$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2319d758-c98d-395e-8e3d-c34f7f632200.roa File: 2319d758-c98d-395e-8e3d-c34f7f632200.roa (raw, json) Hash identifier: CO1nNnQRMdUEfQPlE0gs6SKqS5IHl7D13pKP+z/DAo4= Subject key identifier: F7:D2:56:09:82:3F:03:27:A7:F4:F2:C2:B2:A3:D4:7D:92:5C:15:C5 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848FD56BC8C4847CC62305B2740 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2319d758-c98d-395e-8e3d-c34f7f632200.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 148.59.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:bc:8c:48:47:cc:62:30:5b:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=14145c86-921b-4988-9e72-9d89bdfb46be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0b:4a:00:10:c1:c1:8f:ee:39:7c:ab:7d:e9: 37:f8:70:04:c0:ea:9e:eb:2f:af:92:02:63:c9:c0: f4:70:37:5d:22:16:29:35:65:6f:17:d3:0f:6e:eb: ef:41:63:a4:ff:27:c8:26:a6:22:8b:97:7e:fc:66: 66:69:1f:0a:75:7c:a4:ed:fe:64:de:80:8a:eb:6e: a5:bc:7d:61:1d:d0:99:9a:c3:f7:99:dc:42:4d:6f: fd:1f:d4:1d:db:c6:14:d6:50:22:44:42:d8:d0:74: f7:b1:71:87:fe:fe:6b:6b:87:69:31:2b:1c:10:a3: dc:be:5d:ca:7a:1d:ed:f1:b6:72:72:9e:6f:49:2c: dc:df:4f:47:f2:36:9b:b0:d1:e2:50:b4:af:f9:f6: 12:99:0e:ac:0d:30:4b:7a:74:dd:b0:02:bb:d1:b4: 22:f5:a7:bc:4d:5d:82:42:3c:ad:36:d1:a8:d4:7c: 9e:2e:0e:04:00:0d:ea:ed:2c:13:30:24:9d:b3:70: 5b:94:ce:57:28:15:02:f2:3b:5d:16:a7:d2:e8:26: f0:45:ae:7f:88:89:22:bd:5a:e4:68:03:df:fc:57: fe:9b:89:49:b6:65:1c:30:44:1a:70:5b:e6:2a:8d: 6b:fa:fd:11:4e:55:55:ef:62:7a:dd:ff:e1:c8:3c: d6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D2:56:09:82:3F:03:27:A7:F4:F2:C2:B2:A3:D4:7D:92:5C:15:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2319d758-c98d-395e-8e3d-c34f7f632200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e7:c9:62:02:8b:e1:0a:8a:32:28:f0:ca:82:7c:6c:ec:51: c2:87:ed:bf:8f:a8:d8:fa:35:a7:04:5b:46:e6:15:ff:15:b2: 0a:ee:70:a4:7b:20:ba:72:dc:d7:b3:0c:61:a9:ec:f7:ac:e5: 4c:77:fb:96:db:f3:1e:c2:4c:65:82:c9:b8:7d:74:a5:32:c3: ef:df:99:9c:2c:dc:ac:11:e5:08:1f:18:db:4d:28:81:8e:b2: 9c:ec:06:70:dd:3b:d7:3f:a3:3f:a6:8f:e1:c9:53:06:c4:84: 8d:8e:3b:96:82:ee:98:a2:c7:35:a6:47:11:e1:a4:c0:26:5f: e9:e9:f5:7f:b2:49:a3:5b:a7:7c:da:89:54:68:07:10:56:d7: 06:d8:20:c6:be:b4:a5:46:e2:19:1f:57:5b:b2:fd:9a:be:b1: 43:7d:38:43:38:af:18:24:b3:f9:f6:71:e7:0b:88:dd:fe:cb: 9e:74:3c:b4:e8:f7:9c:ee:eb:ff:bd:87:c2:a0:e3:8e:65:26: c8:a6:06:55:1d:3c:fb:27:4f:42:32:d0:90:6c:01:5f:bd:29: 12:f4:fc:e2:1e:b0:a5:df:fe:03:7d:49:48:0a:1d:16:17:05: a9:c8:f5:69:68:00:6f:8a:a6:4d:fa:d1:2e:c8:40:e3:b0:50: 6b:0a:99:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VryMSEfMYjBbJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MTQxNDVjODYtOTIxYi00OTg4LTllNzItOWQ4OWJkZmI0NmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gtKABDBwY/uOXyrfek3+HAEwOqe6y+vkgJj ycD0cDddIhYpNWVvF9MPbuvvQWOk/yfIJqYii5d+/GZmaR8KdXyk7f5k3oCK626l vH1hHdCZmsP3mdxCTW/9H9Qd28YU1lAiRELY0HT3sXGH/v5ra4dpMSscEKPcvl3K eh3t8bZycp5vSSzc309H8jabsNHiULSv+fYSmQ6sDTBLenTdsAK70bQi9ae8TV2C QjytNtGo1HyeLg4EAA3q7SwTMCSds3BblM5XKBUC8jtdFqfS6CbwRa5/iIkivVrk aAPf/Ff+m4lJtmUcMEQacFvmKo1r+v0RTlVV72J63f/hyDzWLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfSVgmCPwMnp/TywrKj1H2SXBXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMjMxOWQ3NTgtYzk4ZC0z OTVlLThlM2QtYzM0ZjdmNjMyMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3nyWICi+EKijIo8MqCfGzsUcKH7b+PqNj6NacEW0bmFf8VsgrucKR7 ILpy3NezDGGp7Pes5Ux3+5bb8x7CTGWCybh9dKUyw+/fmZws3KwR5QgfGNtNKIGO spzsBnDdO9c/oz+mj+HJUwbEhI2OO5aC7piixzWmRxHhpMAmX+np9X+ySaNbp3za iVRoBxBW1wbYIMa+tKVG4hkfV1uy/Zq+sUN9OEM4rxgks/n2cecLiN3+y550PLTo 95zu6/+9h8Kg445lJsimBlUdPPsnT0Iy0JBsAV+9KRL0/OIesKXf/gN9SUgKHRYX BanI9WloAG+Kpk360S7IQOOwUGsKmd4= -----END CERTIFICATE-----Generated at Sat Apr 5 06:32:14 2025 by rpki-client