$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa File: c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa (raw, json) Hash identifier: afxRkPL7gIdEH8coCF3JQM0sFDaOfSmEchhFjwuzjSY= Subject key identifier: AA:3B:0E:3D:41:2F:04:57:7C:52:FF:53:04:47:4F:1A:EC:A6:36:A2 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584953C44C7471A1BD6B253D28C0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 11290 IP address blocks: 199.102.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4c:74:71:a1:bd:6b:25:3d:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=e6859647-4731-4df0-8f91-fb78f5386f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:22:d5:f5:ac:f2:c5:63:3d:6e:cd:72:59:c3: d6:8a:11:eb:18:64:98:ad:6e:bc:40:ac:98:46:40: 80:d8:7d:f9:b1:47:8c:1c:9b:72:0a:87:f7:0e:11: 6b:87:a0:3b:92:80:cf:d1:00:73:b8:61:92:e4:6d: 57:c6:fd:9b:f5:76:7e:78:2f:97:44:e0:2e:f0:2c: 42:e3:ac:ae:05:90:bb:50:64:eb:0c:af:80:47:91: ae:59:d9:59:ab:6d:60:36:a4:6b:32:d8:47:e1:66: 00:d1:31:f9:01:81:96:44:08:ef:dd:05:5a:8d:45: 24:17:5b:33:7d:3e:a7:bc:8d:d4:00:ab:bc:9e:a2: 85:74:83:41:c5:ef:a0:ab:c7:e0:a1:e7:59:4b:f2: b6:08:51:08:50:14:c5:c2:ed:c5:13:75:f0:63:6e: 59:e7:df:bd:94:37:e9:63:8f:6c:22:7c:c7:43:76: 40:34:5f:92:5c:1e:88:e2:0c:ed:b9:3f:ef:58:25: 43:d1:e2:5d:91:e9:33:05:43:f2:41:59:a4:8b:7d: 82:bc:6a:aa:d4:21:60:de:07:0f:b8:04:23:b5:b6: 68:7a:9f:db:88:f3:ad:88:c4:90:65:34:d4:e1:86: 81:ee:06:2b:ae:36:72:2c:d2:fa:e2:07:6d:8e:f4: 7c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3B:0E:3D:41:2F:04:57:7C:52:FF:53:04:47:4F:1A:EC:A6:36:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 199.102.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:8b:15:0d:e0:63:3b:6b:4f:dc:af:80:c8:d2:8c:ee:51:31: 42:f5:2a:0b:59:f8:af:dd:00:ce:48:0a:f1:f9:4d:1b:af:64: cb:b6:2e:06:96:92:6a:a2:00:04:ed:08:01:dc:ba:ba:62:3c: da:ec:21:98:32:39:32:e5:4b:2d:58:7e:3e:9b:87:c0:40:a9: c4:63:f6:30:7f:1b:f0:ba:fd:89:e2:16:6c:87:a0:94:9f:d1: 06:1a:cf:a8:a4:50:60:16:7b:6e:09:2c:cf:f4:66:fb:c8:f3: 68:f1:85:d1:5c:7e:c3:0f:f4:df:04:52:2e:0e:7c:61:70:46: 23:50:b5:b6:e5:40:66:37:61:c4:5e:d8:2b:9e:7a:24:cd:9b: ca:b6:16:76:d7:ed:aa:be:32:95:11:5a:c6:ad:e6:52:09:f6: 3d:cb:5e:48:fb:9e:b2:b1:b2:43:5e:86:20:98:61:cf:a0:15: c1:6c:41:d6:47:0c:da:cf:12:0c:7c:5c:20:ff:71:a6:8e:4f: 2a:ca:a8:aa:18:b3:23:54:74:0c:f5:f8:78:82:d3:fb:76:80: be:b3:26:c5:69:39:a9:e4:72:0b:3b:54:f7:45:c8:ae:d2:5c: 8f:57:3b:ce:a0:83:ab:8f:05:c5:67:f8:7e:47:8f:a3:fb:62: ad:6e:20:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxEx0caG9ayU9KMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTY4NTk2NDctNDczMS00ZGYwLThmOTEtZmI3OGY1Mzg2ZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iLV9azyxWM9bs1yWcPWihHrGGSYrW68QKyY RkCA2H35sUeMHJtyCof3DhFrh6A7koDP0QBzuGGS5G1Xxv2b9XZ+eC+XROAu8CxC 46yuBZC7UGTrDK+AR5GuWdlZq21gNqRrMthH4WYA0TH5AYGWRAjv3QVajUUkF1sz fT6nvI3UAKu8nqKFdINBxe+gq8fgoedZS/K2CFEIUBTFwu3FE3XwY25Z59+9lDfp Y49sInzHQ3ZANF+SXB6I4gztuT/vWCVD0eJdkekzBUPyQVmki32CvGqq1CFg3gcP uAQjtbZoep/biPOtiMSQZTTU4YaB7gYrrjZyLNL64gdtjvR8fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo7Dj1BLwRXfFL/UwRHTxrspjaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYzQ0NTZiYzgtMGQ5MS0z YThiLTk4YzQtMTlmZjA1NjhkNTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2bIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyLFQ3gYztrT9yvgMjSjO5RMUL1KgtZ+K/dAM5ICvH5TRuvZMu2LgaW kmqiAATtCAHcurpiPNrsIZgyOTLlSy1Yfj6bh8BAqcRj9jB/G/C6/YniFmyHoJSf 0QYaz6ikUGAWe24JLM/0ZvvI82jxhdFcfsMP9N8EUi4OfGFwRiNQtbblQGY3YcRe 2CueeiTNm8q2FnbX7aq+MpURWsat5lIJ9j3LXkj7nrKxskNehiCYYc+gFcFsQdZH DNrPEgx8XCD/caaOTyrKqKoYsyNUdAz1+HiC0/t2gL6zJsVpOankcgs7VPdFyK7S XI9XO86gg6uPBcVn+H5Hj6P7Yq1uIIs= -----END CERTIFICATE-----Generated at Tue May 6 00:10:17 2025 by rpki-client