$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa File: 88f21b14-08fd-3634-835b-99b37c6e1f52.roa (raw, json) Hash identifier: zUEe4BfIq9GxVFORa990pNm/WAz0OiA7rghkZSUafWI= Subject key identifier: 63:D4:21:CD:D5:38:85:1D:E2:34:39:52:FC:38:1E:C9:2B:42:B9:04 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849B6DF4FAE1CE7447FB425DD80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 63199 IP address blocks: 148.153.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:4f:ae:1c:e7:44:7f:b4:25:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=4acf12dd-815b-4125-8035-e32e589d6584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:43:20:c7:f4:c1:41:cb:43:e2:9a:5d:ac:44: 56:62:05:9d:a6:c5:e1:9c:7f:e2:6a:a1:47:2a:1d: d4:b4:77:b0:25:72:fd:5b:9f:86:bf:4d:bd:22:a8: fe:73:4c:25:19:7a:6b:41:89:2e:55:eb:99:68:ff: 39:a3:2d:d1:46:5d:05:07:8e:db:fc:b3:88:f4:8f: 50:6d:66:0b:0a:dd:16:80:78:38:43:97:aa:ac:87: f3:c5:0c:31:b4:ea:fd:7f:0d:b3:81:a7:9f:33:bb: d0:b8:35:60:38:ac:79:e1:99:2d:1e:3e:dd:f3:99: 52:cd:1d:65:53:cf:fc:5a:d8:f6:65:8c:06:e2:ac: a0:f6:c8:60:a9:03:89:21:41:1e:a4:f8:64:77:63: 88:51:99:74:0c:12:ad:f1:a9:3c:ea:85:7e:84:e4: 0e:4a:5c:42:3c:3e:83:9f:ab:d6:2a:35:0f:3c:91: df:01:a5:08:bd:4d:83:1f:0d:b8:c3:cc:3d:be:2d: 38:7f:20:c8:c9:64:20:f2:ea:01:8f:eb:04:ae:04: 45:50:ff:6c:7d:52:65:64:1f:0e:a4:16:f9:83:4b: e9:4c:d1:f3:f2:59:fa:94:b5:40:8d:f0:33:ab:bd: cb:19:bf:57:ed:5c:d0:23:05:a7:95:10:ba:e9:a6: 96:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D4:21:CD:D5:38:85:1D:E2:34:39:52:FC:38:1E:C9:2B:42:B9:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c4:e3:de:a7:0f:46:83:47:82:fe:49:e5:5c:83:11:29:90: 5a:23:7f:eb:10:c9:f3:5d:76:c1:a0:06:04:7e:aa:2f:62:b0: d7:c4:b5:66:60:08:65:24:90:d0:c5:2e:ae:77:ca:0c:7c:49: b1:23:b0:5d:91:28:b8:f0:40:fb:7e:7a:22:cf:42:79:90:a0: 49:bd:a7:98:aa:39:a1:37:53:76:d9:78:c5:d6:46:5e:2d:92: 60:d8:c8:f1:92:7a:da:89:b2:c2:e8:56:6c:b3:f3:ea:e3:cf: 9b:c3:b9:e7:de:0f:3d:40:fe:7c:fb:06:f7:18:96:e6:2b:f3: d5:94:f6:f8:17:a7:ce:52:01:7d:62:9b:f8:a4:97:91:8c:23: e3:b2:14:17:da:52:a1:b8:08:1e:1c:3a:6c:e0:da:db:29:d5: 69:8d:ff:22:03:67:aa:dd:14:b2:6f:50:cb:68:ea:75:31:a2: 2c:48:9e:0b:45:fb:8c:c8:71:9e:64:8e:39:ea:3f:9b:ac:a8: ac:ae:58:6c:0d:7b:87:9c:49:4d:71:6e:f7:85:bb:e9:40:f7: 59:58:ba:19:bd:f6:fd:fc:1e:16:12:08:f3:f2:8c:d2:27:21: 97:cf:6f:ed:b3:70:77:27:4d:f2:9d:e9:8b:b5:9d:bb:66:7b: 5f:36:3a:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm230+uHOdEf7Ql3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk NGFjZjEyZGQtODE1Yi00MTI1LTgwMzUtZTMyZTU4OWQ2NTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEMgx/TBQctD4ppdrERWYgWdpsXhnH/iaqFH Kh3UtHewJXL9W5+Gv029Iqj+c0wlGXprQYkuVeuZaP85oy3RRl0FB47b/LOI9I9Q bWYLCt0WgHg4Q5eqrIfzxQwxtOr9fw2zgaefM7vQuDVgOKx54ZktHj7d85lSzR1l U8/8Wtj2ZYwG4qyg9shgqQOJIUEepPhkd2OIUZl0DBKt8ak86oV+hOQOSlxCPD6D n6vWKjUPPJHfAaUIvU2DHw24w8w9vi04fyDIyWQg8uoBj+sErgRFUP9sfVJlZB8O pBb5g0vpTNHz8ln6lLVAjfAzq73LGb9X7VzQIwWnlRC66aaW1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPUIc3VOIUd4jQ5Uvw4HskrQrkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvODhmMjFiMTQtMDhmZC0z NjM0LTgzNWItOTliMzdjNmUxZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJl+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLE496nD0aDR4L+SeVcgxEpkFojf+sQyfNddsGgBgR+qi9isNfEtWZg CGUkkNDFLq53ygx8SbEjsF2RKLjwQPt+eiLPQnmQoEm9p5iqOaE3U3bZeMXWRl4t kmDYyPGSetqJssLoVmyz8+rjz5vDuefeDz1A/nz7BvcYluYr89WU9vgXp85SAX1i m/ikl5GMI+OyFBfaUqG4CB4cOmzg2tsp1WmN/yIDZ6rdFLJvUMto6nUxoixIngtF +4zIcZ5kjjnqP5usqKyuWGwNe4ecSU1xbveFu+lA91lYuhm99v38HhYSCPPyjNIn IZfPb+2zcHcnTfKd6Yu1nbtme182OkU= -----END CERTIFICATE-----Generated at Mon May 12 02:35:36 2025 by rpki-client