$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/96cfbcf1-b432-3689-8421-0dc518512723.roa File: 96cfbcf1-b432-3689-8421-0dc518512723.roa (raw, json) Hash identifier: 3djPeko/393dP8zmLmPnwfo8S9z9Okmyx8i3ZN+SK10= Subject key identifier: 77:41:5F:D4:D5:75:FE:EF:DA:F3:85:56:65:F8:D7:95:40:F0:E4:CA Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F432858487755E1F9774CB7CC518FB5C0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/96cfbcf1-b432-3689-8421-0dc518512723.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 11290 IP address blocks: 74.210.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:e1:f9:77:4c:b7:cc:51:8f:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=7002516a-460f-419a-8de0-ccc00b9bc0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:02:d6:96:7a:e1:63:a6:01:92:f7:f8:71:13: 6e:72:b8:9a:39:ee:86:09:ca:4b:16:23:f3:1c:0c: b0:6a:ef:04:ef:c1:6b:7b:e6:49:a8:c2:12:13:4b: e0:c4:db:30:5f:b2:c6:73:5b:ed:85:9e:de:63:6e: 85:21:37:a9:d3:72:ac:e4:fe:bd:e5:f4:06:54:50: 7c:a3:73:8f:b6:ff:6e:e7:e7:af:80:e6:f8:29:a7: 34:e5:d7:1c:eb:ad:12:b7:2a:24:7d:50:c0:7e:1d: c2:bf:45:c0:2b:91:87:68:99:39:fb:0e:c7:f5:2c: 6d:a7:5b:f7:c8:2e:db:dd:1b:e7:e8:6c:5c:44:47: d2:07:c4:96:f7:b5:79:5e:e1:c9:12:d9:fb:1c:67: e4:c3:bb:27:2d:55:0a:6d:15:2f:03:fd:2c:29:e7: 66:c0:7d:b1:d3:32:0f:45:7f:05:c5:6e:82:7c:97: 8b:20:dd:06:79:b2:10:51:68:4f:d0:c3:97:3e:2e: 4e:6c:39:ed:db:6e:aa:e3:bb:c0:55:98:93:40:03: f5:14:d9:44:f6:a6:59:f5:d9:97:74:9c:07:c1:da: 28:36:61:7e:d7:4c:3f:87:e2:49:27:75:be:cd:4c: a7:bd:58:97:d5:42:28:89:9a:f4:da:84:d7:48:06: 0b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:41:5F:D4:D5:75:FE:EF:DA:F3:85:56:65:F8:D7:95:40:F0:E4:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/96cfbcf1-b432-3689-8421-0dc518512723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 74.210.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c3:8c:ec:40:7e:be:82:2d:b4:f1:03:a9:5b:37:dd:53:f8: 8f:9e:ee:fa:9e:4e:4c:9d:1a:7d:b4:70:8b:df:7d:3b:97:5e: c8:b7:5f:b8:9e:38:cc:54:b5:c2:30:b7:cb:a8:be:ad:f4:f4: 07:be:ca:79:2e:72:1b:02:78:f5:d9:61:24:cf:f3:62:0c:14: 49:5f:74:18:72:86:5c:38:c6:f3:e1:19:2c:a3:8f:27:17:47: c4:5a:54:af:f0:5b:b2:88:d5:8a:92:d1:6c:26:ec:96:ae:2c: bf:22:43:2d:4a:8f:5b:5d:93:74:6b:88:4a:27:1c:a6:fe:bc: 64:d2:0c:42:3a:2b:5b:54:9d:a5:2a:eb:7c:10:fe:c0:a8:e8: cf:d7:d9:9e:ad:5e:49:c4:f3:9c:59:c4:b2:30:48:6f:55:22: d2:ca:bd:d7:6a:9c:5f:98:0e:0e:71:59:ef:54:66:48:c7:9d: bc:b6:31:1a:88:03:91:83:3c:a4:fb:16:3d:3e:10:28:a5:5a: fe:67:0d:45:59:35:96:f2:ff:b8:41:e6:74:34:d8:29:3c:6e: 2f:ae:12:61:8c:ea:73:6d:a7:42:8e:ca:61:6e:1d:63:2d:a0: c2:f3:53:78:10:c6:4a:74:0f:71:36:08:e3:8c:02:8d:8d:49: cf:f6:22:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VeH5d0y3zFGPtcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk NzAwMjUxNmEtNDYwZi00MTlhLThkZTAtY2NjMDBiOWJjMGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwALWlnrhY6YBkvf4cRNucriaOe6GCcpLFiPz HAywau8E78Fre+ZJqMISE0vgxNswX7LGc1vthZ7eY26FITep03Ks5P695fQGVFB8 o3OPtv9u5+evgOb4Kac05dcc660StyokfVDAfh3Cv0XAK5GHaJk5+w7H9Sxtp1v3 yC7b3Rvn6GxcREfSB8SW97V5XuHJEtn7HGfkw7snLVUKbRUvA/0sKedmwH2x0zIP RX8FxW6CfJeLIN0GebIQUWhP0MOXPi5ObDnt226q47vAVZiTQAP1FNlE9qZZ9dmX dJwHwdooNmF+10w/h+JJJ3W+zUynvViX1UIoiZr02oTXSAYLyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdBX9TVdf7v2vOFVmX415VA8OTKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvOTZjZmJjZjEtYjQzMi0z Njg5LTg0MjEtMGRjNTE4NTEyNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFStLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLDjOxAfr6CLbTxA6lbN91T+I+e7vqeTkydGn20cIvffTuXXsi3X7ie OMxUtcIwt8uovq309Ae+ynkuchsCePXZYSTP82IMFElfdBhyhlw4xvPhGSyjjycX R8RaVK/wW7KI1YqS0Wwm7JauLL8iQy1Kj1tdk3RriEonHKb+vGTSDEI6K1tUnaUq 63wQ/sCo6M/X2Z6tXknE85xZxLIwSG9VItLKvddqnF+YDg5xWe9UZkjHnby2MRqI A5GDPKT7Fj0+ECilWv5nDUVZNZby/7hB5nQ02Ck8bi+uEmGM6nNtp0KOymFuHWMt oMLzU3gQxkp0D3E2COOMAo2NSc/2IgE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:03:46 2025 by rpki-client