$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e52f444-65b3-3cf6-883a-6e7fadd14311.roa File: 2e52f444-65b3-3cf6-883a-6e7fadd14311.roa (raw, json) Hash identifier: 3bbjg0F7PlXJD/MrxijaLiUbNG6BaYkRPtA3JTuF2O0= Subject key identifier: 75:7E:D8:41:66:E9:9F:14:A9:48:BD:E8:F0:A5:08:D7:86:E4:6A:70 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584957F4089E4ED523F7E444E700 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e52f444-65b3-3cf6-883a-6e7fadd14311.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11290 IP address blocks: 57.134.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:08:9e:4e:d5:23:f7:e4:44:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=9fc6d861-e5d0-4df3-9c40-c1773a0b65d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:79:c1:dc:98:77:9f:95:a5:64:eb:b3:72: 69:9d:84:7a:17:31:73:8a:94:2f:7d:16:1d:f0:2f: 68:61:85:6e:0c:b7:53:7a:6f:99:74:01:97:4b:86: 97:85:39:69:63:6d:d4:bf:a5:a7:53:7d:b3:06:9f: d0:67:74:ad:ff:01:1e:e8:93:b2:f8:79:6a:db:f9: e5:ff:50:af:ba:9f:c1:81:52:2f:c7:7c:2d:b4:ec: 71:ea:06:b8:63:29:5e:9c:31:77:06:01:c7:2c:5a: 6d:1b:09:84:ba:a0:20:dd:6c:6b:ef:ab:8b:14:23: 36:78:59:72:80:b0:5e:e7:e0:af:14:29:9d:41:c9: 77:2f:3a:b0:64:4c:40:7e:20:e1:bb:00:53:0c:61: 78:af:b1:40:6d:88:7e:ff:f2:5d:ae:0c:bd:9b:eb: 00:53:30:1d:3c:30:b7:3f:8c:41:35:0e:d8:78:35: d2:3c:ca:f9:25:35:48:30:ca:81:13:a1:2b:32:f4: ce:5f:2e:83:c0:2a:d5:49:25:5a:72:55:9b:15:b5: a0:cb:fd:cd:60:69:e8:e9:e1:4d:14:e5:9a:36:6b: 90:f8:aa:c5:77:d3:48:5b:0c:81:69:90:79:6c:48: b7:6e:10:95:5e:57:28:1b:1f:b6:3c:49:3e:cf:46: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7E:D8:41:66:E9:9F:14:A9:48:BD:E8:F0:A5:08:D7:86:E4:6A:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e52f444-65b3-3cf6-883a-6e7fadd14311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 57.134.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0e:af:9a:f9:e4:fe:f4:f4:e5:75:6f:fd:dc:6d:51:b1:92: 62:53:4e:7e:e7:e6:85:f7:22:55:f7:79:e2:b2:6f:7a:4f:05: a6:9a:5f:db:06:a6:09:13:4c:04:dc:73:e1:06:3b:6e:72:5e: db:b9:45:a8:54:ba:f8:d7:21:cb:d1:3b:64:95:4c:7e:2e:25: d5:fd:25:ef:1e:73:6f:6c:b7:58:57:6d:68:45:47:b4:73:c9: 5d:9b:a9:41:27:cf:6b:47:ab:ee:f7:2b:9e:e6:5a:0b:fe:61: cb:3b:ca:2f:f1:aa:f5:48:24:9b:e0:8b:c7:a1:c3:08:cc:1e: dc:72:3a:fd:e9:f7:a3:80:50:53:a2:a3:cd:bc:b0:e6:e5:6c: ab:06:19:7c:ae:39:8a:32:c5:de:62:62:37:b5:af:55:19:fa: 3d:59:16:2b:18:b9:a4:4d:a5:41:f5:fa:93:dc:77:91:71:df: 4f:6a:94:bb:66:29:5f:98:7c:ae:35:a8:64:9f:3e:6a:e4:15: a9:72:25:b4:9e:dd:ef:5e:4c:9f:2a:3c:a0:e1:f0:80:76:1b: 14:ab:5a:04:32:16:e4:21:f3:b6:47:7d:7c:29:e9:75:4b:49: f6:73:22:ee:fb:4b:7e:77:07:a6:ce:12:2d:5f:d5:76:e9:cd: 0c:8c:b3:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AieTtUj9+RE5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk OWZjNmQ4NjEtZTVkMC00ZGYzLTljNDAtYzE3NzNhMGI2NWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDJ5wdyYd5+VpWTrs3JpnYR6FzFzipQvfRYd 8C9oYYVuDLdTem+ZdAGXS4aXhTlpY23Uv6WnU32zBp/QZ3St/wEe6JOy+Hlq2/nl /1Cvup/BgVIvx3wttOxx6ga4YylenDF3BgHHLFptGwmEuqAg3Wxr76uLFCM2eFly gLBe5+CvFCmdQcl3LzqwZExAfiDhuwBTDGF4r7FAbYh+//Jdrgy9m+sAUzAdPDC3 P4xBNQ7YeDXSPMr5JTVIMMqBE6ErMvTOXy6DwCrVSSVaclWbFbWgy/3NYGno6eFN FOWaNmuQ+KrFd9NIWwyBaZB5bEi3bhCVXlcoGx+2PEk+z0aIpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHV+2EFm6Z8UqUi96PClCNeG5GpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMmU1MmY0NDQtNjViMy0z Y2Y2LTg4M2EtNmU3ZmFkZDE0MzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHOYYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsOr5r55P709OV1b/3cbVGxkmJTTn7n5oX3IlX3eeKyb3pPBaaaX9sG pgkTTATcc+EGO25yXtu5RahUuvjXIcvRO2SVTH4uJdX9Je8ec29st1hXbWhFR7Rz yV2bqUEnz2tHq+73K57mWgv+Ycs7yi/xqvVIJJvgi8ehwwjMHtxyOv3p96OAUFOi o828sOblbKsGGXyuOYoyxd5iYje1r1UZ+j1ZFisYuaRNpUH1+pPcd5Fx309qlLtm KV+YfK41qGSfPmrkFalyJbSe3e9eTJ8qPKDh8IB2GxSrWgQyFuQh87ZHfXwp6XVL SfZzIu77S353B6bOEi1f1XbpzQyMs4Y= -----END CERTIFICATE-----Generated at Tue May 6 07:51:10 2025 by rpki-client