$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e98454d-aa7e-3c21-b0f4-860de14dee21.roa File: 2e98454d-aa7e-3c21-b0f4-860de14dee21.roa (raw, json) Hash identifier: 8SKhzmJ+XE6reiDuvxIZFXg5NwTxHbN9TlA5b0togm0= Subject key identifier: 4E:32:4A:CE:D0:D3:09:80:B5:D1:4B:5A:92:D8:A0:F5:0A:F5:40:F2 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584A374ADCBAEFE1F7C208C00180 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e98454d-aa7e-3c21-b0f4-860de14dee21.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 11290 IP address blocks: 24.122.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:dc:ba:ef:e1:f7:c2:08:c0:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=414f71ff-f160-4b3e-952a-99018ec3e22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4e:69:81:bc:bc:eb:24:97:1a:34:eb:8a:d2: 26:ac:e1:f2:f5:cc:c8:6c:39:b4:1a:ea:a0:5b:1e: c7:b0:27:fb:51:12:5a:29:cf:4b:20:89:a0:d7:f0: ee:c1:dc:30:15:a9:35:a0:d3:27:95:83:c7:96:fe: 69:c9:4a:1f:41:bf:6f:17:9c:55:03:b7:1d:65:da: 7f:36:8b:43:a8:5c:2b:df:db:48:02:b8:b2:2e:73: 67:be:81:26:ac:c8:dc:cd:11:2b:d8:00:6a:37:85: ea:79:f3:76:00:93:b7:0e:fe:25:a4:89:20:aa:75: ed:07:e2:ba:93:e3:26:12:7e:1e:c7:bb:2b:09:fc: d3:14:4e:26:a8:f4:38:98:ed:8e:a6:a1:c6:4c:66: b4:c9:53:1a:b7:9f:a3:8c:d6:31:03:0b:9c:fb:28: e2:a3:69:0f:7c:c1:ac:83:0a:68:72:4c:13:62:c7: 01:82:6b:54:59:e2:3d:84:26:b2:14:1b:4c:24:6a: b0:5e:a4:10:81:0a:c8:3c:7d:95:53:30:a7:3a:90: 25:51:ac:ba:16:f6:24:c2:d7:90:29:31:64:76:4e: bb:6d:de:a9:ca:67:f3:e3:d0:c7:3e:98:2c:f1:b4: ba:21:a1:cb:bb:64:d0:62:5f:42:f9:3a:6a:23:39: a7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:32:4A:CE:D0:D3:09:80:B5:D1:4B:5A:92:D8:A0:F5:0A:F5:40:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e98454d-aa7e-3c21-b0f4-860de14dee21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:bf:eb:cf:65:7b:0a:d9:59:05:2b:62:04:0b:eb:2f:ce:98: c7:52:eb:ad:54:71:40:2e:29:74:bc:47:f6:54:9a:85:08:69: 2b:61:4a:e2:b0:1f:9e:d5:92:2d:e0:ff:f7:9a:f4:b3:99:1b: ab:d9:d6:da:63:34:bb:49:1c:82:12:f3:2e:f1:04:c1:49:b4: ba:39:5b:07:5e:69:40:f1:f2:4f:9a:97:cf:8c:64:a0:b1:d7: c5:e5:de:0e:72:31:cb:02:3d:41:1a:5b:76:e8:f4:90:82:d0: 71:4d:ff:37:91:5a:9e:b8:b0:90:30:a2:ce:a0:29:ef:ae:ca: fa:ff:7f:17:5b:7d:cd:c0:54:61:d3:ef:09:c9:aa:2a:31:9f: cb:51:e1:cf:78:be:d8:55:6e:c1:d1:f7:77:e8:21:03:dd:a1: 9d:27:50:2c:80:35:c3:ba:fd:0b:29:f3:aa:64:35:26:54:bf: bc:92:a1:7b:77:71:5e:b7:2f:8b:2f:5e:a5:aa:bc:3a:23:b9: 1d:e0:a9:65:91:e6:43:52:d8:b6:ae:d0:bc:0f:d7:71:2c:e9: 78:b7:1b:8d:29:93:7e:69:06:aa:c0:d2:22:6e:e9:f7:f3:f4: a4:cc:a5:98:48:3e:46:cc:ab:51:33:08:8c:6e:c3:78:d3:19: 50:de:d4:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3Sty67+H3wgjAAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk NDE0ZjcxZmYtZjE2MC00YjNlLTk1MmEtOTkwMThlYzNlMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk5pgby86ySXGjTritImrOHy9czIbDm0Guqg Wx7HsCf7URJaKc9LIImg1/DuwdwwFak1oNMnlYPHlv5pyUofQb9vF5xVA7cdZdp/ NotDqFwr39tIAriyLnNnvoEmrMjczREr2ABqN4XqefN2AJO3Dv4lpIkgqnXtB+K6 k+MmEn4ex7srCfzTFE4mqPQ4mO2OpqHGTGa0yVMat5+jjNYxAwuc+yjio2kPfMGs gwpockwTYscBgmtUWeI9hCayFBtMJGqwXqQQgQrIPH2VUzCnOpAlUay6FvYkwteQ KTFkdk67bd6pymfz49DHPpgs8bS6IaHLu2TQYl9C+TpqIzmnzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4ySs7Q0wmAtdFLWpLYoPUK9UDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMmU5ODQ1NGQtYWE3ZS0z YzIxLWIwZjQtODYwZGUxNGRlZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS/689lewrZWQUrYgQL6y/OmMdS661UcUAuKXS8R/ZUmoUIaSthSuKw H57Vki3g//ea9LOZG6vZ1tpjNLtJHIIS8y7xBMFJtLo5WwdeaUDx8k+al8+MZKCx 18Xl3g5yMcsCPUEaW3bo9JCC0HFN/zeRWp64sJAwos6gKe+uyvr/fxdbfc3AVGHT 7wnJqioxn8tR4c94vthVbsHR93foIQPdoZ0nUCyANcO6/Qsp86pkNSZUv7ySoXt3 cV63L4svXqWqvDojuR3gqWWR5kNS2Lau0LwP13Es6Xi3G40pk35pBqrA0iJu6ffz 9KTMpZhIPkbMq1EzCIxuw3jTGVDe1CA= -----END CERTIFICATE-----Generated at Thu Jun 19 02:16:53 2025 by rpki-client