$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e98454d-aa7e-3c21-b0f4-860de14dee21.roa File: 2e98454d-aa7e-3c21-b0f4-860de14dee21.roa (raw, json) Hash identifier: lpIu4rdlUlhavXFp3eri0A7I9JTuVIktldo4dpT4w18= Subject key identifier: 37:C0:35:2B:1E:1F:6D:E5:E1:85:BE:4C:A1:61:21:C7:3F:49:1E:C4 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F432858487755E50479C3D7FD3B554740 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e98454d-aa7e-3c21-b0f4-860de14dee21.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 11290 IP address blocks: 24.122.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:e5:04:79:c3:d7:fd:3b:55:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=d974b5da-2df3-4276-93a1-11a2a23fc427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8b:56:39:37:79:fa:86:b1:ba:3c:06:68:7f: 5c:a8:71:f0:5f:6c:87:b3:b6:56:97:dd:72:73:49: 3d:fe:f7:ce:81:d8:af:35:35:d8:52:54:8c:a0:79: 8a:67:60:d7:c8:ea:d5:9a:fe:50:2d:1b:35:35:7b: f3:20:5e:72:9f:d2:9d:30:21:65:5c:12:9b:c5:e5: 08:0a:d8:12:73:e8:ff:68:31:43:db:6d:6f:f0:ce: fe:9a:1c:88:ae:b9:db:55:08:42:c0:1f:37:6a:cd: 76:ff:ec:29:9e:ec:19:63:2e:fb:15:44:0a:45:20: 54:cb:3a:7b:6a:11:07:fb:e6:51:a2:16:f0:fc:04: cb:00:83:da:54:a3:90:ba:ec:8e:fe:c3:78:ae:f7: 52:bb:67:0c:a3:8f:f9:19:a8:73:d2:e9:73:a4:86: 34:9a:6b:66:82:8c:ad:56:0c:42:d8:a5:e4:ec:e7: fe:87:d3:c6:19:07:e7:27:11:8a:f0:e9:6d:0c:76: 1c:ea:b9:f0:0d:e1:80:db:67:96:5b:ee:10:bc:54: 15:d9:e7:79:cc:c0:ec:b0:98:dc:20:96:0d:a9:dc: a3:50:8e:f1:e8:b3:58:1f:65:cb:7a:68:a8:d7:5b: ca:ca:81:83:ac:81:79:1e:f6:c0:4f:af:19:f2:bc: a7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C0:35:2B:1E:1F:6D:E5:E1:85:BE:4C:A1:61:21:C7:3F:49:1E:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e98454d-aa7e-3c21-b0f4-860de14dee21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:5d:0e:24:9f:4a:ae:48:80:d8:b6:b2:6f:43:3a:41:86:67: a6:b9:9d:f4:13:f6:07:ba:2f:1f:e8:59:bd:d9:63:b9:ea:2c: cb:ba:29:1f:97:82:bb:ec:b3:ba:cd:65:37:8a:17:cd:3d:f0: af:10:5e:c9:7c:41:dd:d4:d6:ac:da:e6:0c:21:c3:d4:3e:ff: c4:fd:a4:2a:56:ca:c0:d0:93:ba:ed:34:6e:8c:d9:57:ec:2f: d1:2f:c3:6d:95:f8:05:78:2f:6c:e5:6c:c5:13:9c:4e:f1:9d: 84:b5:58:42:99:00:82:5a:43:d7:e1:9d:16:d5:a4:8e:4a:b3: 15:d9:92:11:6c:37:69:96:90:e6:d9:dc:9e:d6:b2:f7:a6:71: 5e:20:4e:0f:a3:22:39:0c:c2:69:32:60:52:2f:9f:ce:59:8f: 8a:2d:97:91:52:13:9f:46:22:72:33:68:d4:f8:d1:dc:0c:a7: 23:35:f6:31:de:e8:a8:c0:c6:53:52:0a:ae:50:bc:8c:b2:23: 15:48:73:a9:5a:30:5c:b7:e6:69:c3:3e:85:24:1c:81:3a:d5: d1:86:d9:b0:b5:d2:f0:16:55:ce:d0:a3:8f:3e:74:89:ee:42: 6b:b6:e8:4b:5c:39:1b:3a:a0:68:7d:5e:0e:44:5e:75:e9:4b: 0e:bc:d8:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VeUEecPX/TtVR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk ZDk3NGI1ZGEtMmRmMy00Mjc2LTkzYTEtMTFhMmEyM2ZjNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ItWOTd5+oaxujwGaH9cqHHwX2yHs7ZWl91y c0k9/vfOgdivNTXYUlSMoHmKZ2DXyOrVmv5QLRs1NXvzIF5yn9KdMCFlXBKbxeUI CtgSc+j/aDFD221v8M7+mhyIrrnbVQhCwB83as12/+wpnuwZYy77FUQKRSBUyzp7 ahEH++ZRohbw/ATLAIPaVKOQuuyO/sN4rvdSu2cMo4/5Gahz0ulzpIY0mmtmgoyt VgxC2KXk7Of+h9PGGQfnJxGK8OltDHYc6rnwDeGA22eWW+4QvFQV2ed5zMDssJjc IJYNqdyjUI7x6LNYH2XLemio11vKyoGDrIF5HvbAT68Z8ryn8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfANSseH23l4YW+TKFhIcc/SR7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMmU5ODQ1NGQtYWE3ZS0z YzIxLWIwZjQtODYwZGUxNGRlZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhdDiSfSq5IgNi2sm9DOkGGZ6a5nfQT9ge6Lx/oWb3ZY7nqLMu6KR+X grvss7rNZTeKF8098K8QXsl8Qd3U1qza5gwhw9Q+/8T9pCpWysDQk7rtNG6M2Vfs L9Evw22V+AV4L2zlbMUTnE7xnYS1WEKZAIJaQ9fhnRbVpI5KsxXZkhFsN2mWkObZ 3J7WsvemcV4gTg+jIjkMwmkyYFIvn85Zj4otl5FSE59GInIzaNT40dwMpyM19jHe 6KjAxlNSCq5QvIyyIxVIc6laMFy35mnDPoUkHIE61dGG2bC10vAWVc7Qo48+dInu Qmu26EtcORs6oGh9Xg5EXnXpSw682I8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:15 2025 by rpki-client