$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa File: e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa (raw, json) Hash identifier: Jz6wpa1iTakUKXrQyplS2EGPL64xNmVd3D1sJc7irqw= Subject key identifier: 46:F7:E2:62:6A:65:A4:68:0E:E3:10:9E:BB:83:D5:00:CF:7A:70:54 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584957F408BDC415BAF03673A100 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11290 IP address blocks: 24.231.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:08:bd:c4:15:ba:f0:36:73:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=beb076e9-f608-47a0-800e-02cff70efadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c8:8f:fe:bd:fa:b9:51:90:d3:02:1b:f0:2a: a8:1e:84:03:0d:05:f7:01:70:87:95:ae:44:23:7f: 28:5e:4a:42:e4:b8:e8:94:7e:d4:80:61:8f:94:20: 9e:02:8d:69:b3:21:40:ff:8c:27:20:13:98:44:37: a1:71:62:6d:b2:19:20:35:e4:ad:5d:d6:2c:0f:a4: a9:60:9e:0c:6c:80:de:eb:b3:1b:9f:cc:b7:27:89: 5e:09:ac:d7:29:19:7c:6c:a5:cf:72:2a:80:89:6d: c4:61:83:29:4e:5f:1a:13:6e:75:d5:12:bc:58:f2: 72:96:36:01:0e:e4:51:4f:9c:d7:29:a3:cc:0e:16: c1:b2:de:1f:ac:b0:84:5f:b4:d4:8a:6c:e2:f0:c6: 79:cf:ae:3f:2b:a9:48:9c:68:2e:df:b9:c1:60:ad: 90:96:4b:a4:d4:b5:9c:5d:be:7e:a1:f8:4b:e5:7d: 63:d1:12:7b:8f:39:3f:db:bd:ab:84:b1:8f:3c:0a: 97:d3:14:10:06:4d:bd:b9:fe:07:b3:02:01:75:1a: a4:07:63:d4:c8:28:17:a9:99:99:17:cf:99:af:f3: dd:e4:2e:bc:d3:1b:e2:ca:16:2c:3c:48:1c:e4:3f: 38:29:5b:c8:cb:e1:de:3a:f4:f3:be:0d:aa:e5:9f: 55:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F7:E2:62:6A:65:A4:68:0E:E3:10:9E:BB:83:D5:00:CF:7A:70:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.231.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:cc:f0:84:9e:d0:e6:18:a7:56:a7:2d:70:4f:79:9d:9b:f9: 21:41:c2:84:f7:a3:94:9a:67:8e:08:05:73:87:b4:c5:05:cb: c4:88:6f:1f:7d:f4:79:6b:f8:21:d8:9c:43:86:64:cb:d0:ff: 31:7e:bd:9c:1f:85:84:33:95:00:6d:14:86:3e:56:de:64:71: 55:17:58:dc:df:d2:6a:bf:19:b6:66:b2:82:82:4a:5b:21:41: f8:03:b0:ee:fc:64:eb:b8:8a:f6:8c:8d:88:ff:19:4b:3f:4b: ba:d2:73:b9:3b:49:64:0b:75:52:37:bf:73:8d:ab:42:f1:db: fa:0a:ee:f0:12:57:b5:80:b2:f2:f2:c6:d8:0f:fb:65:98:a2: 17:1d:dc:55:26:e4:a2:11:b7:60:19:5e:91:39:ca:9f:71:6e: b3:5a:fc:0f:9f:30:2b:d4:35:4f:42:d1:a7:aa:24:8d:4a:31: 58:3d:35:0f:77:88:1b:86:97:c5:c0:9d:80:dc:b4:c6:fb:c7: d8:e6:a3:9d:23:a2:ee:4d:83:4b:c1:16:98:52:d8:99:33:50: 95:6b:5e:aa:2b:08:65:a0:99:53:84:17:c3:27:8a:ae:85:81: b7:a8:f8:bd:cb:51:14:20:c0:d6:16:db:b3:b0:e0:eb:43:0c: d8:54:0f:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9Ai9xBW68DZzoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YmViMDc2ZTktZjYwOC00N2EwLTgwMGUtMDJjZmY3MGVmYWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMiP/r36uVGQ0wIb8CqoHoQDDQX3AXCHla5E I38oXkpC5LjolH7UgGGPlCCeAo1psyFA/4wnIBOYRDehcWJtshkgNeStXdYsD6Sp YJ4MbIDe67Mbn8y3J4leCazXKRl8bKXPciqAiW3EYYMpTl8aE2511RK8WPJyljYB DuRRT5zXKaPMDhbBst4frLCEX7TUimzi8MZ5z64/K6lInGgu37nBYK2Qlkuk1LWc Xb5+ofhL5X1j0RJ7jzk/272rhLGPPAqX0xQQBk29uf4HswIBdRqkB2PUyCgXqZmZ F8+Zr/Pd5C680xviyhYsPEgc5D84KVvIy+HeOvTzvg2q5Z9VPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEb34mJqZaRoDuMQnruD1QDPenBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZTA4NjViYTEtNzIxNy0z YmRjLWJkZmMtODhjMzdjMmYzYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGOcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXM8ISe0OYYp1anLXBPeZ2b+SFBwoT3o5SaZ44IBXOHtMUFy8SIbx99 9Hlr+CHYnEOGZMvQ/zF+vZwfhYQzlQBtFIY+Vt5kcVUXWNzf0mq/GbZmsoKCSlsh QfgDsO78ZOu4ivaMjYj/GUs/S7rSc7k7SWQLdVI3v3ONq0Lx2/oK7vASV7WAsvLy xtgP+2WYohcd3FUm5KIRt2AZXpE5yp9xbrNa/A+fMCvUNU9C0aeqJI1KMVg9NQ93 iBuGl8XAnYDctMb7x9jmo50jou5Ng0vBFphS2JkzUJVrXqorCGWgmVOEF8Mniq6F gbeo+L3LURQgwNYW27Ow4OtDDNhUD8c= -----END CERTIFICATE-----Generated at Tue May 6 11:55:45 2025 by rpki-client