$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6a46475d-4bf3-3cf5-806a-8e9461339682.roa File: 6a46475d-4bf3-3cf5-806a-8e9461339682.roa (raw, json) Hash identifier: Pf1/W9IlOxmzAktBbMRlZUi8BMKe7NJs7HqnPgz9iT0= Subject key identifier: DC:16:90:DB:88:F2:52:BA:8C:DB:A6:0F:53:E7:36:91:D2:5D:86:DE Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848FD56C704FC26C227BEC8E280 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6a46475d-4bf3-3cf5-806a-8e9461339682.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 148.59.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c7:04:fc:26:c2:27:be:c8:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=f1e43e1a-6831-48d2-97f8-b131ccfd3066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e8:41:b8:b3:95:f4:92:45:c2:2d:38:2d:f3: 93:e4:9c:b6:d0:96:4f:be:fe:24:32:dd:04:56:45: cb:a7:0c:2b:09:43:cb:a8:f9:24:b2:98:00:4f:45: 93:69:20:fd:0e:b3:e9:03:15:3d:3d:dd:14:5c:63: 52:8a:be:12:64:c0:5c:80:77:01:53:de:36:95:30: ff:72:8c:7a:7c:58:4f:56:72:d6:14:55:89:2d:20: 95:ab:b7:44:08:f1:ff:bc:cb:a8:a7:f1:a9:00:f4: ef:7c:a6:09:df:9f:aa:78:bd:96:1e:62:00:15:8a: a1:6f:06:6c:f5:d0:01:10:fe:03:99:37:34:fb:1b: 60:b7:42:e7:be:ff:a9:4b:83:61:ca:a1:bf:fa:ce: 64:22:e5:09:ce:99:1c:00:e2:66:0f:9f:37:40:44: 1d:61:65:7a:f1:45:45:4e:09:da:82:7c:96:13:ec: d7:2b:27:0d:92:73:4c:83:46:c4:5c:87:c3:80:28: c1:3d:d9:5e:c9:5e:f5:8c:04:90:8a:6b:d1:94:1c: 93:c3:7e:00:8b:91:4e:53:1f:dd:ea:24:a3:73:f5: bb:32:67:17:f3:9a:59:d2:22:cb:2c:37:17:a5:75: c8:86:24:ef:44:a4:07:ac:45:75:06:c8:c3:fc:71: ab:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:16:90:DB:88:F2:52:BA:8C:DB:A6:0F:53:E7:36:91:D2:5D:86:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6a46475d-4bf3-3cf5-806a-8e9461339682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:77:e1:22:b6:f5:f4:8c:ce:83:8c:c7:3f:c3:f1:86:e3:72: d7:f9:ee:4f:2c:18:d8:2e:a2:b7:a8:2a:1a:02:62:0a:16:96: ec:e1:f3:64:f1:c0:20:4d:6e:6f:5e:27:6b:e1:5a:27:75:43: 13:76:c6:65:81:fb:18:3c:03:18:4f:f6:95:61:6b:f9:63:4a: e8:65:6a:8d:82:7d:50:5a:09:24:12:e8:6f:48:55:e8:df:79: 93:c0:0a:fa:30:74:0e:93:d0:c3:4c:98:e4:fd:7e:04:f5:2b: a3:8a:3f:c7:58:a4:84:fc:78:b0:ef:33:d5:b6:7e:9a:63:e6: f9:44:64:42:32:0d:0d:de:66:86:a8:e0:50:8d:9c:b3:75:d7: 0f:b7:d4:98:11:9c:99:26:c6:ef:d0:6c:a9:66:0f:e2:06:7d: 2e:51:92:04:5b:b3:57:d1:5d:91:a0:d7:d2:d0:be:1c:9a:db: 43:53:b5:4c:94:a0:ab:fc:1c:b6:91:9d:69:45:e7:3a:f2:36: cb:fb:21:09:d4:2a:e7:03:ce:39:19:9f:95:ab:bd:cc:01:9f: 32:13:58:54:bd:22:03:90:63:30:15:4a:6a:63:4f:c0:f7:5e: 57:c4:b4:bc:0a:02:8b:72:53:aa:d9:ea:07:f2:3e:d7:4e:cd: a6:62:c2:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VscE/CbCJ77I4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjFlNDNlMWEtNjgzMS00OGQyLTk3ZjgtYjEzMWNjZmQzMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOhBuLOV9JJFwi04LfOT5Jy20JZPvv4kMt0E VkXLpwwrCUPLqPkkspgAT0WTaSD9DrPpAxU9Pd0UXGNSir4SZMBcgHcBU942lTD/ cox6fFhPVnLWFFWJLSCVq7dECPH/vMuop/GpAPTvfKYJ35+qeL2WHmIAFYqhbwZs 9dABEP4DmTc0+xtgt0Lnvv+pS4NhyqG/+s5kIuUJzpkcAOJmD583QEQdYWV68UVF TgnagnyWE+zXKycNknNMg0bEXIfDgCjBPdleyV71jASQimvRlByTw34Ai5FOUx/d 6iSjc/W7MmcX85pZ0iLLLDcXpXXIhiTvRKQHrEV1BsjD/HGrMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwWkNuI8lK6jNumD1PnNpHSXYbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNmE0NjQ3NWQtNGJmMy0z Y2Y1LTgwNmEtOGU5NDYxMzM5NjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDvaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB534SK29fSMzoOMxz/D8Ybjctf57k8sGNguoreoKhoCYgoWluzh82Tx wCBNbm9eJ2vhWid1QxN2xmWB+xg8AxhP9pVha/ljSuhlao2CfVBaCSQS6G9IVejf eZPACvowdA6T0MNMmOT9fgT1K6OKP8dYpIT8eLDvM9W2fppj5vlEZEIyDQ3eZoao 4FCNnLN11w+31JgRnJkmxu/QbKlmD+IGfS5RkgRbs1fRXZGg19LQvhya20NTtUyU oKv8HLaRnWlF5zryNsv7IQnUKucDzjkZn5WrvcwBnzITWFS9IgOQYzAVSmpjT8D3 XlfEtLwKAotyU6rZ6gfyPtdOzaZiwoc= -----END CERTIFICATE-----Generated at Sat Apr 5 06:34:08 2025 by rpki-client