$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/03982157-61b3-3065-ae38-53829dc9dce4.roa File: 03982157-61b3-3065-ae38-53829dc9dce4.roa (raw, json) Hash identifier: 1lW+ZsKIU6NxHp3tP1nOI42zytV/XHPVhCnZtX+ZnAQ= Subject key identifier: 21:4C:71:DD:FA:9C:9C:1E:79:05:68:AA:64:50:08:50:92:EF:CE:9E Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F43285848EF61695AEE94BCCF5DC63E50 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/03982157-61b3-3065-ae38-53829dc9dce4.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 56308 IP address blocks: 148.188.240.0/21 maxlen: 21 148.188.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:69:5a:ee:94:bc:cf:5d:c6:3e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=4f18213d-eb07-46dc-931a-e9140b2579a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:04:94:89:e8:a9:f0:c6:f6:35:f8:ec:ac:6a: a7:36:26:0f:93:1d:f2:c0:4b:c8:4f:8b:a2:50:a5: b7:ad:b3:2a:28:90:5b:54:20:23:4b:e4:03:20:52: e2:49:f9:41:b6:39:9d:c6:20:86:5f:d5:7c:25:07: 72:73:10:d2:2a:63:16:ee:f9:ec:33:ac:30:de:ac: df:ab:21:cf:6c:62:3d:77:74:12:64:07:d7:9b:ea: d9:ce:31:cf:1e:da:9f:4a:0e:8e:f7:b9:d1:5d:3e: 42:3b:31:96:06:4b:be:1a:a9:33:85:14:9a:e5:e8: f0:7f:8b:04:54:5a:7b:33:9c:b8:f1:81:63:3f:2e: fd:c9:e8:9c:b9:b4:44:c7:eb:49:26:49:81:f6:11: 9a:fd:f5:e9:d6:d0:f7:94:74:ab:2e:f6:45:f9:89: 15:47:db:44:95:bd:71:a5:4d:d5:75:4d:70:75:9b: 89:4c:3c:dc:2e:b8:16:39:89:72:63:5c:d9:9b:dd: c7:ed:c2:a4:48:47:e3:28:81:59:de:46:f3:f1:e7: 9e:7b:e9:8a:a6:f1:3e:4b:1e:09:92:1e:c3:79:2f: 37:99:d8:c0:23:30:e8:0d:3c:9f:2c:3b:f0:5c:43: 0f:29:87:7c:41:f2:ab:a1:84:f9:bd:57:fa:83:2f: 1a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4C:71:DD:FA:9C:9C:1E:79:05:68:AA:64:50:08:50:92:EF:CE:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/03982157-61b3-3065-ae38-53829dc9dce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.240.0-148.188.251.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:25:f5:43:6e:9e:00:c2:87:b4:82:e0:ad:fd:35:4f:49:d6: 55:ef:87:14:d6:b2:a8:a6:4b:ab:52:ab:2d:95:85:fe:03:77: cc:10:44:43:f5:0c:4a:0e:37:9e:0d:b3:ff:c4:a1:33:d7:62: d9:9c:22:90:4e:ac:80:13:73:50:e1:09:00:13:ce:da:0c:51: db:c4:b3:00:f9:74:7a:05:fc:bb:0e:f4:9d:71:ad:aa:ea:32: 49:74:0a:87:00:43:a8:4c:b7:c3:12:d0:20:76:2a:c1:58:c0: 32:68:ea:00:93:74:f0:ed:1d:94:13:cd:d5:dd:d2:f3:aa:b5: 06:e4:95:0e:98:f2:35:95:f9:cc:65:15:61:88:91:99:a5:36: e5:ee:28:45:6d:5f:2e:2e:5c:30:5b:2c:14:c6:14:68:a1:d6: ef:f0:29:41:d8:36:ee:f3:9a:ec:c3:25:44:98:37:40:b2:a3: fb:c6:ec:e6:1f:9a:e2:8b:e7:85:0b:32:0e:64:bb:13:16:ee: 1a:0f:81:9d:07:ac:df:1f:69:33:f5:89:84:4d:a1:1b:35:f2: 55:2d:3d:3a:fe:73:a4:0f:19:c4:df:eb:56:cb:2f:64:76:91: 26:0e:06:78:b1:86:d5:f2:0d:08:72:d4:8a:2b:75:41:32:0e: 4a:a8:9d:62 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEjvYWla7pS8z13GPlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NGYxODIxM2QtZWIwNy00NmRjLTkzMWEtZTkxNDBiMjU3OWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgSUieip8Mb2NfjsrGqnNiYPkx3ywEvIT4ui UKW3rbMqKJBbVCAjS+QDIFLiSflBtjmdxiCGX9V8JQdycxDSKmMW7vnsM6ww3qzf qyHPbGI9d3QSZAfXm+rZzjHPHtqfSg6O97nRXT5COzGWBku+GqkzhRSa5ejwf4sE VFp7M5y48YFjPy79yeicubREx+tJJkmB9hGa/fXp1tD3lHSrLvZF+YkVR9tElb1x pU3VdU1wdZuJTDzcLrgWOYlyY1zZm93H7cKkSEfjKIFZ3kbz8eeee+mKpvE+Sx4J kh7DeS83mdjAIzDoDTyfLDvwXEMPKYd8QfKroYT5vVf6gy8awwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCFMcd36nJweeQVoqmRQCFCS786eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvMDM5ODIxNTctNjFiMy0z MDY1LWFlMzgtNTM4MjlkYzlkY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASUvPAD BAKUvPgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAMyX1Q26eAMKHtILgrf01T0nWVe+HFNayqKZLq1KrLZWF /gN3zBBEQ/UMSg43ng2z/8ShM9di2ZwikE6sgBNzUOEJABPO2gxR28SzAPl0egX8 uw70nXGtquoySXQKhwBDqEy3wxLQIHYqwVjAMmjqAJN08O0dlBPN1d3S86q1BuSV DpjyNZX5zGUVYYiRmaU25e4oRW1fLi5cMFssFMYUaKHW7/ApQdg27vOa7MMlRJg3 QLKj+8bs5h+a4ovnhQsyDmS7ExbuGg+BnQes3x9pM/WJhE2hGzXyVS09Ov5zpA8Z xN/rVssvZHaRJg4GeLGG1fINCHLUiit1QTIOSqidYg== -----END CERTIFICATE-----Generated at Sat Apr 5 12:37:07 2025 by rpki-client