$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0cb626ec-8048-350f-9f19-eb8f88558842.roa File: 0cb626ec-8048-350f-9f19-eb8f88558842.roa (raw, json) Hash identifier: X/a8wsGNF89cR8rjoyhEiPilBp/8Ca25sNQx7rx84Yk= Subject key identifier: D9:A7:AE:6C:2E:27:14:AE:D8:46:88:9F:45:68:0B:7B:14:3F:55:A6 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F432858487755E391B2432D6964DA3D80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0cb626ec-8048-350f-9f19-eb8f88558842.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 11290 IP address blocks: 24.138.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:e3:91:b2:43:2d:69:64:da:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=5bac7871-2cee-44fe-a986-b3726bb90dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:95:81:63:05:ca:3a:f7:c1:df:be:1c:ba: 7e:84:b1:1f:d5:18:91:f4:b8:58:10:b4:fe:ea:e3: 3e:98:f4:f6:03:55:9f:b5:2b:a5:83:a4:02:e2:fc: 60:15:93:ad:b3:8b:eb:49:27:6f:2f:c6:8b:6f:69: b2:48:74:05:fb:ef:40:d2:2f:27:12:02:6c:fa:0f: d4:73:7f:b7:a1:7f:25:3f:b6:d6:c2:53:02:d5:6c: b3:3e:5a:40:15:b5:45:18:2f:2f:fb:5a:40:f9:97: dc:0b:5f:07:19:a6:d0:b8:74:0a:73:75:6d:36:0f: 77:10:a7:33:df:63:cc:73:7f:c2:32:97:2d:e5:e0: 5d:44:a7:ad:4f:c1:b6:b4:e7:f3:fb:c0:73:80:80: 3b:23:93:32:55:82:e8:47:07:04:5f:2f:de:e2:ff: 1d:78:a9:87:73:b1:bf:d9:ad:53:bc:82:d3:2d:ba: 4a:d2:29:a2:9f:dc:17:ad:61:c0:cb:1f:fa:8c:34: 66:5f:0c:ef:3a:39:21:01:0e:32:26:c7:af:c6:53: ca:cc:12:a8:e7:ed:a9:b0:1c:d3:d5:1f:5e:d5:04: 37:42:7b:7a:29:de:80:66:d2:83:9c:c5:b7:ce:21: e2:50:d3:10:d8:97:ae:57:a7:b4:5c:28:c4:4c:06: 8f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A7:AE:6C:2E:27:14:AE:D8:46:88:9F:45:68:0B:7B:14:3F:55:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0cb626ec-8048-350f-9f19-eb8f88558842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.138.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:33:42:43:c0:df:74:f7:6c:57:14:04:ad:25:6b:46:f2:fb: 74:dc:9c:c9:5f:10:0d:03:9a:25:56:75:70:59:e0:fa:02:37: 7a:f4:9e:b9:b8:f2:91:df:03:48:f1:fd:f3:06:74:d6:5e:07: f8:b6:0f:24:f6:41:c0:eb:ef:ff:5a:75:f2:fa:b6:e4:c1:89: 0f:03:c2:51:a9:50:5f:db:24:a9:15:29:91:ee:1a:2a:0e:75: ed:0a:bb:11:2e:8b:f3:cf:b2:e9:ff:67:4e:4f:58:68:95:f2: 4f:1f:5a:78:87:ca:f2:ce:5b:c0:93:73:c6:fa:21:ef:62:f9: 6e:a3:95:cc:44:34:57:bb:00:4d:c1:01:96:c0:f6:87:81:78: dd:e0:b2:2d:08:39:d5:e2:84:a8:5c:26:38:d2:09:75:c9:88: 5d:06:6a:12:59:f7:65:0a:58:36:47:60:ba:77:db:7d:80:98: e5:7a:d6:6d:ea:78:23:d8:c1:43:13:64:aa:f1:e7:7a:dd:1e: 7f:08:62:dc:c0:ea:5b:59:29:5a:02:37:dc:69:a2:c5:36:7b: fe:7d:57:1c:c8:ef:b3:1c:8e:e2:b1:4a:5a:6d:fd:ac:3a:b2: 4b:5b:f5:c7:26:b8:7f:f5:ea:2f:8c:d1:39:88:fa:44:fc:49: 28:cf:c8:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VeORskMtaWTaPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk NWJhYzc4NzEtMmNlZS00NGZlLWE5ODYtYjM3MjZiYjkwZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8WVgWMFyjr3wd++HLp+hLEf1RiR9LhYELT+ 6uM+mPT2A1WftSulg6QC4vxgFZOts4vrSSdvL8aLb2mySHQF++9A0i8nEgJs+g/U c3+3oX8lP7bWwlMC1WyzPlpAFbVFGC8v+1pA+ZfcC18HGabQuHQKc3VtNg93EKcz 32PMc3/CMpct5eBdRKetT8G2tOfz+8BzgIA7I5MyVYLoRwcEXy/e4v8deKmHc7G/ 2a1TvILTLbpK0imin9wXrWHAyx/6jDRmXwzvOjkhAQ4yJsevxlPKzBKo5+2psBzT 1R9e1QQ3Qnt6Kd6AZtKDnMW3ziHiUNMQ2JeuV6e0XCjETAaPXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmnrmwuJxSu2EaIn0VoC3sUP1WmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMGNiNjI2ZWMtODA0OC0z NTBmLTlmMTktZWI4Zjg4NTU4ODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGIpQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIzQkPA33T3bFcUBK0la0by+3TcnMlfEA0DmiVWdXBZ4PoCN3r0nrm4 8pHfA0jx/fMGdNZeB/i2DyT2QcDr7/9adfL6tuTBiQ8DwlGpUF/bJKkVKZHuGioO de0KuxEui/PPsun/Z05PWGiV8k8fWniHyvLOW8CTc8b6Ie9i+W6jlcxENFe7AE3B AZbA9oeBeN3gsi0IOdXihKhcJjjSCXXJiF0GahJZ92UKWDZHYLp3232AmOV61m3q eCPYwUMTZKrx53rdHn8IYtzA6ltZKVoCN9xposU2e/59VxzI77McjuKxSlpt/aw6 sktb9ccmuH/16i+M0TmI+kT8SSjPyOk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:30 2025 by rpki-client