$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa File: d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa (raw, json) Hash identifier: eUZ2PktyV9dStU1tnHKffIT4sUWd0I4RHlBn2bWiW8g= Subject key identifier: 4A:97:81:0B:83:64:FB:F7:C3:12:F9:8A:B3:0D:CE:A8:95:D9:79:D8 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F43285848E16BD75E2C8BBF4144750C80 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 51964 IP address blocks: 66.112.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d7:5e:2c:8b:bf:41:44:75:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=1103cb53-88be-4318-a177-44760b7423ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d5:53:8a:fb:49:c7:70:c2:51:06:c2:fe:25: 50:16:2d:7b:63:03:26:3d:73:4b:30:ba:64:63:a5: 4b:75:ea:5f:67:f7:33:2e:8f:1f:c6:10:f4:d1:5f: 9f:c0:9b:6a:64:0d:93:fb:0e:ed:86:48:dc:75:c0: 63:0a:ab:40:dc:af:c8:81:0b:cf:ff:7e:01:5a:d3: 63:17:d8:ea:fa:d6:83:cc:6d:a4:60:39:a9:c2:09: 4c:7c:73:79:30:ef:4a:de:6d:5e:ec:27:7d:61:e1: 74:30:6b:71:be:08:b8:ff:69:3a:1a:83:a6:a0:c6: b2:55:e1:f5:36:de:fc:6c:91:d2:93:94:f4:c2:ed: 5e:be:36:b7:5e:f7:d7:df:4c:5a:40:98:dc:84:8c: 8c:9f:23:a4:bd:93:7e:2b:c7:67:e2:b8:d0:90:24: 81:44:53:70:ab:ef:0c:7f:ed:81:72:aa:f3:b4:a9: fe:19:19:d1:f6:d2:06:0c:d2:e2:b3:ae:4f:f1:e5: 7f:77:4b:fa:f2:64:4b:3b:00:b4:50:bc:d9:6a:1f: 1f:88:d2:e4:c6:a8:fb:51:ca:22:58:17:fc:9a:94: 94:c6:6f:81:3e:c6:ac:a2:ee:25:01:66:d5:3d:83: d7:fb:3c:1e:d5:d5:34:d5:f9:ea:e5:72:f4:b6:c5: 4d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:97:81:0B:83:64:FB:F7:C3:12:F9:8A:B3:0D:CE:A8:95:D9:79:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:a2:50:21:a5:77:dd:f4:f1:1d:b4:d2:2d:ba:37:ed:9c:69: a2:2e:88:c8:4f:05:25:27:b6:41:e9:b0:8f:51:b0:f0:9e:57: e7:7e:26:50:ae:11:bf:77:85:48:cd:17:c5:36:d2:5a:5f:e2: b0:9b:02:92:95:92:03:96:8a:bd:61:cb:a5:8a:6c:27:f7:53: db:47:f7:c4:56:21:0a:2c:8f:de:db:ce:0f:d0:3d:11:7a:1d: ff:64:d3:ed:cb:9a:95:b9:43:4b:f6:f2:98:93:08:5f:f3:be: 99:c1:5c:21:25:ad:80:04:d6:31:71:89:5a:96:46:94:ed:d7: 2b:f0:88:a4:76:05:2b:2b:6d:e2:e5:8e:e0:47:9b:7a:b7:15: c0:9c:17:bb:44:f2:85:90:0f:2d:7d:93:a9:de:7e:81:2e:8b: b2:82:ab:ff:7c:3a:c5:7e:0d:a8:f0:dc:b3:b8:cd:0e:56:8a: e3:cc:6c:bb:ae:f1:7c:4f:d1:b8:2c:1f:ab:f1:3d:f6:34:df: f3:10:4e:60:8c:51:26:12:45:f8:fb:8e:d1:b2:d0:5a:93:ec: 96:76:cf:be:6a:a9:27:95:d1:73:4c:02:26:3e:e3:5a:55:40: c4:b3:a7:e2:87:a3:a9:52:03:d1:b9:c8:5a:31:95:a8:77:fe: eb:3b:5c:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9deLIu/QUR1DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk MTEwM2NiNTMtODhiZS00MzE4LWExNzctNDQ3NjBiNzQyM2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtVTivtJx3DCUQbC/iVQFi17YwMmPXNLMLpk Y6VLdepfZ/czLo8fxhD00V+fwJtqZA2T+w7thkjcdcBjCqtA3K/IgQvP/34BWtNj F9jq+taDzG2kYDmpwglMfHN5MO9K3m1e7Cd9YeF0MGtxvgi4/2k6GoOmoMayVeH1 Nt78bJHSk5T0wu1evja3XvfX30xaQJjchIyMnyOkvZN+K8dn4rjQkCSBRFNwq+8M f+2BcqrztKn+GRnR9tIGDNLis65P8eV/d0v68mRLOwC0ULzZah8fiNLkxqj7Ucoi WBf8mpSUxm+BPsasou4lAWbVPYPX+zwe1dU01fnq5XL0tsVN6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqXgQuDZPv3wxL5irMNzqiV2XnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZDVhNjBmMmYtZWU2Ny0z NGEyLWE4ZmMtY2JmZjI1MDU2ZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyiUCGld9308R200i26N+2caaIuiMhPBSUntkHpsI9RsPCeV+d+JlCu Eb93hUjNF8U20lpf4rCbApKVkgOWir1hy6WKbCf3U9tH98RWIQosj97bzg/QPRF6 Hf9k0+3LmpW5Q0v28piTCF/zvpnBXCElrYAE1jFxiVqWRpTt1yvwiKR2BSsrbeLl juBHm3q3FcCcF7tE8oWQDy19k6nefoEui7KCq/98OsV+Dajw3LO4zQ5WiuPMbLuu 8XxP0bgsH6vxPfY03/MQTmCMUSYSRfj7jtGy0FqT7JZ2z75qqSeV0XNMAiY+41pV QMSzp+KHo6lSA9G5yFoxlah3/us7XFw= -----END CERTIFICATE-----Generated at Sat Apr 5 20:26:49 2025 by rpki-client