$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa File: f84f7d22-eb77-3b0c-9804-527be438dbd6.roa (raw, json) Hash identifier: l8vrZokA4pliwoiPrM5vlDsj31jJriluz1mV6Tj5ANk= Subject key identifier: 6A:B4:E9:7F:3D:BD:7A:8D:57:F9:18:E1:11:A0:22:93:02:42:ED:E4 Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F432858492CB22141730198F3D39B3E80 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 32746 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:21:41:73:01:98:f3:d3:9b:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=4634da12-96cd-4727-ae12-4f356b02e1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d7:96:f1:0c:77:84:f4:03:5f:9a:c9:6a:60: 1c:3e:63:dd:c9:77:83:28:ab:e0:2c:9c:67:d0:fd: 57:ef:bb:ef:94:db:28:6b:d4:f3:5e:c1:23:66:c4: ba:45:32:fd:0c:a8:87:18:ed:e1:71:c7:26:3f:94: 7f:1e:07:5f:1f:96:dd:47:4b:b7:6e:d4:6d:fa:ae: 36:b2:64:65:14:af:41:6d:33:fb:0c:68:bf:95:0c: 98:a7:bf:d5:3b:9a:64:ba:8e:a5:d0:41:ae:9a:18: 61:0d:9b:ac:60:02:1e:0d:15:65:2a:49:00:d5:89: 5a:e7:e7:c6:a1:39:01:52:27:c3:99:ea:18:b0:b4: a8:44:10:d0:f8:98:4d:e1:86:55:58:4d:ec:25:a5: 54:75:14:2b:22:63:67:20:46:a6:a4:dd:3b:b9:47: cf:af:dc:90:d7:ce:2e:a6:0a:ef:04:14:eb:e5:ef: 88:ee:59:f2:37:32:88:53:59:21:e6:6a:f6:6b:5f: 58:5f:f1:21:11:6b:ac:7f:ff:8e:6b:23:32:26:cf: 24:78:73:27:7b:9e:df:75:7b:99:a8:7a:1d:93:b7: fd:f3:f9:b0:c9:02:06:3f:08:2d:8f:2f:ba:54:96: 8f:a8:a2:9d:c1:d0:72:ac:5c:fa:b1:d1:58:0d:70: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B4:E9:7F:3D:BD:7A:8D:57:F9:18:E1:11:A0:22:93:02:42:ED:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e4:b5:61:37:56:aa:4b:8d:05:d9:c8:1e:1b:0b:7a:7c:dd: ae:87:96:e7:86:67:34:5e:be:70:ec:b8:6e:98:f2:14:e9:bc: 99:d9:9c:6b:20:69:ac:aa:0d:b9:0b:7a:91:cc:97:da:e3:9a: d6:38:af:6f:94:2d:2a:e7:f9:86:37:56:bd:9e:10:2a:7b:ea: 56:bb:8d:68:14:99:50:f9:a1:3e:ea:7e:45:31:81:d7:2d:5c: 6a:a7:d2:89:b0:29:be:c8:6b:bb:de:b0:53:71:67:03:53:54: 4c:24:56:13:77:61:4e:ec:2d:ad:82:5f:7b:74:25:70:e4:3e: aa:f9:ca:ee:4f:9a:ed:d2:5c:3b:52:5e:33:71:ea:86:04:7b: 73:a7:c9:30:2d:c8:b2:61:c6:12:cc:a3:13:57:51:4a:86:3c: 70:83:b8:cf:6e:c5:eb:ec:86:f6:83:2e:fa:fb:9a:69:2a:18: 76:c2:6b:0a:a5:f1:53:5d:de:a2:2d:8c:91:e5:e9:b9:11:7b: 2b:9b:93:3c:be:d0:5a:8a:ba:96:f8:97:b4:3a:58:e3:bf:3a: 06:de:18:69:06:26:16:de:6d:92:d9:b9:87:82:23:94:77:31: c0:8a:48:8d:ad:ca:6c:a8:7d:e9:46:ca:cf:dd:fd:88:e7:ad: 1d:08:35:3f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkssiFBcwGY89ObPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NDYzNGRhMTItOTZjZC00NzI3LWFlMTItNGYzNTZiMDJlMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9eW8Qx3hPQDX5rJamAcPmPdyXeDKKvgLJxn 0P1X77vvlNsoa9TzXsEjZsS6RTL9DKiHGO3hcccmP5R/HgdfH5bdR0u3btRt+q42 smRlFK9BbTP7DGi/lQyYp7/VO5pkuo6l0EGumhhhDZusYAIeDRVlKkkA1Yla5+fG oTkBUifDmeoYsLSoRBDQ+JhN4YZVWE3sJaVUdRQrImNnIEampN07uUfPr9yQ184u pgrvBBTr5e+I7lnyNzKIU1kh5mr2a19YX/EhEWusf/+OayMyJs8keHMne57fdXuZ qHodk7f98/mwyQIGPwgtjy+6VJaPqKKdwdByrFz6sdFYDXDyWQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGq06X89vXqNV/kY4RGgIpMCQu3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvZjg0ZjdkMjItZWI3Ny0z YjBjLTk4MDQtNTI3YmU0MzhkYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHLktWE3VqpLjQXZyB4bC3p83a6HlueGZzRevnDsuG6Y8hTp vJnZnGsgaayqDbkLepHMl9rjmtY4r2+ULSrn+YY3Vr2eECp76la7jWgUmVD5oT7q fkUxgdctXGqn0omwKb7Ia7vesFNxZwNTVEwkVhN3YU7sLa2CX3t0JXDkPqr5yu5P mu3SXDtSXjNx6oYEe3OnyTAtyLJhxhLMoxNXUUqGPHCDuM9uxevshvaDLvr7mmkq GHbCawql8VNd3qItjJHl6bkReyubkzy+0FqKupb4l7Q6WOO/OgbeGGkGJhbebZLZ uYeCI5R3McCKSI2tymyofelGys/d/YjnrR0INT8= -----END CERTIFICATE-----Generated at Sat Apr 5 22:30:45 2025 by rpki-client