$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/e4aca980-6e80-30eb-b805-8e312ff5fc11.roa File: e4aca980-6e80-30eb-b805-8e312ff5fc11.roa (raw, json) Hash identifier: rSsTOud7R6xoXZzHRi247ZH9yiceHMxhX/Ox0m5QTds= Subject key identifier: 87:B2:86:AB:83:25:73:2E:86:18:18:0E:C4:FA:33:9A:1D:C6:98:15 Certificate issuer: /CN=48b02ed2-f897-45be-b9fb-346294418ecb Certificate serial: 010D0C9F43285848F9269C9A0E57523E2DAB1CC0 Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/e4aca980-6e80-30eb-b805-8e312ff5fc11.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 19331 IP address blocks: 148.59.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:9c:9a:0e:57:52:3e:2d:ab:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=67ad3eb1-544f-48eb-938b-186d5ad6dae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:0e:8a:e5:78:d1:e8:ac:8e:e5:da:2f:06: c1:94:01:c6:85:39:b6:c3:48:17:54:d9:9e:56:41: c3:65:54:39:83:88:6f:08:dc:e2:6d:76:b0:cb:e1: a1:3b:51:e9:92:49:68:f8:02:ba:57:8a:4d:80:8d: 71:7d:c5:77:6a:a4:5f:3d:0d:b8:c3:20:ff:7c:0c: 04:98:3c:ec:ed:69:a9:d2:89:85:a7:fb:93:89:d9: c3:a0:9d:ac:5d:df:03:9f:99:d3:7b:43:7a:e3:38: 8b:09:04:27:1d:2d:c4:ee:e2:31:30:34:1a:16:48: 8b:52:4f:25:48:22:64:9a:20:aa:45:01:34:83:a5: 2b:f1:92:77:26:5e:28:54:4c:86:b4:54:28:4e:1e: 4b:78:d0:89:02:bb:5c:aa:da:b4:0a:d4:3d:f0:b8: d5:9e:74:08:87:d6:d5:70:d5:30:3a:63:d0:ce:58: ed:6f:02:55:0a:aa:31:3f:d7:d7:75:1d:ad:78:1c: 3d:2f:e9:cc:43:48:a4:9e:d2:16:16:f6:68:e8:1a: f4:54:ab:fa:e4:4c:d7:47:65:5c:0c:57:d6:ae:78: f8:f4:2c:ac:35:fe:97:3f:2e:87:01:a9:77:d2:a4: 18:54:32:28:59:70:e4:cc:80:54:aa:51:02:aa:ba: 9d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B2:86:AB:83:25:73:2E:86:18:18:0E:C4:FA:33:9A:1D:C6:98:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/e4aca980-6e80-30eb-b805-8e312ff5fc11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl X509v3 Authority Key Identifier: keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer sbgp-ipAddrBlock: critical IPv4: 148.59.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:5a:87:9d:92:76:49:31:79:09:e3:74:ff:47:61:f9:da:57: 18:32:7c:43:58:31:22:4d:72:6b:d8:6a:9f:54:ff:4c:b3:2a: 8c:4e:b0:ff:e8:55:9b:16:4c:29:fe:d0:88:97:a8:59:8d:ea: f8:8c:8f:28:87:dc:5b:69:e2:12:05:93:9b:33:a7:7f:1b:ae: 97:be:7d:ae:2a:ce:03:d9:c6:68:db:11:66:a0:8e:89:f4:17: 4c:0a:83:c5:bb:56:a9:b7:09:c3:0f:de:30:57:35:d9:e2:81: 6e:08:b8:48:b8:94:78:b4:31:0b:06:3d:0b:28:0d:7f:75:27: 24:7a:ec:a5:fd:ed:b1:64:66:5d:bf:ad:ca:7a:88:02:87:5f: 88:ac:df:1e:71:f6:22:6c:c2:db:d2:fb:45:0d:46:77:60:1b: a2:1f:00:bb:36:f2:60:b2:38:1d:36:79:e9:62:4c:e1:89:f4: 0a:00:33:b1:12:44:76:f3:10:0d:3c:af:76:b7:c2:fd:81:3c: 82:c3:4a:ef:b9:67:8b:bb:13:4b:5c:1f:2c:b2:4a:d1:d6:7c: 28:42:aa:92:ab:ad:9f:db:47:a3:5d:85:c2:2f:49:f7:a0:0c: ec:62:37:30:cb:87:6c:e6:89:32:9f:7c:08:c3:25:cc:ad:9a: 1f:27:df:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpyaDldSPi2rHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhiMDJlZDItZjg5Ny00NWJlLWI5ZmItMzQ2Mjk0NDE4 ZWNiMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NjdhZDNlYjEtNTQ0Zi00OGViLTkzOGItMTg2ZDVhZDZkYWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg4OiuV40eisjuXaLwbBlAHGhTm2w0gXVNme VkHDZVQ5g4hvCNzibXawy+GhO1Hpkklo+AK6V4pNgI1xfcV3aqRfPQ24wyD/fAwE mDzs7Wmp0omFp/uTidnDoJ2sXd8Dn5nTe0N64ziLCQQnHS3E7uIxMDQaFkiLUk8l SCJkmiCqRQE0g6Ur8ZJ3Jl4oVEyGtFQoTh5LeNCJArtcqtq0CtQ98LjVnnQIh9bV cNUwOmPQzljtbwJVCqoxP9fXdR2teBw9L+nMQ0ikntIWFvZo6Br0VKv65EzXR2Vc DFfWrnj49CysNf6XPy6HAal30qQYVDIoWXDkzIBUqlECqrqdxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeyhquDJXMuhhgYDsT6M5odxpgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80OGIw MmVkMi1mODk3LTQ1YmUtYjlmYi0zNDYyOTQ0MThlY2IvZTRhY2E5ODAtNmU4MC0z MGViLWI4MDUtOGUzMTJmZjVmYzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDhiMDJlZDItZjg5Ny00NWJlLWI5 ZmItMzQ2Mjk0NDE4ZWNiLzQ4YjAyZWQyLWY4OTctNDViZS1iOWZiLTM0NjI5NDQx OGVjYi5jcmwwHwYDVR0jBBgwFoAU8ShDZzN0rvFkkge9rUVjecCogvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80OGIwMmVkMi1mODk3LTQ1YmUtYjlmYi0zNDYy OTQ0MThlY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlDv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtah52SdkkxeQnjdP9HYfnaVxgyfENYMSJNcmvYap9U/0yzKoxOsP/o VZsWTCn+0IiXqFmN6viMjyiH3Ftp4hIFk5szp38brpe+fa4qzgPZxmjbEWagjon0 F0wKg8W7Vqm3CcMP3jBXNdnigW4IuEi4lHi0MQsGPQsoDX91JyR67KX97bFkZl2/ rcp6iAKHX4is3x5x9iJswtvS+0UNRndgG6IfALs28mCyOB02eeliTOGJ9AoAM7ES RHbzEA08r3a3wv2BPILDSu+5Z4u7E0tcHyyyStHWfChCqpKrrZ/bR6NdhcIvSfeg DOxiNzDLh2zmiTKffAjDJcytmh8n32E= -----END CERTIFICATE-----Generated at Fri Apr 11 23:13:30 2025 by rpki-client