$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/7cf4934a-5acb-33be-88d6-c0ee5ba15915.roa File: 7cf4934a-5acb-33be-88d6-c0ee5ba15915.roa (raw, json) Hash identifier: k7tHfwRfj13jQuSDKZG5s/dOMGRQb6LfzJMktrDFSkU= Subject key identifier: 07:20:F4:ED:31:F1:F6:D8:FC:B9:71:7D:92:2A:04:90:12:55:BA:A8 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584957F409B7A8A70C4150C3F140 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/7cf4934a-5acb-33be-88d6-c0ee5ba15915.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11290 IP address blocks: 24.122.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:09:b7:a8:a7:0c:41:50:c3:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=1d4c4d38-b3b6-41a0-b5bc-220c2e59abb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0e:ee:23:21:3e:dc:1f:ec:eb:c0:d3:df:27: 5e:9c:de:e7:af:ee:8c:34:08:72:fc:e7:f9:fb:5c: a6:83:d8:c8:30:e7:9d:c6:0e:28:0c:dd:0d:1c:21: 36:d2:41:cd:d3:8a:f4:28:95:19:94:30:12:ed:92: 0a:20:0c:85:d4:df:64:36:c7:71:1e:d8:ed:5d:d7: f1:8b:6c:d6:d1:66:50:11:0e:9a:c4:6d:b8:1c:01: 52:6b:ce:9c:0e:18:3a:76:0b:aa:2c:de:b1:05:20: 21:80:8d:d9:98:42:5c:a8:9a:f8:dc:5d:d4:72:d6: b7:fc:03:e5:a8:63:14:1e:49:c9:8e:95:9f:80:52: 05:12:2c:a3:bd:02:3f:18:63:a3:71:dc:b7:10:8e: e6:32:7e:36:dd:7c:f2:36:9d:cc:28:a1:24:de:08: 2b:b9:88:cf:44:47:0d:15:1f:86:f6:fe:cf:91:42: 50:e2:ad:54:d6:c5:ce:3f:4e:3f:ab:65:46:de:d5: 8e:dd:5c:3e:dc:e3:4d:44:c9:4c:8c:85:85:23:a7: a1:1d:43:cc:3e:cd:e8:f7:9a:d7:d7:cb:d0:7a:74: 0e:fe:f1:ce:5e:39:5d:b5:4e:cb:81:3f:b6:b0:2c: 63:f2:36:1a:16:c8:eb:6f:33:05:7e:49:ae:90:55: 7a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:20:F4:ED:31:F1:F6:D8:FC:B9:71:7D:92:2A:04:90:12:55:BA:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/7cf4934a-5acb-33be-88d6-c0ee5ba15915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ba:6c:ea:94:7f:eb:4c:f8:01:ff:ca:60:96:21:5c:95:cc: e2:14:7f:45:c2:4f:aa:d9:40:04:1b:9d:94:8a:c5:4f:b6:42: fc:ca:1b:f0:36:9a:47:9b:4e:33:64:bb:53:56:21:8e:f0:a6: af:28:bf:37:81:23:82:40:35:56:ab:ab:20:3a:e9:51:a7:15: 05:3e:96:be:ab:c5:06:e5:15:43:eb:82:f6:a2:ce:d9:11:c7: ba:75:3e:e3:9e:98:74:63:c9:d9:a1:c3:e0:00:d8:23:61:00: 10:5b:5e:05:40:cc:ff:ed:41:ad:f8:1a:d3:6b:dc:21:51:74: f3:e5:30:db:1a:1a:a7:d1:97:64:95:98:ba:fa:33:35:cf:06: b4:52:91:1e:5e:f1:25:95:82:82:70:fd:de:f7:ba:dc:e9:05: cd:01:74:0d:76:cd:04:3a:a5:70:61:f8:01:15:f1:13:83:ba: 70:4c:12:0c:54:61:cb:1d:f2:fd:4d:cb:97:8c:c4:d9:a3:d2: 5b:3d:11:21:b9:0c:4d:40:44:7b:05:5a:09:d2:66:65:d6:b5: cd:f0:ef:85:21:15:c8:04:62:e4:a0:50:6d:16:73:8b:de:ec: 42:fb:cd:06:ea:6f:1a:2d:5e:42:48:96:3a:d7:63:00:f7:b7: b8:a4:c6:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9Am3qKcMQVDD8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MWQ0YzRkMzgtYjNiNi00MWEwLWI1YmMtMjIwYzJlNTlhYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA7uIyE+3B/s68DT3ydenN7nr+6MNAhy/Of5 +1ymg9jIMOedxg4oDN0NHCE20kHN04r0KJUZlDAS7ZIKIAyF1N9kNsdxHtjtXdfx i2zW0WZQEQ6axG24HAFSa86cDhg6dguqLN6xBSAhgI3ZmEJcqJr43F3Ucta3/APl qGMUHknJjpWfgFIFEiyjvQI/GGOjcdy3EI7mMn423XzyNp3MKKEk3ggruYjPREcN FR+G9v7PkUJQ4q1U1sXOP04/q2VG3tWO3Vw+3ONNRMlMjIWFI6ehHUPMPs3o95rX 18vQenQO/vHOXjldtU7LgT+2sCxj8jYaFsjrbzMFfkmukFV6TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcg9O0x8fbY/LlxfZIqBJASVbqoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvN2NmNDkzNGEtNWFjYi0z M2JlLTg4ZDYtYzBlZTViYTE1OTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC6bOqUf+tM+AH/ymCWIVyVzOIUf0XCT6rZQAQbnZSKxU+2QvzKG/A2 mkebTjNku1NWIY7wpq8ovzeBI4JANVarqyA66VGnFQU+lr6rxQblFUPrgvaiztkR x7p1PuOemHRjydmhw+AA2CNhABBbXgVAzP/tQa34GtNr3CFRdPPlMNsaGqfRl2SV mLr6MzXPBrRSkR5e8SWVgoJw/d73utzpBc0BdA12zQQ6pXBh+AEV8RODunBMEgxU Ycsd8v1Ny5eMxNmj0ls9ESG5DE1ARHsFWgnSZmXWtc3w74UhFcgEYuSgUG0Wc4ve 7EL7zQbqbxotXkJIljrXYwD3t7ikxhw= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:07 2025 by rpki-client