$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa File: 8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa (raw, json) Hash identifier: WhwTr56nBwiN1SqjOJ0gw9q5P16kJAgI/U93xoryQng= Subject key identifier: C1:31:13:CF:AE:69:39:C6:E9:53:74:F5:29:3F:8B:90:A1:F4:45:F4 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584953C44C9C91170F07CABC4A40 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 11290 IP address blocks: 173.0.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4c:9c:91:17:0f:07:ca:bc:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=87a79c0d-a881-4a66-ae02-0eebaed62526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ad:85:3d:a4:99:09:7c:3c:53:1f:a8:2e:96: be:3c:d4:22:fc:bc:89:b9:9c:17:19:5c:e7:b0:e0: e8:17:49:31:0e:da:32:12:9a:4d:37:76:97:e0:4b: 2b:8d:15:b6:b3:56:86:29:50:d5:b8:90:59:db:07: 60:cd:30:63:a6:9b:b6:d0:c7:68:a1:a1:e1:8f:75: ff:43:f7:c0:d3:ed:5b:bc:dc:8a:6c:74:60:16:28: 18:1c:97:8c:aa:c1:b7:5b:a5:91:36:4e:6b:67:ab: ba:67:93:ef:25:d1:1c:fe:62:b4:17:31:13:f8:23: 63:79:45:f8:02:3e:9f:f3:e5:16:e0:dc:56:fd:66: 9a:bd:1c:30:c2:77:af:51:6e:00:a5:c7:91:8a:1f: 91:22:c5:df:08:0b:13:ed:92:d7:8f:e0:f8:1b:53: 67:bb:13:94:64:1f:97:de:78:10:ff:35:5c:95:72: 10:f4:44:e6:31:23:ec:12:95:5b:5c:28:da:69:c5: fc:cc:4f:81:bd:46:2a:ea:6c:31:d6:28:16:bb:87: 49:8b:25:31:09:70:d0:ff:08:c4:6d:85:19:42:11: 6e:f3:df:4b:7a:47:cf:af:20:9c:83:26:fd:10:e7: c6:b6:6f:9b:5b:bc:fd:f8:50:34:d8:ea:19:f8:f3: 88:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:31:13:CF:AE:69:39:C6:E9:53:74:F5:29:3F:8B:90:A1:F4:45:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 173.0.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:35:40:bd:5e:78:a0:1c:ad:67:5e:f9:2d:c5:f2:62:98:b2: 58:0b:f1:c5:5c:c4:32:63:da:bb:c5:34:eb:24:ab:7e:fc:61: bf:ac:3c:3b:47:95:ff:1d:14:e6:ee:11:de:40:fc:2d:06:d9: b2:af:21:0b:57:aa:55:df:d4:68:10:af:48:b8:9c:70:b1:7d: c9:a7:73:01:ca:21:c0:86:80:b9:a3:dc:57:42:d4:1a:0d:42: e5:5a:0b:53:e1:b4:37:d7:f4:8b:5a:90:6d:58:b0:db:93:4a: d3:44:2a:60:eb:7d:8f:ca:b1:a9:20:8f:1b:1b:7b:e6:47:2c: a4:20:4a:ce:50:0f:30:73:a4:e4:20:89:59:80:04:77:06:11: 94:ed:d9:c8:59:b8:13:a2:00:04:57:b7:da:fc:05:84:22:16: 9f:c7:8e:ab:67:26:75:7d:28:59:de:5f:cc:6d:79:d4:84:b7: 53:70:f8:a3:b2:cd:bd:4b:99:f6:dc:5f:3c:a4:c8:b7:2e:3e: 91:fd:a4:0b:1d:e8:ff:f1:eb:d4:9a:fc:e2:8f:90:39:6e:1f: 04:02:1f:59:0c:04:7a:67:26:19:58:26:f2:00:5f:32:44:76: f5:55:e8:6c:f7:43:bf:15:3a:a4:e9:d1:66:70:61:72:db:66: 41:50:2b:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxEyckRcPB8q8SkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODdhNzljMGQtYTg4MS00YTY2LWFlMDItMGVlYmFlZDYyNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq2FPaSZCXw8Ux+oLpa+PNQi/LyJuZwXGVzn sODoF0kxDtoyEppNN3aX4EsrjRW2s1aGKVDVuJBZ2wdgzTBjppu20MdooaHhj3X/ Q/fA0+1bvNyKbHRgFigYHJeMqsG3W6WRNk5rZ6u6Z5PvJdEc/mK0FzET+CNjeUX4 Aj6f8+UW4NxW/WaavRwwwnevUW4ApceRih+RIsXfCAsT7ZLXj+D4G1NnuxOUZB+X 3ngQ/zVclXIQ9ETmMSPsEpVbXCjaacX8zE+BvUYq6mwx1igWu4dJiyUxCXDQ/wjE bYUZQhFu899LekfPryCcgyb9EOfGtm+bW7z9+FA02OoZ+POIywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMExE8+uaTnG6VN09Sk/i5Ch9EX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvOGQ5OGM3NGUtZGJmMy0z MmJmLTlhMzEtYjUxOTdhM2I0NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErQDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGs1QL1eeKAcrWde+S3F8mKYslgL8cVcxDJj2rvFNOskq378Yb+sPDtH lf8dFObuEd5A/C0G2bKvIQtXqlXf1GgQr0i4nHCxfcmncwHKIcCGgLmj3FdC1BoN QuVaC1PhtDfX9ItakG1YsNuTStNEKmDrfY/Ksakgjxsbe+ZHLKQgSs5QDzBzpOQg iVmABHcGEZTt2chZuBOiAARXt9r8BYQiFp/HjqtnJnV9KFneX8xtedSEt1Nw+KOy zb1LmfbcXzykyLcuPpH9pAsd6P/x69Sa/OKPkDluHwQCH1kMBHpnJhlYJvIAXzJE dvVV6Gz3Q78VOqTp0WZwYXLbZkFQK10= -----END CERTIFICATE-----Generated at Sun Apr 6 05:50:28 2025 by rpki-client