$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa File: 688b41be-4635-3543-940d-180df78be3b0.roa (raw, json) Hash identifier: EvCbJIwB0UPjAXOkBduh8QpSIrtK3IXNrhJnHUgyRT8= Subject key identifier: 15:CA:BF:B0:9D:FB:19:52:D1:6A:A1:0D:00:C6:E0:A0:D6:DC:BA:4D Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F43285849D9C4F4F065C3170E332DD140 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa Signing time: Wed 14 May 2025 13:01:03 +0000 ROA not before: Wed 14 May 2025 13:01:03 +0000 ROA not after: Tue 12 Aug 2025 13:01:03 +0000 asID: 15404 IP address blocks: 148.188.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d9:c4:f4:f0:65:c3:17:0e:33:2d:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: May 14 13:01:03 2025 GMT Not After : Aug 12 13:01:03 2025 GMT Subject: CN=d08dd90e-9816-4ebe-a1c4-d1ce5db56154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e0:2c:ce:f1:91:d0:8a:74:4b:f1:0b:13:e4: 09:63:28:aa:ad:23:a4:19:46:9d:6d:8a:7d:60:be: 01:a6:4e:55:7c:5e:d2:a3:cc:b0:be:7d:47:d2:b0: 66:35:8d:8d:0a:b3:21:64:a6:42:10:bb:83:ec:ab: e3:1b:10:0c:04:9b:ea:36:13:fe:76:ff:12:fc:bf: 0d:40:3d:b9:d6:0b:1d:c3:b4:9a:43:36:64:3e:cd: af:1b:07:96:5d:64:f6:a4:63:14:08:d5:61:57:77: 10:15:0b:f9:0d:c4:35:a1:d5:3a:a0:7b:a9:fb:fc: 2b:6f:6e:04:8d:1f:69:60:bd:ac:57:6c:d2:79:04: a7:2f:43:17:ab:c4:cb:c7:97:be:bb:0f:dc:67:34: 1c:6a:77:bd:b4:3d:88:77:e5:2f:04:09:0d:2d:30: 7e:4a:2a:7d:02:6f:52:ec:26:8d:db:3c:20:22:9a: fd:ee:d5:02:18:06:5d:ff:1b:11:ef:02:f1:58:e8: 9c:93:a4:30:aa:03:0e:a8:41:10:3a:5a:fa:e9:e9: 43:55:eb:11:66:59:c6:0a:67:7a:57:4a:b0:d3:74: 2f:81:1d:c4:31:e2:6c:dd:c9:86:d8:e1:89:a3:56: 06:29:e1:98:06:a5:61:9f:a7:97:b7:ba:47:d1:b8: 19:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CA:BF:B0:9D:FB:19:52:D1:6A:A1:0D:00:C6:E0:A0:D6:DC:BA:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:fb:3a:97:18:dd:c3:c1:f3:c8:25:8c:32:10:1d:e2:a4:22: 63:48:c5:a0:2c:4d:22:ae:15:ff:41:3b:19:fc:44:52:da:3f: 0c:e3:72:f0:82:68:4e:f7:7f:21:ac:ba:7f:68:44:0a:8f:a4: 61:f9:ff:5e:d0:06:9d:82:5e:a2:3b:6f:91:a7:e7:26:0a:c9: dc:a1:fe:e7:ee:ff:8f:00:21:fe:b7:89:37:69:f4:9a:0a:4a: 3e:71:65:01:33:41:d5:c3:18:c2:69:d3:78:c7:58:20:60:99: b5:f6:89:de:df:89:85:05:65:e1:d9:fc:db:a2:f7:5d:d3:c3: df:9c:14:fe:5a:ef:bb:7d:17:6b:d0:c5:d7:20:49:bf:f7:ae: e9:83:81:c3:46:28:ec:50:4a:95:74:73:4d:86:bd:99:a5:e1: 67:d7:de:44:f5:0d:0c:1f:d6:a2:30:0f:d8:0a:eb:b0:4e:42: a2:fd:8f:4a:74:f3:8c:9f:3b:fb:cd:be:0f:ad:93:12:94:b2: 0c:92:66:3c:32:5d:12:07:dc:31:06:e9:c2:80:a9:d3:bb:22: 0f:c4:8a:13:bc:84:9f:2c:d1:4e:ef:22:9f:d0:d9:ec:19:8c: 18:7a:fe:14:b1:72:2d:c2:b2:30:c3:fd:cc:dc:ae:2f:50:e3: c6:ef:99:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZxPTwZcMXDjMt0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI1MDUxNDEzMDEwM1oXDTI1MDgxMjEzMDEwM1owLzEtMCsGA1UEAxMk ZDA4ZGQ5MGUtOTgxNi00ZWJlLWExYzQtZDFjZTVkYjU2MTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OAszvGR0Ip0S/ELE+QJYyiqrSOkGUadbYp9 YL4Bpk5VfF7So8ywvn1H0rBmNY2NCrMhZKZCELuD7KvjGxAMBJvqNhP+dv8S/L8N QD251gsdw7SaQzZkPs2vGweWXWT2pGMUCNVhV3cQFQv5DcQ1odU6oHup+/wrb24E jR9pYL2sV2zSeQSnL0MXq8TLx5e+uw/cZzQcane9tD2Id+UvBAkNLTB+Sip9Am9S 7CaN2zwgIpr97tUCGAZd/xsR7wLxWOick6QwqgMOqEEQOlr66elDVesRZlnGCmd6 V0qw03QvgR3EMeJs3cmG2OGJo1YGKeGYBqVhn6eXt7pH0bgZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXKv7Cd+xlS0WqhDQDG4KDW3LpNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNjg4YjQxYmUtNDYzNS0z NTQzLTk0MGQtMTgwZGY3OGJlM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADf7OpcY3cPB88gljDIQHeKkImNIxaAsTSKuFf9BOxn8RFLaPwzjcvCC aE73fyGsun9oRAqPpGH5/17QBp2CXqI7b5Gn5yYKydyh/ufu/48AIf63iTdp9JoK Sj5xZQEzQdXDGMJp03jHWCBgmbX2id7fiYUFZeHZ/Nui913Tw9+cFP5a77t9F2vQ xdcgSb/3rumDgcNGKOxQSpV0c02GvZml4WfX3kT1DQwf1qIwD9gK67BOQqL9j0p0 84yfO/vNvg+tkxKUsgySZjwyXRIH3DEG6cKAqdO7Ig/EihO8hJ8s0U7vIp/Q2ewZ jBh6/hSxci3CsjDD/czcri9Q48bvmV0= -----END CERTIFICATE-----Generated at Tue Jun 17 23:08:34 2025 by rpki-client