$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa File: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (raw, json) Hash identifier: wFQpabxSlzipCp7/qETD7I2A0TPXkBN3zdpzTeohceM= Subject key identifier: 3D:62:59:54:E0:98:26:C2:9F:6F:CB:FF:01:59:F5:8A:AA:5A:9F:F6 Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823 Certificate serial: 010D0C9F432858495ABEB9490209BAADDA8EF100 Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 15177 IP address blocks: 199.102.60.0/22 maxlen: 24 199.191.120.0/21 maxlen: 24 208.74.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:b9:49:02:09:ba:ad:da:8e:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a485a4-e936-4174-8999-571e03203823 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=c2166226-3906-4b40-b8f7-44da498ebe5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:af:f4:c8:eb:61:32:5b:ac:d6:6d:8f:66:73: a3:fb:1b:e3:10:96:f5:7c:4c:9d:c5:62:b2:8e:a0: 4b:3a:7f:97:6e:05:50:60:b7:49:a1:72:15:80:36: a2:d4:1b:48:a7:88:90:df:ea:c0:ae:1d:e6:6f:63: 8e:1c:b8:66:c5:bd:78:fb:c4:31:1b:5d:76:c4:26: 24:40:9c:6e:b8:e9:c3:57:6e:20:91:38:fc:af:a3: 50:6b:51:64:f7:1d:49:dc:97:e6:64:2b:e0:a9:93: 4b:2b:7e:36:f7:cc:47:6c:43:89:43:68:70:34:00: 2b:7f:89:b4:3d:a6:40:5a:17:c6:f9:5e:32:34:14: 65:9f:71:0c:7a:95:56:8d:70:99:2b:35:80:4c:a8: 66:34:4b:38:ca:5d:4e:f4:df:4f:39:68:e7:59:4b: 0a:27:e0:81:55:89:fd:b8:33:01:45:e9:a7:21:00: 73:6e:75:91:52:4a:fd:b1:8e:31:84:5b:5d:d0:29: b9:ea:93:f7:e8:a1:26:49:34:3c:f9:a3:c7:a6:b6: d8:0b:16:e5:b2:73:4b:ce:89:c4:72:c7:46:a2:3b: e9:15:ce:38:22:7d:39:14:cf:0b:ef:03:6f:69:b6: f7:11:cb:8c:c8:41:a7:38:52:c4:c2:85:b0:07:ba: 0a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:62:59:54:E0:98:26:C2:9F:6F:CB:FF:01:59:F5:8A:AA:5A:9F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl X509v3 Authority Key Identifier: keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer sbgp-ipAddrBlock: critical IPv4: 199.102.60.0/22 199.191.120.0/21 208.74.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b6:ec:f1:98:d1:69:a6:c3:fc:6d:ee:0d:5c:0a:b5:08:fd: 32:d9:c6:8f:1b:10:db:6c:06:85:5b:c2:ef:05:9a:e9:14:9e: da:e1:8e:be:b3:d5:71:3e:6b:91:29:c7:23:df:8b:08:d9:8d: ff:c4:4a:c0:48:df:46:db:2c:98:76:9e:2e:49:c5:4c:e3:c6: 73:46:5f:d9:75:a0:57:9e:d6:1b:59:4b:2d:82:ef:96:19:e0: be:e4:5c:ce:cc:98:44:cb:ec:7e:d3:04:a6:7c:04:0f:cd:1f: fe:ec:b0:26:3a:87:34:d2:ce:de:cc:03:b0:43:8a:8a:bc:54: 36:0d:62:4e:5b:5c:d9:ea:35:81:ee:a5:8a:dc:a5:43:3a:ba: 5a:17:1e:48:cf:20:aa:e4:51:35:57:cb:62:3d:69:b3:30:af: 06:6c:55:14:79:08:e8:4a:b5:63:cd:dc:03:57:cc:e7:d9:fd: 35:7e:9f:22:8b:e8:61:a6:13:6d:56:be:62:55:37:75:91:89: 54:30:a0:5b:a2:ca:c8:35:9c:3a:58:ca:ce:cc:8e:a5:7e:09: 32:d3:79:ae:35:72:58:9d:36:b5:78:af:d8:bf:b3:61:10:8c: 78:52:7e:95:f9:cc:66:58:c0:fe:84:62:57:2f:51:fe:f3:04: 1e:3e:2f:3b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWElavrlJAgm6rdqO8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNDg1YTQtZTkzNi00MTc0LTg5OTktNTcxZTAzMjAz ODIzMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk YzIxNjYyMjYtMzkwNi00YjQwLWI4ZjctNDRkYTQ5OGViZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK/0yOthMlus1m2PZnOj+xvjEJb1fEydxWKy jqBLOn+XbgVQYLdJoXIVgDai1BtIp4iQ3+rArh3mb2OOHLhmxb14+8QxG112xCYk QJxuuOnDV24gkTj8r6NQa1Fk9x1J3JfmZCvgqZNLK34298xHbEOJQ2hwNAArf4m0 PaZAWhfG+V4yNBRln3EMepVWjXCZKzWATKhmNEs4yl1O9N9POWjnWUsKJ+CBVYn9 uDMBRemnIQBzbnWRUkr9sY4xhFtd0Cm56pP36KEmSTQ8+aPHprbYCxblsnNLzonE csdGojvpFc44In05FM8L7wNvabb3EcuMyEGnOFLEwoWwB7oKVQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFD1iWVTgmCbCn2/L/wFZ9YqqWp/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0 ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMyMDM4MjMvMzI5Njc5NmMtYTgxMi0z ZmQ5LThiNzktYzYxN2Y4NTNiZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBhNDg1YTQtZTkzNi00MTc0LTg5 OTktNTcxZTAzMjAzODIzLzQwYTQ4NWE0LWU5MzYtNDE3NC04OTk5LTU3MWUwMzIw MzgyMy5jcmwwHwYDVR0jBBgwFoAUjttyFOw3amh7eRYhJCe0sEBCSQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFl MDMyMDM4MjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCx2Y8AwQD x794AwQD0EqYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADC27PGY0Wmmw/xt7g1cCrUI/TLZxo8bENtsBoVb wu8FmukUntrhjr6z1XE+a5EpxyPfiwjZjf/ESsBI30bbLJh2ni5JxUzjxnNGX9l1 oFee1htZSy2C75YZ4L7kXM7MmETL7H7TBKZ8BA/NH/7ssCY6hzTSzt7MA7BDioq8 VDYNYk5bXNnqNYHupYrcpUM6uloXHkjPIKrkUTVXy2I9abMwrwZsVRR5COhKtWPN 3ANXzOfZ/TV+nyKL6GGmE21WvmJVN3WRiVQwoFuiysg1nDpYys7MjqV+CTLTea41 clidNrV4r9i/s2EQjHhSfpX5zGZYwP6EYlcvUf7zBB4+Lzs= -----END CERTIFICATE-----Generated at Tue May 13 17:22:36 2025 by rpki-client