$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/acf39d2e-15f6-3ff1-909b-2602b55e1d0f.roa File: acf39d2e-15f6-3ff1-909b-2602b55e1d0f.roa (raw, json) Hash identifier: uUrPo0I//KRcv4tjsKNrvue6d+ZepiB64NUPca4l4KI= Subject key identifier: 30:52:59:D6:45:92:E7:19:99:2D:59:A5:29:D0:7A:C9:0F:9C:A1:73 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584953C44CF607E409F5D0BCB980 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/acf39d2e-15f6-3ff1-909b-2602b55e1d0f.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 11290 IP address blocks: 162.244.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4c:f6:07:e4:09:f5:d0:bc:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=62c2e7d4-1f36-4cd7-bff4-65d5ae5e1f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ba:44:52:9d:9d:3f:29:f9:2b:03:19:24:a4: 20:91:8d:8c:3d:f7:d3:ed:7f:f1:6a:70:60:67:6d: aa:eb:28:8e:0d:25:31:80:f8:94:05:75:49:74:63: 1b:cf:02:b8:99:92:67:1e:ad:96:29:c6:dd:bd:29: 35:1b:ee:b2:e6:4b:ab:e1:69:3f:60:1c:da:d3:6b: fe:94:4a:29:cc:b1:b3:8f:45:85:f6:0c:2b:1e:da: 09:36:f4:2e:08:0d:d9:f8:a1:43:aa:da:bf:a3:18: 8f:31:ea:9d:cf:95:90:0b:0f:bb:48:82:e7:5d:87: 1f:8a:39:4f:bc:5f:21:a5:b8:7b:c3:e8:c4:de:3d: 7a:6f:62:42:1f:fb:cd:1f:91:51:16:22:65:29:58: d0:57:76:84:8b:c7:48:39:df:b4:31:31:ef:65:50: 73:4d:b8:50:d8:2a:4b:4b:ea:c1:37:c7:ae:98:4b: 56:bf:45:bb:1a:20:ce:4f:ee:06:be:5f:90:02:47: 35:34:64:ce:d0:18:8f:dc:68:a1:c2:6c:2e:dd:c0: 2b:e6:df:e8:4a:5d:53:0e:02:7d:b8:62:23:ef:d3: 8c:0d:a7:0e:42:00:4a:a1:e2:50:3f:ac:04:4d:8d: ac:11:88:18:a0:5c:4e:80:dd:85:6e:be:5f:0d:a7: 1d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:52:59:D6:45:92:E7:19:99:2D:59:A5:29:D0:7A:C9:0F:9C:A1:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/acf39d2e-15f6-3ff1-909b-2602b55e1d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 162.244.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d6:aa:90:87:86:64:97:63:e9:72:53:77:f9:e4:8e:52:17: 0c:d0:88:8d:92:4f:c5:ac:fd:b9:93:8d:b9:0a:b3:80:5f:26: 91:53:df:3c:e0:b3:7b:e2:98:19:88:83:85:d6:99:e8:a3:95: 31:bc:27:1e:23:26:b8:dc:bc:1a:f7:ff:60:77:15:6c:9b:06: fb:11:84:72:13:07:1e:4a:70:f1:a3:68:50:7c:ff:a3:6c:84: 04:a4:32:44:2f:43:5c:6a:66:04:b1:ef:23:62:30:e6:f4:f6: 43:b8:14:a1:f6:33:8e:e2:81:ce:f7:e2:41:4c:0f:82:3b:da: 32:53:d8:da:bb:fb:44:8e:29:b0:75:a6:f6:c4:66:9e:16:41: a7:f8:0a:0e:40:19:93:07:24:70:4a:c1:87:a0:fb:3a:53:82: 4c:ce:05:50:86:35:d2:ff:9a:1a:5f:62:31:63:82:a9:97:1a: ce:03:9f:e9:cd:98:55:eb:9d:f6:6b:39:8c:e0:a2:ed:2a:f6: c5:63:99:61:dc:3c:ae:d5:4b:dd:22:a1:4e:e2:cd:b7:4b:e5: 31:a1:0f:15:86:d8:ed:81:8d:4a:34:9b:5e:3a:34:80:69:4d: 8d:c3:6d:26:ed:cb:6c:65:a2:40:a0:de:52:8a:bd:70:da:66: 0a:13:59:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxEz2B+QJ9dC8uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NjJjMmU3ZDQtMWYzNi00Y2Q3LWJmZjQtNjVkNWFlNWUxZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LpEUp2dPyn5KwMZJKQgkY2MPffT7X/xanBg Z22q6yiODSUxgPiUBXVJdGMbzwK4mZJnHq2WKcbdvSk1G+6y5kur4Wk/YBza02v+ lEopzLGzj0WF9gwrHtoJNvQuCA3Z+KFDqtq/oxiPMeqdz5WQCw+7SILnXYcfijlP vF8hpbh7w+jE3j16b2JCH/vNH5FRFiJlKVjQV3aEi8dIOd+0MTHvZVBzTbhQ2CpL S+rBN8eumEtWv0W7GiDOT+4Gvl+QAkc1NGTO0BiP3Gihwmwu3cAr5t/oSl1TDgJ9 uGIj79OMDacOQgBKoeJQP6wETY2sEYgYoFxOgN2Fbr5fDacdgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBSWdZFkucZmS1ZpSnQeskPnKFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYWNmMzlkMmUtMTVmNi0z ZmYxLTkwOWItMjYwMmI1NWUxZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovQsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3WqpCHhmSXY+lyU3f55I5SFwzQiI2ST8Ws/bmTjbkKs4BfJpFT3zzg s3vimBmIg4XWmeijlTG8Jx4jJrjcvBr3/2B3FWybBvsRhHITBx5KcPGjaFB8/6Ns hASkMkQvQ1xqZgSx7yNiMOb09kO4FKH2M47igc734kFMD4I72jJT2Nq7+0SOKbB1 pvbEZp4WQaf4Cg5AGZMHJHBKwYeg+zpTgkzOBVCGNdL/mhpfYjFjgqmXGs4Dn+nN mFXrnfZrOYzgou0q9sVjmWHcPK7VS90ioU7izbdL5TGhDxWG2O2BjUo0m146NIBp TY3DbSbty2xlokCg3lKKvXDaZgoTWYk= -----END CERTIFICATE-----Generated at Tue May 6 17:31:15 2025 by rpki-client