$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa File: 83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa (raw, json) Hash identifier: tIjF8AkS7SeRWViu080IIuHk7c/Fh5xXKQk/xWP3oN0= Subject key identifier: 30:7B:E1:CE:4A:10:03:4E:FB:26:8F:1E:4B:8F:86:6B:28:A0:29:99 Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F43285849E7BA7C86EB99F8E481D7FCC0 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 63456 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:7c:86:eb:99:f8:e4:81:d7:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=1e2106db-da35-4dd3-8a47-49aa6f98c141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ee:c3:45:25:0d:99:f5:da:b1:49:c8:9d:dd: 0c:21:92:f3:3d:14:c8:8a:7b:7c:ac:f7:ac:db:f2: 5f:18:7f:69:da:e1:13:e2:83:a5:60:43:d2:7c:5c: 2e:c1:b1:e8:92:c3:e6:76:11:20:bd:ce:bf:0f:87: 64:ce:e1:30:ea:ee:78:fb:e9:02:f9:d2:67:7e:01: c7:f1:f5:98:6a:1b:22:16:c6:bc:84:1f:02:f0:3c: 18:85:f0:30:dc:4a:d7:b7:9b:98:56:a2:06:0c:33: ce:4f:79:2b:78:5d:80:dd:36:43:91:34:ad:5d:80: c2:33:9a:bd:ee:a6:30:43:04:d8:8e:67:b3:8b:a7: 55:04:45:01:e2:fb:c4:01:f8:23:6a:a1:dd:1d:1a: d7:36:b9:f2:ff:20:5d:36:08:ff:38:a7:e1:2f:90: f3:f3:c5:61:01:12:82:a3:65:60:63:d4:63:fd:2e: 38:24:35:ab:67:85:5e:76:8a:c1:7d:b9:e7:cb:4d: 02:b4:c0:e6:c3:7a:04:5f:0b:b4:de:d7:98:24:13: 5a:38:e2:b0:db:b1:63:89:f4:10:f3:cc:18:22:d2: d1:53:77:f9:c3:ca:f8:42:16:36:42:a8:f5:f1:8c: dc:13:5c:36:f3:12:4e:cc:3c:8c:52:0c:8f:f7:10: 16:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7B:E1:CE:4A:10:03:4E:FB:26:8F:1E:4B:8F:86:6B:28:A0:29:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:76:4f:ac:1c:5c:ef:72:47:72:d1:af:a3:c2:7b:31:e9:a1: 99:46:69:49:4e:da:26:26:2a:ee:08:15:2f:e4:ca:a5:0d:e5: ac:0a:31:33:6e:f9:c5:84:fc:7b:1e:49:55:37:8d:b8:71:d1: 83:f6:6b:0d:25:1f:e4:a7:0f:ae:ac:b6:4d:07:65:91:e5:8b: b8:71:0f:87:d6:17:2c:8b:fc:db:cf:b4:dd:4d:80:f7:4e:c9: 8c:68:cc:10:23:68:4f:fc:d8:0a:36:67:1e:e7:66:c0:5b:a5: 97:47:49:d7:38:dd:f3:61:0f:11:4f:ee:47:10:75:8d:b0:77: 8b:70:e1:3d:fb:93:b0:84:99:9e:5e:bc:d5:40:d3:1d:78:f8: 9b:ef:dc:b8:9e:c8:45:c8:ff:7f:66:93:fa:52:a6:61:59:b9: 15:a8:cc:0e:cb:82:10:67:fd:f1:bc:ad:cc:23:76:4a:73:32: a3:13:e7:99:9c:5c:0f:8b:e0:f2:a6:a7:db:d4:4f:40:f0:f3: 85:b1:80:2e:6c:4b:f5:62:74:48:ff:d1:8f:6e:55:ab:9b:b8: a6:e0:b9:7d:d3:0a:f8:e0:63:ed:f5:f7:a1:7d:53:8c:a8:a9: 0b:01:c3:a5:2b:58:8f:d7:9b:5c:10:45:fc:e7:1c:ad:ca:fa: c7:1b:59:af -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnnunyG65n45IHX/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk MWUyMTA2ZGItZGEzNS00ZGQzLThhNDctNDlhYTZmOThjMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+7DRSUNmfXasUnInd0MIZLzPRTIint8rPes 2/JfGH9p2uET4oOlYEPSfFwuwbHoksPmdhEgvc6/D4dkzuEw6u54++kC+dJnfgHH 8fWYahsiFsa8hB8C8DwYhfAw3ErXt5uYVqIGDDPOT3kreF2A3TZDkTStXYDCM5q9 7qYwQwTYjmezi6dVBEUB4vvEAfgjaqHdHRrXNrny/yBdNgj/OKfhL5Dz88VhARKC o2VgY9Rj/S44JDWrZ4VedorBfbnny00CtMDmw3oEXwu03teYJBNaOOKw27FjifQQ 88wYItLRU3f5w8r4QhY2Qqj18YzcE1w28xJOzDyMUgyP9xAWKQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDB74c5KEANO+yaPHkuPhmsooCmZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvODNkNWRmMDctMGNjNC0z YjE2LWE1ZTctYThjYjlkMDE0OTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHJ2T6wcXO9yR3LRr6PCezHpoZlGaUlO2iYmKu4IFS/kyqUN 5awKMTNu+cWE/HseSVU3jbhx0YP2aw0lH+SnD66stk0HZZHli7hxD4fWFyyL/NvP tN1NgPdOyYxozBAjaE/82Ao2Zx7nZsBbpZdHSdc43fNhDxFP7kcQdY2wd4tw4T37 k7CEmZ5evNVA0x14+Jvv3LieyEXI/39mk/pSpmFZuRWozA7LghBn/fG8rcwjdkpz MqMT55mcXA+L4PKmp9vUT0Dw84WxgC5sS/VidEj/0Y9uVaubuKbguX3TCvjgY+31 96F9U4yoqQsBw6UrWI/Xm1wQRfznHK3K+scbWa8= -----END CERTIFICATE-----Generated at Mon Jun 16 20:27:08 2025 by rpki-client