$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/63e2df0f-05c9-31f8-b768-34562e8c57c2.roa File: 63e2df0f-05c9-31f8-b768-34562e8c57c2.roa (raw, json) Hash identifier: DSf6UmMmMsW7PeABktHJ8KxkzQ6GMUrJmJa8oLkltHU= Subject key identifier: 18:F2:11:C4:43:8F:44:3C:DF:01:19:E6:F3:3F:B4:60:8E:87:64:90 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F432858487755E28D77DB033E510F7500 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/63e2df0f-05c9-31f8-b768-34562e8c57c2.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 11290 IP address blocks: 24.230.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:e2:8d:77:db:03:3e:51:0f:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=f11c40aa-feb4-49de-a0ea-720a4de95a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d5:6b:7d:cc:0c:53:76:bd:89:08:f0:52:36: e1:97:8b:44:30:74:53:4d:f8:60:ca:52:3f:a9:a6: 39:b5:90:df:0a:26:7f:b0:c4:9a:b6:f3:99:9a:c4: 7b:71:b7:64:ee:d8:77:f1:03:85:7e:e4:c8:92:02: 5d:e3:88:95:de:45:af:90:6a:d5:8f:7b:16:ec:da: b6:73:07:cd:ae:06:ed:77:c5:5c:f1:1f:1d:05:ba: 7d:ae:97:c3:0e:0a:fc:ec:7f:43:36:b4:e8:6b:2d: 13:5e:98:97:08:27:5a:c6:75:38:7e:d5:ac:23:4d: 09:75:04:0f:31:94:54:78:c6:35:c8:63:95:cb:9e: d8:38:d9:67:0e:57:dd:98:a3:e4:4c:30:dc:51:08: 20:08:76:16:c9:e2:4d:5c:64:1c:db:5c:96:8e:5f: 3f:bc:53:06:53:f7:d8:b3:b4:c8:b2:21:c7:62:90: 02:a7:27:d4:37:0a:c6:d9:62:ac:55:ed:5f:28:85: da:0a:3c:e0:42:87:d9:8b:09:c8:48:72:70:22:1c: 50:cc:00:fc:aa:66:f7:7f:8e:2c:3a:71:ce:89:4b: 5a:4c:2c:91:fe:ee:fe:99:bf:be:93:04:3d:d8:8d: 10:7a:4e:1d:e4:87:c4:92:64:8c:af:11:94:98:ae: 39:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F2:11:C4:43:8F:44:3C:DF:01:19:E6:F3:3F:B4:60:8E:87:64:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/63e2df0f-05c9-31f8-b768-34562e8c57c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.230.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:36:46:10:d7:f0:73:48:d9:70:9a:b7:6e:2c:23:a2:90:19: 9c:b1:47:c0:4b:d7:36:20:49:b4:23:fc:79:c2:42:df:a8:c5: 8a:be:64:4d:81:06:e2:da:12:b6:de:54:ce:97:20:c1:ea:84: b9:74:8e:a3:4d:ae:af:8d:a8:a6:d7:e5:65:f2:00:2a:92:d4: ac:ea:40:61:13:67:71:28:d1:6d:ed:70:31:bf:bd:38:a1:ee: 15:7c:64:ab:bf:03:31:d2:fb:43:d4:b9:88:16:b5:b6:97:9c: ad:08:d6:1c:15:9f:b7:26:5b:e3:fe:0c:13:f9:e2:b6:c4:c9: f9:17:75:6f:42:43:fa:ec:3a:96:e1:be:dd:43:90:4d:1c:e3: 0d:4d:3b:47:21:83:63:08:26:f7:8c:17:38:c0:0e:02:6c:7e: b4:86:ca:40:1a:01:ae:14:1d:75:ae:62:39:51:f5:18:cc:07: de:94:1b:2b:ab:eb:80:92:fb:c8:c9:d2:a2:76:5a:6f:41:43: b3:ff:5d:52:92:72:b2:62:41:50:49:7a:26:cf:6b:d2:16:30: 33:cf:14:3b:86:4d:62:5c:e5:c0:55:53:6a:ab:c6:1e:e7:ba: e1:91:62:bb:a5:1d:e8:eb:41:45:0e:72:e7:e4:96:3c:30:db: ce:f8:05:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VeKNd9sDPlEPdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk ZjExYzQwYWEtZmViNC00OWRlLWEwZWEtNzIwYTRkZTk1YTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNVrfcwMU3a9iQjwUjbhl4tEMHRTTfhgylI/ qaY5tZDfCiZ/sMSatvOZmsR7cbdk7th38QOFfuTIkgJd44iV3kWvkGrVj3sW7Nq2 cwfNrgbtd8Vc8R8dBbp9rpfDDgr87H9DNrToay0TXpiXCCdaxnU4ftWsI00JdQQP MZRUeMY1yGOVy57YONlnDlfdmKPkTDDcUQggCHYWyeJNXGQc21yWjl8/vFMGU/fY s7TIsiHHYpACpyfUNwrG2WKsVe1fKIXaCjzgQofZiwnISHJwIhxQzAD8qmb3f44s OnHOiUtaTCyR/u7+mb++kwQ92I0Qek4d5IfEkmSMrxGUmK45+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjyEcRDj0Q83wEZ5vM/tGCOh2SQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNjNlMmRmMGYtMDVjOS0z MWY4LWI3NjgtMzQ1NjJlOGM1N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGObAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs2RhDX8HNI2XCat24sI6KQGZyxR8BL1zYgSbQj/HnCQt+oxYq+ZE2B BuLaErbeVM6XIMHqhLl0jqNNrq+NqKbX5WXyACqS1KzqQGETZ3Eo0W3tcDG/vTih 7hV8ZKu/AzHS+0PUuYgWtbaXnK0I1hwVn7cmW+P+DBP54rbEyfkXdW9CQ/rsOpbh vt1DkE0c4w1NO0chg2MIJveMFzjADgJsfrSGykAaAa4UHXWuYjlR9RjMB96UGyur 64CS+8jJ0qJ2Wm9BQ7P/XVKScrJiQVBJeibPa9IWMDPPFDuGTWJc5cBVU2qrxh7n uuGRYrulHejrQUUOcufkljww2874BYY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:15 2025 by rpki-client