$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/b8400ae4-c32e-32eb-863d-6abffbace522.roa File: b8400ae4-c32e-32eb-863d-6abffbace522.roa (raw, json) Hash identifier: HVLxKrM4aCO030y/3XtsM+xFNwbgsk/DPyQlmHkjn0U= Subject key identifier: 68:A7:E5:7A:49:78:5F:8B:B0:B3:66:70:F0:F8:45:4A:B7:25:42:48 Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F43285849CE9A62DDDF69D09989B6AC80 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/b8400ae4-c32e-32eb-863d-6abffbace522.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 15404 IP address blocks: 148.188.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:62:dd:df:69:d0:99:89:b6:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=95796b8e-0db4-4e3c-b41d-8b7ad97c8968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:37:da:b8:6e:4f:7d:7e:c8:cd:fc:ec:3f: f8:55:ea:15:a7:d2:14:51:f1:52:86:7a:2d:9d:ea: 49:0e:78:48:23:4e:b2:6c:21:79:3b:16:03:3c:b4: 97:bf:a3:03:47:2b:54:95:ae:7c:17:c9:ea:cc:13: 27:05:1a:4c:a8:f0:6e:0a:69:17:cc:7b:9b:0d:86: ce:69:9d:c9:e0:63:77:a3:99:5f:5d:e6:dc:a9:c9: 65:fd:b3:f1:b0:96:e4:42:b8:dc:d4:47:df:46:6a: 9e:8c:1d:fd:59:eb:fb:78:8e:d0:35:bf:47:93:23: 62:25:72:26:96:b6:24:a1:5c:04:64:f5:a9:c6:78: d8:44:42:99:82:eb:69:5e:fe:e2:ac:cd:d2:a8:3f: f4:25:69:44:46:55:3a:91:d6:8c:05:e1:21:c9:17: 96:a8:4c:fa:a7:42:02:15:ef:e4:c1:9a:58:ee:a8: 41:ca:46:69:fa:8f:d4:07:35:b3:aa:05:84:6d:55: 2c:5f:f9:08:97:0a:c1:dc:c2:bd:7a:af:68:d7:38: 2e:45:0e:e2:7f:b2:6e:d1:de:8a:33:23:c5:b5:08: 2c:5b:be:95:ee:6e:f2:6c:68:e7:4e:db:2d:fe:7e: cb:20:8c:d0:ee:d4:66:c1:f2:0e:da:5f:20:88:48: 02:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A7:E5:7A:49:78:5F:8B:B0:B3:66:70:F0:F8:45:4A:B7:25:42:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/b8400ae4-c32e-32eb-863d-6abffbace522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:0e:ac:a0:03:67:da:9a:9b:2d:50:cc:2c:40:fc:fa:00:59: c5:38:1e:df:27:64:0b:03:eb:e3:60:a4:48:fd:58:c6:e6:d8: 5f:3d:95:88:d2:c9:08:28:b9:4e:ee:84:99:a0:bc:1f:1d:0a: 0d:d8:af:1a:0b:84:b8:86:ab:79:74:ad:5f:db:49:d2:3d:46: e6:c3:f1:ce:bc:24:c2:bf:0a:6a:b9:ce:54:be:23:82:c2:30: b3:f7:50:4e:ac:73:16:05:9c:e2:b3:89:9e:44:15:ec:f6:50: 62:0b:43:0b:79:b4:4c:01:bf:eb:4e:c7:e4:76:c4:87:27:b8: db:07:9a:2e:75:ec:e1:36:8b:d0:5c:bc:dd:fc:a8:dc:ec:81: dc:78:00:bb:7d:ff:78:30:c9:41:61:4e:4c:1b:c9:f9:8a:c2: 0c:46:c9:b6:d4:99:ad:b8:e5:3d:66:2b:41:b0:0d:59:29:32: 62:5a:e2:0b:ff:b2:8f:36:2a:c5:d7:ed:79:b5:b3:e4:f2:1e: a1:3a:8d:ae:fb:cf:9a:30:0f:3d:67:a5:ab:3c:ff:e3:a9:ea: 2b:88:f5:fc:27:46:ee:8b:19:3f:a1:bf:d6:64:b0:01:cc:f4: 71:a5:9b:1f:b6:e0:c8:38:eb:7e:58:8a:bd:16:01:7e:ce:7a: fb:40:dc:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmLd32nQmYm2rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk OTU3OTZiOGUtMGRiNC00ZTNjLWI0MWQtOGI3YWQ5N2M4OTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQs32rhuT31+yM387D/4VeoVp9IUUfFShnot nepJDnhII06ybCF5OxYDPLSXv6MDRytUla58F8nqzBMnBRpMqPBuCmkXzHubDYbO aZ3J4GN3o5lfXebcqcll/bPxsJbkQrjc1EffRmqejB39Wev7eI7QNb9HkyNiJXIm lrYkoVwEZPWpxnjYREKZgutpXv7irM3SqD/0JWlERlU6kdaMBeEhyReWqEz6p0IC Fe/kwZpY7qhBykZp+o/UBzWzqgWEbVUsX/kIlwrB3MK9eq9o1zguRQ7if7Ju0d6K MyPFtQgsW76V7m7ybGjnTtst/n7LIIzQ7tRmwfIO2l8giEgCbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGin5XpJeF+LsLNmcPD4RUq3JUJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvYjg0MDBhZTQtYzMyZS0z MmViLTg2M2QtNmFiZmZiYWNlNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8OrKADZ9qamy1QzCxA/PoAWcU4Ht8nZAsD6+NgpEj9WMbm2F89lYjS yQgouU7uhJmgvB8dCg3YrxoLhLiGq3l0rV/bSdI9RubD8c68JMK/Cmq5zlS+I4LC MLP3UE6scxYFnOKziZ5EFez2UGILQwt5tEwBv+tOx+R2xIcnuNsHmi517OE2i9Bc vN38qNzsgdx4ALt9/3gwyUFhTkwbyfmKwgxGybbUma245T1mK0GwDVkpMmJa4gv/ so82KsXX7Xm1s+TyHqE6ja77z5owDz1npas8/+Op6iuI9fwnRu6LGT+hv9ZksAHM 9HGlmx+24Mg4635Yir0WAX7OevtA3EM= -----END CERTIFICATE-----Generated at Sun Jun 15 11:46:55 2025 by rpki-client