$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/27438cb7-7732-3931-ac19-2044f94a2d41.roa File: 27438cb7-7732-3931-ac19-2044f94a2d41.roa (raw, json) Hash identifier: mrKiKEUrMw2iY6ydwntQuxp1C0jz0j2lZr9GvKcRsZM= Subject key identifier: A1:73:15:73:54:A1:33:7C:99:B0:F0:94:5B:83:7D:E0:FE:AC:2B:33 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584871C07C19551BC88273CC8E80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/27438cb7-7732-3931-ac19-2044f94a2d41.roa Signing time: Sun 05 Jan 2025 14:00:52 +0000 ROA not before: Sun 05 Jan 2025 14:00:52 +0000 ROA not after: Sat 05 Apr 2025 13:00:52 +0000 asID: 11290 IP address blocks: 205.151.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:71:c0:7c:19:55:1b:c8:82:73:cc:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 5 14:00:52 2025 GMT Not After : Apr 5 13:00:52 2025 GMT Subject: CN=66e5d105-1dd8-4f46-b041-e845e7cd38ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ef:c6:aa:f8:4f:20:0d:15:f2:e6:7d:9a:27: 45:51:07:aa:c0:35:8b:13:35:5d:09:ab:e4:57:6d: 4c:e9:ac:26:5c:c3:ff:73:b4:da:ce:77:0d:3d:0a: 0d:5b:02:0e:a7:8c:98:9d:76:9e:6e:47:4a:6e:d8: f0:f2:6f:5c:f7:34:8d:01:6c:10:07:bd:31:9e:e2: 8a:44:73:b3:2e:75:72:cc:0a:98:da:42:df:c8:81: d8:30:1d:f4:a6:d2:ff:71:cf:54:24:b2:46:05:31: f5:1a:7e:1f:61:b6:5a:9f:a4:c1:20:9c:64:bb:2f: 10:1d:2b:02:27:61:3f:a2:2b:f2:f9:94:09:0a:6e: b9:b7:57:72:87:58:e8:ed:dc:c2:a2:e8:3d:c9:f5: 3a:23:20:63:61:4c:3b:bd:8a:30:07:91:0d:47:63: 9a:26:93:5c:31:3a:46:85:af:ad:2a:52:b9:f0:c3: 7d:0d:6d:82:1e:d1:98:18:03:76:e8:6f:b0:ad:c2: dd:7c:5f:24:3f:f9:ca:ba:86:ca:22:e1:09:a9:9b: 82:ad:75:a0:7a:96:b5:13:8e:b5:73:62:2d:0e:1e: 56:cf:0d:31:6a:5e:3e:f6:eb:fb:c4:dc:6b:ea:fc: a3:f8:d5:c0:40:e5:98:04:a0:f4:b1:a4:59:e8:a1: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:73:15:73:54:A1:33:7C:99:B0:F0:94:5B:83:7D:E0:FE:AC:2B:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/27438cb7-7732-3931-ac19-2044f94a2d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 205.151.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:32:df:58:a2:4d:62:66:97:2f:95:fa:3b:36:85:39:14:50: 42:84:97:20:e1:10:e5:68:c7:35:9b:db:4e:c0:3d:eb:2e:0c: 9c:6a:80:84:18:08:ee:66:ee:9d:24:4c:e8:be:b0:6d:c7:d5: f0:3f:fa:80:5f:7d:10:b1:01:80:6b:c3:d5:27:ca:94:62:8c: 00:c1:72:a7:78:cb:4e:86:71:0c:0b:9b:c1:7b:77:1c:35:ea: 38:91:ee:d9:40:e8:3a:f9:1c:d1:81:31:13:5d:df:09:11:b7: 03:22:4b:1b:4d:94:09:a1:7b:64:a6:98:0e:66:54:e5:46:c9: 61:77:a0:cf:32:42:92:64:bc:d3:dc:21:51:81:88:60:33:fe: 17:77:40:33:0c:1c:d4:cd:d0:ca:c3:d4:7c:18:67:2e:6c:b4: ae:4a:80:e3:9d:c3:41:29:01:8f:83:2e:7f:49:b4:ee:13:40: 09:b0:16:db:e6:c0:2c:58:c4:2f:5d:2c:01:3a:a9:f1:46:95: d4:64:a5:7d:f5:38:9a:c4:bf:a6:73:21:04:ee:be:c7:4f:d0: 24:40:9b:21:d4:db:b3:8f:80:25:ab:89:8a:69:cf:0e:d0:c1: a4:6f:1a:e8:dd:87:40:41:0d:85:28:14:27:58:ac:40:60:41: 62:81:0d:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhxwHwZVRvIgnPMjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjZlNWQxMDUtMWRkOC00ZjQ2LWIwNDEtZTg0NWU3Y2QzOGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+/GqvhPIA0V8uZ9midFUQeqwDWLEzVdCavk V21M6awmXMP/c7TazncNPQoNWwIOp4yYnXaebkdKbtjw8m9c9zSNAWwQB70xnuKK RHOzLnVyzAqY2kLfyIHYMB30ptL/cc9UJLJGBTH1Gn4fYbZan6TBIJxkuy8QHSsC J2E/oivy+ZQJCm65t1dyh1jo7dzCoug9yfU6IyBjYUw7vYowB5ENR2OaJpNcMTpG ha+tKlK58MN9DW2CHtGYGAN26G+wrcLdfF8kP/nKuobKIuEJqZuCrXWgepa1E461 c2ItDh5Wzw0xal4+9uv7xNxr6vyj+NXAQOWYBKD0saRZ6KHeCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFzFXNUoTN8mbDwlFuDfeD+rCszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMjc0MzhjYjctNzczMi0z OTMxLWFjMTktMjA0NGY5NGEyZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzZc+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABky31iiTWJmly+V+js2hTkUUEKElyDhEOVoxzWb207APesuDJxqgIQY CO5m7p0kTOi+sG3H1fA/+oBffRCxAYBrw9UnypRijADBcqd4y06GcQwLm8F7dxw1 6jiR7tlA6Dr5HNGBMRNd3wkRtwMiSxtNlAmhe2SmmA5mVOVGyWF3oM8yQpJkvNPc IVGBiGAz/hd3QDMMHNTN0MrD1HwYZy5stK5KgOOdw0EpAY+DLn9JtO4TQAmwFtvm wCxYxC9dLAE6qfFGldRkpX31OJrEv6ZzIQTuvsdP0CRAmyHU27OPgCWriYppzw7Q waRvGujdh0BBDYUoFCdYrEBgQWKBDak= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:32 2025 by rpki-client