$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/550a0dd9-4a10-3411-8a05-c83b51b87fd5.roa File: 550a0dd9-4a10-3411-8a05-c83b51b87fd5.roa (raw, json) Hash identifier: bUyiXmWp2V4/1wAcy/bs+Jwa/Sy0lChRW0jb4WKSC0w= Subject key identifier: 2B:55:8E:98:B1:DA:64:3A:FD:9A:BA:67:59:70:B7:E9:6F:71:5E:2C Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848FD56BC6D614EA57FB00AFE00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/550a0dd9-4a10-3411-8a05-c83b51b87fd5.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 148.59.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:bc:6d:61:4e:a5:7f:b0:0a:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=4b174739-28c1-4623-94b6-e06fa694bf37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:d8:e1:5f:b7:ba:83:30:0d:b0:37:b6:fc: e0:34:dd:99:5c:76:97:ce:2a:a7:42:3c:b7:fa:0f: a4:cb:26:ec:fb:41:02:a9:57:ad:64:74:eb:9d:09: 73:9b:ef:92:23:ed:d8:10:57:b1:61:0c:6e:e3:56: 56:c3:6a:65:fd:85:75:ac:ca:ad:b3:95:46:a8:4e: fb:99:c6:58:de:23:7d:dc:09:d7:8a:9a:ec:f0:dc: e6:11:c5:80:1f:17:65:1f:b8:26:12:c6:89:85:40: f6:87:d9:3b:a2:38:44:6d:07:68:d0:fb:d4:0a:82: 90:de:18:ac:bb:be:f9:78:f5:37:c7:ca:4f:b6:0a: 41:87:d1:5b:7d:d0:42:ae:b5:d4:ec:a9:2a:23:4a: 90:b7:e6:f2:ac:5b:82:e8:c9:74:c5:ed:a7:b4:8f: df:7d:b2:9f:ab:55:a7:b9:2d:6c:24:4d:f2:f4:54: 39:bc:59:f3:56:35:b4:57:31:88:ef:38:e0:b4:c2: ed:a8:fe:99:75:47:8c:89:e4:a0:63:4d:35:d1:76: 33:40:e2:c5:eb:90:a9:7b:15:20:bd:fb:c6:6a:9a: 40:67:a6:7d:50:af:99:98:60:58:bc:48:4e:b1:2d: 2c:28:fb:7a:3a:e2:1b:9c:7c:35:3f:fc:d3:3c:ea: cf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:55:8E:98:B1:DA:64:3A:FD:9A:BA:67:59:70:B7:E9:6F:71:5E:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/550a0dd9-4a10-3411-8a05-c83b51b87fd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:0f:60:4d:59:3f:77:39:8f:7f:91:50:e4:f9:c1:c7:b0:55: e2:00:a5:97:56:d7:82:32:8f:bf:ac:3f:46:11:e4:24:fa:cb: 1f:d2:4f:0d:fa:00:1d:b7:86:3b:4f:2e:3c:ba:f7:12:0f:f4: f0:b7:32:30:e3:3c:6c:d0:e7:b1:8b:41:74:de:3b:48:5e:ba: 3d:2a:5a:92:44:42:fe:01:8c:d3:3c:81:d1:f8:d8:fe:6f:5f: 1a:21:46:47:c8:70:a7:b1:90:08:e9:a1:33:f9:d0:81:71:2d: 9e:f3:fc:1e:5e:c2:b3:9c:fa:1e:74:fb:c3:e9:cd:1f:01:f1: 99:e6:95:f1:3e:b6:74:dd:98:15:a0:15:c4:95:be:b6:82:37: 3f:cf:fc:0a:3a:84:e6:f3:af:2f:86:61:bc:55:8e:c5:f3:8d: 71:a1:fa:4f:5f:18:3e:61:8f:f5:ed:9f:f0:bf:2d:6f:3a:48: 80:fe:c5:93:22:7e:dc:43:3d:1d:69:5f:1b:d0:0c:53:c4:f5: a7:03:dd:64:b5:af:e3:c4:0b:32:30:0d:ef:5e:ef:a0:e3:62: ad:d0:9e:c2:53:7c:9d:1a:6f:83:28:ff:39:a9:0a:d7:76:34: 17:ef:74:bf:5a:ce:30:f9:d5:b7:95:c1:26:c7:d2:4c:9c:5e: dc:9b:e4:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VrxtYU6lf7AK/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGIxNzQ3MzktMjhjMS00NjIzLTk0YjYtZTA2ZmE2OTRiZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI3Y4V+3uoMwDbA3tvzgNN2ZXHaXziqnQjy3 +g+kyybs+0ECqVetZHTrnQlzm++SI+3YEFexYQxu41ZWw2pl/YV1rMqts5VGqE77 mcZY3iN93AnXiprs8NzmEcWAHxdlH7gmEsaJhUD2h9k7ojhEbQdo0PvUCoKQ3his u775ePU3x8pPtgpBh9FbfdBCrrXU7KkqI0qQt+byrFuC6Ml0xe2ntI/ffbKfq1Wn uS1sJE3y9FQ5vFnzVjW0VzGI7zjgtMLtqP6ZdUeMieSgY0010XYzQOLF65CpexUg vfvGappAZ6Z9UK+ZmGBYvEhOsS0sKPt6OuIbnHw1P/zTPOrPbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtVjpix2mQ6/Zq6Z1lwt+lvcV4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNTUwYTBkZDktNGExMC0z NDExLThhMDUtYzgzYjUxYjg3ZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDvHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4PYE1ZP3c5j3+RUOT5wcewVeIApZdW14Iyj7+sP0YR5CT6yx/STw36 AB23hjtPLjy69xIP9PC3MjDjPGzQ57GLQXTeO0heuj0qWpJEQv4BjNM8gdH42P5v XxohRkfIcKexkAjpoTP50IFxLZ7z/B5ewrOc+h50+8PpzR8B8ZnmlfE+tnTdmBWg FcSVvraCNz/P/Ao6hObzry+GYbxVjsXzjXGh+k9fGD5hj/Xtn/C/LW86SID+xZMi ftxDPR1pXxvQDFPE9acD3WS1r+PECzIwDe9e76DjYq3QnsJTfJ0ab4Mo/zmpCtd2 NBfvdL9azjD51beVwSbH0kycXtyb5D8= -----END CERTIFICATE-----Generated at Fri Apr 4 19:41:15 2025 by rpki-client