$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9888496b-db63-3363-bfab-e35ab2a737a4.roa File: 9888496b-db63-3363-bfab-e35ab2a737a4.roa (raw, json) Hash identifier: mv0DX8xctOP3Jz+dYOaOFzvDjFCtGmCbRuwdhnjrfPM= Subject key identifier: 24:F1:22:4A:D9:2F:A2:F7:59:36:49:96:0F:B4:D7:A9:F8:0C:94:11 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584957F40924BD34A2020C0874A0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9888496b-db63-3363-bfab-e35ab2a737a4.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11290 IP address blocks: 24.204.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:09:24:bd:34:a2:02:0c:08:74:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=9b8aae42-6e93-4c5b-8df9-d6e1c38c4281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a8:e1:59:ef:37:93:66:ee:d3:1d:6e:b9:b1: f4:d1:67:4a:97:af:f3:2e:9c:cb:1f:30:7e:90:af: 2d:46:fc:91:40:04:93:72:7b:68:1f:ab:38:bb:8b: cc:ae:3f:d9:7e:2d:c1:45:04:63:b4:1e:af:fb:7b: 59:80:8d:4f:06:a3:b2:50:04:0f:4b:7d:40:a4:e5: 5b:bc:8f:c5:0e:a4:5f:7d:f1:47:4e:e8:4e:03:d1: 53:fb:ad:73:b0:03:67:c1:0e:07:24:c9:8e:4e:d9: 2d:ed:ef:74:c9:9b:a3:ea:15:f7:00:f2:d5:b1:42: f8:f5:fd:f7:2b:e3:f4:75:5e:e8:04:27:3a:ae:3a: 2f:48:00:0c:43:1c:4b:a0:54:02:b2:f4:59:16:2d: 02:f6:d2:50:07:a9:02:db:88:1a:6c:22:61:34:e1: fc:80:95:b1:8e:00:79:6a:ae:09:cd:97:6e:59:ad: 47:42:32:23:4f:d1:51:c8:26:c6:3d:ef:49:b2:47: ad:58:bc:4e:2a:59:00:a9:70:7a:8b:95:f5:16:1c: bf:82:f3:dd:2a:da:96:db:ea:5e:2a:e5:92:cf:cc: 1d:e7:f6:fc:b1:24:c6:59:46:3b:50:64:33:cd:9f: 1f:39:f1:25:a5:3f:d4:1f:79:50:c3:2d:b1:b8:fd: db:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F1:22:4A:D9:2F:A2:F7:59:36:49:96:0F:B4:D7:A9:F8:0C:94:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9888496b-db63-3363-bfab-e35ab2a737a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.204.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:13:45:49:42:c6:e7:19:eb:2a:2b:c6:8c:be:10:58:9e:f9: 33:3c:d2:13:50:84:ab:b8:c9:ed:91:b0:68:d1:43:23:19:3a: 78:35:5c:b6:f0:db:c9:9d:09:86:d7:51:0f:30:4c:a6:a3:3b: a6:c6:73:14:b5:fc:95:0f:67:cf:0b:f4:bf:ea:85:8f:a9:66: 2c:ff:f9:5e:ad:78:01:de:8a:80:1f:d6:8f:79:c7:ca:54:c7: 29:1b:d2:e1:82:b5:fa:f4:a8:90:92:ea:4e:a6:6f:12:14:41: 56:c4:bb:7a:2a:4d:a8:f9:07:19:09:83:fa:e9:3a:c3:79:d2: fa:6d:60:ed:10:b1:01:ad:34:47:b2:2c:93:2e:e5:7e:eb:b1: e0:49:50:a0:60:a9:af:b8:5b:d8:d2:77:8a:52:27:98:8b:3d: cc:dd:7e:82:da:e7:dc:5c:59:08:83:62:80:0a:38:7f:f7:9c: 5a:04:0f:fe:42:85:16:20:3f:fb:68:45:1c:18:f9:1c:cd:2a: dd:b5:4f:4e:d9:3b:1d:1b:c3:6d:91:db:15:93:c1:18:7b:0d: 38:39:e0:fb:db:70:1d:19:da:4e:a8:95:1c:a8:6e:38:15:90: dc:ec:18:64:2a:bb:05:79:92:b0:41:54:de:5d:f9:f9:48:23: f5:44:05:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AkkvTSiAgwIdKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk OWI4YWFlNDItNmU5My00YzViLThkZjktZDZlMWMzOGM0MjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KjhWe83k2bu0x1uubH00WdKl6/zLpzLHzB+ kK8tRvyRQASTcntoH6s4u4vMrj/Zfi3BRQRjtB6v+3tZgI1PBqOyUAQPS31ApOVb vI/FDqRfffFHTuhOA9FT+61zsANnwQ4HJMmOTtkt7e90yZuj6hX3APLVsUL49f33 K+P0dV7oBCc6rjovSAAMQxxLoFQCsvRZFi0C9tJQB6kC24gabCJhNOH8gJWxjgB5 aq4JzZduWa1HQjIjT9FRyCbGPe9JsketWLxOKlkAqXB6i5X1Fhy/gvPdKtqW2+pe KuWSz8wd5/b8sSTGWUY7UGQzzZ8fOfElpT/UH3lQwy2xuP3bMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTxIkrZL6L3WTZJlg+016n4DJQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvOTg4ODQ5NmItZGI2My0z MzYzLWJmYWItZTM1YWIyYTczN2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGMyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYTRUlCxucZ6yorxoy+EFie+TM80hNQhKu4ye2RsGjRQyMZOng1XLbw 28mdCYbXUQ8wTKajO6bGcxS1/JUPZ88L9L/qhY+pZiz/+V6teAHeioAf1o95x8pU xykb0uGCtfr0qJCS6k6mbxIUQVbEu3oqTaj5BxkJg/rpOsN50vptYO0QsQGtNEey LJMu5X7rseBJUKBgqa+4W9jSd4pSJ5iLPczdfoLa59xcWQiDYoAKOH/3nFoED/5C hRYgP/toRRwY+RzNKt21T07ZOx0bw22R2xWTwRh7DTg54PvbcB0Z2k6olRyobjgV kNzsGGQquwV5krBBVN5d+flII/VEBRQ= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:40 2025 by rpki-client