$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa File: fbb7b44b-75a0-304d-8878-021d4d576a6e.roa (raw, json) Hash identifier: ZvwZVqrxlaMKJ89iGcUxJefQKsKly7WJja57LRuyat8= Subject key identifier: 84:D4:0F:A4:54:74:E7:77:C6:3D:81:3C:46:1D:08:6F:01:B3:5D:71 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584957F40936A0FC6262D271AB80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11290 IP address blocks: 24.153.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:09:36:a0:fc:62:62:d2:71:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=04495db9-a5cb-4150-af27-8b5a7e6a6e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b6:39:ec:9d:f4:bc:63:ac:25:29:0e:66:db: 40:e0:9d:6d:28:15:c0:2b:04:a9:44:62:35:20:8b: 5e:ac:9d:67:31:1c:12:0f:43:f9:f9:23:6b:f2:8a: 99:17:69:56:ec:01:81:86:a8:f2:40:41:dc:a0:a5: c5:b6:17:ad:83:c1:14:47:4f:dc:42:c2:82:01:dd: 35:65:94:3b:c2:d3:8b:c7:2a:6e:21:f9:3a:9b:8c: 8f:1b:62:fe:3a:8b:99:0a:a0:9c:ee:0f:0f:d2:2f: 5c:48:77:b4:67:a4:ad:71:1b:1c:0e:1d:25:35:d4: 9e:22:2d:1c:a8:11:9c:e3:ca:5c:7b:17:18:a8:2d: 35:c1:a5:b8:02:1e:4e:9e:46:af:97:55:ad:46:af: de:b7:d4:bf:73:e8:37:8e:a1:b2:a8:f9:2c:45:75: ae:0e:1d:05:a6:63:72:d4:64:cb:17:75:5b:fa:fe: 33:b9:40:55:a8:8c:3d:27:88:91:01:86:7b:48:c3: 4b:85:db:94:40:37:f6:f1:62:25:f4:16:da:39:76: b6:e4:90:a1:2c:96:df:33:c0:2a:7c:16:39:75:ae: 34:62:b6:54:41:bd:e5:ea:b9:67:b1:1e:df:a7:23: 92:7a:db:ce:e6:9c:f3:c1:4e:53:cc:91:33:7e:b5: dc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D4:0F:A4:54:74:E7:77:C6:3D:81:3C:46:1D:08:6F:01:B3:5D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.153.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:99:23:ec:ca:f0:ac:b4:c9:41:aa:dd:6f:5c:50:58:32:d0: 57:32:17:be:15:a0:05:b0:85:0c:dc:2d:a3:f2:52:68:59:f6: f2:b3:b8:e2:b8:4d:d9:bf:f3:5e:71:c1:05:07:e5:13:d1:8e: 9a:7d:fa:6c:54:dc:8c:a6:b8:96:3a:99:ca:e0:b7:f6:90:22: b1:94:d8:6e:a9:7e:f0:95:22:ce:f7:f8:a4:7c:73:81:c6:70: 0a:d4:bc:dd:51:95:f9:a5:47:5d:61:5b:75:8b:01:38:8c:52: 9f:2e:d7:db:c6:15:62:65:54:6e:f3:57:84:6c:9f:76:29:f8: 78:8f:1d:fa:93:57:47:25:1e:f3:ad:f7:c8:45:3a:74:a5:3e: 1d:49:c1:32:23:7b:0e:f5:c9:d6:7a:41:6d:90:a6:01:26:0d: db:81:3e:3c:b7:47:c7:7d:25:85:17:2a:c2:06:4e:b1:29:72: 1e:84:fc:ba:9d:99:38:85:7d:27:57:58:a9:17:7c:84:2e:ea: 16:14:7a:cd:0a:33:44:8b:9a:32:f2:cc:bc:77:08:87:2d:1b: e6:62:6c:e1:bb:31:9a:3b:16:4d:35:17:10:50:86:f6:83:b5: fa:9a:0d:1e:2f:0d:7c:e4:fd:cc:8f:9a:c0:e4:67:e6:da:d6: 77:d8:f5:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9Ak2oPxiYtJxq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MDQ0OTVkYjktYTVjYi00MTUwLWFmMjctOGI1YTdlNmE2ZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrY57J30vGOsJSkOZttA4J1tKBXAKwSpRGI1 IIterJ1nMRwSD0P5+SNr8oqZF2lW7AGBhqjyQEHcoKXFthetg8EUR0/cQsKCAd01 ZZQ7wtOLxypuIfk6m4yPG2L+OouZCqCc7g8P0i9cSHe0Z6StcRscDh0lNdSeIi0c qBGc48pcexcYqC01waW4Ah5Onkavl1WtRq/et9S/c+g3jqGyqPksRXWuDh0FpmNy 1GTLF3Vb+v4zuUBVqIw9J4iRAYZ7SMNLhduUQDf28WIl9BbaOXa25JChLJbfM8Aq fBY5da40YrZUQb3l6rlnsR7fpyOSetvO5pzzwU5TzJEzfrXcUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITUD6RUdOd3xj2BPEYdCG8Bs11xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZmJiN2I0NGItNzVhMC0z MDRkLTg4NzgtMDIxZDRkNTc2YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGJlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSZI+zK8Ky0yUGq3W9cUFgy0FcyF74VoAWwhQzcLaPyUmhZ9vKzuOK4 Tdm/815xwQUH5RPRjpp9+mxU3IymuJY6mcrgt/aQIrGU2G6pfvCVIs73+KR8c4HG cArUvN1RlfmlR11hW3WLATiMUp8u19vGFWJlVG7zV4Rsn3Yp+HiPHfqTV0clHvOt 98hFOnSlPh1JwTIjew71ydZ6QW2QpgEmDduBPjy3R8d9JYUXKsIGTrEpch6E/Lqd mTiFfSdXWKkXfIQu6hYUes0KM0SLmjLyzLx3CIctG+ZibOG7MZo7Fk01FxBQhvaD tfqaDR4vDXzk/cyPmsDkZ+ba1nfY9Zo= -----END CERTIFICATE-----Generated at Tue May 6 05:14:25 2025 by rpki-client