$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa File: 5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa (raw, json) Hash identifier: 4hb6vhtG1H8QQAW+Zs2et/AOLDtnZ4RVlPwiN9gIC7U= Subject key identifier: 08:78:8A:B8:34:72:F5:8A:8C:AD:D4:5A:94:2D:8E:68:DD:5D:4B:DA Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F43285848EF61488C32EE4055068E3E80 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 1299 IP address blocks: 148.188.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:48:8c:32:ee:40:55:06:8e:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=fdf1ba9a-cfdd-4621-a090-88184027c419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:38:6d:1c:44:38:73:f7:37:34:f1:42:6c:5d: 3a:c6:82:d9:5c:cc:d6:6a:6e:cc:e0:c8:b9:45:4b: ef:5e:a5:19:c9:72:af:09:3c:db:f0:08:4e:36:44: 39:be:38:c0:44:5b:23:51:57:00:bb:f0:e1:ea:2f: 33:5d:a3:93:9d:fe:b4:2e:38:6a:d4:1f:3a:81:dc: 16:5e:a4:b6:9b:30:b3:08:71:cd:a6:81:14:45:8e: f8:8d:e3:c9:44:f3:b8:e3:7d:fd:b0:2b:fc:68:8d: dd:64:44:6d:f1:0d:89:95:6e:27:8e:94:7b:f1:07: 1d:c4:15:a4:a3:bc:a3:fe:86:9d:4d:1f:9e:b3:c1: dc:b0:af:ca:60:ce:34:cf:b4:0a:3e:e2:7c:66:56: 16:4b:0a:5f:35:38:32:02:72:b5:1f:65:fc:84:b5: e9:5a:bf:7c:cf:cc:a0:d1:7e:5a:c7:a2:95:c1:94: e8:19:ea:4d:b6:9b:ea:f2:82:2d:3d:7f:f1:b9:81: 04:b3:35:a4:6f:9f:75:ca:fe:e0:9a:c6:ee:4f:0b: 09:9d:87:77:28:de:4a:02:41:95:62:6a:84:8b:1c: 82:10:c5:1d:2e:20:2c:0c:7e:f6:d2:9d:1f:a6:af: 4b:6f:03:5f:2b:78:ca:44:e2:8a:fa:1b:fd:62:1f: a2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:78:8A:B8:34:72:F5:8A:8C:AD:D4:5A:94:2D:8E:68:DD:5D:4B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:03:a3:5a:40:f8:f6:07:5c:59:cc:04:9a:c5:df:7a:94:07: bb:04:e9:1b:68:a9:4b:59:e9:5f:86:b8:1e:fd:b4:d8:8d:87: d5:84:4d:c3:fc:bc:ce:6a:75:f1:e9:e6:a1:f0:5a:dc:ad:d7: 66:70:fe:cd:4f:77:e8:25:b9:c9:f1:f0:21:ff:27:7a:9c:62: 97:4f:99:e6:9f:a8:17:bb:e4:f1:02:d7:9c:eb:24:8b:94:c5: 9c:94:22:48:d7:44:4d:7a:7d:c8:cd:cc:a3:3b:d8:9e:97:65: 2c:a8:7e:f0:77:4a:6d:85:cf:04:6a:e7:57:14:3d:10:dc:00: a0:18:7b:90:1c:01:67:87:fa:b1:2d:4a:3c:62:88:ea:92:42: a0:d4:21:15:05:30:70:66:ef:03:87:79:52:78:1b:01:39:e4: 0f:07:dc:4e:97:7b:c9:e2:67:48:52:bc:41:ee:e4:4f:53:be: 1e:91:45:c4:4f:22:e7:6b:a7:40:ef:71:0d:d6:6a:f6:db:4f: a3:40:5e:24:8c:27:86:2e:08:d2:70:fa:68:2b:01:89:3b:78: 48:c5:4d:84:b6:ec:cc:c2:f5:6c:74:42:e4:89:6a:6a:e5:db: 48:6e:cc:d7:ad:3f:b1:58:47:98:f5:33:d5:f1:a8:ca:05:a1: d0:37:e3:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUiMMu5AVQaOPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ZmRmMWJhOWEtY2ZkZC00NjIxLWEwOTAtODgxODQwMjdjNDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zhtHEQ4c/c3NPFCbF06xoLZXMzWam7M4Mi5 RUvvXqUZyXKvCTzb8AhONkQ5vjjARFsjUVcAu/Dh6i8zXaOTnf60Ljhq1B86gdwW XqS2mzCzCHHNpoEURY74jePJRPO44339sCv8aI3dZERt8Q2JlW4njpR78QcdxBWk o7yj/oadTR+es8HcsK/KYM40z7QKPuJ8ZlYWSwpfNTgyAnK1H2X8hLXpWr98z8yg 0X5ax6KVwZToGepNtpvq8oItPX/xuYEEszWkb591yv7gmsbuTwsJnYd3KN5KAkGV YmqEixyCEMUdLiAsDH720p0fpq9LbwNfK3jKROKK+hv9Yh+iFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAh4irg0cvWKjK3UWpQtjmjdXUvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNWIyYjZlNzUtOGE4ZS0z ZDBkLThlNzMtZmIwZDc5NzIzNTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIADo1pA+PYHXFnMBJrF33qUB7sE6RtoqUtZ6V+GuB79tNiNh9WETcP8 vM5qdfHp5qHwWtyt12Zw/s1Pd+glucnx8CH/J3qcYpdPmeafqBe75PEC15zrJIuU xZyUIkjXRE16fcjNzKM72J6XZSyofvB3Sm2FzwRq51cUPRDcAKAYe5AcAWeH+rEt SjxiiOqSQqDUIRUFMHBm7wOHeVJ4GwE55A8H3E6Xe8niZ0hSvEHu5E9Tvh6RRcRP Iudrp0DvcQ3WavbbT6NAXiSMJ4YuCNJw+mgrAYk7eEjFTYS27MzC9Wx0QuSJamrl 20huzNetP7FYR5j1M9XxqMoFodA348E= -----END CERTIFICATE-----Generated at Sat Apr 26 19:18:18 2025 by rpki-client