$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/acdfc857-b60f-31a5-a03d-714b58be33d7.roa File: acdfc857-b60f-31a5-a03d-714b58be33d7.roa (raw, json) Hash identifier: nKOJC3i2q6Cgo+5RJQ8OXt3pr4ndRPY6IZyRZGLXLvU= Subject key identifier: 6F:CD:AC:E2:E1:40:A1:E4:68:58:CE:90:CD:38:1D:22:2B:45:2B:84 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849B2AF5EAE45DCF5589A55BD80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/acdfc857-b60f-31a5-a03d-714b58be33d7.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 63199 IP address blocks: 148.153.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:5e:ae:45:dc:f5:58:9a:55:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=f00b1b43-d3b9-4771-ae0b-bb0476170125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5c:b0:ad:d3:b3:b6:64:9c:2d:97:86:c2:6b: 3c:0f:4b:76:7e:79:60:f7:34:db:19:c3:79:cf:7e: bc:fb:d1:ac:d3:83:57:20:a9:ee:3a:4e:78:8a:f6: 1d:4c:1d:ef:91:05:04:96:13:78:7e:30:83:a0:dd: 46:1c:6d:7c:24:32:f8:a9:78:7d:11:41:19:b0:4e: b3:4a:da:fd:9d:d6:8f:4a:bd:78:8f:e0:5a:8c:a7: 9e:af:a7:44:25:f6:90:90:b2:e0:f4:4b:f3:4e:c6: d1:e8:0c:e5:42:3f:ec:67:3a:c4:6b:3a:ae:2b:40: 27:3d:e5:48:c4:45:14:7d:0a:3c:a9:7a:8d:35:5d: c6:0d:9d:7a:33:9f:86:57:d6:23:3a:5b:ca:f1:5e: b5:b3:74:95:8f:68:e7:7f:5c:0e:12:c4:3e:0a:22: 5a:32:99:56:b9:ec:e1:c7:2f:17:9b:7f:51:1a:58: 6f:19:a0:b0:d8:02:2d:36:de:c3:b9:f9:54:c8:e2: 38:31:8f:43:1b:0d:40:47:18:1f:2d:e4:01:be:b6: 3e:fe:13:77:55:13:59:e4:36:b3:f2:52:6c:d7:29: 23:3f:a7:53:8c:88:3c:5f:61:8b:6b:06:71:d9:7b: 67:e8:01:bb:b1:17:2c:f2:fe:50:e2:4c:5c:d7:18: 77:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CD:AC:E2:E1:40:A1:E4:68:58:CE:90:CD:38:1D:22:2B:45:2B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/acdfc857-b60f-31a5-a03d-714b58be33d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4d:64:8d:85:82:cd:6d:91:7b:af:31:3d:44:7a:92:c3:a7: 78:34:20:3f:85:30:c1:0c:87:47:27:94:5a:f3:08:ce:5e:fc: 29:83:a4:c8:a5:df:dd:4e:9c:4c:94:d6:35:bb:1b:f4:99:54: 2b:a0:92:69:54:50:17:d2:52:36:0e:69:c7:be:c4:fa:9f:39: 15:3c:20:3f:e8:54:02:49:7e:f0:e9:ed:c4:86:59:68:3f:cb: 93:31:1c:6c:92:f2:a7:60:de:a0:6e:37:6e:54:2f:ea:02:f6: a2:0b:64:66:68:8a:6a:f1:ea:1b:97:6d:d0:c7:23:2a:c0:9c: f2:72:71:82:fa:8c:50:1b:5e:eb:4b:99:a1:82:fe:91:dd:fc: d4:bd:89:8d:45:67:4c:51:2f:b7:50:7a:8c:88:a0:54:93:fd: bd:a8:63:b5:1f:68:4d:fe:96:12:0f:b8:bd:e7:d4:03:71:03: b3:70:67:ed:e1:3f:fa:05:67:2e:f5:b8:d0:b0:09:b2:fa:35: f5:0c:0f:17:ee:bc:9c:cf:c7:e2:e7:b7:d5:99:f5:3f:69:16: ac:48:39:b3:59:9b:d7:5a:6a:19:ad:6e:ed:c5:bf:27:0f:7a: 0b:05:a5:e2:48:5a:4a:15:cb:a3:69:98:b3:b5:a1:43:63:19: 42:b8:09:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr16uRdz1WJpVvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk ZjAwYjFiNDMtZDNiOS00NzcxLWFlMGItYmIwNDc2MTcwMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11ywrdOztmScLZeGwms8D0t2fnlg9zTbGcN5 z368+9Gs04NXIKnuOk54ivYdTB3vkQUElhN4fjCDoN1GHG18JDL4qXh9EUEZsE6z Str9ndaPSr14j+BajKeer6dEJfaQkLLg9EvzTsbR6AzlQj/sZzrEazquK0AnPeVI xEUUfQo8qXqNNV3GDZ16M5+GV9YjOlvK8V61s3SVj2jnf1wOEsQ+CiJaMplWuezh xy8Xm39RGlhvGaCw2AItNt7DuflUyOI4MY9DGw1ARxgfLeQBvrY+/hN3VRNZ5Daz 8lJs1ykjP6dTjIg8X2GLawZx2Xtn6AG7sRcs8v5Q4kxc1xh3uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/NrOLhQKHkaFjOkM04HSIrRSuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYWNkZmM4NTctYjYwZi0z MWE1LWEwM2QtNzE0YjU4YmUzM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJmWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdNZI2Fgs1tkXuvMT1EepLDp3g0ID+FMMEMh0cnlFrzCM5e/CmDpMil 391OnEyU1jW7G/SZVCugkmlUUBfSUjYOace+xPqfORU8ID/oVAJJfvDp7cSGWWg/ y5MxHGyS8qdg3qBuN25UL+oC9qILZGZoimrx6huXbdDHIyrAnPJycYL6jFAbXutL maGC/pHd/NS9iY1FZ0xRL7dQeoyIoFST/b2oY7UfaE3+lhIPuL3n1ANxA7NwZ+3h P/oFZy71uNCwCbL6NfUMDxfuvJzPx+Lnt9WZ9T9pFqxIObNZm9daahmtbu3FvycP egsFpeJIWkoVy6NpmLO1oUNjGUK4CUQ= -----END CERTIFICATE-----Generated at Sun May 11 23:19:38 2025 by rpki-client