$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa File: 43d698a9-f364-3f11-918e-a3f5a57ed484.roa (raw, json) Hash identifier: wZ+w6vADp+VNNbB4Niv5BPvGOPft5ks2NeLyAWEmMWc= Subject key identifier: B4:91:72:BA:B5:02:4A:25:1B:02:C9:28:02:8E:14:81:57:B6:75:8C Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584953C44DA7D3AC6E83DBECCD80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 11290 IP address blocks: 104.200.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4d:a7:d3:ac:6e:83:db:ec:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=ae8997a5-9585-42de-9317-a900c1f1c39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3d:7e:23:7a:dd:a6:8e:22:14:fa:6f:fd:fb: 74:c1:49:73:05:ef:c5:1c:d8:11:5c:e9:86:11:4a: 50:fe:0b:c0:d0:44:70:62:48:8e:ba:61:01:bf:0f: f6:35:ac:b6:b6:79:89:bd:9b:33:3b:19:7a:6b:b8: 88:69:5c:4f:85:ef:80:84:cb:83:75:6d:ca:92:15: c4:e8:78:6b:91:ca:67:dd:75:71:38:c0:50:5a:82: e4:94:bb:18:14:be:e0:c4:cc:ac:06:dd:31:b5:2d: 51:c2:89:69:98:ae:00:7c:dc:8a:e0:bb:7e:35:42: 9f:8a:b6:1c:7e:ee:c7:7e:a4:fd:44:66:30:53:6a: c3:fa:01:2e:25:2c:af:0f:8d:21:e6:67:ef:8b:ed: 88:5f:15:84:78:fa:50:ad:72:e0:9c:d4:6c:d5:56: d7:cb:bf:95:2e:b8:6b:73:ec:2d:81:71:7a:9a:45: 2f:8c:a0:5f:91:1d:4a:0b:a0:53:55:3d:c8:b3:67: 82:7e:b9:56:a9:4f:34:6d:b7:78:f4:ce:c4:d4:90: 79:64:53:d1:6c:31:5a:4b:90:12:2d:53:f2:58:af: 0f:e3:71:9f:30:f0:e0:8e:57:1b:4c:5e:dd:29:b5: 25:27:ec:1f:d9:c8:6f:0d:16:c3:b4:1f:97:60:18: 7a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:91:72:BA:B5:02:4A:25:1B:02:C9:28:02:8E:14:81:57:B6:75:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 104.200.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7d:a3:9c:75:23:92:af:62:86:24:4e:f1:1d:3a:2b:b2:04: ba:be:0c:d3:63:41:64:35:42:46:50:53:92:c6:d8:3c:75:8a: a6:df:13:d1:9d:6e:3a:c5:76:49:95:99:af:a3:7f:f8:31:ed: 36:58:8c:5d:d6:e7:1c:fc:b2:71:da:65:6f:9d:b4:4b:ab:00: a4:2e:32:f9:95:39:06:4a:6b:86:c1:4c:89:c3:09:10:32:5e: e0:d5:cb:1a:f2:63:04:a7:30:fe:ce:4b:fd:1a:96:70:88:01: c9:18:4f:20:f7:4c:c4:da:ab:8c:ce:85:67:50:a1:91:93:1f: b0:96:50:58:6a:06:93:e4:a9:a6:db:82:8a:80:95:fe:7e:59: 5b:28:80:33:91:b7:27:16:e1:11:d5:db:57:76:09:30:a4:99: 51:81:8c:34:e2:8c:fa:97:3b:1e:8d:b0:0e:a1:df:80:8e:48: 40:f4:02:48:92:21:d1:30:76:b2:35:55:90:2c:d8:8b:fe:e7: d3:ba:e7:8c:dd:56:fe:ec:fd:c2:fe:cc:a9:00:e9:c2:3c:01: 0b:36:e4:0b:12:06:89:e9:76:31:c6:71:b3:df:75:cf:91:b7: 9e:84:c1:88:7e:70:8f:44:15:e5:66:0b:16:3f:66:78:46:de: da:18:0e:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxE2n06xug9vszYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YWU4OTk3YTUtOTU4NS00MmRlLTkzMTctYTkwMGMxZjFjMzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD1+I3rdpo4iFPpv/ft0wUlzBe/FHNgRXOmG EUpQ/gvA0ERwYkiOumEBvw/2Nay2tnmJvZszOxl6a7iIaVxPhe+AhMuDdW3KkhXE 6Hhrkcpn3XVxOMBQWoLklLsYFL7gxMysBt0xtS1RwolpmK4AfNyK4Lt+NUKfirYc fu7HfqT9RGYwU2rD+gEuJSyvD40h5mfvi+2IXxWEePpQrXLgnNRs1VbXy7+VLrhr c+wtgXF6mkUvjKBfkR1KC6BTVT3Is2eCfrlWqU80bbd49M7E1JB5ZFPRbDFaS5AS LVPyWK8P43GfMPDgjlcbTF7dKbUlJ+wf2chvDRbDtB+XYBh6iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSRcrq1AkolGwLJKAKOFIFXtnWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNDNkNjk4YTktZjM2NC0z ZjExLTkxOGUtYTNmNWE1N2VkNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl9o5x1I5KvYoYkTvEdOiuyBLq+DNNjQWQ1QkZQU5LG2Dx1iqbfE9Gd bjrFdkmVma+jf/gx7TZYjF3W5xz8snHaZW+dtEurAKQuMvmVOQZKa4bBTInDCRAy XuDVyxryYwSnMP7OS/0alnCIAckYTyD3TMTaq4zOhWdQoZGTH7CWUFhqBpPkqabb goqAlf5+WVsogDORtycW4RHV21d2CTCkmVGBjDTijPqXOx6NsA6h34COSED0AkiS IdEwdrI1VZAs2Iv+59O654zdVv7s/cL+zKkA6cI8AQs25AsSBonpdjHGcbPfdc+R t56EwYh+cI9EFeVmCxY/ZnhG3toYDnU= -----END CERTIFICATE-----Generated at Tue May 6 02:16:45 2025 by rpki-client