$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa File: 422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa (raw, json) Hash identifier: QXjDDlKhB9Ux7EUzw8z7NiqO4B3ErDA+obhWTkQc/ws= Subject key identifier: 68:66:FE:E2:1B:0F:9F:E9:F5:3D:3A:D8:31:E3:D6:3A:48:C8:E8:81 Certificate issuer: /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Certificate serial: 010D0C9F4328584968013DB0D1B60AA5AF115940 Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa Signing time: Thu 03 Apr 2025 19:00:24 +0000 ROA not before: Thu 03 Apr 2025 19:00:24 +0000 ROA not after: Wed 02 Jul 2025 19:00:24 +0000 asID: 400598 IP address blocks: 192.40.40.0/23 maxlen: 24 2602:faf9::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:01:3d:b0:d1:b6:0a:a5:af:11:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Validity Not Before: Apr 3 19:00:24 2025 GMT Not After : Jul 2 19:00:24 2025 GMT Subject: CN=864135bb-6f5c-49fc-babf-1c702746484d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8f:6f:aa:a0:87:58:8f:a4:c7:71:5b:ac:28: 08:52:a2:ec:70:a1:6d:5f:70:c2:73:e8:9d:03:0e: f8:7d:0f:96:17:ed:c8:42:68:85:46:25:f3:67:32: 96:4a:c2:eb:fb:cf:46:99:86:0a:e7:5f:f5:d3:d8: cf:3e:d8:c6:6a:cd:0e:44:a3:6b:7f:3c:da:1e:3d: e0:94:5d:fd:ad:98:84:eb:a9:bd:5b:18:c3:48:76: d0:9e:00:4f:21:54:ce:47:22:cc:93:36:c2:5d:6b: 78:1c:48:11:9f:18:1b:67:12:55:61:bf:29:46:73: bf:e8:88:fa:20:55:d8:0e:de:22:0a:91:32:b6:5e: 10:4f:06:16:88:a2:5f:a7:36:a7:5a:02:b9:79:4d: 53:bf:6d:83:fd:7a:08:5b:23:9c:4b:cb:5d:89:86: 1a:bd:03:3f:65:89:6f:ba:a5:f3:d6:17:4f:03:9a: 66:05:82:29:66:8a:b5:e6:aa:0a:36:f0:7f:e7:35: 2e:d6:38:8f:0e:2a:ed:f3:5f:36:59:68:b6:7a:21: 01:ac:a2:8b:cd:17:59:10:94:ba:83:9c:ad:5b:24: 20:c0:fe:8a:ae:92:28:15:47:8e:72:c8:53:a3:35: f8:7b:a7:31:fd:e3:e1:80:3c:4a:6f:6e:5e:1c:d2: 65:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:66:FE:E2:1B:0F:9F:E9:F5:3D:3A:D8:31:E3:D6:3A:48:C8:E8:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl X509v3 Authority Key Identifier: keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer sbgp-ipAddrBlock: critical IPv4: 192.40.40.0/23 IPv6: 2602:faf9::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:53:66:29:a5:02:09:23:33:03:dd:8e:c4:ea:26:e6:24:aa: 98:6c:11:fa:c8:fc:ab:d4:af:db:2a:4b:11:11:bb:c2:c3:f8: 74:18:ba:1c:a9:c4:3e:4a:ed:71:2a:60:c1:f0:d4:eb:5a:a7: b7:65:a7:ce:82:c5:54:8e:c7:ae:6b:d1:57:b1:ba:4c:2d:99: d7:cd:6c:31:75:9d:a4:f9:10:31:68:67:1c:2a:c8:36:05:c4: c8:53:28:89:38:2c:a7:32:3e:c0:d4:7a:43:bf:0e:4c:3f:bd: 32:9e:39:36:cc:8e:f2:a5:a9:33:31:aa:a9:c4:4a:43:4a:1e: 8d:b3:22:5f:7e:ca:38:24:26:d0:33:d5:46:3f:11:c4:e1:86: c4:c5:35:1b:d9:83:7c:5d:36:14:a6:3e:8b:72:44:63:80:ce: 47:1b:77:53:05:36:f3:79:03:0d:1b:74:8e:9b:f0:af:aa:21: fd:3b:63:7b:bc:66:21:c9:4a:6e:40:44:f6:8a:47:93:e2:21: 6f:0a:e7:53:ca:97:e0:b3:55:2e:c6:92:ca:a3:96:ce:d1:83: 10:fc:1a:4a:2c:e6:a1:f4:c0:40:4d:6e:36:e8:20:be:e8:f9: 54:41:6a:ee:76:5b:b9:c7:5f:68:aa:a1:9d:64:da:60:0a:83: 2a:c4:e6:56 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEloAT2w0bYKpa8RWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NhYTljMjctNmI2OC00NWE4LWI3NzctNGM3YjAwNDgy YWI4MB4XDTI1MDQwMzE5MDAyNFoXDTI1MDcwMjE5MDAyNFowLzEtMCsGA1UEAxMk ODY0MTM1YmItNmY1Yy00OWZjLWJhYmYtMWM3MDI3NDY0ODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo9vqqCHWI+kx3FbrCgIUqLscKFtX3DCc+id Aw74fQ+WF+3IQmiFRiXzZzKWSsLr+89GmYYK51/109jPPtjGas0ORKNrfzzaHj3g lF39rZiE66m9WxjDSHbQngBPIVTORyLMkzbCXWt4HEgRnxgbZxJVYb8pRnO/6Ij6 IFXYDt4iCpEytl4QTwYWiKJfpzanWgK5eU1Tv22D/XoIWyOcS8tdiYYavQM/ZYlv uqXz1hdPA5pmBYIpZoq15qoKNvB/5zUu1jiPDirt8182WWi2eiEBrKKLzRdZEJS6 g5ytWyQgwP6KrpIoFUeOcshTozX4e6cx/ePhgDxKb25eHNJlUwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGhm/uIbD5/p9T062DHj1jpIyOiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jY2Fh OWMyNy02YjY4LTQ1YTgtYjc3Ny00YzdiMDA0ODJhYjgvNDIyZmI1YTYtOWYyZS0z YzMzLThiYTAtN2E4MTI3MjE2NTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2NhYTljMjctNmI2OC00NWE4LWI3 NzctNGM3YjAwNDgyYWI4L2NjYWE5YzI3LTZiNjgtNDVhOC1iNzc3LTRjN2IwMDQ4 MmFiOC5jcmwwHwYDVR0jBBgwFoAUokHvW5pqS+aRVpyHiqhu3FSyf4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jY2FhOWMyNy02YjY4LTQ1YTgtYjc3Ny00Yzdi MDA0ODJhYjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBwCgoMA4E AgACMAgDBgQmAvr5ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVU2YppQIJIzMD3Y7E6ibmJKqYbBH6yPyr 1K/bKksREbvCw/h0GLocqcQ+Su1xKmDB8NTrWqe3ZafOgsVUjseua9FXsbpMLZnX zWwxdZ2k+RAxaGccKsg2BcTIUyiJOCynMj7A1HpDvw5MP70ynjk2zI7ypakzMaqp xEpDSh6NsyJffso4JCbQM9VGPxHE4YbExTUb2YN8XTYUpj6LckRjgM5HG3dTBTbz eQMNG3SOm/CvqiH9O2N7vGYhyUpuQET2ikeT4iFvCudTypfgs1UuxpLKo5bO0YMQ /BpKLOah9MBATW426CC+6PlUQWrudlu5x19oqqGdZNpgCoMqxOZW -----END CERTIFICATE-----Generated at Tue Apr 15 07:22:10 2025 by rpki-client