$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cadf0be0-a4e7-3516-9388-5487953f70cd.roa File: cadf0be0-a4e7-3516-9388-5487953f70cd.roa (raw, json) Hash identifier: +pDQwjoATuW3GAjui6F3dqqZ27zhXpPy95AE5TpgpVA= Subject key identifier: 6A:4B:D7:43:DC:D8:87:A1:3A:FF:BE:BE:2C:5F:15:71:03:5C:AB:44 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F432858487755E2F0AEFC8E3DB8D40E00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cadf0be0-a4e7-3516-9388-5487953f70cd.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 11290 IP address blocks: 24.226.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:e2:f0:ae:fc:8e:3d:b8:d4:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=c196f7b6-a705-4d3c-81b1-ad38852ce8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b7:19:e3:6d:1f:0f:f2:59:75:98:86:67:3b: c8:d4:cc:10:6b:cb:ca:94:c7:04:2d:1f:26:ac:a1: 32:41:8d:53:f4:f9:d0:4d:5b:43:c7:13:1c:13:2b: a1:1b:fd:6b:51:fa:e2:11:c3:00:88:90:4d:49:c2: 42:db:42:dc:0b:d8:7b:00:e8:86:4a:b5:f9:4b:79: eb:10:82:7c:a9:7e:84:10:d0:1f:ab:e8:8b:de:48: 32:38:b0:96:52:af:f9:85:c8:ae:36:a5:97:2a:41: d8:30:46:84:0b:7d:fc:6d:9d:4f:9d:8a:a0:08:c0: 5c:ac:b3:d3:1c:2c:4b:2c:6f:7b:bb:83:ca:95:a3: 38:d6:65:68:99:ed:57:70:dc:ef:99:a0:81:20:3f: 57:55:78:28:51:29:d8:44:42:e0:54:31:38:8e:88: f1:97:92:1a:b1:72:66:df:8d:85:70:6e:e0:0e:ae: 61:e9:a6:28:59:36:d7:df:04:6a:ae:a6:35:0a:d9: e5:8e:da:f5:40:7e:33:ca:d9:bd:e2:af:dc:00:ba: ae:91:be:09:7e:6f:e6:8a:db:fb:96:43:4f:31:af: cb:98:a3:04:ab:16:39:80:9f:41:9b:d0:f1:70:7c: ca:f4:f3:f7:c7:1a:a2:a2:c1:5f:6f:8c:0e:84:03: d0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4B:D7:43:DC:D8:87:A1:3A:FF:BE:BE:2C:5F:15:71:03:5C:AB:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cadf0be0-a4e7-3516-9388-5487953f70cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.226.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:37:3a:8b:12:e9:ff:b8:ed:a9:45:bf:b7:4a:04:62:5f:72: 1d:d9:de:e0:69:dc:d7:08:55:c3:ee:53:48:0f:ec:4d:bc:71: fd:da:89:ae:20:91:51:cf:eb:d9:d0:22:ea:09:0b:81:7d:9b: 85:bc:14:f6:c7:10:9a:60:94:1f:5c:2d:a4:cc:78:97:43:f9: 2b:21:f5:4a:1b:05:3f:ed:4c:1f:ab:b0:3d:d2:e3:2b:8d:bf: f3:ad:3b:89:3d:9d:0f:d0:ea:79:78:0f:a0:a8:32:fe:5f:54: c9:28:8f:ba:e8:0e:fb:94:c6:03:c9:95:7e:ac:61:b3:fa:6d: 45:14:f5:10:18:28:63:53:f6:46:80:31:c1:07:3d:92:e7:5a: f9:f4:ef:4f:f6:bb:d6:22:84:50:12:8a:03:d7:77:a4:04:a5: 3a:8f:23:91:19:31:42:21:0d:83:f5:d7:63:c1:d1:3f:32:09: 76:5e:84:12:53:c2:3b:4e:16:cc:ab:ea:32:36:07:2e:07:d6: 76:58:c1:ff:47:e4:04:f2:a1:ce:ad:6e:da:89:a6:32:52:94: 3e:57:ec:3b:d5:fa:21:7c:1e:55:17:26:cc:8f:8f:bd:14:0e: b8:31:f6:a5:74:69:db:ea:77:2f:55:15:bd:d1:76:48:c5:08: 0f:19:50:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VeLwrvyOPbjUDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk YzE5NmY3YjYtYTcwNS00ZDNjLTgxYjEtYWQzODg1MmNlOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLcZ420fD/JZdZiGZzvI1MwQa8vKlMcELR8m rKEyQY1T9PnQTVtDxxMcEyuhG/1rUfriEcMAiJBNScJC20LcC9h7AOiGSrX5S3nr EIJ8qX6EENAfq+iL3kgyOLCWUq/5hciuNqWXKkHYMEaEC338bZ1PnYqgCMBcrLPT HCxLLG97u4PKlaM41mVome1XcNzvmaCBID9XVXgoUSnYRELgVDE4jojxl5IasXJm 342FcG7gDq5h6aYoWTbX3wRqrqY1Ctnljtr1QH4zytm94q/cALqukb4Jfm/mitv7 lkNPMa/LmKMEqxY5gJ9Bm9DxcHzK9PP3xxqiosFfb4wOhAPQ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpL10Pc2IehOv++vixfFXEDXKtEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvY2FkZjBiZTAtYTRlNy0z NTE2LTkzODgtNTQ4Nzk1M2Y3MGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGOKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM3OosS6f+47alFv7dKBGJfch3Z3uBp3NcIVcPuU0gP7E28cf3aia4g kVHP69nQIuoJC4F9m4W8FPbHEJpglB9cLaTMeJdD+Ssh9UobBT/tTB+rsD3S4yuN v/OtO4k9nQ/Q6nl4D6CoMv5fVMkoj7roDvuUxgPJlX6sYbP6bUUU9RAYKGNT9kaA McEHPZLnWvn070/2u9YihFASigPXd6QEpTqPI5EZMUIhDYP112PB0T8yCXZehBJT wjtOFsyr6jI2By4H1nZYwf9H5ATyoc6tbtqJpjJSlD5X7DvV+iF8HlUXJsyPj70U Drgx9qV0advqdy9VFb3RdkjFCA8ZUIg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:04 2025 by rpki-client