$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa File: cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa (raw, json) Hash identifier: wXrFCKVyxYAyQBhmvC6j5GXJ5REjySkM+vY6QDI0VwU= Subject key identifier: F4:F8:E8:81:35:7B:7A:B6:B2:20:C2:CB:7F:18:C7:48:F9:EC:D1:B2 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584957F40A157023078BEC60EC60 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11290 IP address blocks: 24.122.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:0a:15:70:23:07:8b:ec:60:ec:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=bc731327-fe41-4836-a82c-d9135c62b1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:81:1d:6c:c6:f5:c8:8a:49:1c:3d:69:9c: 70:cf:13:0a:9a:38:9f:5e:3e:c3:20:aa:ed:ad:d2: 3a:23:12:84:19:9c:35:ca:72:fd:12:71:cc:7e:7c: 06:c4:48:1d:3f:d6:2b:e7:51:bd:74:34:0b:28:3a: 90:74:af:42:e3:e2:44:db:22:80:4e:ba:88:c4:5b: 30:10:21:c9:21:29:47:7a:61:fc:c5:d7:7e:71:3f: e7:47:b5:d1:7e:90:73:76:16:5f:71:d4:63:d4:77: 91:e8:da:bd:df:74:57:53:81:78:ee:72:eb:88:c4: 3e:76:e8:69:37:ab:ae:5b:b8:cd:47:63:cd:93:19: 46:8f:1d:fc:57:2f:cf:03:23:e9:0f:3f:75:73:ed: 0f:dc:37:b5:03:ab:10:0f:18:cf:4e:fe:45:0d:dd: d8:8f:18:60:e7:ed:49:67:27:16:5c:34:ab:a3:a7: 2f:82:1e:b1:a1:72:0e:16:97:35:9b:71:7a:26:fc: fc:9a:52:f1:6a:65:9c:a4:56:de:ee:d1:c1:6b:6b: 77:6b:7c:5d:41:8a:b6:1e:8c:37:19:68:fa:8c:3c: 15:19:7d:06:7e:2d:26:df:c7:22:b2:10:8a:d6:d8: dd:5b:30:36:5e:14:39:09:21:91:85:eb:d8:35:6a: a4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F8:E8:81:35:7B:7A:B6:B2:20:C2:CB:7F:18:C7:48:F9:EC:D1:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ce:5d:e6:a8:a0:d0:a4:28:e8:2a:16:d5:8f:b5:18:1c:e6: e7:0a:07:a2:d2:32:68:4a:a0:5b:71:d8:f3:2a:2a:94:69:90: 12:70:9d:66:2c:ce:a2:d9:2c:60:5e:88:a9:d1:ee:40:b8:d9: 40:14:5d:ea:6d:59:aa:73:e4:58:11:9d:7c:5f:57:cc:cd:e9: 45:6d:fd:a0:5c:64:22:aa:30:79:da:73:70:5e:3b:a1:ce:48: cb:88:ba:b0:74:18:e8:76:65:ae:61:79:0a:c4:7e:5c:6f:51: 75:b9:a6:4c:6e:37:d3:db:02:70:f2:2a:6f:97:9e:05:a9:ba: 6d:3f:9e:78:f9:d6:b5:52:cc:1e:c7:ec:93:cd:6e:eb:e6:7b: 01:9b:f5:6d:07:b3:a8:b1:ff:2f:8a:11:54:e3:ad:8a:fb:cc: 29:2b:4a:31:06:7a:f8:37:f9:dd:f3:89:a4:d0:2d:69:d3:c7: d8:f2:a0:a1:3e:8a:89:9c:3c:92:14:78:73:45:f9:a4:4f:8c: b8:a6:a4:93:12:0c:e2:b0:53:86:44:2a:5d:61:c0:69:1c:6d: 87:3e:0f:b3:8d:e3:09:cb:08:f3:de:18:a8:9e:ab:b2:25:75: 37:94:fe:48:d8:90:bb:11:41:f2:e9:9e:c5:b1:af:84:b5:97: d6:38:bd:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AoVcCMHi+xg7GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YmM3MzEzMjctZmU0MS00ODM2LWE4MmMtZDkxMzVjNjJiMWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutKBHWzG9ciKSRw9aZxwzxMKmjifXj7DIKrt rdI6IxKEGZw1ynL9EnHMfnwGxEgdP9Yr51G9dDQLKDqQdK9C4+JE2yKATrqIxFsw ECHJISlHemH8xdd+cT/nR7XRfpBzdhZfcdRj1HeR6Nq933RXU4F47nLriMQ+duhp N6uuW7jNR2PNkxlGjx38Vy/PAyPpDz91c+0P3De1A6sQDxjPTv5FDd3Yjxhg5+1J ZycWXDSro6cvgh6xoXIOFpc1m3F6Jvz8mlLxamWcpFbe7tHBa2t3a3xdQYq2How3 GWj6jDwVGX0Gfi0m38cishCK1tjdWzA2XhQ5CSGRhevYNWqkYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPT46IE1e3q2siDCy38Yx0j57NGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvY2JiYmNjZWUtMzVlNC0z YjNkLTk4YzAtN2FlNzBiZDM4YjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbOXeaooNCkKOgqFtWPtRgc5ucKB6LSMmhKoFtx2PMqKpRpkBJwnWYs zqLZLGBeiKnR7kC42UAUXeptWapz5FgRnXxfV8zN6UVt/aBcZCKqMHnac3BeO6HO SMuIurB0GOh2Za5heQrEflxvUXW5pkxuN9PbAnDyKm+XngWpum0/nnj51rVSzB7H 7JPNbuvmewGb9W0Hs6ix/y+KEVTjrYr7zCkrSjEGevg3+d3ziaTQLWnTx9jyoKE+ iomcPJIUeHNF+aRPjLimpJMSDOKwU4ZEKl1hwGkcbYc+D7ON4wnLCPPeGKieq7Il dTeU/kjYkLsRQfLpnsWxr4S1l9Y4vZk= -----END CERTIFICATE-----Generated at Sun Apr 6 05:50:35 2025 by rpki-client