$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa File: cef491ba-6998-36c3-9897-80eae0b6f79b.roa (raw, json) Hash identifier: HsKOnASiHvuvacL4DuK4+7MbrnjXdIjGZZoDVoePd/c= Subject key identifier: A2:57:E4:5C:D6:0E:D9:D2:59:7E:6A:8A:CD:34:11:4F:DB:F7:EA:54 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849A61F3FC1346E30F82FA95780 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 63199 IP address blocks: 148.153.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3f:c1:34:6e:30:f8:2f:a9:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=73c0da43-5126-4784-b4b3-a274618dd61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:99:c0:53:db:4b:c6:1b:15:a9:1a:20:73:09: 84:63:bb:c7:cd:f1:b8:2b:32:4a:d2:94:0c:3f:96: 10:b2:b2:6e:73:5f:f2:f0:d3:25:9b:b7:55:91:b1: 84:66:86:2b:96:38:ef:71:52:64:00:ec:92:a0:4c: 61:d4:19:ec:1f:eb:d3:45:87:f4:86:f4:de:cb:10: 8b:fb:d7:30:04:e4:71:cb:ab:69:98:6a:a0:1c:b4: 6b:b2:2e:eb:47:25:38:cf:3d:d0:1c:80:b1:5f:7a: 65:0c:a8:93:37:37:07:e8:dd:5a:fa:0e:35:1e:2e: 24:6d:46:6a:96:66:66:bf:60:2b:5d:18:15:48:f9: b2:b6:54:9a:3b:17:65:be:bf:4d:6c:57:9b:8f:1f: 23:bf:fb:1a:93:26:0f:f3:b1:66:2e:73:46:28:e7: db:19:4b:37:d2:39:60:4a:a6:28:62:09:5a:b9:43: e6:66:bd:f8:55:8d:3d:c4:0b:60:56:38:fe:3c:66: f0:d2:c7:28:ad:19:d9:48:be:cb:c8:5d:64:cc:9a: d2:28:c9:d8:3e:c8:e9:2f:b0:15:95:df:82:fe:b8: 24:c2:6f:3b:14:c7:e7:8a:00:3a:95:0c:1c:d9:2a: d2:97:ec:15:70:a1:bf:95:67:7d:9a:40:96:cb:e0: ae:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:57:E4:5C:D6:0E:D9:D2:59:7E:6A:8A:CD:34:11:4F:DB:F7:EA:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:80:90:6c:d2:1e:83:2e:27:c0:ed:e4:49:69:53:10:7e:60: 87:ee:b6:b8:f9:3f:60:5f:16:c7:b4:14:5d:d5:d8:2a:13:d9: fb:b6:2d:42:3e:a1:82:f0:a9:8b:d6:27:4d:40:91:70:ae:89: 78:25:d8:7f:cd:46:00:4b:be:e8:5e:ea:14:e2:f5:d8:c8:f2: b9:67:b9:c6:5f:2e:90:18:a0:1e:52:46:a4:e8:a5:dc:d6:21: 01:86:36:29:ca:15:66:a3:92:14:bf:26:73:29:ba:73:aa:22: 5e:ce:d1:57:ba:d9:f3:7a:dd:22:64:b1:f4:dc:ce:a5:35:13: 36:fd:6b:ec:59:d7:4e:a9:e7:7d:88:19:02:22:04:14:19:3b: c7:4b:46:ed:51:2c:12:cb:6e:41:39:ca:58:85:34:b6:dc:dc: 5c:cc:fe:7f:6f:c3:44:f0:55:9b:ff:4a:99:ac:c3:28:e4:70: 20:4c:c9:22:9d:44:03:b4:1f:2f:d3:67:b2:20:0d:41:32:a4: 15:9a:58:b7:c7:28:54:a7:ac:1f:22:cf:57:07:7d:d0:d8:8c: 05:c5:20:5c:23:80:a0:7f:7c:1e:37:d6:28:a5:95:50:e8:d8: df:c7:79:a3:71:f4:93:3a:4a:33:74:b1:ae:9d:30:b4:13:bf: 94:7e:fc:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHz/BNG4w+C+pV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk NzNjMGRhNDMtNTEyNi00Nzg0LWI0YjMtYTI3NDYxOGRkNjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJnAU9tLxhsVqRogcwmEY7vHzfG4KzJK0pQM P5YQsrJuc1/y8NMlm7dVkbGEZoYrljjvcVJkAOySoExh1BnsH+vTRYf0hvTeyxCL +9cwBORxy6tpmGqgHLRrsi7rRyU4zz3QHICxX3plDKiTNzcH6N1a+g41Hi4kbUZq lmZmv2ArXRgVSPmytlSaOxdlvr9NbFebjx8jv/sakyYP87FmLnNGKOfbGUs30jlg SqYoYglauUPmZr34VY09xAtgVjj+PGbw0scorRnZSL7LyF1kzJrSKMnYPsjpL7AV ld+C/rgkwm87FMfnigA6lQwc2SrSl+wVcKG/lWd9mkCWy+CuwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJX5FzWDtnSWX5qis00EU/b9+pUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2VmNDkxYmEtNjk5OC0z NmMzLTk4OTctODBlYWUwYjZmNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+AkGzSHoMuJ8Dt5ElpUxB+YIfutrj5P2BfFse0FF3V2CoT2fu2LUI+ oYLwqYvWJ01AkXCuiXgl2H/NRgBLvuhe6hTi9djI8rlnucZfLpAYoB5SRqTopdzW IQGGNinKFWajkhS/JnMpunOqIl7O0Ve62fN63SJksfTczqU1Ezb9a+xZ106p532I GQIiBBQZO8dLRu1RLBLLbkE5yliFNLbc3FzM/n9vw0TwVZv/SpmswyjkcCBMySKd RAO0Hy/TZ7IgDUEypBWaWLfHKFSnrB8iz1cHfdDYjAXFIFwjgKB/fB431iillVDo 2N/HeaNx9JM6SjN0sa6dMLQTv5R+/PQ= -----END CERTIFICATE-----Generated at Mon May 12 00:16:59 2025 by rpki-client