$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa File: 83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa (raw, json) Hash identifier: fSdlj0Hlmje9V0etkEXYhRvF+H497IqXM4BPEH+EY5g= Subject key identifier: AB:B5:95:2E:DD:57:A1:AF:59:AC:15:A3:3B:66:1F:60:7C:C6:F7:D8 Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F4328584908816D67DFC47CD83EB98DA0 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 63456 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:6d:67:df:c4:7c:d8:3e:b9:8d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=9dbf4973-797b-4197-b32f-04bbcf109a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4c:bd:e9:8e:ff:09:b1:ca:13:fb:24:4b:49: 59:17:1c:c9:cc:8e:41:a4:ba:14:0e:8a:9e:48:fe: cf:bf:87:23:8d:a4:59:6a:ab:59:13:af:0f:84:5e: 77:06:9e:59:2b:bc:99:e2:29:4d:13:95:47:61:f9: 43:22:6c:74:35:ae:79:1a:56:d7:f3:c0:35:e9:c8: 4a:42:4c:e9:ba:98:62:a2:0f:13:2e:44:35:88:73: 12:ab:21:90:14:2d:36:07:b0:d0:94:87:e1:51:3e: 91:8a:14:53:b0:e8:ea:7f:da:ec:20:58:b0:82:14: 51:b4:21:ea:50:d6:ee:a2:dc:0b:af:67:f5:a5:d7: d4:60:c9:4b:8b:e5:51:9a:c0:96:dc:18:7e:94:8b: b8:dd:60:c0:bd:c4:33:87:75:f5:46:26:ec:17:7c: f9:d9:95:30:86:0f:a2:7e:52:1a:e1:f0:a0:af:4f: d0:41:f9:5d:b2:d9:8d:0a:2e:73:4e:bd:2c:06:c9: f4:b6:18:76:c9:cd:87:97:79:4d:90:00:8f:3c:08: 4d:ec:6e:e3:b8:06:e5:19:80:6c:35:1a:b3:99:3e: dd:f6:50:4f:1f:bc:24:e4:f4:b0:f7:ed:f4:b3:ed: 5a:7f:16:5e:ad:68:72:3c:91:29:8d:cc:80:b9:97: 13:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B5:95:2E:DD:57:A1:AF:59:AC:15:A3:3B:66:1F:60:7C:C6:F7:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d4:c9:0d:aa:6f:7d:aa:6e:51:5c:dc:e2:f9:de:03:79:e6: ee:93:cc:fe:7d:b4:20:b4:be:d7:2a:82:ba:4a:82:9a:b8:c7: c9:37:2e:95:de:fb:a0:d8:2b:e4:eb:1a:fb:06:26:41:87:03: 3b:a6:2b:3e:c1:97:75:9f:56:73:7b:f7:0c:6f:f9:ac:38:45: 54:f8:71:05:e2:2c:b5:85:78:6b:42:d7:a0:42:30:d5:e2:d7: e2:eb:b6:3d:3c:6c:26:7e:e0:f9:10:19:ee:d0:db:5c:7c:f9: e4:e2:8a:b9:73:0d:de:56:46:48:e2:db:ba:e3:3b:eb:77:da: 4b:df:76:21:56:3d:ef:3c:17:2c:aa:28:b7:d8:66:73:56:26: 79:c4:78:0d:02:40:9c:43:ea:cf:06:0e:54:02:96:d0:3b:73: 6c:93:bd:86:c1:e7:39:04:cd:b6:0b:43:1f:ba:4f:3e:f2:a0: a8:71:f8:67:fb:1b:1e:d8:b1:c5:b5:5f:08:0f:d1:b7:05:bb: 06:4d:8b:0a:e9:c8:0e:01:55:4f:e5:a0:56:23:5f:aa:c2:7d: f6:4b:a7:a2:e8:3f:aa:3f:e5:a2:3c:2c:46:bc:9d:25:b0:05: 99:cc:90:7c:84:de:17:49:78:8d:7c:5f:69:56:c2:93:17:50: a5:d3:40:3e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkIgW1n38R82D65jaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk OWRiZjQ5NzMtNzk3Yi00MTk3LWIzMmYtMDRiYmNmMTA5YTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnky96Y7/CbHKE/skS0lZFxzJzI5BpLoUDoqe SP7Pv4cjjaRZaqtZE68PhF53Bp5ZK7yZ4ilNE5VHYflDImx0Na55GlbX88A16chK Qkzpuphiog8TLkQ1iHMSqyGQFC02B7DQlIfhUT6RihRTsOjqf9rsIFiwghRRtCHq UNbuotwLr2f1pdfUYMlLi+VRmsCW3Bh+lIu43WDAvcQzh3X1RibsF3z52ZUwhg+i flIa4fCgr0/QQfldstmNCi5zTr0sBsn0thh2yc2Hl3lNkACPPAhN7G7juAblGYBs NRqzmT7d9lBPH7wk5PSw9+30s+1afxZerWhyPJEpjcyAuZcTAQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKu1lS7dV6GvWawVoztmH2B8xvfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvODNkNWRmMDctMGNjNC0z YjE2LWE1ZTctYThjYjlkMDE0OTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC7UyQ2qb32qblFc3OL53gN55u6TzP59tCC0vtcqgrpKgpq4 x8k3LpXe+6DYK+TrGvsGJkGHAzumKz7Bl3WfVnN79wxv+aw4RVT4cQXiLLWFeGtC 16BCMNXi1+Lrtj08bCZ+4PkQGe7Q21x8+eTiirlzDd5WRkji27rjO+t32kvfdiFW Pe88FyyqKLfYZnNWJnnEeA0CQJxD6s8GDlQCltA7c2yTvYbB5zkEzbYLQx+6Tz7y oKhx+Gf7Gx7YscW1XwgP0bcFuwZNiwrpyA4BVU/loFYjX6rCffZLp6LoP6o/5aI8 LEa8nSWwBZnMkHyE3hdJeI18X2lWwpMXUKXTQD4= -----END CERTIFICATE-----Generated at Sat Apr 5 22:27:30 2025 by rpki-client