$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/f5dd0a35-899b-33dc-a5ab-328e3333ecf3.roa File: f5dd0a35-899b-33dc-a5ab-328e3333ecf3.roa (raw, json) Hash identifier: F4YQYeLCj4nzHbCdLpsA+krfvMzRjMVVEcdprgSgRFM= Subject key identifier: 59:B5:3B:F9:D6:B9:C1:DF:A2:A5:42:71:04:D7:B9:63:B7:C6:43:AB Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F432858487755E4D3B4E7BEB9B7CD8800 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/f5dd0a35-899b-33dc-a5ab-328e3333ecf3.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 11290 IP address blocks: 24.122.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:e4:d3:b4:e7:be:b9:b7:cd:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=cbfecf1e-0ef7-4cf6-8f43-002f82b9a094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7f:d7:5b:53:6e:13:5b:7f:98:84:f4:1d:ab: cd:3e:89:1d:16:d6:37:47:98:12:ff:31:2a:4e:62: 71:8e:28:98:ac:67:e6:2b:16:5c:28:ff:7a:95:40: 2f:53:a7:25:89:66:9c:f0:87:90:d4:00:1f:e3:26: 87:da:a4:6c:d6:cb:cb:c7:8d:a0:40:26:5c:b0:80: 87:1d:92:47:c1:2c:b0:5f:bc:25:c6:82:c3:b1:43: bb:f7:f7:1c:3e:c6:dd:4d:35:a5:5f:ab:c2:cc:e7: 75:eb:a5:60:3b:87:85:c7:c2:63:8f:fa:1f:9a:c5: 8e:55:e4:18:b6:ba:83:94:93:d1:86:29:e9:bd:b8: cc:ee:54:c2:92:1f:14:29:14:81:28:e2:62:38:2d: fb:45:94:9e:b9:46:6f:28:e4:c4:cb:02:45:36:6e: 50:20:8b:b3:e2:aa:0b:c6:6a:4b:62:d8:a2:fe:5d: ed:5a:6c:e1:f6:c2:a8:f4:e7:ec:c0:83:de:32:8c: 96:52:d7:40:cb:f7:12:c5:7a:0e:6a:f8:74:2f:a3: 98:da:33:c9:5d:45:5d:93:f4:c6:ec:9b:99:dc:b6: ba:e3:a5:19:a5:2d:49:1f:19:cc:53:54:9b:34:32: 50:ed:18:7e:5b:25:e2:d9:ab:cf:3e:fc:f4:88:c5: 72:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B5:3B:F9:D6:B9:C1:DF:A2:A5:42:71:04:D7:B9:63:B7:C6:43:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/f5dd0a35-899b-33dc-a5ab-328e3333ecf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e4:4c:58:3c:3a:60:eb:2d:b6:ad:71:f2:83:92:0e:45:78: 14:b7:7f:37:ae:dd:89:ff:41:fc:3e:f4:74:bc:31:31:de:dd: e3:c8:cb:7e:c0:f1:61:11:02:d7:25:ed:49:64:8e:bc:f9:7e: 1a:4d:33:1d:f4:ad:db:fb:b5:c2:92:79:f5:40:c4:f4:03:8b: 10:3e:12:a3:23:df:32:dc:7f:6d:b5:7d:38:44:f2:b5:66:f9: 45:76:a4:ea:be:ee:2d:94:47:08:8d:ed:c4:fc:e4:09:79:e8: fb:c0:e1:6e:9f:65:6c:22:2d:8a:0f:22:12:e7:d8:6c:cf:6f: ac:19:07:ff:ee:27:8f:e8:fc:89:47:34:99:b7:2a:99:8a:4b: cc:d1:a4:96:19:9e:ef:3d:a1:00:6e:7c:7b:25:5c:76:09:d1: 18:ad:b6:79:8c:d7:55:34:00:7c:f7:3c:fe:a6:ad:ae:2c:77: f3:e2:a0:0a:3f:81:48:5d:63:74:ee:34:89:2d:3b:8c:bc:51: d6:6a:98:61:4c:30:8a:8f:2b:ef:b8:87:54:e1:65:ab:03:f9: 4d:a2:23:aa:ad:0b:f9:a2:db:14:e3:56:47:1e:02:4d:0b:90: 1a:00:d2:ab:a7:b4:4a:a5:7b:69:28:2b:c8:3f:23:25:28:3c: 04:22:f6:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VeTTtOe+ubfNiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk Y2JmZWNmMWUtMGVmNy00Y2Y2LThmNDMtMDAyZjgyYjlhMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3/XW1NuE1t/mIT0HavNPokdFtY3R5gS/zEq TmJxjiiYrGfmKxZcKP96lUAvU6cliWac8IeQ1AAf4yaH2qRs1svLx42gQCZcsICH HZJHwSywX7wlxoLDsUO79/ccPsbdTTWlX6vCzOd166VgO4eFx8Jjj/ofmsWOVeQY trqDlJPRhinpvbjM7lTCkh8UKRSBKOJiOC37RZSeuUZvKOTEywJFNm5QIIuz4qoL xmpLYtii/l3tWmzh9sKo9OfswIPeMoyWUtdAy/cSxXoOavh0L6OY2jPJXUVdk/TG 7JuZ3La646UZpS1JHxnMU1SbNDJQ7Rh+WyXi2avPPvz0iMVy3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFm1O/nWucHfoqVCcQTXuWO3xkOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZjVkZDBhMzUtODk5Yi0z M2RjLWE1YWItMzI4ZTMzMzNlY2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzkTFg8OmDrLbatcfKDkg5FeBS3fzeu3Yn/Qfw+9HS8MTHe3ePIy37A 8WERAtcl7Ulkjrz5fhpNMx30rdv7tcKSefVAxPQDixA+EqMj3zLcf221fThE8rVm +UV2pOq+7i2URwiN7cT85Al56PvA4W6fZWwiLYoPIhLn2GzPb6wZB//uJ4/o/IlH NJm3KpmKS8zRpJYZnu89oQBufHslXHYJ0RittnmM11U0AHz3PP6mra4sd/PioAo/ gUhdY3TuNIktO4y8UdZqmGFMMIqPK++4h1ThZasD+U2iI6qtC/mi2xTjVkceAk0L kBoA0quntEqle2koK8g/IyUoPAQi9gg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:55 2025 by rpki-client