaS3K2H9/YBT2vzyAdd5fIyDOhoN24o8DoZuu0ZfoyMgAoi g/QSxGV3800KRHDT4EFeGOz4IRwRL7bCURyoqCuIY93sWvZfo6oMEDpCTl82ZMwv k1IssbW1fEHWjELAGTkFCscVQhqbb5N/tNX9+JzWvjJ8e9wZcyV1JrbfPAwDKlA1 gE5Fc9gkspzIAdoB9p1d5kljBe04yUZ4gVpq0DsODsD/PP+esXrgTHy20ub3JWFq 2udnMA1DVfS3ccY5WFaiwv0dWb+f+ipym+jQyTlSHAbrHeueM2OQln6y7h6N4Crg O/PY5qw6SGAhE4nqsOfnmOE55MG0Qy8= -----END CERTIFICATE-----Generated at Sun May 11 23:29:40 2025 by rpki-client