$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4d58ad68-e72d-3144-8f6b-f06127b90f33.roa File: 4d58ad68-e72d-3144-8f6b-f06127b90f33.roa (raw, json) Hash identifier: XnSZ1BXYAvqswhkCoqVZz6Ce25XCo4P3TsHo08Efr98= Subject key identifier: 2E:43:B2:FD:93:A3:71:82:98:25:5D:79:1A:5C:23:07:85:CB:46:C1 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584953C44D4F71F2D2B8B618D5C0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4d58ad68-e72d-3144-8f6b-f06127b90f33.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 11290 IP address blocks: 144.168.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4d:4f:71:f2:d2:b8:b6:18:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=df3a7712-ab27-444b-afd3-8ce58930195d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:29:82:84:41:3e:e0:ad:dc:f2:c0:e9:0a:ae: 59:51:69:b2:bf:2d:18:2f:dd:30:c0:11:d5:b0:55: 3f:2d:a0:db:63:35:d0:52:7d:74:a6:94:0e:68:44: 91:d3:0d:8d:b1:fd:75:14:af:d2:f2:b9:a3:06:27: 2f:fb:21:df:c0:86:f5:38:d1:96:db:74:08:2f:23: 4d:ed:55:3d:8a:c1:3a:d3:ff:f7:1c:55:e5:a1:75: 7f:ed:22:61:a3:a8:49:65:7a:dd:95:23:fe:69:a1: 5b:43:f3:d9:ee:5e:fb:d2:15:d3:c3:14:1c:05:cd: b8:46:a7:4a:17:30:40:f3:71:76:e6:e8:49:e8:65: 05:c9:e5:df:b2:39:3a:9a:f5:57:26:ea:66:d1:f1: d0:f2:50:5e:99:9a:e2:1d:ed:1a:be:50:21:8a:63: 3a:54:a7:e4:23:f5:dd:ae:c5:9d:39:e2:c3:d0:8c: ae:cd:8c:2d:6f:9d:3e:90:e3:e4:0c:c6:54:0d:3d: 17:ee:98:8b:94:7a:e7:13:92:c6:a6:68:68:6e:a8: 51:c7:30:fe:79:4e:0c:82:a2:e2:d0:43:7a:fe:1a: ed:69:f1:df:9e:3c:15:a4:b3:c8:3c:27:f2:c5:25: e0:0f:c9:13:74:f4:94:29:5d:33:3a:c7:27:e0:d3: 28:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:43:B2:FD:93:A3:71:82:98:25:5D:79:1A:5C:23:07:85:CB:46:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4d58ad68-e72d-3144-8f6b-f06127b90f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 144.168.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1e:74:3e:c9:37:15:1d:61:c9:06:58:d4:c6:c8:7c:00:c9: 97:1b:81:87:2c:75:dc:42:ec:9a:94:38:a2:13:03:ad:b1:ba: de:b1:1c:8e:a2:b0:a3:40:30:e4:e2:18:d7:e9:a3:35:9b:ba: 27:ca:eb:40:17:40:42:4b:40:2d:27:47:5b:a8:fa:6d:7e:0f: 6b:d4:b5:3e:77:16:53:b1:57:80:6c:56:28:c9:7c:71:10:40: 9f:6f:a2:72:84:7c:67:c5:c4:6b:d9:7f:30:ec:8c:14:65:8f: 6c:a5:6e:bb:35:9a:01:f2:61:56:89:c9:36:8f:4b:e8:61:50: 93:67:47:3d:c6:ea:b5:fc:07:26:a1:f7:2b:cd:59:02:60:d3: e2:c4:f5:6b:81:ae:f6:f5:c7:c4:a9:e0:cc:a7:fb:93:18:5b: ae:b2:49:aa:52:6e:a8:19:9a:f4:fa:a3:d8:ae:53:bc:93:e8: f8:cb:0d:57:47:f9:69:95:31:88:3a:e3:d7:2a:d0:cb:69:18: db:80:81:09:78:9c:c0:b4:a4:1a:cd:5a:d3:c4:2f:a3:20:fc: 10:5b:ba:d7:0a:1b:a9:65:0d:c2:c6:a5:29:b3:39:45:b4:48: 71:c4:ff:d7:3c:46:60:87:08:a3:8e:d7:71:d4:ce:ce:f3:b2: 0d:2b:bd:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxE1PcfLSuLYY1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGYzYTc3MTItYWIyNy00NDRiLWFmZDMtOGNlNTg5MzAxOTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSmChEE+4K3c8sDpCq5ZUWmyvy0YL90wwBHV sFU/LaDbYzXQUn10ppQOaESR0w2Nsf11FK/S8rmjBicv+yHfwIb1ONGW23QILyNN 7VU9isE60//3HFXloXV/7SJho6hJZXrdlSP+aaFbQ/PZ7l770hXTwxQcBc24RqdK FzBA83F25uhJ6GUFyeXfsjk6mvVXJupm0fHQ8lBemZriHe0avlAhimM6VKfkI/Xd rsWdOeLD0IyuzYwtb50+kOPkDMZUDT0X7piLlHrnE5LGpmhobqhRxzD+eU4MgqLi 0EN6/hrtafHfnjwVpLPIPCfyxSXgD8kTdPSUKV0zOscn4NMopwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5Dsv2To3GCmCVdeRpcIweFy0bBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNGQ1OGFkNjgtZTcyZC0z MTQ0LThmNmItZjA2MTI3YjkwZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkKg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcedD7JNxUdYckGWNTGyHwAyZcbgYcsddxC7JqUOKITA62xut6xHI6i sKNAMOTiGNfpozWbuifK60AXQEJLQC0nR1uo+m1+D2vUtT53FlOxV4BsVijJfHEQ QJ9vonKEfGfFxGvZfzDsjBRlj2ylbrs1mgHyYVaJyTaPS+hhUJNnRz3G6rX8Byah 9yvNWQJg0+LE9WuBrvb1x8Sp4Myn+5MYW66ySapSbqgZmvT6o9iuU7yT6PjLDVdH +WmVMYg649cq0MtpGNuAgQl4nMC0pBrNWtPEL6Mg/BBbutcKG6llDcLGpSmzOUW0 SHHE/9c8RmCHCKOO13HUzs7zsg0rvRQ= -----END CERTIFICATE-----Generated at Sun Apr 6 05:56:54 2025 by rpki-client