$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df25439f-a8a5-3d84-9c28-12364575d70b.roa File: df25439f-a8a5-3d84-9c28-12364575d70b.roa (raw, json) Hash identifier: S7Ob6rUAXgLpEzhOAscbQHk5+Ry1pJ2WOShzPUIm90k= Subject key identifier: 20:33:99:37:92:EA:C2:5B:A1:B4:AB:97:F8:00:96:67:0B:60:17:B1 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F432858487755E4334023FA7EE528E300 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df25439f-a8a5-3d84-9c28-12364575d70b.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 11290 IP address blocks: 24.122.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:e4:33:40:23:fa:7e:e5:28:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=c6157f76-4125-4e63-8419-0ef0b5e8249e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:b6:1f:0a:86:cc:08:ce:0a:db:ae:40:28: 09:d7:75:aa:d4:64:b7:59:dd:c6:fa:21:6f:5a:30: 6d:98:36:9b:ae:bc:fc:bf:ab:a3:40:9c:5f:fc:39: 24:7f:34:01:84:5e:08:52:99:f6:aa:a5:70:c9:53: 82:fc:79:b4:6c:b0:5d:26:14:6f:0d:05:c8:37:1b: a3:36:b3:99:32:35:da:f7:15:36:af:5a:ad:f3:50: e0:b2:44:11:7f:59:3b:0c:63:64:6c:91:71:57:f2: b9:0b:64:6d:18:08:45:ad:37:16:ac:e6:d3:8d:6c: b8:83:4a:07:8d:ea:23:c1:b1:82:ae:ef:2f:bd:f7: 83:84:31:36:b7:7e:e7:e6:bc:2f:a1:62:9d:89:79: e7:51:04:f5:71:72:97:7a:42:82:da:96:2d:5a:7c: 3b:36:60:86:3b:7e:f7:dd:a1:31:1f:25:a0:06:76: 36:d2:2b:90:d0:37:fd:a5:46:44:9c:92:ac:70:05: 60:16:5c:26:0a:72:6e:9c:33:cf:13:52:c7:aa:26: 12:0c:d6:78:12:67:d7:84:29:c3:4b:7b:47:b6:93: bf:b7:52:b8:c2:84:52:65:2a:a0:5c:7d:8f:04:3b: 39:70:e4:f5:67:e5:c5:54:b2:d9:d6:49:1f:ec:af: ed:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:33:99:37:92:EA:C2:5B:A1:B4:AB:97:F8:00:96:67:0B:60:17:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df25439f-a8a5-3d84-9c28-12364575d70b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:dd:f1:f5:b9:00:d8:30:d4:43:2b:f0:2f:24:00:87:0e:d4: 7f:7f:1f:f6:f8:de:cc:e6:0a:f8:8e:e7:bf:62:0e:9c:f1:55: af:a1:b3:72:74:df:49:2e:66:66:a5:f0:22:11:42:15:67:b3: 2d:f9:e2:a5:fc:10:6f:63:db:d2:43:59:a7:80:1c:b8:dc:10: a5:1f:77:0b:c3:c9:81:34:9f:eb:7e:83:be:48:e5:26:56:a0: 07:7f:3e:59:1e:92:e3:77:50:fb:f7:fe:ce:9d:c0:21:b3:27: e1:08:bb:5c:e5:ee:a9:f4:41:c5:e2:08:66:d9:24:ac:b1:69: 05:93:8a:61:00:51:f8:45:f8:d4:d6:3d:27:a0:ef:28:64:e1: 01:bc:2a:1d:db:c3:d3:d5:c4:26:0d:99:95:b9:c8:d2:61:aa: e3:9d:4a:97:bb:36:45:86:f9:14:86:72:f4:fc:a7:e3:72:26: 79:55:e7:3a:14:ad:ed:de:ff:1f:82:3a:97:8b:6a:3a:df:91: 04:26:9f:d9:7b:5b:36:e3:1c:2c:70:60:41:8e:c5:74:73:76: 50:4c:27:64:09:aa:34:7b:78:2f:d0:c8:29:15:dc:ee:60:4e: ea:7f:74:6c:cd:04:7d:af:58:96:1e:17:ae:ad:bd:10:cd:3f: 37:79:57:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VeQzQCP6fuUo4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk YzYxNTdmNzYtNDEyNS00ZTYzLTg0MTktMGVmMGI1ZTgyNDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH62HwqGzAjOCtuuQCgJ13Wq1GS3Wd3G+iFv WjBtmDabrrz8v6ujQJxf/DkkfzQBhF4IUpn2qqVwyVOC/Hm0bLBdJhRvDQXINxuj NrOZMjXa9xU2r1qt81DgskQRf1k7DGNkbJFxV/K5C2RtGAhFrTcWrObTjWy4g0oH jeojwbGCru8vvfeDhDE2t37n5rwvoWKdiXnnUQT1cXKXekKC2pYtWnw7NmCGO373 3aExHyWgBnY20iuQ0Df9pUZEnJKscAVgFlwmCnJunDPPE1LHqiYSDNZ4EmfXhCnD S3tHtpO/t1K4woRSZSqgXH2PBDs5cOT1Z+XFVLLZ1kkf7K/tpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAzmTeS6sJbobSrl/gAlmcLYBexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZGYyNTQzOWYtYThhNS0z ZDg0LTljMjgtMTIzNjQ1NzVkNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELd8fW5ANgw1EMr8C8kAIcO1H9/H/b43szmCviO579iDpzxVa+hs3J0 30kuZmal8CIRQhVnsy354qX8EG9j29JDWaeAHLjcEKUfdwvDyYE0n+t+g75I5SZW oAd/PlkekuN3UPv3/s6dwCGzJ+EIu1zl7qn0QcXiCGbZJKyxaQWTimEAUfhF+NTW PSeg7yhk4QG8Kh3bw9PVxCYNmZW5yNJhquOdSpe7NkWG+RSGcvT8p+NyJnlV5zoU re3e/x+COpeLajrfkQQmn9l7WzbjHCxwYEGOxXRzdlBMJ2QJqjR7eC/QyCkV3O5g Tup/dGzNBH2vWJYeF66tvRDNPzd5V0w= -----END CERTIFICATE-----Generated at Fri Mar 14 10:19:29 2025 by rpki-client