$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c5ba30e8-212b-3fc8-a292-e605be207c97.roa File: c5ba30e8-212b-3fc8-a292-e605be207c97.roa (raw, json) Hash identifier: YfYb8SRsH+g/tDQN6zP80W/sYLipmutNNtU+E5m9o7Y= Subject key identifier: 4C:9F:70:13:F6:63:5D:F0:0F:88:39:A7:D9:8F:CD:3C:7E:53:BA:5B Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F43285848748B21009E16372A74C7A1F0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c5ba30e8-212b-3fc8-a292-e605be207c97.roa Signing time: Mon 06 Jan 2025 14:00:52 +0000 ROA not before: Mon 06 Jan 2025 14:00:52 +0000 ROA not after: Sun 06 Apr 2025 13:00:52 +0000 asID: 11290 IP address blocks: 104.192.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:8b:21:00:9e:16:37:2a:74:c7:a1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 6 14:00:52 2025 GMT Not After : Apr 6 13:00:52 2025 GMT Subject: CN=51c525fb-c814-4d87-9273-670e5fc712e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e7:9a:7b:33:78:b3:5c:e4:c1:87:05:99:17: ff:a8:d6:41:06:c1:9c:63:cd:4a:0f:d7:f6:dd:06: 7f:97:0f:1f:53:0b:4f:62:6e:5c:9a:1d:82:51:d0: 93:96:20:a4:9f:cb:b4:49:32:dc:c6:d0:58:5e:b2: b7:24:c7:ae:d7:3c:d9:91:56:81:cf:81:a4:93:90: dc:25:e5:5d:62:48:6c:a0:1e:08:d3:6d:f8:3b:d7: f7:ea:0a:b3:d5:19:24:66:df:72:d2:b5:07:eb:86: 8a:55:e5:44:96:17:1f:7a:22:ee:36:20:89:57:6e: 69:2d:98:42:26:a2:3b:f4:73:1b:4a:2f:3d:87:dd: 11:a1:30:94:b6:93:37:2f:14:eb:12:44:3e:e2:46: cb:66:1d:43:2a:6f:09:cc:2a:19:a4:e2:57:b0:2e: a6:18:21:30:c6:31:97:c3:09:8f:e4:2c:59:c9:8b: 28:dc:97:e2:f2:7a:26:af:c9:b7:55:67:ea:9e:bf: 93:b2:db:57:ed:9a:ca:84:02:e1:e9:f6:d5:5d:5b: dc:d3:62:eb:47:a9:75:45:53:25:37:18:35:a8:68: dd:c9:02:28:8e:d8:e8:94:81:d6:f7:40:c6:9b:b3: a0:e5:92:a4:19:05:5b:f3:31:53:4a:84:ca:2f:d5: d0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9F:70:13:F6:63:5D:F0:0F:88:39:A7:D9:8F:CD:3C:7E:53:BA:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c5ba30e8-212b-3fc8-a292-e605be207c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 104.192.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e0:80:c6:a5:7e:96:bc:c1:51:b3:16:40:5f:01:d2:87:1a: b9:63:dd:c4:6d:43:7d:e5:c0:bd:d1:1e:95:a3:c5:07:1f:bb: a3:ae:96:e9:9f:5e:f4:ff:ad:cb:5f:e3:66:d1:f5:9d:f9:24: 9c:88:b6:10:21:3f:4e:53:35:2b:45:eb:2e:62:b3:55:b4:bf: 7e:34:07:cb:a9:52:e6:a7:df:12:d3:05:ae:7b:44:ee:54:17: 5a:75:d5:94:ab:b1:c4:80:ff:57:d6:fb:50:1d:c9:8d:6e:22: f7:ed:00:ab:3f:57:4c:1d:9f:06:63:96:f0:30:be:53:d8:1f: 92:b8:03:8b:79:40:0b:2e:b6:0a:0b:ca:48:0f:25:83:a3:3b: be:ba:7a:ec:11:7e:a3:67:8a:4d:ee:95:08:c7:36:10:d2:62: 46:c4:72:87:ef:04:97:9d:c5:c8:e8:84:df:2b:9d:0a:e5:cf: f0:d5:af:96:7e:2a:52:64:e7:52:60:a6:4e:e1:35:92:9c:9e: da:77:ad:23:d3:36:58:da:f6:fb:de:80:9d:d1:44:6f:5a:7b: 37:c2:68:c9:68:7b:68:50:2c:a5:32:11:15:c4:fb:98:49:ad: d6:b8:30:61:af:33:47:24:38:0c:55:ce:e5:7a:ba:ad:f6:84: 59:7e:d8:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0iyEAnhY3KnTHofAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk NTFjNTI1ZmItYzgxNC00ZDg3LTkyNzMtNjcwZTVmYzcxMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+eaezN4s1zkwYcFmRf/qNZBBsGcY81KD9f2 3QZ/lw8fUwtPYm5cmh2CUdCTliCkn8u0STLcxtBYXrK3JMeu1zzZkVaBz4Gkk5Dc JeVdYkhsoB4I0234O9f36gqz1RkkZt9y0rUH64aKVeVElhcfeiLuNiCJV25pLZhC JqI79HMbSi89h90RoTCUtpM3LxTrEkQ+4kbLZh1DKm8JzCoZpOJXsC6mGCEwxjGX wwmP5CxZyYso3Jfi8nomr8m3VWfqnr+TsttX7ZrKhALh6fbVXVvc02LrR6l1RVMl Nxg1qGjdyQIojtjolIHW90DGm7Og5ZKkGQVb8zFTSoTKL9XQfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyfcBP2Y13wD4g5p9mPzTx+U7pbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYzViYTMwZTgtMjEyYi0z ZmM4LWEyOTItZTYwNWJlMjA3Yzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7ggMalfpa8wVGzFkBfAdKHGrlj3cRtQ33lwL3RHpWjxQcfu6Oulumf XvT/rctf42bR9Z35JJyIthAhP05TNStF6y5is1W0v340B8upUuan3xLTBa57RO5U F1p11ZSrscSA/1fW+1AdyY1uIvftAKs/V0wdnwZjlvAwvlPYH5K4A4t5QAsutgoL ykgPJYOjO766euwRfqNnik3ulQjHNhDSYkbEcofvBJedxcjohN8rnQrlz/DVr5Z+ KlJk51Jgpk7hNZKcntp3rSPTNlja9vvegJ3RRG9aezfCaMloe2hQLKUyERXE+5hJ rda4MGGvM0ckOAxVzuV6uq32hFl+2IQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:45:52 2025 by rpki-client