$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa File: a5fade6e-275c-3ed2-a0be-b21ddef61294.roa (raw, json) Hash identifier: kcIruT80Y8iwN0bw0LhWW/1hE84nw8ctEjEfAa/cYgI= Subject key identifier: 96:5B:A8:CC:C8:4B:7D:2B:F6:74:39:52:8A:81:73:3C:48:2B:8D:65 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849A1EF767A1B0A3042C225AEC0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 63199 IP address blocks: 148.153.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:76:7a:1b:0a:30:42:c2:25:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=e1dea72f-790c-4baa-837a-4a2870eaf27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:63:c2:8f:ce:e2:f6:fb:7c:4f:5e:01:b9:ef: 38:1c:d9:06:cd:60:03:bc:67:56:58:20:f2:5a:19: 17:cd:60:86:eb:fe:74:3e:c6:44:06:08:16:fe:60: c2:03:8d:eb:d6:83:2d:3d:2c:4f:15:1b:0c:b4:c4: 08:6d:b4:f2:c5:7e:29:70:7e:d5:06:49:80:f6:a2: ec:fd:21:81:b9:8b:3b:15:ca:2f:5d:ee:27:63:17: a6:72:03:74:4d:e3:be:54:0e:a3:a0:9d:a4:cc:80: 6f:b3:89:0d:ab:73:7a:89:8d:2f:5a:91:a6:37:73: 68:16:b4:c2:d4:22:2a:80:8e:95:87:27:35:40:ef: 7e:24:50:4a:95:55:cb:36:68:0c:08:93:ac:e4:4e: 7c:20:d2:d9:2e:80:b7:e9:2c:a3:ae:06:59:61:c7: 2c:bb:75:40:1f:57:09:33:0d:2c:53:75:50:b5:03: ee:e6:85:04:3d:29:e4:d5:dd:c7:9c:7e:09:da:5b: a4:ef:87:1f:09:59:96:b3:2a:30:ee:ae:25:bf:c0: 08:e7:d7:a2:b2:0d:1d:1b:a8:44:0a:3a:37:52:80: 8d:b9:b2:63:38:99:3f:18:17:27:dc:84:f9:53:5f: d2:78:fd:ca:a0:9b:2f:cb:02:9a:c2:47:6d:ce:3a: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5B:A8:CC:C8:4B:7D:2B:F6:74:39:52:8A:81:73:3C:48:2B:8D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:7c:d4:8a:7c:55:17:2b:b7:88:3f:e3:23:03:be:99:c0:83: dc:00:61:a5:4d:db:61:8b:50:38:35:ca:2a:4c:d8:62:96:9a: e5:56:20:bf:15:2f:2a:8d:93:b8:f1:9a:be:1d:e8:f7:75:88: 8e:f1:3b:8d:78:21:9a:74:a7:56:84:3f:e0:03:37:3f:91:00: 18:8f:0e:31:2e:79:e1:8f:44:2a:e2:9b:52:89:b2:aa:73:ff: 0f:ec:49:b1:35:32:d9:18:a1:42:5e:66:14:5c:6e:4c:0d:66: 84:98:29:a4:1d:1f:c4:4a:74:9a:6b:02:6e:4a:77:7e:7f:59: fc:aa:1c:e5:5c:49:af:67:0c:f4:18:88:ec:7c:59:41:d0:aa: 29:08:03:b2:97:59:27:64:7c:eb:6f:9c:48:91:f3:63:ca:df: 19:58:57:a6:f8:30:27:cf:a8:5a:fe:0c:c1:29:13:3e:a1:ad: dd:44:57:f0:a4:93:11:d9:88:40:5b:1e:ec:76:ec:a9:e5:78: ff:92:a0:14:b1:ed:ed:d8:7e:de:e0:c3:81:31:15:c7:89:aa: 20:b4:9d:20:68:d4:a7:a7:2d:93:cc:91:08:df:33:f0:fd:3e: 82:8c:7f:c5:02:0e:6e:8e:ac:4b:46:ed:23:55:41:ea:06:af: a6:05:53:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73Z6GwowQsIlrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZTFkZWE3MmYtNzkwYy00YmFhLTgzN2EtNGEyODcwZWFmMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGPCj87i9vt8T14Bue84HNkGzWADvGdWWCDy WhkXzWCG6/50PsZEBggW/mDCA43r1oMtPSxPFRsMtMQIbbTyxX4pcH7VBkmA9qLs /SGBuYs7FcovXe4nYxemcgN0TeO+VA6joJ2kzIBvs4kNq3N6iY0vWpGmN3NoFrTC 1CIqgI6Vhyc1QO9+JFBKlVXLNmgMCJOs5E58INLZLoC36SyjrgZZYccsu3VAH1cJ Mw0sU3VQtQPu5oUEPSnk1d3HnH4J2luk74cfCVmWsyow7q4lv8AI59eisg0dG6hE Cjo3UoCNubJjOJk/GBcn3IT5U1/SeP3KoJsvywKawkdtzjqiMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZbqMzIS30r9nQ5UoqBczxIK41lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTVmYWRlNmUtMjc1Yy0z ZWQyLWEwYmUtYjIxZGRlZjYxMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGh81Ip8VRcrt4g/4yMDvpnAg9wAYaVN22GLUDg1yipM2GKWmuVWIL8V LyqNk7jxmr4d6Pd1iI7xO414IZp0p1aEP+ADNz+RABiPDjEueeGPRCrim1KJsqpz /w/sSbE1MtkYoUJeZhRcbkwNZoSYKaQdH8RKdJprAm5Kd35/WfyqHOVcSa9nDPQY iOx8WUHQqikIA7KXWSdkfOtvnEiR82PK3xlYV6b4MCfPqFr+DMEpEz6hrd1EV/Ck kxHZiEBbHux27KnleP+SoBSx7e3Yft7gw4ExFceJqiC0nSBo1KenLZPMkQjfM/D9 PoKMf8UCDm6OrEtG7SNVQeoGr6YFU6c= -----END CERTIFICATE-----Generated at Sun May 11 23:28:50 2025 by rpki-client