$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa File: 3c61c44a-b3fc-304f-b232-cf0f14a43933.roa (raw, json) Hash identifier: 8P9cJAibjsuyG2ALmOo1m3KpgqA3uHgKl3WeIe/37YU= Subject key identifier: 6B:47:8E:1D:B2:53:A4:D4:22:32:14:3B:44:42:1E:9D:87:0E:FD:33 Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F4328584A0C05734A43E2B606E6BCE50A Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 53281 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:73:4a:43:e2:b6:06:e6:bc:e5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=4ce6b253-6676-4eff-b951-fc97295af136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:72:35:e3:5d:b2:7b:48:4b:3c:b1:ae:73:c1: b8:45:57:c6:4d:a8:ac:e1:b6:83:99:8a:58:38:55: c4:f4:8c:73:93:28:53:aa:46:5d:5d:6b:a7:3c:1e: 13:db:0e:f0:eb:c6:90:51:86:05:4d:7d:ca:6e:c6: 14:c9:c0:80:ff:14:98:58:d3:4c:0f:38:e0:4f:dd: 13:aa:e9:c1:28:f3:dd:00:ea:8f:e1:69:f4:af:93: 1f:11:66:18:9d:df:19:70:31:4e:14:d5:69:9d:47: 13:f1:e5:9c:14:ad:d5:04:8e:7a:62:1f:83:8d:3c: 0e:58:ce:33:8f:c6:37:58:9a:3f:dd:50:75:68:bc: 74:92:e1:0f:3a:98:d3:77:1a:a4:18:9f:03:3c:c1: 04:7a:a6:aa:dd:5a:ca:c1:22:57:e8:4e:74:14:f2: be:78:6d:a4:32:11:5d:c3:ff:30:93:6e:b0:ce:7b: c1:c9:0b:a4:98:5f:40:36:84:4c:a6:2e:2b:7a:9d: 6e:21:b0:b5:9d:34:0b:d5:46:4b:7b:f1:c2:1c:d1: 73:4f:5f:e9:5a:5e:0f:71:0e:f8:8b:28:3a:0c:cc: 6f:9c:27:5f:2e:65:b7:80:f3:62:0a:0c:51:cb:66: a0:30:0c:ae:e7:70:84:c3:15:d5:da:18:d9:53:d0: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:47:8E:1D:B2:53:A4:D4:22:32:14:3B:44:42:1E:9D:87:0E:FD:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d9:f3:0a:f7:01:6c:87:4e:df:a7:1a:e3:ac:76:f9:f2:6b: 52:9c:7d:da:a4:ce:f7:76:74:86:71:ad:e8:64:bf:f7:34:86: 41:66:23:8c:70:50:18:fa:f8:95:8b:4c:4e:fc:52:cf:da:fe: c9:e4:ff:41:64:85:89:7c:3d:30:4f:ec:6a:da:46:24:6a:77: e0:ee:e2:82:8a:40:2f:a0:8a:52:d2:d4:79:00:b5:35:a1:b4: e6:1c:55:09:cf:5f:eb:73:fa:24:e2:80:ee:91:b9:1a:6e:95: 7f:d9:bc:59:17:97:4a:da:23:c0:8a:7d:ed:0a:fe:34:61:1f: 62:e3:ae:d9:e6:e6:24:1d:0c:a7:99:b3:84:73:90:52:79:16: 91:bb:f4:ea:25:72:c0:36:94:fb:2c:85:b5:95:2f:a7:56:6c: 90:79:f0:c3:6f:80:06:91:b2:d0:cc:60:a1:88:5c:97:46:6d: 25:95:e8:ba:30:d5:8d:aa:10:d5:e5:d7:a8:ff:18:74:c3:de: 41:ed:9c:59:4a:30:61:5a:2d:73:77:a3:04:0e:ae:ad:2d:3f: 10:c3:68:e2:c3:ad:4c:6b:1a:fe:52:37:ef:71:78:0c:e0:00: 7c:c1:7d:cd:37:af:28:18:cd:a1:40:bc:ef:25:bb:5e:52:af: 0e:b8:21:3e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoMBXNKQ+K2Bua85QowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NGNlNmIyNTMtNjY3Ni00ZWZmLWI5NTEtZmM5NzI5NWFmMTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3I1412ye0hLPLGuc8G4RVfGTais4baDmYpY OFXE9IxzkyhTqkZdXWunPB4T2w7w68aQUYYFTX3KbsYUycCA/xSYWNNMDzjgT90T qunBKPPdAOqP4Wn0r5MfEWYYnd8ZcDFOFNVpnUcT8eWcFK3VBI56Yh+DjTwOWM4z j8Y3WJo/3VB1aLx0kuEPOpjTdxqkGJ8DPMEEeqaq3VrKwSJX6E50FPK+eG2kMhFd w/8wk26wznvByQukmF9ANoRMpi4rep1uIbC1nTQL1UZLe/HCHNFzT1/pWl4PcQ74 iyg6DMxvnCdfLmW3gPNiCgxRy2agMAyu53CEwxXV2hjZU9A68QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGtHjh2yU6TUIjIUO0RCHp2HDv0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvM2M2MWM0NGEtYjNmYy0z MDRmLWIyMzItY2YwZjE0YTQzOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGnZ8wr3AWyHTt+nGuOsdvnya1Kcfdqkzvd2dIZxrehkv/c0 hkFmI4xwUBj6+JWLTE78Us/a/snk/0FkhYl8PTBP7GraRiRqd+Du4oKKQC+gilLS 1HkAtTWhtOYcVQnPX+tz+iTigO6RuRpulX/ZvFkXl0raI8CKfe0K/jRhH2Ljrtnm 5iQdDKeZs4RzkFJ5FpG79OolcsA2lPsshbWVL6dWbJB58MNvgAaRstDMYKGIXJdG bSWV6Low1Y2qENXl16j/GHTD3kHtnFlKMGFaLXN3owQOrq0tPxDDaOLDrUxrGv5S N+9xeAzgAHzBfc03rygYzaFAvO8lu15Srw64IT4= -----END CERTIFICATE-----Generated at Mon Jun 16 15:40:19 2025 by rpki-client