$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2835e3ce-fa92-3982-99cc-4b7897a5f628.roa File: 2835e3ce-fa92-3982-99cc-4b7897a5f628.roa (raw, json) Hash identifier: opdMxk1+wbqtsIcK4D0Kus4PE+e+ZFDVYoMIzwyZh+c= Subject key identifier: D8:9F:28:F9:1B:1B:E6:A8:82:66:81:BD:DC:E2:7C:EE:EF:B9:CE:FF Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584953C44C80E6C202B181087C60 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2835e3ce-fa92-3982-99cc-4b7897a5f628.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 11290 IP address blocks: 199.36.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4c:80:e6:c2:02:b1:81:08:7c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=4df4a9a2-d310-4189-99fb-82f29125189f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a6:79:11:cf:d2:52:ba:43:da:f2:31:63:d2: 0c:ec:50:32:52:88:01:66:45:84:c2:39:81:99:0f: 96:be:e0:5b:e2:16:aa:54:f9:22:7d:3d:f8:a5:2c: b0:0d:c7:76:8f:2c:ff:bc:17:38:9c:75:68:e6:fd: 02:7a:5e:a9:44:8e:4e:99:4c:a0:e7:ab:70:06:45: 7d:74:fe:f4:fc:fc:4f:f0:60:f9:c0:44:cb:18:69: b0:51:a8:7b:b1:51:37:77:cc:a9:b1:99:7f:14:26: fa:ef:81:e7:d5:42:c8:d3:b6:15:b1:57:92:3a:1b: 86:d7:f6:be:ff:ea:d5:ed:11:ef:01:68:4f:ed:64: aa:2b:76:22:25:90:ce:c4:e5:1a:49:53:59:a6:b6: 39:ce:32:fd:bb:46:40:cd:2f:ee:98:22:51:71:9a: 0b:9a:38:c7:d6:25:0d:52:73:e7:03:4f:2c:63:70: 91:31:26:5c:f8:d2:5b:39:05:df:99:f6:a0:f9:66: bd:7b:1b:f9:3b:69:72:94:55:59:52:13:ac:47:a3: 78:34:e8:39:8b:0a:0c:49:ea:b2:ce:39:43:de:be: 0e:f9:fd:ee:52:73:41:b8:dd:0d:87:19:a2:1b:85: 0f:c2:1e:40:38:60:de:df:5e:61:e5:36:0d:09:28: 0e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9F:28:F9:1B:1B:E6:A8:82:66:81:BD:DC:E2:7C:EE:EF:B9:CE:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2835e3ce-fa92-3982-99cc-4b7897a5f628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 199.36.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:65:58:2a:12:f0:ac:9f:ba:fa:03:4c:d8:46:31:4d:7b:c7: a2:d6:b6:4c:fa:9e:28:a0:ca:38:e1:f1:c8:00:bb:0b:b6:68: c4:0c:f0:09:58:67:87:e6:ad:e1:59:dc:c2:28:fd:62:1c:ae: 56:ff:1a:dc:da:c7:11:f4:35:9f:e8:19:93:8c:48:62:1c:c0: 7c:cd:42:19:cc:9e:66:ec:1d:bd:19:d3:51:b0:ed:af:8e:b9: 3f:07:6c:1a:4d:02:a9:6f:54:3b:6b:ae:ac:28:cb:3f:01:da: 16:55:d4:b0:5e:9d:25:3e:a3:28:a3:78:44:bf:c3:aa:ae:b9: 90:d7:a6:84:df:24:00:51:ed:5f:d4:15:da:49:98:99:1e:e9: 8b:f8:24:95:e8:18:6f:da:e0:aa:eb:91:e5:77:ee:1c:11:10: 7b:c6:23:4b:14:65:64:62:a8:43:b7:1f:a8:2c:75:88:85:d8: 04:a9:a2:3b:33:1c:22:2c:22:3b:f4:6a:a8:87:f1:72:0f:2f: 53:13:5b:88:77:34:ce:ba:0e:f0:af:4d:23:71:21:0b:0d:70: be:99:49:28:bc:04:e9:1c:da:76:b1:bb:cd:6d:db:b9:be:f2: 00:1d:5d:c6:90:86:9f:b8:2b:d7:bf:83:32:19:24:49:b0:6c: 98:1c:95:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxEyA5sICsYEIfGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGRmNGE5YTItZDMxMC00MTg5LTk5ZmItODJmMjkxMjUxODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqZ5Ec/SUrpD2vIxY9IM7FAyUogBZkWEwjmB mQ+WvuBb4haqVPkifT34pSywDcd2jyz/vBc4nHVo5v0Cel6pRI5OmUyg56twBkV9 dP70/PxP8GD5wETLGGmwUah7sVE3d8ypsZl/FCb674Hn1ULI07YVsVeSOhuG1/a+ /+rV7RHvAWhP7WSqK3YiJZDOxOUaSVNZprY5zjL9u0ZAzS/umCJRcZoLmjjH1iUN UnPnA08sY3CRMSZc+NJbOQXfmfag+Wa9exv5O2lylFVZUhOsR6N4NOg5iwoMSeqy zjlD3r4O+f3uUnNBuN0NhxmiG4UPwh5AOGDe315h5TYNCSgO8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNifKPkbG+aogmaBvdzifO7vuc7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMjgzNWUzY2UtZmE5Mi0z OTgyLTk5Y2MtNGI3ODk3YTVmNjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVlWCoS8KyfuvoDTNhGMU17x6LWtkz6niigyjjh8cgAuwu2aMQM8AlY Z4fmreFZ3MIo/WIcrlb/GtzaxxH0NZ/oGZOMSGIcwHzNQhnMnmbsHb0Z01Gw7a+O uT8HbBpNAqlvVDtrrqwoyz8B2hZV1LBenSU+oyijeES/w6quuZDXpoTfJABR7V/U FdpJmJke6Yv4JJXoGG/a4KrrkeV37hwREHvGI0sUZWRiqEO3H6gsdYiF2ASpojsz HCIsIjv0aqiH8XIPL1MTW4h3NM66DvCvTSNxIQsNcL6ZSSi8BOkc2naxu81t27m+ 8gAdXcaQhp+4K9e/gzIZJEmwbJgclaw= -----END CERTIFICATE-----Generated at Sun Apr 6 05:50:23 2025 by rpki-client