$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa File: 08b963ee-e094-3e46-84b1-392bbcac2a6b.roa (raw, json) Hash identifier: w1NaTjlnDQANv+RFcEhzblP/hWg1lDh8zukxiEFtyOk= Subject key identifier: 92:4F:5D:43:A8:73:3A:EC:50:15:08:C7:CE:98:11:E5:F1:2B:F8:70 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584957F40A22FCE5840A5124FB00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11290 IP address blocks: 24.122.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:0a:22:fc:e5:84:0a:51:24:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=3f161db9-d172-4b31-a702-07efe427c7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:c3:c7:44:15:37:b1:2f:34:a6:11:d8:90: 9b:9e:bd:b5:a7:fb:7f:d6:0b:ae:dc:c0:b1:16:d5: 72:42:e6:cb:5d:45:f3:7f:74:bd:08:b3:26:b7:48: b3:eb:20:a4:e3:ed:12:f4:57:a3:92:81:b6:90:08: fd:8d:13:24:34:4c:6d:60:08:18:fd:cb:77:ed:b7: 21:6c:44:69:7a:25:4b:83:03:4e:f6:5f:a9:06:03: 62:12:70:02:8a:ef:3a:6d:88:db:7c:7d:58:0e:b7: 59:8b:86:31:cb:6f:2c:93:35:1d:6e:c3:ce:b5:99: 27:2f:6c:3a:c4:25:44:ef:c8:7b:97:e1:b6:8f:3e: 62:33:b4:4b:94:32:95:c8:a3:15:62:a0:5e:ac:13: 2b:94:99:2b:f8:e9:ca:df:61:fe:56:12:db:61:c4: 69:2f:e0:55:26:6f:c0:68:29:51:42:85:e3:fa:8d: c3:f4:ec:61:f6:67:76:90:8b:c0:fa:ca:f2:c5:7e: cc:b9:cb:55:ff:e3:84:b5:9a:93:44:ec:7d:45:08: 0a:d1:ea:ca:fa:2d:9d:81:74:2a:ae:67:5e:7c:99: 27:a7:1f:1d:53:6d:38:69:3a:98:79:39:56:1e:c9: 6c:e0:87:fa:91:2a:13:15:83:a7:5c:a0:dc:ae:b2: 23:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4F:5D:43:A8:73:3A:EC:50:15:08:C7:CE:98:11:E5:F1:2B:F8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:9b:55:66:e6:9b:9f:2f:ec:98:74:63:f2:50:7c:76:d3:09: de:48:d7:7a:3c:de:b2:cb:00:5b:ae:85:d0:d7:53:93:ee:15: 16:1d:0e:be:b7:aa:4b:b9:fd:4b:c5:bc:c9:6c:49:f7:5b:0f: 29:76:fa:e1:28:6b:98:10:c3:e5:51:77:c7:d2:2a:9a:dc:5e: d7:27:53:d1:b1:6f:12:42:f9:cc:02:69:5c:9c:79:d9:e9:f3: 03:62:7c:94:68:71:67:4e:f9:27:93:f7:d7:8b:95:30:a2:bf: c1:c7:37:d3:5a:40:93:2a:26:3e:61:05:fb:0f:cd:31:a9:6b: 4a:3f:79:5d:16:05:c2:da:85:bb:8b:3e:14:65:e7:60:b7:c9: 0a:cc:e8:15:03:fd:6b:54:d2:27:54:b4:56:f7:61:07:44:4d: 3b:15:2b:f4:5e:06:51:81:10:fe:ba:df:38:49:4e:fe:33:30: d1:b6:57:9c:30:61:13:4c:dd:ba:33:26:7b:35:46:05:9f:5a: d9:80:50:3f:66:31:1b:fb:76:16:f5:7f:cd:c2:ac:d9:0f:e9: d7:b2:3b:02:f6:6a:3c:e2:1b:8f:8e:6b:bc:28:67:bb:52:6a: c9:37:32:ba:3f:02:68:ca:18:b0:53:42:cd:6c:b1:81:5a:f1: a8:64:60:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9Aoi/OWEClEk+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk M2YxNjFkYjktZDE3Mi00YjMxLWE3MDItMDdlZmU0MjdjN2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+jDx0QVN7EvNKYR2JCbnr21p/t/1guu3MCx FtVyQubLXUXzf3S9CLMmt0iz6yCk4+0S9FejkoG2kAj9jRMkNExtYAgY/ct37bch bERpeiVLgwNO9l+pBgNiEnACiu86bYjbfH1YDrdZi4Yxy28skzUdbsPOtZknL2w6 xCVE78h7l+G2jz5iM7RLlDKVyKMVYqBerBMrlJkr+OnK32H+VhLbYcRpL+BVJm/A aClRQoXj+o3D9Oxh9md2kIvA+sryxX7MuctV/+OEtZqTROx9RQgK0erK+i2dgXQq rmdefJknpx8dU204aTqYeTlWHsls4If6kSoTFYOnXKDcrrIjewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJPXUOoczrsUBUIx86YEeXxK/hwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMDhiOTYzZWUtZTA5NC0z ZTQ2LTg0YjEtMzkyYmJjYWMyYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWbVWbmm58v7Jh0Y/JQfHbTCd5I13o83rLLAFuuhdDXU5PuFRYdDr63 qku5/UvFvMlsSfdbDyl2+uEoa5gQw+VRd8fSKprcXtcnU9GxbxJC+cwCaVycednp 8wNifJRocWdO+SeT99eLlTCiv8HHN9NaQJMqJj5hBfsPzTGpa0o/eV0WBcLahbuL PhRl52C3yQrM6BUD/WtU0idUtFb3YQdETTsVK/ReBlGBEP663zhJTv4zMNG2V5ww YRNM3bozJns1RgWfWtmAUD9mMRv7dhb1f83CrNkP6deyOwL2ajziG4+Oa7woZ7tS ask3Mro/AmjKGLBTQs1ssYFa8ahkYEM= -----END CERTIFICATE-----Generated at Tue May 6 00:37:19 2025 by rpki-client