$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3924f1b7-789b-3758-bb3e-78e15e71890c.roa File: 3924f1b7-789b-3758-bb3e-78e15e71890c.roa (raw, json) Hash identifier: RtS8tY3F50Phr3dRoZrSx4rZYoVCsHdazJ+FRnzrr3s= Subject key identifier: 3B:08:0E:7E:29:56:48:48:B2:DF:47:2F:16:B5:FC:51:F2:22:C6:8E Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584957F4087E56238CFB74801440 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3924f1b7-789b-3758-bb3e-78e15e71890c.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11290 IP address blocks: 72.11.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:08:7e:56:23:8c:fb:74:80:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=6b3ab5d3-3e78-440b-af7f-05ed9f8cf21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:eb:58:ba:dc:f7:1f:2f:0b:f2:67:4b:e5:76: 0f:e8:0b:89:d9:2b:6d:9a:31:3d:54:4e:37:6c:e8: 46:82:64:13:7a:3a:7d:01:83:07:d0:ab:70:3a:de: 65:90:a0:6e:fd:3f:46:e4:29:09:0b:7b:46:65:1b: 4e:4b:90:12:2b:d3:a0:3b:40:c5:a2:7c:f1:2d:a8: fd:aa:85:60:2c:55:89:87:5e:8e:9c:c5:46:73:60: f9:6a:cd:34:1e:a3:89:dc:05:d1:65:df:48:a4:fd: c7:69:55:2c:3d:9f:cd:21:23:47:75:9d:ed:1e:df: 9e:cc:5a:ee:98:ba:91:ca:83:65:f9:b2:5a:f1:20: 7d:12:dc:3b:6c:53:14:ee:2e:4d:8c:70:c2:87:76: fa:f8:67:d5:75:a2:5f:d9:55:4a:50:93:d8:a6:37: 3b:04:e8:e8:96:db:da:32:db:5f:10:75:39:95:1e: a1:dd:5a:11:bb:ee:53:cc:00:71:53:27:39:9c:31: 76:a7:c4:1d:9b:dd:cd:90:ef:a0:d0:89:4d:ed:a3: 12:41:74:cf:9c:97:0f:a2:71:b9:1d:4c:b8:6c:f3: 81:64:87:4c:d7:91:b7:4f:f3:87:87:47:88:db:d1: b6:71:78:29:7a:d9:89:a3:90:c6:1f:ca:96:b2:29: 11:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:08:0E:7E:29:56:48:48:B2:DF:47:2F:16:B5:FC:51:F2:22:C6:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3924f1b7-789b-3758-bb3e-78e15e71890c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 72.11.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:2e:8f:3d:34:f0:72:e2:32:65:48:0c:67:91:9c:9d:32:63: 42:eb:91:31:5f:17:d8:b0:f1:e8:13:ba:44:7a:08:dd:16:71: 3d:61:17:55:c3:b3:49:0b:f2:8c:40:41:ad:1d:e3:2d:03:e0: cd:4c:29:32:35:c5:a0:f8:18:7b:53:25:b5:78:8a:ed:53:56: bc:bc:1a:ec:a1:17:05:03:bd:21:15:9d:93:64:db:82:76:16: 16:c6:56:95:78:e1:b6:66:16:8f:de:f3:84:57:c6:fd:90:08: 55:a2:8d:00:29:2a:58:bc:3f:c1:ea:8f:c1:d9:b9:cf:4b:f1: 1f:6f:13:ee:93:8e:d1:bf:15:a2:bd:ae:68:e3:f0:fa:0d:9b: 5a:a1:38:a6:63:13:30:9a:5b:50:5e:9c:c7:06:53:84:53:c0: 53:13:89:bd:91:4a:20:c5:90:15:b2:f3:14:27:4b:2c:d8:31: 1b:3c:ef:70:00:d9:35:4a:5f:81:c7:d0:2e:3a:f2:83:d7:84: cd:a1:0f:42:a0:33:0b:04:40:73:46:89:8d:c1:4b:a6:bd:96: 3d:17:ad:44:12:be:19:4e:83:69:e7:5d:31:ef:66:ce:88:40: fc:d3:b9:3a:a5:f6:02:89:9d:ec:e1:a4:62:03:3d:a5:e5:4d: d9:4b:13:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9Ah+ViOM+3SAFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NmIzYWI1ZDMtM2U3OC00NDBiLWFmN2YtMDVlZDlmOGNmMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAketYutz3Hy8L8mdL5XYP6AuJ2SttmjE9VE43 bOhGgmQTejp9AYMH0KtwOt5lkKBu/T9G5CkJC3tGZRtOS5ASK9OgO0DFonzxLaj9 qoVgLFWJh16OnMVGc2D5as00HqOJ3AXRZd9IpP3HaVUsPZ/NISNHdZ3tHt+ezFru mLqRyoNl+bJa8SB9Etw7bFMU7i5NjHDCh3b6+GfVdaJf2VVKUJPYpjc7BOjoltva MttfEHU5lR6h3VoRu+5TzABxUyc5nDF2p8Qdm93NkO+g0IlN7aMSQXTPnJcPonG5 HUy4bPOBZIdM15G3T/OHh0eI29G2cXgpetmJo5DGH8qWsikRfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsIDn4pVkhIst9HLxa1/FHyIsaOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMzkyNGYxYjctNzg5Yi0z NzU4LWJiM2UtNzhlMTVlNzE4OTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkujz008HLiMmVIDGeRnJ0yY0LrkTFfF9iw8egTukR6CN0WcT1hF1XD s0kL8oxAQa0d4y0D4M1MKTI1xaD4GHtTJbV4iu1TVry8GuyhFwUDvSEVnZNk24J2 FhbGVpV44bZmFo/e84RXxv2QCFWijQApKli8P8Hqj8HZuc9L8R9vE+6TjtG/FaK9 rmjj8PoNm1qhOKZjEzCaW1BenMcGU4RTwFMTib2RSiDFkBWy8xQnSyzYMRs873AA 2TVKX4HH0C468oPXhM2hD0KgMwsEQHNGiY3BS6a9lj0XrUQSvhlOg2nnXTHvZs6I QPzTuTql9gKJnezhpGIDPaXlTdlLE2Y= -----END CERTIFICATE-----Generated at Sun Apr 6 05:52:39 2025 by rpki-client