$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/63e2df0f-05c9-31f8-b768-34562e8c57c2.roa File: 63e2df0f-05c9-31f8-b768-34562e8c57c2.roa (raw, json) Hash identifier: oPQiqwtNQoq6qPFHibJAznwVj7e2TrbkRucgsj3N8dU= Subject key identifier: 52:72:A0:F2:C8:30:13:EE:5E:DE:CC:F3:2E:AF:31:11:3B:37:F4:FA Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584957F408E185A8BBB505CC93E0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/63e2df0f-05c9-31f8-b768-34562e8c57c2.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11290 IP address blocks: 24.230.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:08:e1:85:a8:bb:b5:05:cc:93:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=9b7acd8f-e404-4335-81d9-65319e828893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ca:48:24:37:28:7e:57:3b:18:66:e6:32:6a: 80:23:23:bc:01:fe:ad:e2:95:83:e8:38:a6:5b:0d: 6d:f2:b3:26:a4:43:b0:c4:36:63:32:7e:bf:86:85: 9e:a5:47:2c:d2:2d:52:0e:60:aa:bd:b8:0c:5a:90: da:b4:1b:aa:75:81:ff:53:b9:11:96:c7:63:5a:2e: c7:48:b2:f0:f9:be:11:1a:db:c6:b3:b5:64:b2:57: eb:ae:a2:06:3d:52:b6:e3:39:86:a1:84:60:84:62: 3c:49:a6:36:73:48:ed:99:0e:2d:6a:f2:04:53:20: 6c:f2:c7:1e:17:a2:ed:f0:79:07:e3:d8:a1:19:f5: ca:b2:83:da:8d:48:21:64:12:28:9e:c9:24:54:ef: a7:cb:28:dc:b9:21:66:30:f0:45:22:d9:72:dd:9c: 31:cd:27:b0:6a:33:b0:6f:a8:51:3f:84:75:18:e4: 64:54:33:95:4c:24:cf:17:df:e2:bd:0e:07:82:64: ad:a6:36:71:51:fc:3c:5b:8c:cc:c1:e9:2b:35:af: ab:e3:20:28:4d:85:81:90:9e:d3:43:a1:4f:46:71: 7f:9f:76:33:da:3e:19:ea:61:c4:08:36:c1:aa:ef: 5c:52:d2:ec:14:12:e2:6e:eb:c3:f6:d6:02:9e:db: 5d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:72:A0:F2:C8:30:13:EE:5E:DE:CC:F3:2E:AF:31:11:3B:37:F4:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/63e2df0f-05c9-31f8-b768-34562e8c57c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.230.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2c:8f:f4:14:d3:83:7e:03:34:3a:66:46:be:e7:20:ef:67: bd:e8:c3:61:a0:59:6a:9b:d2:87:37:29:06:c5:09:df:12:6c: 7f:b5:3e:9a:83:9b:4d:ba:24:ed:17:a8:d2:8d:44:fb:e9:db: 4e:17:6f:8e:de:39:6b:0f:76:e9:54:eb:3c:15:45:80:2f:69: e4:69:eb:2c:05:9d:3f:40:e6:84:8a:0b:63:db:ae:f5:46:51: 7d:6a:f7:eb:67:e7:4a:cb:40:aa:f4:08:44:c6:02:ff:36:6c: 4b:9d:b5:9a:d9:d5:ef:26:2c:f2:db:b9:9e:a0:ad:db:8e:4b: 94:77:0d:20:4f:54:8c:fb:1e:cd:cb:af:a4:1c:c5:fc:64:43: 18:c5:4d:51:20:2b:ff:97:81:d4:37:87:ee:ed:e1:ca:db:87: 87:f3:a4:96:48:33:6b:92:bd:e4:ca:bb:85:3f:22:1e:11:fd: 1a:c2:f0:5e:ba:bc:1f:8a:67:c7:da:71:21:62:9a:7f:f6:2c: 81:c4:6f:53:bb:02:30:2d:4f:9d:20:a8:92:39:70:5a:23:4f: 9c:19:30:7a:27:c1:9f:86:17:7f:8c:56:e0:17:89:56:5f:be: 78:42:fa:bf:77:eb:d1:13:ea:09:cf:b4:27:84:a8:a3:3b:13: 24:e7:6b:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9Ajhhai7tQXMk+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk OWI3YWNkOGYtZTQwNC00MzM1LTgxZDktNjUzMTllODI4ODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqspIJDcoflc7GGbmMmqAIyO8Af6t4pWD6Dim Ww1t8rMmpEOwxDZjMn6/hoWepUcs0i1SDmCqvbgMWpDatBuqdYH/U7kRlsdjWi7H SLLw+b4RGtvGs7VkslfrrqIGPVK24zmGoYRghGI8SaY2c0jtmQ4tavIEUyBs8sce F6Lt8HkH49ihGfXKsoPajUghZBIonskkVO+nyyjcuSFmMPBFItly3ZwxzSewajOw b6hRP4R1GORkVDOVTCTPF9/ivQ4HgmStpjZxUfw8W4zMwekrNa+r4yAoTYWBkJ7T Q6FPRnF/n3Yz2j4Z6mHECDbBqu9cUtLsFBLibuvD9tYCnttdGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJyoPLIMBPuXt7M8y6vMRE7N/T6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNjNlMmRmMGYtMDVjOS0z MWY4LWI3NjgtMzQ1NjJlOGM1N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGObAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8sj/QU04N+AzQ6Zka+5yDvZ73ow2GgWWqb0oc3KQbFCd8SbH+1PpqD m026JO0XqNKNRPvp204Xb47eOWsPdulU6zwVRYAvaeRp6ywFnT9A5oSKC2PbrvVG UX1q9+tn50rLQKr0CETGAv82bEudtZrZ1e8mLPLbuZ6grduOS5R3DSBPVIz7Hs3L r6QcxfxkQxjFTVEgK/+XgdQ3h+7t4crbh4fzpJZIM2uSveTKu4U/Ih4R/RrC8F66 vB+KZ8facSFimn/2LIHEb1O7AjAtT50gqJI5cFojT5wZMHonwZ+GF3+MVuAXiVZf vnhC+r9369ET6gnPtCeEqKM7EyTna8w= -----END CERTIFICATE-----Generated at Tue May 6 05:48:19 2025 by rpki-client