$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2835e3ce-fa92-3982-99cc-4b7897a5f628.roa File: 2835e3ce-fa92-3982-99cc-4b7897a5f628.roa (raw, json) Hash identifier: ai0ethad/W6D3CfXFoWuhsde1tOYpJDaFZ1o4kEhsuI= Subject key identifier: DB:BC:49:1D:85:A3:CA:6A:14:AF:37:66:46:B3:17:28:B6:23:14:91 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F43285848748B1FA636F27A2778C61300 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2835e3ce-fa92-3982-99cc-4b7897a5f628.roa Signing time: Mon 06 Jan 2025 14:00:52 +0000 ROA not before: Mon 06 Jan 2025 14:00:52 +0000 ROA not after: Sun 06 Apr 2025 13:00:52 +0000 asID: 11290 IP address blocks: 199.36.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:8b:1f:a6:36:f2:7a:27:78:c6:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 6 14:00:52 2025 GMT Not After : Apr 6 13:00:52 2025 GMT Subject: CN=d9643995-feec-46a0-8f66-b9d62c0de32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:9c:7c:d7:94:02:46:e6:cb:3f:e4:47:22: 45:eb:24:02:5e:7f:dc:9d:5c:eb:26:5c:a8:0d:e9: 72:b2:ea:10:7d:25:cd:5e:aa:d3:46:54:00:8e:90: e8:82:73:40:34:24:b1:21:c7:82:f1:46:86:e4:20: 46:48:36:0c:e4:7c:e1:9b:cc:71:71:c5:3e:a9:00: a7:f6:1a:93:f9:c8:f1:34:73:4f:8a:16:17:45:a1: 89:6d:84:0a:76:c4:08:6c:06:90:e4:da:2f:d2:1e: fb:80:5f:1a:51:5c:54:26:52:84:a7:95:66:e0:8f: 44:08:ff:5c:af:db:9c:a2:cd:83:f1:b6:e6:60:e1: b1:fc:43:e2:ba:3f:6f:72:fc:41:28:a7:24:05:a6: 9e:bc:7d:ed:76:26:5e:10:25:9e:6b:79:24:8c:a8: 03:23:65:29:64:d9:3e:94:13:74:b1:d7:07:e0:7c: 58:6d:ce:68:66:8e:2a:58:38:ec:ee:aa:6e:08:89: 5f:1b:93:ca:32:ee:09:e4:95:11:b5:99:a5:5e:81: 17:4b:1e:15:8f:08:31:47:e1:b0:81:56:ef:c5:d0: d2:d4:73:c0:b1:23:46:ae:93:c4:72:30:d8:c2:5a: 75:de:14:22:1c:27:88:9a:84:2b:1d:9e:62:5d:96: 48:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BC:49:1D:85:A3:CA:6A:14:AF:37:66:46:B3:17:28:B6:23:14:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2835e3ce-fa92-3982-99cc-4b7897a5f628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 199.36.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:66:13:48:4f:2d:5b:b7:fe:97:26:f4:f8:e8:0b:ad:0d:27: 56:f5:13:30:63:21:ec:a4:d9:87:7a:bb:c9:7b:e7:9e:fc:2b: 66:f6:79:26:47:f6:f9:e1:54:e4:cd:43:84:f0:2d:0f:6b:b3: 76:10:7d:09:4a:43:a0:a9:3c:b5:e6:56:d6:1e:d0:de:f4:89: 4c:4e:cf:98:56:74:ef:df:4c:40:14:3d:f8:ea:db:ec:f8:17: 24:3c:de:34:3e:6f:08:57:26:8a:f9:93:7c:46:9e:64:1a:35: b4:f9:e2:db:00:1c:34:9b:70:b8:7a:d3:cc:ac:45:9a:ec:a6: e3:0a:b3:25:4a:14:34:76:42:39:38:34:b1:68:58:53:39:3f: 82:35:aa:eb:41:b9:be:3e:ad:ad:0f:51:ad:a1:f4:fe:7c:be: 13:f3:d6:56:06:53:e4:20:49:a4:1d:01:31:fe:74:ab:9f:dc: 41:d0:95:cd:0b:44:a5:fb:c9:8c:2c:7c:7a:dc:3e:3e:76:34: 2f:52:b7:0a:16:3d:45:a1:c6:51:dc:c8:a0:84:15:26:2c:50: ea:8f:98:1a:74:d6:45:ec:2b:48:54:58:22:3d:bd:c8:71:9f: 32:d6:f8:0c:66:66:89:a8:63:0e:34:3a:e2:21:0d:db:09:10: 3d:03:b1:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0ix+mNvJ6J3jGEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZDk2NDM5OTUtZmVlYy00NmEwLThmNjYtYjlkNjJjMGRlMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQecfNeUAkbmyz/kRyJF6yQCXn/cnVzrJlyo DelysuoQfSXNXqrTRlQAjpDognNANCSxIceC8UaG5CBGSDYM5Hzhm8xxccU+qQCn 9hqT+cjxNHNPihYXRaGJbYQKdsQIbAaQ5Nov0h77gF8aUVxUJlKEp5Vm4I9ECP9c r9ucos2D8bbmYOGx/EPiuj9vcvxBKKckBaaevH3tdiZeECWea3kkjKgDI2UpZNk+ lBN0sdcH4HxYbc5oZo4qWDjs7qpuCIlfG5PKMu4J5JURtZmlXoEXSx4VjwgxR+Gw gVbvxdDS1HPAsSNGrpPEcjDYwlp13hQiHCeImoQrHZ5iXZZIywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNu8SR2Fo8pqFK83ZkazFyi2IxSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMjgzNWUzY2UtZmE5Mi0z OTgyLTk5Y2MtNGI3ODk3YTVmNjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVmE0hPLVu3/pcm9PjoC60NJ1b1EzBjIeyk2Yd6u8l75578K2b2eSZH 9vnhVOTNQ4TwLQ9rs3YQfQlKQ6CpPLXmVtYe0N70iUxOz5hWdO/fTEAUPfjq2+z4 FyQ83jQ+bwhXJor5k3xGnmQaNbT54tsAHDSbcLh608ysRZrspuMKsyVKFDR2Qjk4 NLFoWFM5P4I1qutBub4+ra0PUa2h9P58vhPz1lYGU+QgSaQdATH+dKuf3EHQlc0L RKX7yYwsfHrcPj52NC9StwoWPUWhxlHcyKCEFSYsUOqPmBp01kXsK0hUWCI9vchx nzLW+AxmZomoYw40OuIhDdsJED0DsZE= -----END CERTIFICATE-----Generated at Fri Mar 14 11:09:44 2025 by rpki-client