$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61a410ff-da2c-371a-ba6e-9ba5c3d63964.roa File: 61a410ff-da2c-371a-ba6e-9ba5c3d63964.roa (raw, json) Hash identifier: IdSqjvLpgb8UUkJidCLXlUPgLAhm7sbC5KhcAVzsfvc= Subject key identifier: 36:D3:A2:F2:09:83:68:01:63:1F:DD:75:AF:BB:84:FA:4E:F3:2A:27 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584957F4086BECE18AC099699380 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61a410ff-da2c-371a-ba6e-9ba5c3d63964.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11290 IP address blocks: 74.210.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:08:6b:ec:e1:8a:c0:99:69:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=660fb5fa-f79a-40b5-b769-d4b0967ae3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f4:31:d6:ad:de:9c:97:2e:f3:f1:d7:da:2b: dd:e2:a9:54:5c:7f:a7:e5:bd:c6:50:53:68:61:e3: d7:a7:98:e4:24:94:4d:04:52:a1:a5:57:53:8e:22: 8a:be:da:24:9f:6a:14:78:03:d1:25:18:61:dc:a2: 80:3d:1d:8b:e6:5b:b8:80:25:38:bb:25:e4:3e:73: a9:cf:70:69:40:d5:8b:36:cd:6a:02:5b:ee:5d:bb: 74:60:b9:a5:40:6d:15:44:f5:f0:14:df:5b:66:3a: b4:18:4c:1e:85:9d:96:c2:a6:03:a5:c9:5a:b8:fd: 26:2e:b5:e2:51:10:ee:af:28:85:3f:39:64:31:34: f9:07:3d:ad:c8:06:15:09:69:64:72:ef:a1:52:ea: e6:09:80:15:c6:3a:33:f7:52:38:7b:79:3b:4e:04: 53:5d:73:17:fb:ba:f8:89:ca:93:f3:74:73:00:2c: d9:df:99:f7:c8:79:3f:3e:5b:e8:90:d5:ee:ec:8f: 5b:6f:26:33:d0:08:2f:7c:21:23:1f:67:a3:99:80: ea:70:8a:5a:67:dd:93:72:e9:03:75:06:d0:66:55: 42:a8:d3:f7:29:34:2d:0e:c3:74:33:19:dc:cb:81: ab:e5:f1:f9:de:fd:c3:3a:67:eb:c1:8e:6c:93:8e: bf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D3:A2:F2:09:83:68:01:63:1F:DD:75:AF:BB:84:FA:4E:F3:2A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61a410ff-da2c-371a-ba6e-9ba5c3d63964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 74.210.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7b:09:f7:2c:b5:22:3b:62:31:c5:21:5b:c3:a4:6f:7c:32: 34:80:4c:47:fa:54:39:e4:c9:40:ff:97:3d:41:49:d5:4f:cf: 3e:ed:8d:86:ae:31:43:8b:24:21:1b:92:52:33:55:0b:3b:d6: ca:22:e6:b9:eb:32:80:62:a3:ea:e3:d5:09:7c:7f:91:74:3c: 79:20:87:92:a9:40:e1:4a:2a:ea:9e:9a:0f:40:1e:da:5a:c7: 3a:fc:e0:e3:d1:7e:f5:99:4e:0e:de:9b:a2:77:88:5a:23:9d: e0:17:8f:70:f9:67:7b:ac:f9:36:28:92:21:1f:1b:e9:3b:43: 00:5e:c8:90:0b:6c:96:34:98:7d:13:10:26:0a:18:4e:35:06: 29:0b:83:9d:dd:56:46:8b:16:f8:7b:f3:2b:8d:04:ee:8c:c4: f2:e1:79:73:57:87:fb:9b:54:a4:db:9d:f9:85:5b:2a:32:66: 90:f0:4a:99:9c:ec:91:00:cb:4b:d5:61:1c:c9:95:69:79:2c: ab:57:c7:9d:c7:70:98:15:d1:a0:90:4d:f4:2d:8a:4b:bf:92: e3:98:37:b2:59:e7:d8:04:f6:06:af:00:c4:6b:17:ea:fe:15: 19:ce:6e:e1:9a:ac:4d:e7:b4:f7:8a:24:27:8f:65:ab:24:ca: 86:07:7a:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9Ahr7OGKwJlpk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NjYwZmI1ZmEtZjc5YS00MGI1LWI3NjktZDRiMDk2N2FlM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvQx1q3enJcu8/HX2ivd4qlUXH+n5b3GUFNo YePXp5jkJJRNBFKhpVdTjiKKvtokn2oUeAPRJRhh3KKAPR2L5lu4gCU4uyXkPnOp z3BpQNWLNs1qAlvuXbt0YLmlQG0VRPXwFN9bZjq0GEwehZ2WwqYDpclauP0mLrXi URDuryiFPzlkMTT5Bz2tyAYVCWlkcu+hUurmCYAVxjoz91I4e3k7TgRTXXMX+7r4 icqT83RzACzZ35n3yHk/PlvokNXu7I9bbyYz0AgvfCEjH2ejmYDqcIpaZ92TcukD dQbQZlVCqNP3KTQtDsN0Mxncy4Gr5fH53v3DOmfrwY5sk46/jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbTovIJg2gBYx/dda+7hPpO8yonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNjFhNDEwZmYtZGEyYy0z NzFhLWJhNmUtOWJhNWMzZDYzOTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGStKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF7CfcstSI7YjHFIVvDpG98MjSATEf6VDnkyUD/lz1BSdVPzz7tjYau MUOLJCEbklIzVQs71soi5rnrMoBio+rj1Ql8f5F0PHkgh5KpQOFKKuqemg9AHtpa xzr84OPRfvWZTg7em6J3iFojneAXj3D5Z3us+TYokiEfG+k7QwBeyJALbJY0mH0T ECYKGE41BikLg53dVkaLFvh78yuNBO6MxPLheXNXh/ubVKTbnfmFWyoyZpDwSpmc 7JEAy0vVYRzJlWl5LKtXx53HcJgV0aCQTfQtiku/kuOYN7JZ59gE9gavAMRrF+r+ FRnObuGarE3ntPeKJCePZaskyoYHeuI= -----END CERTIFICATE-----Generated at Sun Apr 6 05:52:58 2025 by rpki-client