$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1fc0dcd7-a04a-377a-a5d7-9aee2c8cdd48.roa File: 1fc0dcd7-a04a-377a-a5d7-9aee2c8cdd48.roa (raw, json) Hash identifier: R5gXkEz6AkvSFKkrs9AIIyRlTrdefMWMySbgACVY4N4= Subject key identifier: 9C:B7:11:02:45:97:FF:CB:C3:F9:C4:0E:97:2B:A3:30:06:1D:B3:A6 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584957F408CE09E49347E4A20B80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1fc0dcd7-a04a-377a-a5d7-9aee2c8cdd48.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11290 IP address blocks: 24.230.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:08:ce:09:e4:93:47:e4:a2:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=21d54b6a-4169-4e0c-8eb0-c4bce8556070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:de:41:55:98:eb:12:cd:0d:b2:82:a5:c2: eb:93:02:83:8f:b4:47:ae:0d:a4:d9:63:b6:dd:87: 1e:3a:0e:21:4f:5b:ae:17:45:a5:03:1f:68:72:89: 6c:ae:31:1d:0d:3d:d8:b4:56:fb:23:e9:1b:0d:e8: 33:dc:b7:d8:b8:cd:46:80:5a:3e:bf:9f:f3:45:f1: 2e:95:a6:de:8f:c5:6a:5e:b2:58:7e:14:ad:4a:5e: 78:77:e6:64:0c:97:f3:51:24:d4:ed:72:05:fb:d9: 24:1b:18:b0:5a:05:8a:04:f8:40:f1:4c:bc:e1:ec: 58:14:13:1e:3a:e7:2e:25:87:d3:b4:a9:3d:9e:dc: b0:ab:22:3e:10:dd:99:fd:61:7f:5c:9a:d6:f3:61: c4:13:2e:82:32:00:c6:71:6b:50:3c:48:7d:c0:cd: db:1d:5b:5c:91:a4:ea:3f:99:4c:4f:f6:56:3b:c0: 07:0b:70:f1:72:61:61:7d:d9:24:dd:c8:3c:08:81: 27:cc:01:77:c7:f9:4e:11:b8:10:70:0d:be:83:5a: 22:1c:a7:11:99:dc:9f:ee:8b:e6:8f:a2:60:e5:38: d6:f7:28:6a:f5:85:b5:fa:8f:70:b7:97:34:e9:65: 38:f7:2d:69:0f:4d:c2:f6:ff:1a:76:bd:f5:c3:58: fb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B7:11:02:45:97:FF:CB:C3:F9:C4:0E:97:2B:A3:30:06:1D:B3:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1fc0dcd7-a04a-377a-a5d7-9aee2c8cdd48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.230.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:3b:3b:a5:79:60:01:c6:5a:05:ce:94:c6:b6:62:84:e6:05: c9:f4:45:85:00:2b:e6:04:25:66:4e:78:30:d5:3c:18:ac:3e: b6:63:d0:44:4b:77:2a:d9:a0:4e:51:57:62:cf:02:48:d3:4d: 63:64:56:e5:5d:c7:42:50:14:c9:e4:64:fc:93:67:f5:b0:0f: e9:6a:26:70:cb:89:90:f9:ee:3a:da:a0:8c:db:29:58:9f:4a: 96:bc:a2:a8:0d:09:ea:f2:5b:54:b9:67:8d:25:44:b1:3a:67: bc:49:d6:1b:31:da:54:b7:44:ea:de:46:bb:8e:7d:ed:38:f9: 9c:3f:51:3e:c1:c7:30:34:ff:d2:b5:cf:05:b7:0b:0c:75:c1: 83:55:47:04:03:fe:29:cd:7b:5f:1f:d9:42:cb:c7:35:8b:ad: c4:2f:c0:2e:0a:fc:f6:66:73:e0:4c:1d:4a:6a:c0:c5:f5:4d: 99:4f:4a:04:02:b9:c1:3b:5b:78:b5:02:e6:d8:8f:6d:8d:12: a7:4d:44:a2:df:fd:36:38:b9:c0:b5:7b:28:03:b1:3e:38:7d: 98:a3:48:ab:83:16:8c:0e:35:d9:dc:54:88:ef:21:a2:e7:3f: 0c:e0:0c:27:83:c8:5c:f8:49:8c:d0:27:fc:6e:83:da:92:a7: 3a:c4:c3:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AjOCeSTR+SiC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MjFkNTRiNmEtNDE2OS00ZTBjLThlYjAtYzRiY2U4NTU2MDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhbeQVWY6xLNDbKCpcLrkwKDj7RHrg2k2WO2 3YceOg4hT1uuF0WlAx9ocolsrjEdDT3YtFb7I+kbDegz3LfYuM1GgFo+v5/zRfEu labej8VqXrJYfhStSl54d+ZkDJfzUSTU7XIF+9kkGxiwWgWKBPhA8Uy84exYFBMe OucuJYfTtKk9ntywqyI+EN2Z/WF/XJrW82HEEy6CMgDGcWtQPEh9wM3bHVtckaTq P5lMT/ZWO8AHC3DxcmFhfdkk3cg8CIEnzAF3x/lOEbgQcA2+g1oiHKcRmdyf7ovm j6Jg5TjW9yhq9YW1+o9wt5c06WU49y1pD03C9v8adr31w1j7sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJy3EQJFl//Lw/nEDpcrozAGHbOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMWZjMGRjZDctYTA0YS0z NzdhLWE1ZDctOWFlZTJjOGNkZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGObgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc7O6V5YAHGWgXOlMa2YoTmBcn0RYUAK+YEJWZOeDDVPBisPrZj0ERL dyrZoE5RV2LPAkjTTWNkVuVdx0JQFMnkZPyTZ/WwD+lqJnDLiZD57jraoIzbKVif Spa8oqgNCeryW1S5Z40lRLE6Z7xJ1hsx2lS3ROreRruOfe04+Zw/UT7BxzA0/9K1 zwW3Cwx1wYNVRwQD/inNe18f2ULLxzWLrcQvwC4K/PZmc+BMHUpqwMX1TZlPSgQC ucE7W3i1AubYj22NEqdNRKLf/TY4ucC1eygDsT44fZijSKuDFowONdncVIjvIaLn PwzgDCeDyFz4SYzQJ/xug9qSpzrEw7Y= -----END CERTIFICATE-----Generated at Sun Apr 6 05:50:32 2025 by rpki-client