$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/f736df18-cb5f-32c7-8ca3-ea4622e3622e.roa File: f736df18-cb5f-32c7-8ca3-ea4622e3622e.roa (raw, json) Hash identifier: F0KV+I/Ph/BGfBN1HjM3O6Mu52pSRImlHQ8u64BVYbQ= Subject key identifier: B0:9D:83:AA:27:FC:BB:5E:52:53:3F:2D:BF:39:E9:8B:AE:D8:C5:D5 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584A497073A4315956205BA1FC00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/f736df18-cb5f-32c7-8ca3-ea4622e3622e.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 63199 IP address blocks: 148.153.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:73:a4:31:59:56:20:5b:a1:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=d06ff035-8a5c-4cae-b893-efd051ecb9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a2:0a:50:cd:e1:f6:73:ab:cc:f1:4f:46:58: 96:0d:34:fc:09:dd:5e:51:65:0c:c9:ac:ff:31:93: 0e:46:d5:74:38:d8:42:11:98:b9:92:35:02:f2:13: a5:ab:bd:45:6e:c0:4a:47:35:01:b5:56:45:78:6f: 0e:8b:1c:48:9a:99:d6:a8:a6:f6:c8:26:96:09:5e: c1:c5:7a:a1:3d:d5:cf:b3:e0:f8:2d:ec:61:0c:4a: 6a:2b:c9:e9:d2:a5:b3:ee:2f:9c:1d:65:5b:b8:5a: 35:63:3f:eb:98:a5:3d:af:23:6b:3e:e3:9f:60:93: 77:5b:90:b4:c0:8e:87:4c:22:df:f6:7e:e3:38:fa: 62:63:33:a1:83:fd:ec:5e:79:6a:2d:e9:bd:6c:d9: bf:6d:80:65:3e:68:38:9c:d2:ff:8a:ac:a5:5a:8f: e9:fc:56:d0:7d:bd:b9:5f:63:5a:73:bb:a1:e6:b9: d4:0c:fc:43:e3:d8:49:68:b6:f8:a2:51:0d:f1:62: d1:cf:e2:60:73:b9:d9:37:22:db:87:04:c9:1f:07: 0a:5b:3b:96:61:7f:ce:89:f8:ee:88:0a:cc:92:12: dd:eb:85:fd:46:e7:25:34:ac:f1:19:e4:9e:b6:1d: b9:f5:93:9b:34:cc:d9:dd:ae:3b:aa:8e:d9:5d:7b: 2a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9D:83:AA:27:FC:BB:5E:52:53:3F:2D:BF:39:E9:8B:AE:D8:C5:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/f736df18-cb5f-32c7-8ca3-ea4622e3622e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:3d:c9:4a:7d:e9:78:d0:78:80:0f:26:97:1f:50:d9:83:ef: 99:2c:b9:02:b0:60:23:13:10:7c:0d:7f:0b:9f:84:81:79:0f: b6:49:43:2f:fc:84:b1:f8:3f:bb:6e:9d:4c:bf:6b:a8:39:1f: 6b:d7:63:7b:6c:17:c2:a4:3e:86:7c:21:47:17:ea:52:f8:ac: ea:cf:aa:c7:47:8e:e6:2d:ea:67:17:86:8d:a4:f3:3c:91:e4: 1d:9a:86:74:f8:fb:7a:84:2c:68:ce:65:1f:c9:30:b5:89:e6: 72:14:5e:d4:ce:de:a5:3e:f8:3e:4b:1c:5f:0d:cf:f9:be:fc: 6d:3d:5e:05:1e:7b:64:c4:ae:ac:db:13:b8:ff:0c:bd:32:39: 36:c3:ee:75:e2:47:74:dd:a9:b9:03:b4:66:db:ea:29:a6:9a: ec:04:3e:83:9b:35:d5:fa:39:c0:b1:39:b2:f8:73:96:4e:4b: e2:cc:66:eb:3e:80:cc:2f:36:ec:65:9c:23:ee:c3:82:47:cf: d2:8f:4f:ec:0d:b2:26:cc:65:31:3b:40:f9:55:f2:ed:33:7d: cf:53:8a:c8:b9:4f:89:05:85:e5:04:66:4e:7f:f1:a5:ad:b9: 95:73:66:b2:16:3b:06:48:aa:82:43:66:65:e3:d7:39:21:ab: dd:c3:60:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHOkMVlWIFuh/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDA2ZmYwMzUtOGE1Yy00Y2FlLWI4OTMtZWZkMDUxZWNiOWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqIKUM3h9nOrzPFPRliWDTT8Cd1eUWUMyaz/ MZMORtV0ONhCEZi5kjUC8hOlq71FbsBKRzUBtVZFeG8OixxImpnWqKb2yCaWCV7B xXqhPdXPs+D4LexhDEpqK8np0qWz7i+cHWVbuFo1Yz/rmKU9ryNrPuOfYJN3W5C0 wI6HTCLf9n7jOPpiYzOhg/3sXnlqLem9bNm/bYBlPmg4nNL/iqylWo/p/FbQfb25 X2Nac7uh5rnUDPxD49hJaLb4olEN8WLRz+Jgc7nZNyLbhwTJHwcKWzuWYX/Oifju iArMkhLd64X9RuclNKzxGeSeth259ZObNMzZ3a47qo7ZXXsquQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCdg6on/LteUlM/Lb856Yuu2MXVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZjczNmRmMTgtY2I1Zi0z MmM3LThjYTMtZWE0NjIyZTM2MjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADg9yUp96XjQeIAPJpcfUNmD75ksuQKwYCMTEHwNfwufhIF5D7ZJQy/8 hLH4P7tunUy/a6g5H2vXY3tsF8KkPoZ8IUcX6lL4rOrPqsdHjuYt6mcXho2k8zyR 5B2ahnT4+3qELGjOZR/JMLWJ5nIUXtTO3qU++D5LHF8Nz/m+/G09XgUee2TErqzb E7j/DL0yOTbD7nXiR3TdqbkDtGbb6immmuwEPoObNdX6OcCxObL4c5ZOS+LMZus+ gMwvNuxlnCPuw4JHz9KPT+wNsibMZTE7QPlV8u0zfc9Tisi5T4kFheUEZk5/8aWt uZVzZrIWOwZIqoJDZmXj1zkhq93DYFA= -----END CERTIFICATE-----Generated at Mon Jun 30 01:29:38 2025 by rpki-client