$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa File: aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa (raw, json) Hash identifier: UJYjT6006BbP2pCCtyyxC/iMVHbp9Pnz5RO1DwbnxaM= Subject key identifier: 3E:C3:8A:5B:95:85:84:1C:27:F4:02:51:9D:45:05:E9:38:D4:61:D2 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584A3B7AF68BBB79AC3E272A12E0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 63199 IP address blocks: 148.153.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:f6:8b:bb:79:ac:3e:27:2a:12:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=7c9a4b96-40dc-477f-9120-117bc5270ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c9:53:73:23:74:f0:32:cf:71:5a:6b:44:3d: 5f:b6:0d:cc:86:aa:ff:d3:77:89:56:5d:a7:cf:35: d3:e6:8a:ac:31:32:e6:b1:a0:f6:e4:9f:05:78:81: b1:53:9c:c9:5e:17:97:75:d8:b3:58:c1:2f:45:a2: f7:31:3c:f4:dc:a2:c9:b3:c3:a3:65:ad:52:cb:4c: 4a:22:b6:40:6f:b1:7e:f5:b0:a5:f4:4f:00:e9:7d: b2:59:50:9f:db:ff:03:c2:ba:45:99:02:a0:5f:27: 9c:82:5a:bc:80:01:43:62:19:f2:7e:83:2d:26:d0: e1:45:c0:87:b7:2a:c2:3c:28:e4:01:29:0a:9a:3d: 49:08:e0:ca:93:6c:90:45:1a:a9:eb:e2:30:da:a1: ca:c1:4c:4e:ea:6e:ed:de:1f:03:99:83:78:28:bc: 16:b6:92:4f:16:9a:5e:86:a9:11:3d:73:64:4e:b7: 7f:0b:cf:8d:cb:82:f3:61:08:02:e7:90:47:76:f9: a3:10:c2:e6:e4:4e:fa:6b:68:66:6a:69:fd:ef:97: c3:f8:7b:f2:13:ff:08:34:1c:f8:2b:af:70:d5:a7: ed:14:3e:46:4b:9a:fd:98:e7:d3:1c:79:a7:9e:f7: bf:02:d8:3f:59:39:a2:c8:2b:05:7b:7d:19:83:ae: a6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C3:8A:5B:95:85:84:1C:27:F4:02:51:9D:45:05:E9:38:D4:61:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:2e:49:86:a5:46:4b:5f:5a:8a:86:d9:8b:c1:b6:f6:cd:66: 9b:7d:b2:47:00:02:a5:e9:79:e3:1f:fe:a3:68:33:46:69:8a: 8b:c9:85:31:f2:13:5f:63:fb:6d:22:52:06:eb:d9:f9:f1:2b: 6d:92:0c:63:e0:08:9e:67:1b:f7:db:57:7a:7b:ed:df:08:ad: 49:4f:32:70:3b:d6:de:07:64:5e:35:62:3e:22:4b:89:af:08: 20:09:c1:21:4e:49:2c:22:75:4e:69:1f:b4:77:bc:1e:f0:aa: d1:c7:cc:60:bd:34:de:56:51:f8:b9:93:db:53:08:69:32:ae: b5:dd:83:92:7d:60:95:e5:d1:cc:52:c9:d9:f0:70:23:74:47: aa:c5:07:2d:33:6c:00:f5:6a:79:6c:1a:10:ca:70:87:83:8d: 98:f4:3e:ff:d2:23:59:de:22:58:ce:55:84:6e:48:72:db:54: ae:10:88:a0:96:5a:a7:4f:cd:77:27:d4:66:61:3c:3b:c8:4b: c9:91:e3:71:75:87:37:62:dd:4f:eb:5b:8f:c1:10:95:7e:62: be:10:db:75:ac:64:f4:55:a1:64:e5:6c:33:07:7c:49:82:89: 02:94:6f:01:90:5b:52:8a:29:36:b8:4a:0b:fc:c8:f5:de:ee: 85:ec:87:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evaLu3msPicqEuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk N2M5YTRiOTYtNDBkYy00NzdmLTkxMjAtMTE3YmM1MjcwZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjclTcyN08DLPcVprRD1ftg3Mhqr/03eJVl2n zzXT5oqsMTLmsaD25J8FeIGxU5zJXheXddizWMEvRaL3MTz03KLJs8OjZa1Sy0xK IrZAb7F+9bCl9E8A6X2yWVCf2/8DwrpFmQKgXyecglq8gAFDYhnyfoMtJtDhRcCH tyrCPCjkASkKmj1JCODKk2yQRRqp6+Iw2qHKwUxO6m7t3h8DmYN4KLwWtpJPFppe hqkRPXNkTrd/C8+Ny4LzYQgC55BHdvmjEMLm5E76a2hmamn975fD+HvyE/8INBz4 K69w1aftFD5GS5r9mOfTHHmnnve/Atg/WTmiyCsFe30Zg66mfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7DiluVhYQcJ/QCUZ1FBek41GHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYWFmNDk3NWQtN2RkMC0z NTVhLThkYmYtY2IwZTM0NmU2MTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClJnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4uSYalRktfWoqG2YvBtvbNZpt9skcAAqXpeeMf/qNoM0ZpiovJhTHy E19j+20iUgbr2fnxK22SDGPgCJ5nG/fbV3p77d8IrUlPMnA71t4HZF41Yj4iS4mv CCAJwSFOSSwidU5pH7R3vB7wqtHHzGC9NN5WUfi5k9tTCGkyrrXdg5J9YJXl0cxS ydnwcCN0R6rFBy0zbAD1anlsGhDKcIeDjZj0Pv/SI1neIljOVYRuSHLbVK4QiKCW WqdPzXcn1GZhPDvIS8mR43F1hzdi3U/rW4/BEJV+Yr4Q23WsZPRVoWTlbDMHfEmC iQKUbwGQW1KKKTa4Sgv8yPXe7oXsh50= -----END CERTIFICATE-----Generated at Mon Jun 30 02:14:38 2025 by rpki-client