$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa File: 408381c8-6830-38f5-9c88-6356ab563ec5.roa (raw, json) Hash identifier: N+USneZuGFiX/hbUqKzaR8R8qSYiMgB4K1LmdCkf9kk= Subject key identifier: 4C:12:E0:82:F7:45:5F:40:39:7B:BA:9F:21:CA:0D:9D:CE:FA:A9:88 Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F43285849CE9A6BFC26C1D9DF06273C00 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 1299 IP address blocks: 148.188.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:6b:fc:26:c1:d9:df:06:27:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=5e4cc628-cf2e-4a57-bd6b-9ab45b4ea005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:09:50:a3:19:0c:ae:b2:2b:6f:ec:b1:b3:f7: a8:cf:2b:53:bc:58:d5:af:2f:54:2c:ca:bc:da:59: 5e:25:42:d1:d2:0f:70:35:26:e8:8c:fc:16:fc:2d: 65:36:86:d3:4c:b6:b1:61:ce:2f:e6:99:bb:e6:f4: 6d:70:04:b9:4e:4a:01:f8:87:9d:b5:e2:34:ec:ce: 8a:84:c2:3b:46:6f:77:17:75:f8:62:ec:9b:c2:93: b0:ea:38:b0:22:d7:8a:af:04:90:b9:aa:c8:81:2c: c9:ef:2e:de:92:75:b6:55:fc:32:b5:b2:aa:66:d3: de:41:7a:07:0a:63:d8:ce:af:19:c9:8b:a1:ef:00: 5c:f8:18:98:e4:6d:fd:f2:15:e5:13:50:c3:b9:b5: b9:89:d0:95:d6:4e:ee:8c:9b:e9:db:29:e0:4d:ec: 5e:25:93:86:c5:75:f8:27:87:83:f3:b1:eb:82:4f: be:04:12:0d:c4:b7:27:5f:e5:50:00:f4:a4:d3:a4: fc:d1:e1:41:1f:0e:77:31:58:3d:5b:71:83:60:b7: 11:83:2e:ea:d5:73:3d:55:d6:57:cc:80:f0:34:62: 48:8e:54:20:c0:27:bb:6e:b1:92:84:bf:f0:33:05: b6:ae:be:3b:e3:2a:02:12:62:7f:f2:d8:af:05:d5: 4c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:12:E0:82:F7:45:5F:40:39:7B:BA:9F:21:CA:0D:9D:CE:FA:A9:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e8:c2:25:9f:85:41:b8:9f:98:f1:30:c3:08:2f:93:7f:9a: af:36:fe:51:6f:2e:00:52:b9:30:ab:70:3e:79:38:ce:4c:89: 90:a8:51:0b:e3:22:80:c9:5b:1b:8d:ea:92:d8:e5:71:dd:97: 91:2e:b2:5a:53:3c:c9:5c:fe:3b:ee:70:be:85:62:62:ff:80: 72:45:f6:6e:4a:65:01:9f:93:38:ea:17:8f:fc:36:4c:03:54: c8:07:d2:14:74:75:d1:7d:91:a2:8f:0a:50:5c:f1:0c:98:e1: 9a:5a:96:ed:28:6c:74:99:af:7a:03:a3:86:d5:c5:10:74:e6: f5:39:05:2b:5b:2d:15:5c:61:66:9a:50:37:ac:af:6a:b5:04: 57:79:d5:d5:46:74:90:74:ac:b2:b2:e1:65:1c:13:4d:21:67: 72:13:4e:e0:da:02:f1:0f:16:38:2f:63:d2:70:d3:51:e8:68: 29:a0:ba:b1:16:6b:0b:26:d8:c2:b5:09:e1:08:ea:64:b6:63: 8d:fb:b6:c8:14:35:3c:e3:32:e7:43:ec:d9:2b:48:9b:e3:2e: e1:be:69:27:62:68:71:c8:4f:e2:33:41:a8:04:fb:71:33:bb: 65:d0:c5:eb:dc:0d:aa:c0:b0:6e:92:4f:44:e8:a7:9b:a0:d5: 23:da:57:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmv8JsHZ3wYnPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NWU0Y2M2MjgtY2YyZS00YTU3LWJkNmItOWFiNDViNGVhMDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtglQoxkMrrIrb+yxs/eozytTvFjVry9ULMq8 2lleJULR0g9wNSbojPwW/C1lNobTTLaxYc4v5pm75vRtcAS5TkoB+IedteI07M6K hMI7Rm93F3X4YuybwpOw6jiwIteKrwSQuarIgSzJ7y7eknW2VfwytbKqZtPeQXoH CmPYzq8ZyYuh7wBc+BiY5G398hXlE1DDubW5idCV1k7ujJvp2yngTexeJZOGxXX4 J4eD87Hrgk++BBINxLcnX+VQAPSk06T80eFBHw53MVg9W3GDYLcRgy7q1XM9VdZX zIDwNGJIjlQgwCe7brGShL/wMwW2rr474yoCEmJ/8tivBdVMLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwS4IL3RV9AOXu6nyHKDZ3O+qmIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNDA4MzgxYzgtNjgzMC0z OGY1LTljODgtNjM1NmFiNTYzZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHowiWfhUG4n5jxMMMIL5N/mq82/lFvLgBSuTCrcD55OM5MiZCoUQvj IoDJWxuN6pLY5XHdl5EuslpTPMlc/jvucL6FYmL/gHJF9m5KZQGfkzjqF4/8NkwD VMgH0hR0ddF9kaKPClBc8QyY4Zpalu0obHSZr3oDo4bVxRB05vU5BStbLRVcYWaa UDesr2q1BFd51dVGdJB0rLKy4WUcE00hZ3ITTuDaAvEPFjgvY9Jw01HoaCmgurEW awsm2MK1CeEI6mS2Y437tsgUNTzjMudD7NkrSJvjLuG+aSdiaHHIT+IzQagE+3Ez u2XQxevcDarAsG6ST0Top5ug1SPaV/0= -----END CERTIFICATE-----Generated at Sun May 11 19:11:30 2025 by rpki-client