$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/549312e1-41dd-30a1-8037-c87eabd4988f.roa File: 549312e1-41dd-30a1-8037-c87eabd4988f.roa (raw, json) Hash identifier: SHVCMIo5sWBxBSjR1FoaDoQb02lhC4Bx6Nk9zcXPEcY= Subject key identifier: D3:E2:61:8A:13:BE:5C:42:EB:70:A5:0E:0A:17:55:3E:F8:60:74:AD Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F432858494039487F020A4F20AF297A20 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/549312e1-41dd-30a1-8037-c87eabd4988f.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 395437 IP address blocks: 146.85.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:48:7f:02:0a:4f:20:af:29:7a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=a585776b-886d-46b4-b422-e31510b78325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:07:49:01:8f:9d:c6:89:a2:51:36:85:23:4c: 7a:9d:76:af:c4:47:18:77:43:49:24:8a:20:7d:5d: ce:76:6f:83:24:63:9c:9d:e5:46:b7:96:3a:97:38: 00:31:5c:7c:e6:cd:13:07:b3:d9:94:b2:88:38:c1: 39:d6:7f:c6:a4:d2:e9:5c:86:51:6b:6f:b0:45:5f: d5:b6:a8:5b:8f:01:70:2e:df:d9:ba:91:78:c5:09: 16:db:e9:ec:c4:22:4a:31:58:fc:bd:6c:7e:be:70: 93:da:3d:da:d0:32:79:69:d3:1d:6e:99:95:37:ea: 4f:23:61:8f:62:a8:cb:69:0e:08:1b:e9:5c:d8:f5: 4e:e7:03:67:79:ca:af:b3:3d:5c:52:48:4a:cc:a5: e8:4f:a1:cf:55:3d:5b:93:b9:88:d2:72:36:e1:2f: 34:f2:d0:49:0f:7b:bb:33:21:17:8f:ff:4d:41:c9: ca:a7:86:3e:cd:3f:da:03:f1:a0:9a:f5:c1:b4:7c: aa:cc:dd:f3:c6:60:bf:d8:96:7d:db:a6:cd:bd:bd: 3c:3c:18:1d:11:c8:f1:39:89:fa:12:1c:c1:e1:75: 8f:7c:d2:76:15:19:e2:5b:2e:d6:da:cf:a4:69:7f: a2:45:25:55:52:98:8b:86:3d:39:ff:74:d3:2b:b9: 20:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E2:61:8A:13:BE:5C:42:EB:70:A5:0E:0A:17:55:3E:F8:60:74:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/549312e1-41dd-30a1-8037-c87eabd4988f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: 146.85.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9e:34:82:ca:6d:93:4e:1b:dd:fd:34:26:f2:ae:8d:b6:26: 21:4b:6f:d6:14:5a:08:bf:f7:a9:f2:4d:e0:87:2f:32:b2:ab: 21:e2:7e:6b:29:32:5d:ca:94:50:0b:f9:1f:37:03:52:8d:c7: 4f:a7:8d:11:af:c7:19:ce:30:1f:b7:67:f6:82:ba:86:68:fe: ed:92:04:81:f4:d9:d6:63:49:51:48:b0:a3:c9:4f:44:11:ae: 2e:ab:6e:44:60:1a:10:f3:92:85:b7:c7:d0:e6:b7:0a:28:51: 8e:88:c1:4f:00:27:2e:76:51:ba:fa:c5:49:80:26:ce:c5:a0: aa:a4:b0:ca:94:55:4f:e9:08:8b:0b:ae:41:79:6f:82:5a:87: 86:84:de:d6:bf:0d:67:a5:cb:86:21:16:c5:cd:24:cb:55:dd: 79:00:87:f2:b3:a7:42:04:5e:9b:72:38:8c:10:7a:00:a4:d1: 70:7a:bc:cf:83:58:65:0d:c4:8b:5d:fb:62:da:b2:b3:27:41: 44:0a:cf:82:e5:71:f6:06:42:9e:90:04:97:5a:d0:e3:bb:fa: a4:d6:1f:3a:22:fd:b9:d3:82:af:bf:1f:1f:68:aa:25:ac:a4: 17:7a:17:75:b0:d4:4c:eb:0f:29:65:bc:93:63:32:50:31:98: d6:63:29:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUh/AgpPIK8peiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YTU4NTc3NmItODg2ZC00NmI0LWI0MjItZTMxNTEwYjc4MzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QdJAY+dxomiUTaFI0x6nXavxEcYd0NJJIog fV3Odm+DJGOcneVGt5Y6lzgAMVx85s0TB7PZlLKIOME51n/GpNLpXIZRa2+wRV/V tqhbjwFwLt/ZupF4xQkW2+nsxCJKMVj8vWx+vnCT2j3a0DJ5adMdbpmVN+pPI2GP YqjLaQ4IG+lc2PVO5wNnecqvsz1cUkhKzKXoT6HPVT1bk7mI0nI24S808tBJD3u7 MyEXj/9NQcnKp4Y+zT/aA/GgmvXBtHyqzN3zxmC/2JZ926bNvb08PBgdEcjxOYn6 EhzB4XWPfNJ2FRniWy7W2s+kaX+iRSVVUpiLhj05/3TTK7kgwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPiYYoTvlxC63ClDgoXVT74YHStMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvNTQ5MzEyZTEtNDFkZC0z MGExLTgwMzctYzg3ZWFiZDQ5ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFklXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKeNILKbZNOG939NCbyro22JiFLb9YUWgi/96nyTeCHLzKyqyHifmsp Ml3KlFAL+R83A1KNx0+njRGvxxnOMB+3Z/aCuoZo/u2SBIH02dZjSVFIsKPJT0QR ri6rbkRgGhDzkoW3x9DmtwooUY6IwU8AJy52Ubr6xUmAJs7FoKqksMqUVU/pCIsL rkF5b4Jah4aE3ta/DWely4YhFsXNJMtV3XkAh/Kzp0IEXptyOIwQegCk0XB6vM+D WGUNxItd+2LasrMnQUQKz4LlcfYGQp6QBJda0OO7+qTWHzoi/bnTgq+/Hx9oqiWs pBd6F3Ww1EzrDyllvJNjMlAxmNZjKdM= -----END CERTIFICATE-----Generated at Mon Apr 28 08:23:47 2025 by rpki-client