$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa File: 823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa (raw, json) Hash identifier: YektSgMHjBPZKKmpgL9NZ4v5VBeUpqEFBTC7eJG3Ou4= Subject key identifier: EC:1A:8D:31:D8:85:2B:D0:75:9B:7D:08:37:51:B3:F4:D9:46:F2:B0 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584953C44D1602FF90B17773BB80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 11290 IP address blocks: 162.217.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4d:16:02:ff:90:b1:77:73:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=a8b93977-5d32-44ca-9337-12f02020c893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2d:8b:4a:82:1f:99:7e:99:4f:36:99:55:f5: 33:05:2d:53:b1:d0:d3:75:17:8e:3f:b0:be:e4:57: 9a:6d:13:92:d9:30:e7:88:05:87:f3:24:d9:35:c2: dd:fb:8e:d8:91:8e:28:93:d4:b1:ce:11:a9:37:6a: 31:ee:58:39:58:82:bf:03:2f:56:d1:e8:dd:dd:05: ea:5d:f5:f1:da:31:04:f6:33:5d:20:4f:20:f9:11: 84:46:af:c4:f1:c9:12:fd:26:43:55:c9:df:49:ab: 84:50:ba:a4:0b:9a:4c:df:d6:c7:ea:2b:e3:b0:fa: e0:43:45:ce:b3:4c:fb:60:09:a4:b6:a8:9e:d7:77: 61:16:22:52:14:33:ab:d0:22:5d:a9:cd:8d:d0:95: 29:28:e1:70:f3:03:18:cb:89:0c:82:6a:e5:26:1a: 3b:2b:73:00:c6:b3:38:8a:b2:b6:d1:8a:5c:26:8a: a0:0f:5b:4b:84:dc:db:b5:98:b2:a7:e9:da:2c:d9: 26:95:15:20:c5:73:bb:82:a5:a7:f0:64:d3:12:fe: 4d:a9:30:82:9a:7a:91:ee:5d:ad:77:37:c5:de:32: 95:fe:4e:04:e9:36:93:8b:60:c9:5c:18:cc:e0:79: 21:8b:cd:00:48:71:bc:38:9c:bf:12:d4:ee:d0:3d: 82:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1A:8D:31:D8:85:2B:D0:75:9B:7D:08:37:51:B3:F4:D9:46:F2:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 162.217.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c5:92:51:9e:d8:17:de:7f:16:7b:78:b5:77:ef:1a:b2:26: 6d:0b:fc:09:79:42:17:4f:83:0f:78:e5:4c:a7:29:2a:01:90: 3e:4a:56:0a:85:61:f0:cd:5c:7a:2b:f5:3f:f9:1a:5f:f8:d5: e7:d2:e8:4e:d2:21:a5:96:db:0e:7d:a5:08:09:4e:05:4e:a0: 5d:45:22:11:d4:33:6a:9e:e0:01:55:0c:1e:0e:14:a8:9c:14: b5:3f:cc:d0:20:86:b6:4c:a3:39:25:75:ae:ea:4e:f1:75:81: 86:ca:ee:35:f7:6d:18:71:b0:43:d1:4a:2e:f6:93:06:a9:f9: 2f:20:a7:02:5a:e8:48:f1:06:7d:73:1f:d7:dc:bc:57:7c:1b: dc:c2:72:49:f2:e1:da:49:88:c2:dd:b1:f3:fb:f6:35:35:6c: 99:5d:a9:6f:61:d9:00:00:e4:f0:c8:49:a6:cc:04:45:45:62: ed:8c:b6:77:0e:22:d6:25:20:d3:16:57:f8:05:48:e7:7f:4d: eb:b4:e2:f5:1f:dc:6f:38:18:6a:bf:88:70:72:a2:66:ed:00: 49:93:b4:ee:14:bf:a1:fb:d9:ff:f7:21:64:18:c5:f2:4d:eb: c2:0a:90:64:e9:cf:f6:41:79:d5:c6:9b:d9:ce:b8:57:a2:68: 4a:44:45:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxE0WAv+QsXdzu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YThiOTM5NzctNWQzMi00NGNhLTkzMzctMTJmMDIwMjBjODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki2LSoIfmX6ZTzaZVfUzBS1TsdDTdReOP7C+ 5FeabROS2TDniAWH8yTZNcLd+47YkY4ok9SxzhGpN2ox7lg5WIK/Ay9W0ejd3QXq XfXx2jEE9jNdIE8g+RGERq/E8ckS/SZDVcnfSauEULqkC5pM39bH6ivjsPrgQ0XO s0z7YAmktqie13dhFiJSFDOr0CJdqc2N0JUpKOFw8wMYy4kMgmrlJho7K3MAxrM4 irK20YpcJoqgD1tLhNzbtZiyp+naLNkmlRUgxXO7gqWn8GTTEv5NqTCCmnqR7l2t dzfF3jKV/k4E6TaTi2DJXBjM4Hkhi80ASHG8OJy/EtTu0D2CVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwajTHYhSvQdZt9CDdRs/TZRvKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvODIzYjQwN2UtNmFlNC0z MGExLWFlMTgtODJhNWJhNzdiZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLFklGe2BfefxZ7eLV37xqyJm0L/Al5QhdPgw945UynKSoBkD5KVgqF YfDNXHor9T/5Gl/41efS6E7SIaWW2w59pQgJTgVOoF1FIhHUM2qe4AFVDB4OFKic FLU/zNAghrZMozklda7qTvF1gYbK7jX3bRhxsEPRSi72kwap+S8gpwJa6EjxBn1z H9fcvFd8G9zCckny4dpJiMLdsfP79jU1bJldqW9h2QAA5PDISabMBEVFYu2MtncO ItYlINMWV/gFSOd/Teu04vUf3G84GGq/iHByombtAEmTtO4Uv6H72f/3IWQYxfJN 68IKkGTpz/ZBedXGm9nOuFeiaEpERQg= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:12 2025 by rpki-client