$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa File: 65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa (raw, json) Hash identifier: gCfPeqzE3eNVmVwXZx0Ecn4EYQVpZ2ZmeYoZ6D/e7aA= Subject key identifier: 71:36:1B:60:65:78:64:B1:CC:81:12:C7:8D:8F:47:25:55:54:7D:C9 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584871C073F1B2F70551B91C2E80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa Signing time: Sun 05 Jan 2025 14:00:52 +0000 ROA not before: Sun 05 Jan 2025 14:00:52 +0000 ROA not after: Sat 05 Apr 2025 13:00:52 +0000 asID: 11290 IP address blocks: 209.169.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:71:c0:73:f1:b2:f7:05:51:b9:1c:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 5 14:00:52 2025 GMT Not After : Apr 5 13:00:52 2025 GMT Subject: CN=f92344b8-289c-456c-a45e-19bf74f3089b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:c2:7f:f6:fd:f5:9d:a1:b3:91:98:37:81: 79:ca:e7:53:6c:d2:8b:a2:ad:9c:7c:d2:10:c1:98: 22:98:96:97:9b:9a:b1:d4:a1:3c:a2:ec:ec:bf:0d: ab:2f:a4:51:f0:93:18:c5:a5:0c:cd:25:bc:73:72: c2:98:68:ce:da:a3:4f:a5:18:14:05:0f:74:af:52: 2d:a8:40:94:fe:d5:b6:32:c1:1d:95:35:8f:23:36: 47:43:05:fb:de:d4:45:cf:f3:30:25:8e:c2:90:7d: e2:5a:0a:34:dd:a0:b0:a4:4f:84:a8:18:cd:94:aa: bd:d4:2b:80:35:14:7a:f4:c9:c0:39:c5:c5:40:12: ae:9d:71:bd:bd:75:d9:72:28:c4:ac:4e:18:e8:ea: 90:0a:11:11:f9:e8:8a:91:4f:f6:da:d8:b7:c6:a9: 1c:dc:17:66:14:2d:bc:9e:11:09:3e:99:f7:4f:8b: 37:5e:fc:8a:fa:e7:61:f2:ee:8f:84:60:39:3d:3f: 39:85:82:6a:bd:8e:c4:ff:e5:ea:76:7c:e1:7a:be: 5f:31:70:12:99:2c:91:0b:5a:09:c2:db:8d:7c:e9: aa:e5:6f:74:bb:0b:55:24:a2:cb:51:18:da:1e:c4: 9a:df:00:d6:12:68:bf:91:14:a7:d9:82:05:01:7e: 00:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:36:1B:60:65:78:64:B1:CC:81:12:C7:8D:8F:47:25:55:54:7D:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 209.169.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:39:75:5a:90:e0:4f:9d:52:e7:b1:ab:4e:d2:04:2a:76:85: 12:de:d5:89:53:e4:bc:3f:70:60:fd:9a:4c:3a:f2:55:c7:fe: e8:4b:30:bb:2d:5d:11:a2:19:37:8b:da:ee:3f:1a:c2:32:7d: 7f:dd:07:26:c2:fb:52:7c:e8:44:c5:ea:ca:94:a5:e9:f9:4f: 30:fe:cb:de:b9:9a:31:db:dd:98:50:c4:24:c0:df:6f:7f:ef: 3e:f6:b4:69:89:34:0a:9f:6b:97:47:70:26:a0:9c:c6:9b:0c: c8:50:dc:32:80:d0:d3:81:79:9f:71:f3:19:05:9a:08:95:31: 4a:f1:7b:7d:80:5b:6b:ec:1b:31:a1:95:d4:c0:31:56:33:cf: 45:d7:a9:9c:47:91:1d:07:33:d9:5d:e5:a0:d1:27:52:a6:0e: 0b:44:0b:89:cf:db:2e:b0:78:a5:49:c4:68:d0:4e:ba:14:7a: 06:c3:00:c4:50:77:43:06:94:77:75:09:d8:ff:df:72:77:10: 70:93:5a:48:e8:d1:36:5d:bd:4d:88:5b:6e:26:67:c3:98:88: e2:4a:e3:c5:88:41:7c:42:53:44:7e:31:76:38:d3:ef:bd:cf: 5d:06:4a:62:b0:90:aa:c6:f6:02:81:4f:f4:9a:33:70:da:d5: 7c:d0:cd:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhxwHPxsvcFUbkcLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjkyMzQ0YjgtMjg5Yy00NTZjLWE0NWUtMTliZjc0ZjMwODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhDCf/b99Z2hs5GYN4F5yudTbNKLoq2cfNIQ wZgimJaXm5qx1KE8ouzsvw2rL6RR8JMYxaUMzSW8c3LCmGjO2qNPpRgUBQ90r1It qECU/tW2MsEdlTWPIzZHQwX73tRFz/MwJY7CkH3iWgo03aCwpE+EqBjNlKq91CuA NRR69MnAOcXFQBKunXG9vXXZcijErE4Y6OqQChER+eiKkU/22ti3xqkc3BdmFC28 nhEJPpn3T4s3XvyK+udh8u6PhGA5PT85hYJqvY7E/+Xqdnzher5fMXASmSyRC1oJ wtuNfOmq5W90uwtVJKLLURjaHsSa3wDWEmi/kRSn2YIFAX4AqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE2G2BleGSxzIESx42PRyVVVH3JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNjViZjhhMjgtZDNhNy0z ZTM1LWExNjAtMjdiZmFhY2RlM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0amAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC85dVqQ4E+dUuexq07SBCp2hRLe1YlT5Lw/cGD9mkw68lXH/uhLMLst XRGiGTeL2u4/GsIyfX/dBybC+1J86ETF6sqUpen5TzD+y965mjHb3ZhQxCTA329/ 7z72tGmJNAqfa5dHcCagnMabDMhQ3DKA0NOBeZ9x8xkFmgiVMUrxe32AW2vsGzGh ldTAMVYzz0XXqZxHkR0HM9ld5aDRJ1KmDgtEC4nP2y6weKVJxGjQTroUegbDAMRQ d0MGlHd1Cdj/33J3EHCTWkjo0TZdvU2IW24mZ8OYiOJK48WIQXxCU0R+MXY40++9 z10GSmKwkKrG9gKBT/SaM3Da1XzQzYI= -----END CERTIFICATE-----Generated at Fri Mar 14 08:19:16 2025 by rpki-client