$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c0b85428-36e7-3478-8d6a-b93d99ccda8d.roa File: c0b85428-36e7-3478-8d6a-b93d99ccda8d.roa (raw, json) Hash identifier: qWxrFx+pvrZLUjvTld/rMD6CLPbRI9wb/22dweDS/To= Subject key identifier: 51:07:3C:D9:22:A5:47:8B:9A:5A:A7:FE:3B:20:66:E3:18:9A:49:E5 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584957F4094AB033D3D9BBC8EAA0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c0b85428-36e7-3478-8d6a-b93d99ccda8d.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11290 IP address blocks: 24.142.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:09:4a:b0:33:d3:d9:bb:c8:ea:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=dd0945d5-5859-451b-ac0d-4d72ffb949e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:a4:c1:d2:d2:db:f3:55:13:3a:f2:ad:0a: 37:5c:d9:7a:c6:24:e2:05:52:b9:62:eb:71:27:fc: ce:df:df:fa:90:da:e7:85:2a:d4:00:47:d5:c0:3c: 6b:8b:65:da:f4:1b:77:18:0f:a5:e5:bf:f0:0f:b3: 8a:cf:ed:09:a0:32:da:6a:3e:fc:d1:b2:73:2c:2d: 0f:a6:40:bf:e2:6e:97:f6:dc:f3:3c:ab:2e:12:4e: 46:31:fe:d7:ec:d0:b3:e9:7c:f9:bc:00:35:0f:78: e3:05:51:32:79:fa:ca:67:1d:89:9c:31:3f:ec:7c: ab:5d:8b:02:67:73:4d:93:3d:03:fb:2f:9e:65:6e: a7:2e:3c:0f:c0:77:8f:dc:db:ed:b5:a3:de:80:ec: 27:f5:8f:73:71:d0:e3:f7:9f:3b:41:c7:90:0b:21: 35:39:00:d2:e0:f7:d3:56:83:0f:a1:4c:bd:64:80: 88:d4:5f:67:05:b2:a0:f3:6c:1a:75:9c:16:42:d1: 04:7a:9a:02:dd:16:cf:cd:26:78:47:d7:47:2e:8d: 62:5a:3a:09:fb:03:bf:fe:1d:7b:65:3f:03:3d:7e: 25:a5:88:e1:d0:44:d8:4a:b7:10:53:94:c5:02:0e: 93:8e:fc:16:ee:ec:14:e9:1b:de:a8:43:61:27:eb: 37:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:07:3C:D9:22:A5:47:8B:9A:5A:A7:FE:3B:20:66:E3:18:9A:49:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c0b85428-36e7-3478-8d6a-b93d99ccda8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.142.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:af:4e:f5:53:7a:63:cf:54:10:b5:b0:22:e7:72:db:7d:1b: b7:17:a8:da:7b:87:14:38:59:c7:e9:0d:ca:95:96:88:8a:85: d4:54:7c:06:ed:21:db:b0:6d:06:72:15:7d:16:d7:8a:69:7a: 10:c5:a6:ff:93:09:2f:f1:48:08:86:0d:7c:67:17:18:b9:0a: 8f:43:dd:77:c9:f5:31:2e:4c:a2:15:b5:3b:26:ad:fe:4c:7a: f6:c8:ce:f5:a8:ec:f8:3a:8a:12:0a:1b:5a:68:9e:4b:ae:f3: e2:09:96:be:3d:46:32:03:ae:8f:3b:8d:1e:5f:1b:03:6a:be: 43:d4:b1:92:7d:96:28:03:6d:31:66:59:5c:77:4d:da:00:79: ce:37:55:ea:52:84:a7:1a:11:9f:06:e6:84:0c:f8:51:da:d5: 54:f2:b9:5e:25:f7:5a:fb:43:6b:14:68:10:47:e0:eb:d0:f3: 56:3a:a8:66:6b:13:cd:e4:e8:e5:3b:7d:9d:a7:7e:7c:6e:77: 5a:25:f7:07:eb:db:f9:03:f9:fe:3a:1a:7f:91:fe:16:12:a9: a0:3e:50:c5:a7:65:0d:ad:20:0f:f8:3f:97:58:f3:24:02:ee: f7:98:60:e4:a1:ab:64:38:db:66:2e:5d:b2:75:d4:08:a7:68: b2:af:d6:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AlKsDPT2bvI6qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZGQwOTQ1ZDUtNTg1OS00NTFiLWFjMGQtNGQ3MmZmYjk0OWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMKkwdLS2/NVEzryrQo3XNl6xiTiBVK5Yutx J/zO39/6kNrnhSrUAEfVwDxri2Xa9Bt3GA+l5b/wD7OKz+0JoDLaaj780bJzLC0P pkC/4m6X9tzzPKsuEk5GMf7X7NCz6Xz5vAA1D3jjBVEyefrKZx2JnDE/7HyrXYsC Z3NNkz0D+y+eZW6nLjwPwHeP3NvttaPegOwn9Y9zcdDj9587QceQCyE1OQDS4PfT VoMPoUy9ZICI1F9nBbKg82wadZwWQtEEepoC3RbPzSZ4R9dHLo1iWjoJ+wO//h17 ZT8DPX4lpYjh0ETYSrcQU5TFAg6TjvwW7uwU6RveqENhJ+s3SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEHPNkipUeLmlqn/jsgZuMYmknlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYzBiODU0MjgtMzZlNy0z NDc4LThkNmEtYjkzZDk5Y2NkYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGI5QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyvTvVTemPPVBC1sCLnctt9G7cXqNp7hxQ4WcfpDcqVloiKhdRUfAbt IduwbQZyFX0W14ppehDFpv+TCS/xSAiGDXxnFxi5Co9D3XfJ9TEuTKIVtTsmrf5M evbIzvWo7Pg6ihIKG1ponkuu8+IJlr49RjIDro87jR5fGwNqvkPUsZJ9ligDbTFm WVx3TdoAec43VepShKcaEZ8G5oQM+FHa1VTyuV4l91r7Q2sUaBBH4OvQ81Y6qGZr E83k6OU7fZ2nfnxud1ol9wfr2/kD+f46Gn+R/hYSqaA+UMWnZQ2tIA/4P5dY8yQC 7veYYOShq2Q422YuXbJ11AinaLKv1rM= -----END CERTIFICATE-----Generated at Sun Apr 6 05:50:24 2025 by rpki-client