$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df25439f-a8a5-3d84-9c28-12364575d70b.roa File: df25439f-a8a5-3d84-9c28-12364575d70b.roa (raw, json) Hash identifier: hws2KVVPQoZ4Zv2prYBY7+fGKYskIg75MM/5GbGujaU= Subject key identifier: EC:98:F6:AE:14:4F:11:9A:0A:B1:02:20:97:B0:8E:A2:0B:D8:3C:9F Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584A374ADC4AB700AF7DE3D1BD80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df25439f-a8a5-3d84-9c28-12364575d70b.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 11290 IP address blocks: 24.122.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:dc:4a:b7:00:af:7d:e3:d1:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=38e5a297-77d7-4dfb-8630-faacc071fd2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:11:81:fe:f7:3f:3f:0a:16:fe:1b:50:f0:6d: 8b:fb:1b:55:a8:77:38:ff:3c:5b:fb:f1:dc:45:08: c8:35:89:c2:b9:5d:6d:e7:e8:a7:64:91:c3:40:39: c5:9a:1b:59:95:88:5c:09:50:57:ae:c8:38:97:43: e8:a2:a4:00:c1:41:55:27:81:76:cd:07:9f:34:b3: 41:88:e9:18:b1:93:91:13:74:c8:64:c4:ed:4b:eb: 57:be:f0:f7:b4:c9:99:94:e1:a0:cf:0b:7a:44:4d: ad:c1:b9:f2:b0:e9:ea:f2:b4:d7:d3:4d:2d:8f:80: 29:b8:99:05:d6:55:28:73:db:b8:82:89:54:cb:21: d5:c8:05:dd:06:42:94:db:43:cc:09:ba:fc:7c:b7: 50:ab:6e:43:fe:3a:e4:d8:83:03:83:86:a6:82:96: dd:be:2e:99:5f:3e:7e:0a:67:08:8b:dd:9c:89:e0: 97:d1:51:10:5b:44:8f:92:a8:f8:b6:b7:bf:54:93: b1:31:ef:f5:20:f1:e9:e6:29:e7:e4:5d:d7:88:0c: fd:df:51:b4:52:e7:e7:47:9b:88:59:7d:82:c0:e9: 6e:ec:78:0e:fb:e8:86:64:78:f4:bd:81:76:9a:73: 9d:08:97:d0:98:46:03:cb:1d:c3:3e:30:13:93:95: 55:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:98:F6:AE:14:4F:11:9A:0A:B1:02:20:97:B0:8E:A2:0B:D8:3C:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df25439f-a8a5-3d84-9c28-12364575d70b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:60:09:d0:ef:a0:95:65:d7:74:e4:71:15:9e:c2:a2:ad:26: 76:5c:00:d0:e1:3e:30:5e:39:7e:2d:ab:e4:ff:1e:50:a8:52: db:a4:63:03:a0:b4:48:75:3f:47:0e:d3:4f:4a:ac:00:1f:5a: b4:cb:41:02:8d:8c:61:26:e8:ea:ab:0c:4a:3b:65:0b:35:a5: df:81:1f:60:cc:6e:ea:bb:f8:53:38:ac:07:8d:35:9d:94:de: 5d:34:87:b2:18:f1:e5:14:8a:bd:3a:c8:68:8c:6d:1f:07:fd: 65:72:62:1f:55:db:85:99:dd:94:68:32:a5:c2:98:da:a3:d3: dc:3f:9f:70:fa:66:16:be:81:de:32:54:cc:b2:28:c4:ea:6e: 37:e7:5a:4e:c4:36:66:64:ea:e4:35:bb:a7:50:67:43:16:37: 75:0c:2f:c7:15:03:a6:15:6a:67:55:8e:6a:9c:c8:24:3a:33: f7:fd:e8:10:c2:7f:e4:b6:8b:ee:05:4a:62:b9:1e:78:06:3b: c9:60:3f:02:9a:a2:c9:b5:82:8c:c7:ce:66:eb:21:71:06:e4: 16:2a:0a:07:f3:87:63:24:66:4b:26:71:4a:1f:94:00:b4:a7: 42:7a:fb:c8:60:d2:21:b1:d9:6b:6b:91:35:52:47:54:8f:25: 5e:1d:ca:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StxKtwCvfePRvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk MzhlNWEyOTctNzdkNy00ZGZiLTg2MzAtZmFhY2MwNzFmZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RGB/vc/PwoW/htQ8G2L+xtVqHc4/zxb+/Hc RQjINYnCuV1t5+inZJHDQDnFmhtZlYhcCVBXrsg4l0PooqQAwUFVJ4F2zQefNLNB iOkYsZORE3TIZMTtS+tXvvD3tMmZlOGgzwt6RE2twbnysOnq8rTX000tj4ApuJkF 1lUoc9u4golUyyHVyAXdBkKU20PMCbr8fLdQq25D/jrk2IMDg4amgpbdvi6ZXz5+ CmcIi92cieCX0VEQW0SPkqj4tre/VJOxMe/1IPHp5inn5F3XiAz931G0UufnR5uI WX2CwOlu7HgO++iGZHj0vYF2mnOdCJfQmEYDyx3DPjATk5VVrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyY9q4UTxGaCrECIJewjqIL2DyfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZGYyNTQzOWYtYThhNS0z ZDg0LTljMjgtMTIzNjQ1NzVkNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFgCdDvoJVl13TkcRWewqKtJnZcANDhPjBeOX4tq+T/HlCoUtukYwOg tEh1P0cO009KrAAfWrTLQQKNjGEm6OqrDEo7ZQs1pd+BH2DMbuq7+FM4rAeNNZ2U 3l00h7IY8eUUir06yGiMbR8H/WVyYh9V24WZ3ZRoMqXCmNqj09w/n3D6Zha+gd4y VMyyKMTqbjfnWk7ENmZk6uQ1u6dQZ0MWN3UML8cVA6YVamdVjmqcyCQ6M/f96BDC f+S2i+4FSmK5HngGO8lgPwKaosm1gozHzmbrIXEG5BYqCgfzh2MkZksmcUoflAC0 p0J6+8hg0iGx2WtrkTVSR1SPJV4dyio= -----END CERTIFICATE-----Generated at Thu Jun 19 14:10:49 2025 by rpki-client