$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa File: fbb7b44b-75a0-304d-8878-021d4d576a6e.roa (raw, json) Hash identifier: tRnOJOKCX9X2XdOqiEHtht5SJYIJlPl3HAgHHbhY3fk= Subject key identifier: C2:E7:07:3E:1F:DE:9D:96:D0:E9:FD:82:C0:94:0E:09:03:2B:22:F9 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584A374ADBF25190F3EE607F89F8 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 11290 IP address blocks: 24.153.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:db:f2:51:90:f3:ee:60:7f:89:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=c08a241d-67ca-42f2-981e-0e8ffa3e4201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:15:11:a4:ac:7c:7b:8a:4d:6a:d2:36:02: 7b:8e:cb:79:ce:56:5a:fd:49:fa:fe:f4:02:34:fe: 03:bc:9d:0d:f8:60:ee:e9:be:e4:43:f0:da:e1:3f: 03:92:84:5e:29:dc:37:7b:f1:72:34:2c:a8:ad:e9: 29:ad:69:e6:a0:1e:e4:31:65:19:85:37:f0:8c:8f: 9a:5e:a9:b9:6c:33:2a:aa:25:cd:df:42:12:5d:7b: 4d:04:68:df:2c:ad:d3:9c:b1:74:91:66:5d:44:eb: 18:39:c2:fc:cf:34:b1:a6:6c:9b:ec:6e:bf:c2:59: bf:11:70:b1:00:fe:56:cb:1c:f2:34:e5:b8:a2:77: 2c:a4:fb:f5:ed:28:2f:6c:1c:62:e9:48:57:6a:7d: f3:29:5f:c8:37:90:49:21:a8:fd:b3:58:26:d3:85: c0:2f:99:f5:ee:7e:46:89:51:e3:8a:93:cc:a8:f8: ab:16:62:cd:99:2e:8e:1b:22:df:fd:fd:18:f4:14: 0f:b7:1e:95:ac:2c:91:6f:c0:01:99:9e:7a:6a:ad: 69:6a:e2:ad:ec:77:4b:be:40:34:47:9e:20:be:60: e7:cb:ae:bb:41:d4:9b:98:28:cd:fe:5d:6f:4d:e4: 3d:d8:0c:38:5f:22:06:b5:41:63:74:d0:b3:00:1a: 02:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E7:07:3E:1F:DE:9D:96:D0:E9:FD:82:C0:94:0E:09:03:2B:22:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.153.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:0d:0e:b6:27:80:60:e3:aa:7d:46:2c:d1:b8:d9:92:8f:9f: 07:58:75:4d:cd:4f:75:17:70:e8:cf:fc:5f:a9:5a:b4:fe:f3: 20:7c:a3:ec:59:0a:19:ce:c4:43:13:91:45:75:39:c5:b8:47: c9:17:bd:02:76:23:43:70:fb:a9:de:b4:31:20:65:31:68:a5: e7:b8:d3:1b:b6:49:69:29:32:c5:b5:5a:67:f0:2a:5d:8a:c4: 51:d8:41:3c:ca:42:93:87:af:29:ab:a9:3b:9b:f3:a1:45:dd: 89:3b:d7:31:14:d5:5a:86:86:71:3b:f2:5e:9a:aa:99:2c:73: 01:95:3b:b4:76:cc:a8:40:2b:44:65:08:c5:29:7f:24:ee:a9: cd:e1:e5:2d:5c:14:9f:85:4b:b3:cf:d4:a6:69:b7:82:a5:97: 2d:d2:2d:4e:ec:2b:a4:16:04:fd:3f:73:f0:4e:aa:b3:49:b0: 20:88:39:bf:34:64:ac:08:41:76:a6:85:76:9b:d5:51:77:de: 86:a0:c1:e0:16:b6:3c:bf:4e:65:78:cb:44:4e:f9:c0:85:f5: 5f:f8:44:b2:2e:27:6d:54:ff:45:c9:3d:c2:12:bc:7a:4b:ce: 58:2c:e7:07:92:80:b2:b5:9d:ae:b2:30:95:3c:16:8a:40:65: b2:6b:46:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StvyUZDz7mB/ifgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk YzA4YTI0MWQtNjdjYS00MmYyLTk4MWUtMGU4ZmZhM2U0MjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumMVEaSsfHuKTWrSNgJ7jst5zlZa/Un6/vQC NP4DvJ0N+GDu6b7kQ/Da4T8DkoReKdw3e/FyNCyorekprWnmoB7kMWUZhTfwjI+a Xqm5bDMqqiXN30ISXXtNBGjfLK3TnLF0kWZdROsYOcL8zzSxpmyb7G6/wlm/EXCx AP5WyxzyNOW4oncspPv17SgvbBxi6UhXan3zKV/IN5BJIaj9s1gm04XAL5n17n5G iVHjipPMqPirFmLNmS6OGyLf/f0Y9BQPtx6VrCyRb8ABmZ56aq1pauKt7HdLvkA0 R54gvmDny667QdSbmCjN/l1vTeQ92Aw4XyIGtUFjdNCzABoCDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLnBz4f3p2W0On9gsCUDgkDKyL5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZmJiN2I0NGItNzVhMC0z MDRkLTg4NzgtMDIxZDRkNTc2YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGJlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGENDrYngGDjqn1GLNG42ZKPnwdYdU3NT3UXcOjP/F+pWrT+8yB8o+xZ ChnOxEMTkUV1OcW4R8kXvQJ2I0Nw+6netDEgZTFopee40xu2SWkpMsW1WmfwKl2K xFHYQTzKQpOHrymrqTub86FF3Yk71zEU1VqGhnE78l6aqpkscwGVO7R2zKhAK0Rl CMUpfyTuqc3h5S1cFJ+FS7PP1KZpt4Klly3SLU7sK6QWBP0/c/BOqrNJsCCIOb80 ZKwIQXamhXab1VF33oagweAWtjy/TmV4y0RO+cCF9V/4RLIuJ21U/0XJPcISvHpL zlgs5weSgLK1na6yMJU8FopAZbJrRpI= -----END CERTIFICATE-----Generated at Thu Jun 19 00:33:06 2025 by rpki-client