$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa File: 408381c8-6830-38f5-9c88-6356ab563ec5.roa (raw, json) Hash identifier: bzctWgy22DInYpuC+JlTpVeVPjHpeGglOnivIm9CMFk= Subject key identifier: C8:C1:D1:9C:CA:9A:9C:FE:25:60:11:5D:06:F9:95:8B:37:BA:C0:0D Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F432858480EA500EF1B0BE4DF61610300 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa Signing time: Sun 01 Dec 2024 02:00:39 +0000 ROA not before: Sun 01 Dec 2024 02:00:39 +0000 ROA not after: Sat 01 Mar 2025 02:00:39 +0000 asID: 1299 IP address blocks: 148.188.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0e:a5:00:ef:1b:0b:e4:df:61:61:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Dec 1 02:00:39 2024 GMT Not After : Mar 1 02:00:39 2025 GMT Subject: CN=d557293d-c973-4f1b-8639-fdb41cf7acac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f0:b1:60:3f:15:e6:fa:45:7c:63:9b:d5:ae: 22:7a:fb:ed:07:74:e9:99:96:84:36:28:2b:14:8d: ef:d8:cf:f3:4b:02:98:af:3e:33:39:dd:cc:e0:17: 75:1c:44:3c:f3:c5:84:63:a2:1c:33:4a:6d:5b:74: 0d:ac:64:34:6d:5e:b6:bf:0a:a4:cb:22:47:f3:e2: a1:97:16:8c:41:1a:82:e1:12:ea:5b:91:d7:9a:78: bb:a9:51:46:58:c3:d2:ac:68:0b:a7:6b:7f:44:c6: 74:dd:02:f0:55:2b:de:2f:df:b4:7c:e8:8c:92:2a: fd:f0:5b:0c:d1:11:83:c7:fe:b2:78:2f:8b:3e:32: 30:5e:54:f0:79:41:c4:d1:9b:30:b3:ff:23:28:99: 82:46:65:05:b4:ec:3b:a3:d6:46:19:61:7e:58:ef: 8a:0f:ed:ef:9f:cb:42:c2:fe:02:4e:c0:77:da:24: e3:13:7e:84:ed:b9:50:4e:9e:13:23:49:e0:f7:61: 2f:8f:42:db:08:3f:cb:77:05:01:4c:af:b9:8a:6c: 6d:c3:08:4d:e7:2b:6f:bc:c7:8f:e5:4d:4b:ea:8a: ce:c8:bb:b0:3a:26:3d:14:72:1c:2a:f6:14:e7:e2: 75:d7:19:d7:22:18:22:77:c3:4d:fc:3f:a4:cd:be: 06:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C1:D1:9C:CA:9A:9C:FE:25:60:11:5D:06:F9:95:8B:37:BA:C0:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:93:af:84:8e:af:32:5f:03:76:af:ec:fb:ac:b1:c6:8c:53: 52:f5:5d:d4:60:c8:9d:30:cd:ee:13:d9:b7:65:3b:34:b2:65: fc:95:4a:77:00:5a:f0:b5:2c:3c:f2:e7:ea:e1:fc:9e:1e:73: c9:12:33:ab:c4:10:5a:6e:3f:9b:0e:a2:65:0b:cc:40:b0:f9: 44:45:f9:ac:88:74:e9:65:ad:77:28:69:9c:7d:40:2d:0f:27: 48:9f:87:74:ce:56:f6:d6:30:db:db:a2:b4:ef:e0:a3:a7:70: 2d:89:6d:a7:f4:eb:26:67:c6:b9:26:9d:70:6c:c2:bf:9c:99: e3:a3:58:0b:e3:41:ee:e4:89:0b:77:25:48:5e:cf:bc:4b:82: 65:0a:9c:b8:df:1f:96:c0:24:d1:d1:1e:a6:3c:67:cd:ff:17: 85:29:ab:1d:e7:83:43:12:51:24:ef:7f:e4:d1:2e:a5:92:75: f0:4a:92:4c:97:a9:5f:d2:0f:76:e7:19:4a:0d:62:12:e4:a1: 6f:55:b0:27:b8:04:bc:15:46:52:76:d2:8f:5b:0b:50:c5:06: 18:d1:56:21:78:02:7f:ca:7e:40:27:1b:25:5e:0a:a5:f4:99: 43:35:83:d2:d2:77:6d:ca:cf:5e:3c:63:d9:f4:c7:0a:76:60: 2a:90:5a:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpQDvGwvk32FhAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk ZDU1NzI5M2QtYzk3My00ZjFiLTg2MzktZmRiNDFjZjdhY2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/CxYD8V5vpFfGOb1a4ievvtB3TpmZaENigr FI3v2M/zSwKYrz4zOd3M4Bd1HEQ888WEY6IcM0ptW3QNrGQ0bV62vwqkyyJH8+Kh lxaMQRqC4RLqW5HXmni7qVFGWMPSrGgLp2t/RMZ03QLwVSveL9+0fOiMkir98FsM 0RGDx/6yeC+LPjIwXlTweUHE0Zsws/8jKJmCRmUFtOw7o9ZGGWF+WO+KD+3vn8tC wv4CTsB32iTjE36E7blQTp4TI0ng92Evj0LbCD/LdwUBTK+5imxtwwhN5ytvvMeP 5U1L6orOyLuwOiY9FHIcKvYU5+J11xnXIhgid8NN/D+kzb4GBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjB0ZzKmpz+JWARXQb5lYs3usANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNDA4MzgxYzgtNjgzMC0z OGY1LTljODgtNjM1NmFiNTYzZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiTr4SOrzJfA3av7PusscaMU1L1XdRgyJ0wze4T2bdlOzSyZfyVSncA WvC1LDzy5+rh/J4ec8kSM6vEEFpuP5sOomULzECw+URF+ayIdOllrXcoaZx9QC0P J0ifh3TOVvbWMNvborTv4KOncC2Jbaf06yZnxrkmnXBswr+cmeOjWAvjQe7kiQt3 JUhez7xLgmUKnLjfH5bAJNHRHqY8Z83/F4Upqx3ng0MSUSTvf+TRLqWSdfBKkkyX qV/SD3bnGUoNYhLkoW9VsCe4BLwVRlJ20o9bC1DFBhjRViF4An/KfkAnGyVeCqX0 mUM1g9LSd23Kz148Y9n0xwp2YCqQWlA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:14 2025 by rpki-client