$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa File: 688b41be-4635-3543-940d-180df78be3b0.roa (raw, json) Hash identifier: 0QlnXFvCeih9Zip6rKiKu1VMS2pJywyOUFjDq7GLF50= Subject key identifier: 4E:0A:F6:CE:99:8E:D0:13:6A:81:91:4A:D0:73:AD:FA:D1:F5:D5:49 Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F43285848FA8BE9FE63B5185EC9B50700 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa Signing time: Sun 23 Feb 2025 14:00:51 +0000 ROA not before: Sun 23 Feb 2025 14:00:51 +0000 ROA not after: Sat 24 May 2025 13:00:51 +0000 asID: 15404 IP address blocks: 148.188.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fa:8b:e9:fe:63:b5:18:5e:c9:b5:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Feb 23 14:00:51 2025 GMT Not After : May 24 13:00:51 2025 GMT Subject: CN=ea9519ce-085c-4e2f-9e2a-a90459dc3a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e5:2a:22:5a:8b:b3:db:3d:9b:0b:c8:bb:07: 6b:12:b8:86:23:95:73:05:9b:a3:e5:c2:f1:29:0e: 24:ca:34:16:18:2e:89:bc:c4:6f:e8:ee:0d:29:92: f9:54:79:0e:65:c5:02:74:ab:23:85:23:4e:7a:da: 57:33:5c:a2:00:9d:9b:f9:b6:4e:9b:fd:0b:d5:19: 85:e0:20:22:3e:e1:53:17:6f:40:ee:a7:84:26:5e: 56:9a:4c:40:82:bf:75:d4:c2:7c:42:71:0d:c7:5e: 02:50:9c:ee:57:f4:6a:f8:5d:eb:8a:ff:03:3c:fc: 7d:3d:83:a5:d1:27:50:45:9a:85:b7:9c:31:b9:76: 78:3a:5d:cc:45:d3:a9:06:95:69:da:64:93:40:f6: f0:a4:7b:8f:2b:5d:8d:b4:0d:97:68:94:19:15:23: aa:e0:49:10:63:32:6d:2e:17:17:cb:fc:6f:df:c7: 86:01:76:a9:02:20:e5:fe:33:ed:e6:5c:73:f8:15: bc:28:a3:33:61:38:c5:9e:4c:b8:bc:55:d6:4e:97: 65:f6:62:b6:94:3b:30:42:51:db:b7:b1:39:15:50: a3:2b:a4:49:7f:83:f4:26:9e:78:92:4e:2f:23:e5: c8:64:c3:21:71:cb:eb:db:e9:88:3b:73:99:f9:a6: 2b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0A:F6:CE:99:8E:D0:13:6A:81:91:4A:D0:73:AD:FA:D1:F5:D5:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:63:7d:51:7b:38:fb:1f:de:3c:dd:a7:99:16:09:13:ba:82: 6c:48:59:3f:46:04:e7:1e:d9:c5:81:b4:db:14:0d:dc:46:5b: 6d:1d:50:23:c8:76:02:2f:d3:87:e7:b4:e0:6a:9b:96:3e:14: f0:1f:b7:8a:fc:e6:35:4a:a1:1c:91:2e:67:60:2f:3c:b3:12: 4c:23:62:ae:76:15:5f:93:9f:5f:68:83:e9:af:54:9f:88:f3: 75:e4:89:97:23:3a:3e:db:c1:12:b1:4f:7c:5a:c3:bc:02:5c: 68:e2:db:03:39:76:e3:88:d7:0a:b4:01:6a:6d:78:52:52:46: 1b:5f:86:2d:cf:1a:32:3a:ff:7a:3d:12:b9:4a:e0:7c:e6:06: 3b:4a:1d:0b:3e:21:b4:65:9e:77:22:25:4d:8a:0f:e5:5d:f0: 55:49:98:81:47:d8:48:b2:d7:09:a1:dc:59:c6:07:8f:89:0f: c9:db:19:5a:95:3f:6b:2a:8e:f4:40:f5:ac:f5:cf:8b:00:28: 29:bc:e8:6f:de:c4:20:67:eb:ed:ac:7b:24:b1:6a:dd:14:73: 4c:39:8c:80:37:0f:d4:45:c2:36:af:23:d7:c2:93:fa:aa:a2: 6e:89:4d:e3:d3:20:df:3d:17:67:37:68:d8:42:bf:80:c3:59: c7:e5:4e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj6i+n+Y7UYXsm1BwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI1MDIyMzE0MDA1MVoXDTI1MDUyNDEzMDA1MVowLzEtMCsGA1UEAxMk ZWE5NTE5Y2UtMDg1Yy00ZTJmLTllMmEtYTkwNDU5ZGMzYTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OUqIlqLs9s9mwvIuwdrEriGI5VzBZuj5cLx KQ4kyjQWGC6JvMRv6O4NKZL5VHkOZcUCdKsjhSNOetpXM1yiAJ2b+bZOm/0L1RmF 4CAiPuFTF29A7qeEJl5WmkxAgr911MJ8QnENx14CUJzuV/Rq+F3riv8DPPx9PYOl 0SdQRZqFt5wxuXZ4Ol3MRdOpBpVp2mSTQPbwpHuPK12NtA2XaJQZFSOq4EkQYzJt LhcXy/xv38eGAXapAiDl/jPt5lxz+BW8KKMzYTjFnky4vFXWTpdl9mK2lDswQlHb t7E5FVCjK6RJf4P0Jp54kk4vI+XIZMMhccvr2+mIO3OZ+aYrcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4K9s6ZjtATaoGRStBzrfrR9dVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNjg4YjQxYmUtNDYzNS0z NTQzLTk0MGQtMTgwZGY3OGJlM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZjfVF7OPsf3jzdp5kWCRO6gmxIWT9GBOce2cWBtNsUDdxGW20dUCPI dgIv04fntOBqm5Y+FPAft4r85jVKoRyRLmdgLzyzEkwjYq52FV+Tn19og+mvVJ+I 83XkiZcjOj7bwRKxT3xaw7wCXGji2wM5duOI1wq0AWpteFJSRhtfhi3PGjI6/3o9 ErlK4HzmBjtKHQs+IbRlnnciJU2KD+Vd8FVJmIFH2Eiy1wmh3FnGB4+JD8nbGVqV P2sqjvRA9az1z4sAKCm86G/exCBn6+2seySxat0Uc0w5jIA3D9RFwjavI9fCk/qq om6JTePTIN89F2c3aNhCv4DDWcflTnI= -----END CERTIFICATE-----Generated at Sun Apr 27 04:17:37 2025 by rpki-client