$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa File: b5f5f32e-5188-314d-a26e-19c0504c484c.roa (raw, json) Hash identifier: 3XBmrI/YFEjHsfa2pLairx7fcMgBEFYHWpWNazNlTXY= Subject key identifier: D3:09:55:3C:E1:4F:84:90:C4:5F:AD:29:AE:6A:3A:E9:D4:6A:65:0F Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584950F966A4A6288E1C3EB00220 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 11290 IP address blocks: 209.54.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:66:a4:a6:28:8e:1c:3e:b0:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=f273bc59-680b-4f91-80cb-3074b29b678d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:5e:98:86:21:7f:6d:f4:23:d4:6e:95:90: c3:98:1b:19:ca:a4:c1:15:55:20:fb:11:06:15:92: f4:11:01:f0:91:15:5b:68:db:a6:cd:a1:d1:89:93: 8e:f7:57:0b:9f:7c:d1:a4:5e:2e:31:4f:a6:fa:00: 4b:cc:08:1a:7a:a9:43:53:75:42:46:09:27:3a:f9: 09:53:66:a2:9f:73:aa:87:18:67:48:5a:df:b4:c4: fb:14:38:1b:25:a2:67:cb:a3:ff:7a:7b:3f:ed:d2: 1c:4a:35:0b:51:61:89:87:82:a4:15:e7:78:06:d0: 8e:1e:8b:3b:b0:08:94:ad:9c:51:f2:cc:44:b9:cc: 5d:04:34:c1:ef:c0:0b:0f:a4:3d:a3:c0:38:87:a5: 46:0c:7e:e4:6a:9e:ea:76:de:e5:46:d9:62:84:ee: 03:05:38:80:ae:e5:a0:04:a7:f7:bc:c0:48:fd:1b: b7:ee:6b:8d:9d:a8:d3:0c:95:95:af:4e:94:f0:3d: cd:63:69:64:c6:3a:39:d1:25:e1:d7:0d:0d:fd:8a: 5c:ab:15:32:40:9d:97:95:07:52:71:78:43:63:f1: 0b:4a:09:0b:3a:2c:df:29:60:14:da:44:08:5f:80: e1:e9:b7:c3:9c:d9:4c:27:70:8f:aa:e4:5c:9a:55: 2e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:09:55:3C:E1:4F:84:90:C4:5F:AD:29:AE:6A:3A:E9:D4:6A:65:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 209.54.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ed:be:29:9b:06:07:b0:2d:93:0f:5d:53:45:0d:5f:3f:56: 6f:44:05:a0:1a:e4:38:a3:d2:f0:6d:ab:b1:6e:4b:ba:db:1d: 29:5a:b9:9d:c4:7f:16:05:3b:6b:f4:99:c9:26:85:cb:91:20: bd:4a:c3:d3:bb:63:b8:00:ee:a9:3e:05:53:a8:cd:57:37:c0: d3:08:31:b8:e2:7e:db:57:d1:c2:c7:30:f0:52:53:38:50:48: 1b:87:b9:a4:f7:35:2a:69:f0:b1:17:cf:99:5f:2f:fb:d8:f4: f0:8c:83:25:d3:04:ba:bd:e6:07:af:f2:cc:a8:60:d7:04:92: cd:a3:f1:7c:87:a9:d6:b8:b1:ae:6c:da:d8:ad:2c:74:ce:78: 22:31:fb:6a:9a:43:64:e3:c8:79:af:bf:a4:72:ca:f5:67:03: 56:75:b4:75:5c:09:a1:81:f5:12:c2:5f:8a:e6:12:84:d0:76: e6:4b:ee:b1:04:cb:6f:ae:52:68:c2:78:ea:33:7d:ee:68:f0: 9d:64:aa:9e:5b:55:5f:3a:eb:63:f5:ac:bb:89:48:3b:5c:97: 31:98:9d:fd:70:93:5c:f0:dd:97:54:67:ec:84:db:4b:40:12: 01:67:6f:59:c1:5d:c1:08:74:8d:be:f1:39:13:86:d3:ae:da: 34:18:4a:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WakpiiOHD6wAiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk ZjI3M2JjNTktNjgwYi00ZjkxLTgwY2ItMzA3NGIyOWI2NzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hdemIYhf230I9RulZDDmBsZyqTBFVUg+xEG FZL0EQHwkRVbaNumzaHRiZOO91cLn3zRpF4uMU+m+gBLzAgaeqlDU3VCRgknOvkJ U2ain3OqhxhnSFrftMT7FDgbJaJny6P/ens/7dIcSjULUWGJh4KkFed4BtCOHos7 sAiUrZxR8sxEucxdBDTB78ALD6Q9o8A4h6VGDH7kap7qdt7lRtlihO4DBTiAruWg BKf3vMBI/Ru37muNnajTDJWVr06U8D3NY2lkxjo50SXh1w0N/YpcqxUyQJ2XlQdS cXhDY/ELSgkLOizfKWAU2kQIX4Dh6bfDnNlMJ3CPquRcmlUu2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMJVTzhT4SQxF+tKa5qOunUamUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYjVmNWYzMmUtNTE4OC0z MTRkLWEyNmUtMTljMDUwNGM0ODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0TZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITtvimbBgewLZMPXVNFDV8/Vm9EBaAa5Dij0vBtq7FuS7rbHSlauZ3E fxYFO2v0mckmhcuRIL1Kw9O7Y7gA7qk+BVOozVc3wNMIMbjifttX0cLHMPBSUzhQ SBuHuaT3NSpp8LEXz5lfL/vY9PCMgyXTBLq95gev8syoYNcEks2j8XyHqda4sa5s 2titLHTOeCIx+2qaQ2TjyHmvv6RyyvVnA1Z1tHVcCaGB9RLCX4rmEoTQduZL7rEE y2+uUmjCeOozfe5o8J1kqp5bVV8662P1rLuJSDtclzGYnf1wk1zw3ZdUZ+yE20tA EgFnb1nBXcEIdI2+8TkThtOu2jQYSns= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:28 2025 by rpki-client