$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/bcd8162c-1693-3580-b8e5-125ce5b4b01d.roa File: bcd8162c-1693-3580-b8e5-125ce5b4b01d.roa (raw, json) Hash identifier: 0nHO94RRLK8irc4DSsrbi+svUgRJxXfOHDQZIq+F4OM= Subject key identifier: CC:97:F1:39:C5:15:5A:84:59:C6:2C:EC:7C:51:88:95:A2:C4:DE:C2 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F432858487755E4BE07F3043924CBD680 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/bcd8162c-1693-3580-b8e5-125ce5b4b01d.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 11290 IP address blocks: 24.122.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:e4:be:07:f3:04:39:24:cb:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=7b440445-9f2a-44a8-b733-16a7ec5bd0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2c:47:4e:6d:bd:2c:f3:50:07:7d:f6:03:27: 4a:9e:21:4e:48:ca:21:c9:00:be:96:06:95:43:d9: 3e:82:4d:e7:9e:50:99:0b:15:80:f8:fa:d7:b0:49: c9:12:02:47:6b:4c:e0:43:75:f9:85:86:85:f4:47: 2d:31:ed:e6:52:bc:d5:a1:10:81:6c:6d:78:b3:15: d7:d4:94:37:b8:e0:87:ec:d3:6a:6a:f0:ee:0a:ac: 63:7a:dd:b0:39:74:69:67:d7:d3:65:4a:64:9e:3c: c8:38:2d:45:74:f1:64:16:30:2a:43:50:5b:55:c0: f2:d3:04:45:a3:be:21:66:78:61:40:e5:8b:24:df: ee:e9:3f:bb:25:6c:a9:42:d5:e3:e0:8a:ce:ea:af: 05:ea:81:22:0f:ec:07:76:a8:ed:5a:45:25:72:dc: 4d:aa:9a:cf:d8:0b:5c:17:e8:f5:90:66:46:43:38: ef:92:2b:c8:28:67:09:33:2c:07:8e:ed:2a:bb:85: e1:47:fa:4e:dd:1b:63:c1:76:81:c7:34:75:c9:f8: fd:32:15:60:d3:df:f1:6f:00:52:56:6c:6a:0e:75: 0f:78:34:0b:23:86:40:09:19:25:b1:5d:ba:c1:e1: 4f:60:3c:47:1c:93:d2:aa:d4:40:5d:af:85:ea:39: 56:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:97:F1:39:C5:15:5A:84:59:C6:2C:EC:7C:51:88:95:A2:C4:DE:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/bcd8162c-1693-3580-b8e5-125ce5b4b01d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b8:1e:a5:a1:40:d6:55:0c:9e:eb:d8:2e:ca:8d:56:71:94: 3e:85:dc:51:4f:35:2a:08:64:40:ca:28:92:dc:b3:48:22:06: 01:d3:c1:69:e2:3d:e6:21:c5:84:2c:54:36:a3:c3:6c:6a:e2: 45:1c:d5:22:bf:11:3c:c0:13:4d:76:7d:9f:d6:63:18:f5:c9: cb:49:61:87:4d:5d:ac:38:e6:d6:8e:d6:21:a8:0b:20:d5:09: f1:a9:9f:c3:c7:a7:c6:f7:60:b3:5f:ea:2c:2f:d3:4f:c6:ca: 18:41:bf:f9:4e:42:78:fe:61:0e:da:b4:86:cf:71:62:e2:61: 5b:34:ba:fd:95:90:dc:30:e3:23:03:ce:ac:9c:32:a3:99:65: 41:97:4f:56:30:d1:42:9e:59:a2:5b:6d:fa:fd:a8:e6:d4:42: cb:9e:0b:23:4b:9f:8e:ba:0c:ce:97:a0:c6:60:91:73:de:5a: c0:0d:c3:86:ca:d1:60:45:c5:dc:44:ba:b9:3f:aa:04:0c:2b: 3e:04:09:b5:4f:82:26:c8:70:0b:1a:f8:ca:54:59:64:90:2a: 30:0b:53:df:55:57:6e:0f:f0:c1:d0:5a:86:22:66:f6:00:92: f2:50:03:9f:26:69:e1:d9:21:3c:35:31:34:7d:af:65:73:a4: 56:b1:89:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VeS+B/MEOSTL1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk N2I0NDA0NDUtOWYyYS00NGE4LWI3MzMtMTZhN2VjNWJkMGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqixHTm29LPNQB332AydKniFOSMohyQC+lgaV Q9k+gk3nnlCZCxWA+PrXsEnJEgJHa0zgQ3X5hYaF9EctMe3mUrzVoRCBbG14sxXX 1JQ3uOCH7NNqavDuCqxjet2wOXRpZ9fTZUpknjzIOC1FdPFkFjAqQ1BbVcDy0wRF o74hZnhhQOWLJN/u6T+7JWypQtXj4IrO6q8F6oEiD+wHdqjtWkUlctxNqprP2Atc F+j1kGZGQzjvkivIKGcJMywHju0qu4XhR/pO3RtjwXaBxzR1yfj9MhVg09/xbwBS VmxqDnUPeDQLI4ZACRklsV26weFPYDxHHJPSqtRAXa+F6jlWSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyX8TnFFVqEWcYs7HxRiJWixN7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYmNkODE2MmMtMTY5My0z NTgwLWI4ZTUtMTI1Y2U1YjRiMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+4HqWhQNZVDJ7r2C7KjVZxlD6F3FFPNSoIZEDKKJLcs0giBgHTwWni PeYhxYQsVDajw2xq4kUc1SK/ETzAE012fZ/WYxj1yctJYYdNXaw45taO1iGoCyDV CfGpn8PHp8b3YLNf6iwv00/GyhhBv/lOQnj+YQ7atIbPcWLiYVs0uv2VkNww4yMD zqycMqOZZUGXT1Yw0UKeWaJbbfr9qObUQsueCyNLn466DM6XoMZgkXPeWsANw4bK 0WBFxdxEurk/qgQMKz4ECbVPgibIcAsa+MpUWWSQKjALU99VV24P8MHQWoYiZvYA kvJQA58maeHZITw1MTR9r2VzpFaxidg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:19 2025 by rpki-client