$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/adf36c37-4768-388e-a580-48e9d862ff18.roa File: adf36c37-4768-388e-a580-48e9d862ff18.roa (raw, json) Hash identifier: E2pnxUhJyFK8rHseR/MDBG/MIh+oIvKeUR7tzKmbSc0= Subject key identifier: DF:6F:38:07:C0:46:60:41:13:36:12:48:A6:13:B7:70:B1:38:A1:E6 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848FD56BC5EC407EB64A25A5480 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/adf36c37-4768-388e-a580-48e9d862ff18.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 148.59.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:bc:5e:c4:07:eb:64:a2:5a:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=ca0ef42d-20d0-4f6a-9521-72b265c0d766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b5:f0:77:7b:6a:88:a0:8a:08:2d:0b:6e:e4: c5:a4:4f:26:ba:60:f5:83:73:4c:63:a4:47:d5:21: e6:cc:cb:e1:01:7b:63:a3:7a:93:d2:f9:c4:22:c1: 8c:25:ee:69:54:e1:c0:6d:9e:df:e5:ad:09:cc:9c: 2e:6d:09:5b:d4:38:bd:6f:22:f9:0d:8b:9e:88:d1: 70:2d:8e:31:03:3a:df:12:ea:eb:c2:fc:ad:7e:6b: e1:b6:81:8b:9a:ba:20:ac:59:a0:2b:1f:92:fb:06: 50:46:ab:80:35:ba:4f:6c:0c:7e:7b:01:72:ef:d6: f9:76:79:44:fd:28:7e:bf:85:d4:fd:3b:14:98:32: a6:eb:14:de:42:0c:d1:04:d2:d0:85:90:94:ff:96: 59:46:05:a4:29:ac:6d:c5:e7:33:c0:ea:2b:30:26: 17:29:a8:93:c7:e1:72:c5:95:c3:c5:6f:63:25:c2: 6a:1b:a3:f0:d0:cd:24:f8:2d:71:15:42:14:ba:13: 60:04:95:fd:78:02:51:81:f5:2f:41:df:38:37:f7: fb:b7:a8:7e:88:11:11:69:3f:4a:49:c9:03:aa:ca: 1f:b1:11:65:a9:35:c9:ec:70:e7:74:27:d3:fc:01: ba:6c:c7:0f:c5:38:dc:92:8d:57:7f:5a:9a:0d:e6: 90:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6F:38:07:C0:46:60:41:13:36:12:48:A6:13:B7:70:B1:38:A1:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/adf36c37-4768-388e-a580-48e9d862ff18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:98:97:fc:c1:d1:9a:ca:0b:7b:1d:f6:01:5f:a5:c2:c1:6d: 13:fe:3c:1e:0d:a6:98:b9:96:a0:18:29:84:48:fc:af:a4:b0: d0:50:2c:87:a5:8b:57:dc:73:9d:98:b5:bc:57:22:28:96:cb: 2b:cc:72:58:bf:2e:5b:7e:87:f8:70:2b:f8:e7:73:cd:a7:ca: e7:8a:36:44:d7:79:20:b1:c1:26:48:5f:18:c8:6d:d4:b9:a9: 03:ef:49:7b:ec:00:b5:c0:8e:05:d5:bf:83:90:e6:13:80:a0: 3e:d8:00:7c:21:1a:3b:4c:c4:2c:de:64:be:63:49:4f:fa:d5: ac:95:d1:85:e0:58:c4:7d:3a:df:3d:55:e3:23:10:54:b1:50: 1c:0a:b8:f6:85:cd:18:b0:d4:dc:92:63:12:9b:06:98:77:d1: 14:f2:36:df:e7:be:ce:e8:e5:a8:fc:aa:a8:4d:58:df:96:9b: a6:d1:6e:bf:6c:68:80:53:5a:99:48:57:b3:49:9c:f2:e4:8e: 09:91:48:69:53:10:df:a3:e4:86:dc:90:c9:7e:17:bf:34:72: 09:43:fb:f5:cb:c2:d8:e1:43:1f:b2:ca:ec:a1:b9:a6:4f:cd: a8:ff:c0:c2:2b:e5:e1:a5:bc:b3:f3:41:45:87:e9:fd:ce:61: 5a:53:9a:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VrxexAfrZKJaVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2EwZWY0MmQtMjBkMC00ZjZhLTk1MjEtNzJiMjY1YzBkNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrXwd3tqiKCKCC0LbuTFpE8mumD1g3NMY6RH 1SHmzMvhAXtjo3qT0vnEIsGMJe5pVOHAbZ7f5a0JzJwubQlb1Di9byL5DYueiNFw LY4xAzrfEurrwvytfmvhtoGLmrogrFmgKx+S+wZQRquANbpPbAx+ewFy79b5dnlE /Sh+v4XU/TsUmDKm6xTeQgzRBNLQhZCU/5ZZRgWkKaxtxeczwOorMCYXKaiTx+Fy xZXDxW9jJcJqG6Pw0M0k+C1xFUIUuhNgBJX9eAJRgfUvQd84N/f7t6h+iBERaT9K SckDqsofsRFlqTXJ7HDndCfT/AG6bMcPxTjcko1Xf1qaDeaQwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9vOAfARmBBEzYSSKYTt3CxOKHmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYWRmMzZjMzctNDc2OC0z ODhlLWE1ODAtNDhlOWQ4NjJmZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDvGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSYl/zB0ZrKC3sd9gFfpcLBbRP+PB4Nppi5lqAYKYRI/K+ksNBQLIel i1fcc52YtbxXIiiWyyvMcli/Llt+h/hwK/jnc82nyueKNkTXeSCxwSZIXxjIbdS5 qQPvSXvsALXAjgXVv4OQ5hOAoD7YAHwhGjtMxCzeZL5jSU/61ayV0YXgWMR9Ot89 VeMjEFSxUBwKuPaFzRiw1NySYxKbBph30RTyNt/nvs7o5aj8qqhNWN+Wm6bRbr9s aIBTWplIV7NJnPLkjgmRSGlTEN+j5IbckMl+F780cglD+/XLwtjhQx+yyuyhuaZP zaj/wMIr5eGlvLPzQUWH6f3OYVpTmnI= -----END CERTIFICATE-----Generated at Mon Apr 28 09:09:13 2025 by rpki-client