$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa File: 00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa (raw, json) Hash identifier: MNslMox0q62bG6Aj9ykGZQi0wqKfudc+vc3y0n8l9s8= Subject key identifier: E6:0E:E9:D6:55:5E:D0:42:24:93:81:61:6A:D5:C6:F4:B7:97:FA:82 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584957F408AE0CBD5C3CFF400D80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11290 IP address blocks: 45.42.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:08:ae:0c:bd:5c:3c:ff:40:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=1288d3e9-7822-4b69-97a8-1593754be253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b0:14:7d:02:8c:9c:c7:58:f7:6a:98:20:b1: dc:95:5a:c8:8f:53:4f:81:a0:fd:94:6b:a6:a0:58: 81:e2:bc:6f:1c:9a:1d:74:4e:e3:e2:4a:31:86:90: 1d:28:06:93:b1:0c:29:f9:bf:e0:aa:74:1e:88:ee: a0:aa:54:2c:01:7b:ea:1e:d0:cf:21:8e:91:ef:91: 5e:be:a0:cd:8e:b1:bf:d6:90:20:ad:2a:ae:58:36: 0a:32:33:b2:d5:4a:73:25:90:fb:ec:ff:73:4d:ee: 2c:a6:1c:56:0d:41:3a:93:86:1a:97:92:6c:17:89: 44:2c:c2:b8:36:f2:54:7c:15:22:7a:32:a3:21:f5: 45:cf:c8:a2:f4:d9:45:bf:21:e7:3a:05:e8:ca:8d: 97:4f:b2:24:15:ef:5e:60:a9:f7:dc:4c:6b:85:51: 25:83:c3:da:49:f6:e4:72:d6:8b:15:2c:56:6e:cb: 0c:8c:99:0b:31:b0:77:a6:65:cc:3b:58:0a:2b:47: f1:61:f5:4d:2c:53:0d:20:50:25:e9:cb:08:ff:fe: ee:a2:92:df:75:97:61:09:f8:7c:cd:36:80:22:43: 10:42:ba:e7:e3:98:4b:23:da:aa:1a:f4:6e:b3:f2: c4:13:55:64:ae:21:a5:53:55:f6:40:2c:c5:79:5b: 88:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0E:E9:D6:55:5E:D0:42:24:93:81:61:6A:D5:C6:F4:B7:97:FA:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 45.42.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ef:8d:24:70:81:1c:2f:07:57:00:e8:f0:1c:1e:ca:f4:f8: 67:65:f2:37:c8:53:0e:5a:2f:35:87:f8:63:d5:16:85:97:ee: 73:32:33:3b:37:51:e1:e5:c7:db:9c:52:e7:e5:87:84:9e:c8: 16:8f:be:18:c4:34:bf:ff:6d:b2:eb:f8:a4:19:17:b4:d7:cf: 85:85:1a:15:4d:e7:5a:a3:83:db:c9:4c:5a:a9:d5:8d:8e:b3: 0f:2c:fc:58:3c:a9:b8:a0:18:c0:6f:cf:a8:01:39:a0:73:67: ce:73:89:cb:50:1e:26:2f:b9:05:6f:2e:24:35:98:a0:90:8f: 68:c0:63:d9:cd:92:78:71:c1:60:de:e4:6d:94:55:e2:34:8e: 62:7f:0c:f3:aa:e6:ce:11:89:7f:c0:3b:c8:11:6c:8b:6f:62: 7a:7e:29:cd:7b:28:0f:66:57:f1:18:d1:2c:86:72:68:ca:72: b9:9e:a4:e9:31:0b:6c:50:5f:06:dd:29:d9:0e:40:90:df:08: 7d:ee:28:a5:15:2e:6a:33:14:e8:17:b3:0a:25:96:35:8b:3a: c6:7b:7a:a1:ca:ff:6c:fa:c8:01:5e:7e:1d:44:5c:a5:a8:ee: ff:2f:8e:ae:cc:25:77:70:e1:d0:28:86:ad:80:12:d8:a0:3f: 11:4a:28:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AiuDL1cPP9ADYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MTI4OGQzZTktNzgyMi00YjY5LTk3YTgtMTU5Mzc1NGJlMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLAUfQKMnMdY92qYILHclVrIj1NPgaD9lGum oFiB4rxvHJoddE7j4koxhpAdKAaTsQwp+b/gqnQeiO6gqlQsAXvqHtDPIY6R75Fe vqDNjrG/1pAgrSquWDYKMjOy1UpzJZD77P9zTe4sphxWDUE6k4Yal5JsF4lELMK4 NvJUfBUiejKjIfVFz8ii9NlFvyHnOgXoyo2XT7IkFe9eYKn33ExrhVElg8PaSfbk ctaLFSxWbssMjJkLMbB3pmXMO1gKK0fxYfVNLFMNIFAl6csI//7uopLfdZdhCfh8 zTaAIkMQQrrn45hLI9qqGvRus/LEE1VkriGlU1X2QCzFeVuI2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYO6dZVXtBCJJOBYWrVxvS3l/qCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMDBmN2E0ZjctYmZlNC0z MGYzLWFmOTktYjRlM2M5ZjkzODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPvjSRwgRwvB1cA6PAcHsr0+Gdl8jfIUw5aLzWH+GPVFoWX7nMyMzs3 UeHlx9ucUuflh4SeyBaPvhjENL//bbLr+KQZF7TXz4WFGhVN51qjg9vJTFqp1Y2O sw8s/Fg8qbigGMBvz6gBOaBzZ85zictQHiYvuQVvLiQ1mKCQj2jAY9nNknhxwWDe 5G2UVeI0jmJ/DPOq5s4RiX/AO8gRbItvYnp+Kc17KA9mV/EY0SyGcmjKcrmepOkx C2xQXwbdKdkOQJDfCH3uKKUVLmozFOgXswolljWLOsZ7eqHK/2z6yAFefh1EXKWo 7v8vjq7MJXdw4dAohq2AEtigPxFKKLM= -----END CERTIFICATE-----Generated at Tue May 6 17:18:53 2025 by rpki-client