$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/96cfbcf1-b432-3689-8421-0dc518512723.roa File: 96cfbcf1-b432-3689-8421-0dc518512723.roa (raw, json) Hash identifier: HMcsW3cSm837vhdWGFJRhrh02mgRvMjV+bZZduG0qqk= Subject key identifier: 42:C7:DC:13:89:5A:60:51:8C:13:00:CC:E5:50:17:B5:19:94:6C:12 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584957F40850D20FFADE18216100 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/96cfbcf1-b432-3689-8421-0dc518512723.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11290 IP address blocks: 74.210.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:08:50:d2:0f:fa:de:18:21:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=ce27182e-2b4d-4b56-9790-e32201fc8a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:b5:4f:f0:16:06:71:4f:40:d6:27:46:72: 51:8d:7c:3a:ae:61:cb:48:ed:c5:19:6a:d4:25:c8: a1:a1:d8:7e:7b:c7:d4:a0:d0:f1:9d:85:b0:7f:65: e4:ca:e0:15:c1:9c:24:be:7c:49:61:9b:7a:de:5c: 5d:16:0f:af:e1:05:f3:9c:75:96:4f:a2:59:a5:75: e4:54:29:6e:ce:46:ba:c6:e6:1a:6d:6f:85:07:46: d9:96:5d:7c:bb:46:0e:0c:88:8a:37:88:13:d1:95: 9c:8a:97:d9:6d:d4:65:3c:2e:55:de:28:85:0d:a8: 2f:66:0e:7c:c9:20:61:30:f1:95:06:3f:89:31:69: f7:bd:da:10:b8:63:53:d7:4e:7d:96:29:8e:73:b1: c3:9c:6d:01:77:9e:35:1f:63:f4:27:55:b2:8b:5d: 40:da:b8:52:13:fc:69:ea:f3:3f:c0:ee:dd:4d:98: a8:a2:26:db:27:07:ff:92:05:6f:13:97:81:8e:b5: ad:94:f2:d7:3b:d3:01:b5:16:86:64:01:b0:bb:e2: 19:d2:24:f3:9a:d7:fe:9c:b4:90:bf:70:48:a8:c8: 67:f2:4c:1c:dd:09:4d:74:ba:1f:7e:f9:30:db:5b: 8f:78:a6:a4:11:27:7b:86:7e:d1:da:55:9e:cc:3e: 60:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C7:DC:13:89:5A:60:51:8C:13:00:CC:E5:50:17:B5:19:94:6C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/96cfbcf1-b432-3689-8421-0dc518512723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 74.210.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f9:8b:52:7d:74:d2:fe:af:22:0e:eb:06:8d:dc:94:a4:4d: fe:cb:8f:44:2c:52:8c:30:a9:16:93:7c:93:43:b5:60:1d:65: 98:c2:f4:4b:01:a8:0e:cf:5a:60:77:f3:45:c1:22:bc:7a:a8: d9:50:d7:86:22:d0:42:9d:f2:74:10:49:fa:af:9d:6a:c7:04: 54:db:61:5a:71:0e:f6:23:d3:dd:fd:ad:29:9b:98:35:42:03: e0:a9:4f:2f:0c:95:37:75:65:48:46:23:ab:64:9b:a9:3a:3c: 5e:11:c9:49:2e:3e:e1:a3:fd:66:97:36:2c:73:9a:84:4c:1f: 9c:91:13:98:44:9f:95:5d:2f:b5:14:ca:94:27:04:eb:f0:79: 50:94:7b:f3:bf:ce:10:5c:3d:24:b9:20:9c:7b:e1:14:92:9f: 95:24:df:e9:53:ec:3e:ce:b1:52:93:ac:cf:ba:83:0b:36:31: 8c:89:7b:97:d0:49:de:4b:f4:47:50:47:2c:fa:5d:38:e0:6f: 0d:69:cf:66:3a:b8:d2:a5:41:4a:26:4b:d4:3e:ee:2f:a7:a6: 6a:ab:ca:17:38:64:5d:f5:63:ec:b4:4f:df:be:11:2c:a1:f7: a4:db:d5:c8:9c:1b:d1:17:f0:bb:f0:86:6d:c5:f9:92:e1:c3: 18:60:42:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AhQ0g/63hghYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk Y2UyNzE4MmUtMmI0ZC00YjU2LTk3OTAtZTMyMjAxZmM4YThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD21T/AWBnFPQNYnRnJRjXw6rmHLSO3FGWrU Jcihodh+e8fUoNDxnYWwf2XkyuAVwZwkvnxJYZt63lxdFg+v4QXznHWWT6JZpXXk VCluzka6xuYabW+FB0bZll18u0YODIiKN4gT0ZWcipfZbdRlPC5V3iiFDagvZg58 ySBhMPGVBj+JMWn3vdoQuGNT1059limOc7HDnG0Bd541H2P0J1Wyi11A2rhSE/xp 6vM/wO7dTZiooibbJwf/kgVvE5eBjrWtlPLXO9MBtRaGZAGwu+IZ0iTzmtf+nLSQ v3BIqMhn8kwc3QlNdLoffvkw21uPeKakESd7hn7R2lWezD5gJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELH3BOJWmBRjBMAzOVQF7UZlGwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvOTZjZmJjZjEtYjQzMi0z Njg5LTg0MjEtMGRjNTE4NTEyNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFStLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACb5i1J9dNL+ryIO6waN3JSkTf7Lj0QsUowwqRaTfJNDtWAdZZjC9EsB qA7PWmB380XBIrx6qNlQ14Yi0EKd8nQQSfqvnWrHBFTbYVpxDvYj0939rSmbmDVC A+CpTy8MlTd1ZUhGI6tkm6k6PF4RyUkuPuGj/WaXNixzmoRMH5yRE5hEn5VdL7UU ypQnBOvweVCUe/O/zhBcPSS5IJx74RSSn5Uk3+lT7D7OsVKTrM+6gws2MYyJe5fQ Sd5L9EdQRyz6XTjgbw1pz2Y6uNKlQUomS9Q+7i+npmqryhc4ZF31Y+y0T9++ESyh 96Tb1cicG9EX8Lvwhm3F+ZLhwxhgQmQ= -----END CERTIFICATE-----Generated at Sat May 10 16:02:51 2025 by rpki-client