$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/453c48aa-717a-3f97-94e0-a121f55d388a.roa File: 453c48aa-717a-3f97-94e0-a121f55d388a.roa (raw, json) Hash identifier: 8LngJPxA0stOcIgQBohg/cCdXuTptI0+WW1p6lQcoOk= Subject key identifier: A8:36:0F:A6:F5:BF:18:DB:18:1D:D6:83:AA:5A:90:79:3B:C4:E5:97 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285848C150D0AA7C0DE442C0CD1C80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/453c48aa-717a-3f97-94e0-a121f55d388a.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 213122 IP address blocks: 66.118.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:d0:aa:7c:0d:e4:42:c0:cd:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=196f9a7c-fa84-4180-ac5e-bf34c5013944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4b:43:eb:0a:b3:d2:2d:f0:39:61:3f:bd:df: 77:0a:bb:7b:b4:6f:b4:cb:2b:24:75:2e:0a:50:f4: 7d:ab:1e:ca:87:a9:00:1b:00:20:df:1a:eb:5e:37: 00:28:54:0a:a1:ad:7d:b9:c3:da:53:a0:a1:96:49: 5b:16:be:bb:c3:59:ed:58:96:45:60:be:93:88:3d: 5b:6f:83:1c:20:ff:49:3d:67:ba:7e:64:e2:45:b5: 47:49:16:16:aa:9a:cc:3c:70:62:1e:88:22:d0:19: 63:84:a0:a7:5a:c9:87:57:a6:ed:c6:9f:dc:96:15: 47:a4:51:51:ae:eb:f9:56:51:17:8d:cd:bd:50:28: 41:ba:3b:4d:13:f3:14:ec:ed:c7:f4:00:b9:25:30: c7:27:6d:54:7d:d3:70:95:98:cd:a5:69:86:cb:5b: da:b1:bc:22:b0:ed:eb:bb:33:1c:38:4b:99:0d:38: 9e:58:61:84:f1:d3:42:bd:8f:45:cd:f1:23:c1:b0: 7a:7d:9c:10:5a:f0:1c:53:c9:81:c5:1f:21:e5:1c: f3:57:60:1e:bf:ee:41:82:1b:57:4a:61:03:e8:fd: 8c:71:62:f0:ba:1f:50:98:18:cd:6b:80:9d:4f:ad: 07:62:c8:b2:ce:64:8f:94:55:52:8f:e2:bb:83:13: 25:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:36:0F:A6:F5:BF:18:DB:18:1D:D6:83:AA:5A:90:79:3B:C4:E5:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/453c48aa-717a-3f97-94e0-a121f55d388a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:03:35:76:89:d3:c5:6a:5a:44:c9:36:c7:0c:d2:69:e3:d3: 16:89:8a:f8:6b:7d:ad:9e:b6:43:9e:10:18:ff:31:9d:d6:a2: 02:a4:1a:8e:56:cf:aa:36:3b:4b:f6:af:36:30:ca:96:a8:e9: ab:5b:cd:f4:f2:1a:e7:48:46:3c:a0:e7:62:98:49:8a:8a:5f: d8:e7:3e:3b:4d:e5:00:cb:55:a6:8e:51:e7:af:22:31:c3:46: 6e:f5:1c:cd:30:4c:9c:cb:dd:c1:fa:b6:72:c9:e3:72:b8:75: 27:d3:6e:53:ef:c9:2b:1a:46:fb:1b:e7:ed:7e:fd:f0:15:fc: a3:a5:6c:0a:8b:d3:34:53:fd:06:6e:b2:85:65:b4:e5:ce:80: 1a:02:61:de:cc:21:4d:9f:ba:09:a9:e3:31:13:82:82:67:ea: d6:8d:03:02:c7:64:8f:ab:96:34:4a:33:5c:80:5a:49:8e:33: 2e:89:16:d3:6a:73:90:33:3d:ba:82:64:72:c2:f8:3f:74:a6: 50:b7:18:2a:88:43:35:59:92:51:6c:47:2c:9c:fd:6a:b7:6f: 61:6e:17:35:f5:f6:56:81:cc:58:ca:80:cc:65:15:2b:d1:da: ba:a7:d4:79:bc:a3:f7:70:71:16:80:bb:10:92:4f:4c:3d:df: 84:6b:8f:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNCqfA3kQsDNHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk MTk2ZjlhN2MtZmE4NC00MTgwLWFjNWUtYmYzNGM1MDEzOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtktD6wqz0i3wOWE/vd93Crt7tG+0yyskdS4K UPR9qx7Kh6kAGwAg3xrrXjcAKFQKoa19ucPaU6ChlklbFr67w1ntWJZFYL6TiD1b b4McIP9JPWe6fmTiRbVHSRYWqprMPHBiHogi0BljhKCnWsmHV6btxp/clhVHpFFR ruv5VlEXjc29UChBujtNE/MU7O3H9AC5JTDHJ21UfdNwlZjNpWmGy1vasbwisO3r uzMcOEuZDTieWGGE8dNCvY9FzfEjwbB6fZwQWvAcU8mBxR8h5RzzV2Aev+5BghtX SmED6P2McWLwuh9QmBjNa4CdT60HYsiyzmSPlFVSj+K7gxMl3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKg2D6b1vxjbGB3Wg6pakHk7xOWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNDUzYzQ4YWEtNzE3YS0z Zjk3LTk0ZTAtYTEyMWY1NWQzODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkDNXaJ08VqWkTJNscM0mnj0xaJivhrfa2etkOeEBj/MZ3WogKkGo5W z6o2O0v2rzYwypao6atbzfTyGudIRjyg52KYSYqKX9jnPjtN5QDLVaaOUeevIjHD Rm71HM0wTJzL3cH6tnLJ43K4dSfTblPvySsaRvsb5+1+/fAV/KOlbAqL0zRT/QZu soVltOXOgBoCYd7MIU2fugmp4zETgoJn6taNAwLHZI+rljRKM1yAWkmOMy6JFtNq c5AzPbqCZHLC+D90plC3GCqIQzVZklFsRyyc/Wq3b2FuFzX19laBzFjKgMxlFSvR 2rqn1Hm8o/dwcRaAuxCST0w934Rrj8Q= -----END CERTIFICATE-----Generated at Sat Apr 5 18:36:24 2025 by rpki-client