$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa File: f84f7d22-eb77-3b0c-9804-527be438dbd6.roa (raw, json) Hash identifier: oNHtoxrxEKLjyTYtyZooKT2Gfh/Lu3QPJRa152OVnv8= Subject key identifier: 96:49:33:AE:7C:DE:2E:34:C3:22:BD:FD:35:AF:64:70:42:D3:2E:07 Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F4328584A0C05735B13540D3054105A00 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 32746 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:73:5b:13:54:0d:30:54:10:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=4ab949d4-6de7-4786-b81e-01fab59da0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:96:43:50:fc:0c:e9:01:93:71:d7:8f:77:68: 26:f8:9e:75:d8:6a:ae:4a:21:c5:0d:13:eb:84:90: 8d:d7:d5:bb:87:32:b3:42:73:81:6e:f8:ea:30:8e: 8b:b0:f0:77:3f:45:e7:9e:30:cb:50:ea:a4:db:80: 02:b2:48:40:11:87:28:e1:e3:b4:53:0f:85:b1:d3: 7f:b3:02:14:8d:66:10:54:61:35:1d:f1:c4:fd:08: d4:35:5f:de:59:76:20:19:6f:e0:f4:00:20:5b:00: 17:c3:e5:1c:22:cf:62:a1:8c:3e:69:ea:7c:4a:ac: 28:ba:39:da:1e:f1:c2:51:f2:83:24:d1:30:4f:f4: 64:28:be:e1:ca:a1:d1:56:fe:72:64:1a:cd:19:12: e5:16:61:aa:78:f2:0c:27:ff:c6:e6:d4:28:6e:78: a3:c2:20:fd:9c:62:d7:b9:64:93:1d:44:c5:e8:ea: 88:49:5f:d7:ce:5a:95:16:25:29:36:a0:f8:b8:b8: 1f:4b:83:a5:2e:b7:6f:dd:14:4a:c9:cc:f7:e6:4a: ee:1a:50:83:22:1e:54:8e:4c:fe:76:42:a5:0c:9b: 83:16:9a:09:f6:f9:b1:b5:c9:0e:95:2b:3e:77:ed: 08:9d:4d:7e:97:25:7e:c2:81:57:8d:50:1d:66:e7: 68:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:49:33:AE:7C:DE:2E:34:C3:22:BD:FD:35:AF:64:70:42:D3:2E:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:52:0b:3d:71:5a:f1:75:b4:db:e1:6c:5d:41:06:5b:a2:d9: 55:23:45:91:49:94:02:97:23:17:96:53:a6:1b:b9:e4:a5:e6: bf:20:c3:f5:de:a7:fc:3c:3b:e0:b1:fe:25:ea:1c:56:b4:4a: ee:13:72:01:1c:30:8a:87:f7:f3:0b:e1:9e:49:3e:cc:b4:73: b9:63:5d:1d:cd:f1:e5:b5:2a:de:f2:f0:81:f7:88:e6:61:a1: e2:1f:de:22:3a:4a:5a:86:24:82:1a:ce:fa:26:61:d1:88:1f: 08:79:46:cd:f2:ef:e4:dd:c4:ca:f7:33:11:87:ae:8c:ea:e8: 97:c6:73:15:74:e3:86:f0:56:bd:d5:d3:25:ed:fc:98:86:53: 53:06:f3:4a:05:b9:3e:46:19:f7:8f:19:40:14:8d:44:6a:ce: c1:9b:4e:cc:4d:e0:c6:0f:aa:c0:64:9c:78:53:2b:75:a4:0d: c7:3b:6f:66:9b:70:2c:37:bd:2f:7c:4f:4a:bf:2f:11:91:9c: 05:bb:81:29:4a:a6:5f:5c:92:f8:41:1d:df:22:5f:04:7c:1b: 51:fe:b6:51:ed:db:79:17:7b:1e:21:30:07:b5:a6:1d:d6:a9: f2:30:c1:f5:5d:f6:58:7a:88:f0:7a:bc:5b:d4:a1:e9:38:57: 4c:3a:29:bf -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoMBXNbE1QNMFQQWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NGFiOTQ5ZDQtNmRlNy00Nzg2LWI4MWUtMDFmYWI1OWRhMGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45ZDUPwM6QGTcdePd2gm+J512GquSiHFDRPr hJCN19W7hzKzQnOBbvjqMI6LsPB3P0XnnjDLUOqk24ACskhAEYco4eO0Uw+FsdN/ swIUjWYQVGE1HfHE/QjUNV/eWXYgGW/g9AAgWwAXw+UcIs9ioYw+aep8Sqwoujna HvHCUfKDJNEwT/RkKL7hyqHRVv5yZBrNGRLlFmGqePIMJ//G5tQobnijwiD9nGLX uWSTHUTF6OqISV/XzlqVFiUpNqD4uLgfS4OlLrdv3RRKycz35kruGlCDIh5Ujkz+ dkKlDJuDFpoJ9vmxtckOlSs+d+0InU1+lyV+woFXjVAdZudoSwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJZJM6583i40wyK9/TWvZHBC0y4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvZjg0ZjdkMjItZWI3Ny0z YjBjLTk4MDQtNTI3YmU0MzhkYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJRSCz1xWvF1tNvhbF1BBlui2VUjRZFJlAKXIxeWU6YbueSl 5r8gw/Xep/w8O+Cx/iXqHFa0Su4TcgEcMIqH9/ML4Z5JPsy0c7ljXR3N8eW1Kt7y 8IH3iOZhoeIf3iI6SlqGJIIazvomYdGIHwh5Rs3y7+TdxMr3MxGHrozq6JfGcxV0 44bwVr3V0yXt/JiGU1MG80oFuT5GGfePGUAUjURqzsGbTsxN4MYPqsBknHhTK3Wk Dcc7b2abcCw3vS98T0q/LxGRnAW7gSlKpl9ckvhBHd8iXwR8G1H+tlHt23kXex4h MAe1ph3WqfIwwfVd9lh6iPB6vFvUoek4V0w6Kb8= -----END CERTIFICATE-----Generated at Mon Jun 16 20:54:46 2025 by rpki-client