$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa File: 408381c8-6830-38f5-9c88-6356ab563ec5.roa (raw, json) Hash identifier: ThI6MvxK315r7no8x2V30AVnou1joEbGa4yhwW0GZ90= Subject key identifier: 38:1B:DE:2E:3D:3B:ED:F6:F6:86:68:96:88:26:72:3D:7A:90:A5:BB Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F43285848EF61487D070156E983E2C980 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 1299 IP address blocks: 148.188.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:48:7d:07:01:56:e9:83:e2:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=ae1327e8-7edb-4425-9d90-fcc9eac52cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:8b:95:ea:d4:ee:fd:8d:c5:95:e2:a4:d5: ea:a7:98:cf:2a:7c:a9:47:f8:3e:0f:50:76:ef:4a: bc:19:fa:f6:bd:54:0c:aa:c7:6d:c9:82:f2:a1:94: b8:6f:bb:03:80:94:62:e3:19:8a:aa:07:7d:dd:87: 2f:a5:d5:2a:52:33:1f:76:d8:62:9f:44:b1:6d:69: 35:1e:02:2e:d9:90:83:bd:58:b3:ce:71:2c:57:1a: a6:09:31:ab:c8:af:5d:5d:b6:a7:57:92:e4:4f:2a: df:e0:06:f9:88:75:15:46:8a:ec:3f:b1:53:0a:5e: 9e:31:f9:c2:71:3a:db:3d:91:e2:37:84:1f:34:f9: 31:2f:96:7e:88:62:a1:62:67:91:bd:73:11:38:de: 9e:06:26:f9:eb:9b:36:e9:74:1c:f4:03:0f:60:07: 0b:1c:17:b4:6b:20:f1:65:41:8c:ad:e8:05:a9:2b: 5e:eb:fe:76:64:1a:bc:c2:c0:93:be:9c:a5:86:2b: b4:40:0d:54:6c:57:79:0a:99:1a:e8:b3:14:c1:91: 3f:3a:8c:1f:15:d5:e3:b0:ba:4d:59:c0:82:73:b7: 4d:7c:b9:03:de:f8:24:a3:bd:66:7a:8f:ae:67:65: eb:25:f9:a5:9d:a9:b3:0d:25:c9:cf:99:81:d5:6f: 9f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1B:DE:2E:3D:3B:ED:F6:F6:86:68:96:88:26:72:3D:7A:90:A5:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f0:9c:9d:6f:21:76:f5:62:fe:fb:dd:77:12:26:0f:d6:a7: 42:99:16:c9:a0:8e:f1:bd:89:b3:db:14:35:1b:4b:e7:3c:51: bf:7b:d6:67:d1:1c:be:1f:f2:78:69:83:30:8f:28:36:d4:23: 58:20:58:0b:71:0d:87:be:de:7a:8d:68:68:09:37:59:9f:f5: a4:5a:7a:ba:b7:c0:09:b1:5a:2c:1c:9f:22:ce:07:81:46:c7: 28:8c:7d:26:a0:7e:8d:94:94:15:0f:69:c2:c8:16:3a:26:00: 15:03:dd:2f:70:06:10:60:bb:cf:2a:b3:53:77:c4:16:6e:a5: a0:9d:e6:00:fa:91:14:ce:27:3d:04:93:76:a2:a5:2b:66:fa: 2b:0f:36:27:66:65:55:27:1f:4f:9d:1e:25:1d:1d:0a:f5:13: 2c:ed:a3:8b:0a:41:91:ef:69:98:7a:ef:45:85:5f:90:40:99: 48:a2:ee:e8:95:8b:67:56:a6:f9:12:86:97:80:54:46:91:71: c1:ca:cb:8e:f3:c6:d3:2f:0b:7e:a8:e6:52:53:f6:b8:44:29: cd:08:62:c7:51:98:35:39:a6:74:14:b5:0f:2a:db:6d:55:50: ba:6a:f7:62:8c:c6:d8:bf:5c:dd:ad:20:cd:d9:81:8d:eb:1e: be:8d:18:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUh9BwFW6YPiyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YWUxMzI3ZTgtN2VkYi00NDI1LTlkOTAtZmNjOWVhYzUyY2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOeLlerU7v2NxZXipNXqp5jPKnypR/g+D1B2 70q8Gfr2vVQMqsdtyYLyoZS4b7sDgJRi4xmKqgd93YcvpdUqUjMfdthin0SxbWk1 HgIu2ZCDvVizznEsVxqmCTGryK9dXbanV5LkTyrf4Ab5iHUVRorsP7FTCl6eMfnC cTrbPZHiN4QfNPkxL5Z+iGKhYmeRvXMRON6eBib565s26XQc9AMPYAcLHBe0ayDx ZUGMregFqSte6/52ZBq8wsCTvpylhiu0QA1UbFd5Cpka6LMUwZE/OowfFdXjsLpN WcCCc7dNfLkD3vgko71meo+uZ2XrJfmlnamzDSXJz5mB1W+fkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgb3i49O+329oZologmcj16kKW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNDA4MzgxYzgtNjgzMC0z OGY1LTljODgtNjM1NmFiNTYzZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvwnJ1vIXb1Yv773XcSJg/Wp0KZFsmgjvG9ibPbFDUbS+c8Ub971mfR HL4f8nhpgzCPKDbUI1ggWAtxDYe+3nqNaGgJN1mf9aRaerq3wAmxWiwcnyLOB4FG xyiMfSagfo2UlBUPacLIFjomABUD3S9wBhBgu88qs1N3xBZupaCd5gD6kRTOJz0E k3aipStm+isPNidmZVUnH0+dHiUdHQr1Eyzto4sKQZHvaZh670WFX5BAmUii7uiV i2dWpvkShpeAVEaRccHKy47zxtMvC36o5lJT9rhEKc0IYsdRmDU5pnQUtQ8q221V ULpq92KMxti/XN2tIM3ZgY3rHr6NGNY= -----END CERTIFICATE-----Generated at Sat Apr 26 17:50:36 2025 by rpki-client