$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e52f444-65b3-3cf6-883a-6e7fadd14311.roa File: 2e52f444-65b3-3cf6-883a-6e7fadd14311.roa (raw, json) Hash identifier: 4WM4Dqcofb6ombETBSJFoYLAvreNpaUSc3+7VQ/myKA= Subject key identifier: 64:FC:76:1B:66:9A:44:3E:2D:65:40:79:A4:C3:72:5A:19:F9:28:09 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F432858487755E24E08846FA6D78CC440 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e52f444-65b3-3cf6-883a-6e7fadd14311.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 11290 IP address blocks: 57.134.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:e2:4e:08:84:6f:a6:d7:8c:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=bb2160f6-5ad1-4d63-946f-402a1f7c14c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:99:1a:db:74:b4:44:7d:b8:bb:3c:bf:a2:a8: e7:e2:55:d5:69:38:62:8f:2d:9f:59:d0:b9:b8:e1: e4:e5:e6:dd:dd:5b:a7:3b:fd:e5:33:e0:b8:90:88: 09:16:bd:d5:f3:75:f6:11:ae:5e:8a:fe:b3:16:75: 14:99:d8:29:17:df:ba:43:ee:fa:3d:4b:0d:53:a2: 7b:c5:a3:2b:8e:66:e8:32:67:84:ea:46:03:b4:c7: c6:8a:d0:ab:07:71:6c:ec:de:bd:03:79:ad:01:02: 5b:d0:7e:ec:e9:47:75:7b:c2:3e:6f:83:9b:e3:be: 82:55:6f:cb:00:d8:78:04:d9:4c:34:b7:be:57:31: b7:ea:c2:65:b1:bb:76:53:95:d5:45:0d:cb:1c:79: 0d:ff:1a:c8:b9:af:0f:ee:93:ac:80:64:30:ea:a0: 67:82:36:fb:9d:25:cf:86:c7:48:9e:e3:a2:a5:cf: 30:32:2d:c1:1e:ba:c4:55:84:68:1a:df:69:c6:55: 30:68:0e:90:b8:07:7e:77:ab:41:16:09:6b:21:f5: 4f:eb:7b:be:89:66:05:c4:77:9c:40:00:88:68:3b: 86:86:0f:06:8b:fa:e5:ed:b7:42:a4:e4:31:97:48: 2e:21:cb:91:80:f9:0f:75:ac:61:44:f5:93:d6:42: de:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FC:76:1B:66:9A:44:3E:2D:65:40:79:A4:C3:72:5A:19:F9:28:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e52f444-65b3-3cf6-883a-6e7fadd14311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 57.134.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f0:48:44:73:ac:b9:54:a7:ee:f2:34:48:12:bf:e8:cd:9c: 60:26:d3:2e:c0:fe:14:55:7d:a7:b0:77:ae:10:c4:24:df:43: 50:bb:9a:5f:fd:bd:df:fb:06:8c:9a:01:96:c4:9f:d7:b5:9a: f9:72:5f:dd:e2:96:98:4f:69:87:27:0c:3a:8e:5f:2d:fd:a2: c4:ec:60:eb:4f:cf:6f:a8:ce:73:1a:a0:a8:e9:a5:b1:a5:f6: 73:03:5e:7a:83:d4:59:8f:86:02:3c:8f:34:26:ad:d2:14:eb: eb:7a:a5:de:2b:f3:34:1c:24:71:14:6b:2b:c2:e4:74:7b:5c: 83:e9:e9:d1:a5:d6:89:d6:3f:08:4f:d2:49:7e:ff:26:b5:28: 2f:8d:77:60:06:37:2e:4b:de:b6:88:ac:30:d7:5e:7c:91:46: 1a:5f:7e:ae:c0:3b:fc:c0:e1:fd:49:53:51:cd:1e:fb:5d:1e: f6:92:cc:e8:6b:33:fb:4c:88:4f:64:c9:ec:03:f9:1b:ba:5d: 07:2a:45:ab:98:bc:ef:e3:ab:04:55:dd:cc:e1:e1:3f:54:24: 15:dd:94:c7:0e:78:2b:81:d1:5b:14:5a:ad:a5:36:c4:38:ab: 1a:91:3e:b6:6e:9e:0f:b5:a0:80:af:bd:cd:79:00:d4:c2:e8: a2:a4:b1:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VeJOCIRvpteMxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk YmIyMTYwZjYtNWFkMS00ZDYzLTk0NmYtNDAyYTFmN2MxNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZka23S0RH24uzy/oqjn4lXVaThijy2fWdC5 uOHk5ebd3VunO/3lM+C4kIgJFr3V83X2Ea5eiv6zFnUUmdgpF9+6Q+76PUsNU6J7 xaMrjmboMmeE6kYDtMfGitCrB3Fs7N69A3mtAQJb0H7s6Ud1e8I+b4Ob476CVW/L ANh4BNlMNLe+VzG36sJlsbt2U5XVRQ3LHHkN/xrIua8P7pOsgGQw6qBngjb7nSXP hsdInuOipc8wMi3BHrrEVYRoGt9pxlUwaA6QuAd+d6tBFglrIfVP63u+iWYFxHec QACIaDuGhg8Gi/rl7bdCpOQxl0guIcuRgPkPdaxhRPWT1kLejwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGT8dhtmmkQ+LWVAeaTDcloZ+SgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMmU1MmY0NDQtNjViMy0z Y2Y2LTg4M2EtNmU3ZmFkZDE0MzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHOYYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/wSERzrLlUp+7yNEgSv+jNnGAm0y7A/hRVfaewd64QxCTfQ1C7ml/9 vd/7BoyaAZbEn9e1mvlyX93ilphPaYcnDDqOXy39osTsYOtPz2+oznMaoKjppbGl 9nMDXnqD1FmPhgI8jzQmrdIU6+t6pd4r8zQcJHEUayvC5HR7XIPp6dGl1onWPwhP 0kl+/ya1KC+Nd2AGNy5L3raIrDDXXnyRRhpffq7AO/zA4f1JU1HNHvtdHvaSzOhr M/tMiE9kyewD+Ru6XQcqRauYvO/jqwRV3czh4T9UJBXdlMcOeCuB0VsUWq2lNsQ4 qxqRPrZung+1oICvvc15ANTC6KKksXM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:48 2025 by rpki-client