$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/bcd8162c-1693-3580-b8e5-125ce5b4b01d.roa File: bcd8162c-1693-3580-b8e5-125ce5b4b01d.roa (raw, json) Hash identifier: oc31EgSq2NKtmfiX04Q7WzylJDMtLF4SJ6ZEa8YbtL8= Subject key identifier: AB:53:92:6A:2C:C3:F4:91:A6:99:D6:91:73:48:1C:27:6F:45:1F:C3 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584A374ADC8C47D50A5DA2C71A20 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/bcd8162c-1693-3580-b8e5-125ce5b4b01d.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 11290 IP address blocks: 24.122.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:dc:8c:47:d5:0a:5d:a2:c7:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=a76180f3-4347-413f-abab-2a325dfb6b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:48:33:b7:3b:71:ab:08:2d:d9:9b:42:5b:71: 75:20:92:96:0c:f1:5c:df:6d:60:58:5c:f5:ca:56: 5d:9d:2e:96:55:7f:b6:f0:30:c2:e5:63:8f:8a:fd: e1:21:51:dd:0d:7f:f1:7d:8a:3f:ac:17:f9:45:78: f3:c6:10:fd:6f:e7:6f:ce:72:81:67:f7:5c:81:74: 1b:04:40:00:f4:fa:60:b6:cd:17:bc:3b:3a:5a:24: e6:57:e4:72:6d:b7:72:ee:97:74:17:10:fc:03:39: 6c:2b:f7:e5:f8:e6:70:4f:a5:97:c7:c7:81:0c:68: 06:6c:a6:82:9f:4c:0c:0c:09:33:54:07:a5:f0:56: 95:30:aa:63:7b:37:68:0e:9f:b6:d9:a6:86:16:ad: 6f:53:31:37:1a:49:c5:d6:f4:20:fd:0b:7a:3e:a7: 45:96:44:d7:a9:dd:9c:e3:1c:f9:99:8c:93:44:bb: 41:3e:25:b3:81:0f:c4:b5:70:6f:4a:45:44:83:91: e0:b4:c5:56:d7:9e:8b:15:03:f5:b3:ba:f2:aa:00: 8f:32:15:be:bb:6e:d0:ad:98:49:02:e2:52:d7:22: b5:d3:0d:32:8d:e1:15:59:42:38:aa:2d:d9:28:7b: 80:8c:74:03:d6:88:43:d6:17:5b:b8:62:81:7b:9c: c9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:53:92:6A:2C:C3:F4:91:A6:99:D6:91:73:48:1C:27:6F:45:1F:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/bcd8162c-1693-3580-b8e5-125ce5b4b01d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5e:41:e4:27:60:e3:1d:29:ee:04:f9:9d:3f:66:43:d0:15: b2:03:fa:73:da:a9:0b:9d:b3:7e:bd:01:a1:74:61:81:37:4f: ab:22:23:96:7a:d7:bb:c5:43:28:f5:48:46:05:2f:77:b1:ac: 05:f3:49:46:23:c6:19:50:44:fd:52:78:12:ff:00:05:d2:3e: 80:6a:28:a2:ad:29:17:48:3b:47:3b:88:d1:fa:c7:9b:88:dd: fa:14:3f:39:c8:20:61:69:72:57:20:b4:ed:f2:73:90:dc:b5: 27:30:44:4e:58:8e:c2:34:cd:58:c2:0b:5a:14:de:b0:be:fc: 4f:6d:d5:b3:08:d2:e4:34:4e:b0:6b:73:fb:47:32:22:0b:73: fb:ae:1a:0e:57:bc:3e:44:fc:ef:8f:d9:88:e6:63:60:ed:71: 37:a2:9b:9d:6f:73:70:f1:89:af:c9:8b:55:1f:35:39:83:6c: be:b4:a3:4c:30:35:4f:19:13:a5:dc:ca:fe:d3:3e:16:3e:09: 7b:92:8c:12:37:47:11:ff:34:4e:9a:78:f2:96:a7:02:f3:a1: 20:f3:4d:3f:ac:ac:dd:28:03:fd:10:31:38:0a:73:b0:97:fd: aa:fb:30:bb:c5:51:a2:1c:48:92:21:42:d2:36:ee:b4:8c:f5: ea:79:a9:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StyMR9UKXaLHGiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk YTc2MTgwZjMtNDM0Ny00MTNmLWFiYWItMmEzMjVkZmI2YjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ugztztxqwgt2ZtCW3F1IJKWDPFc321gWFz1 ylZdnS6WVX+28DDC5WOPiv3hIVHdDX/xfYo/rBf5RXjzxhD9b+dvznKBZ/dcgXQb BEAA9Ppgts0XvDs6WiTmV+Rybbdy7pd0FxD8AzlsK/fl+OZwT6WXx8eBDGgGbKaC n0wMDAkzVAel8FaVMKpjezdoDp+22aaGFq1vUzE3GknF1vQg/Qt6PqdFlkTXqd2c 4xz5mYyTRLtBPiWzgQ/EtXBvSkVEg5HgtMVW156LFQP1s7ryqgCPMhW+u27QrZhJ AuJS1yK10w0yjeEVWUI4qi3ZKHuAjHQD1ohD1hdbuGKBe5zJTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtTkmosw/SRppnWkXNIHCdvRR/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYmNkODE2MmMtMTY5My0z NTgwLWI4ZTUtMTI1Y2U1YjRiMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFeQeQnYOMdKe4E+Z0/ZkPQFbID+nPaqQuds369AaF0YYE3T6siI5Z6 17vFQyj1SEYFL3exrAXzSUYjxhlQRP1SeBL/AAXSPoBqKKKtKRdIO0c7iNH6x5uI 3foUPznIIGFpclcgtO3yc5DctScwRE5YjsI0zVjCC1oU3rC+/E9t1bMI0uQ0TrBr c/tHMiILc/uuGg5XvD5E/O+P2YjmY2DtcTeim51vc3Dxia/Ji1UfNTmDbL60o0ww NU8ZE6Xcyv7TPhY+CXuSjBI3RxH/NE6aePKWpwLzoSDzTT+srN0oA/0QMTgKc7CX /ar7MLvFUaIcSJIhQtI27rSM9ep5qdM= -----END CERTIFICATE-----Generated at Thu Jun 19 09:03:45 2025 by rpki-client