$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa File: 2303d566-c21f-3244-8d4c-6d8d314c79c7.roa (raw, json) Hash identifier: cKBI677/Jyq3MMl7ipd+WTQqXIbgeICet0rFUD+kSq4= Subject key identifier: 33:69:92:4C:80:60:22:5C:D8:76:12:FA:BC:0A:53:03:56:E2:8F:F6 Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708 Certificate serial: 010D0C9F432858495529535CECF9E534AF678900 Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 46962 IP address blocks: 66.118.224.0/22 maxlen: 24 104.255.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:53:5c:ec:f9:e5:34:af:67:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=72bab0d7-0310-44c6-bd73-f575211a5667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:69:db:f0:09:1d:65:cb:30:e6:c3:50:fb: 28:f5:1d:b4:ff:40:e1:0d:c8:22:ff:1b:d3:a2:fb: 2b:12:c5:eb:00:86:11:75:ad:3b:aa:a1:4d:2a:b8: ed:2f:49:cc:6a:57:75:19:23:4f:9b:f9:c3:65:d9: 36:6d:ea:73:84:4c:98:31:e1:ca:a6:3f:c5:3c:9f: bc:1f:f6:1a:89:a6:04:6c:23:9a:a2:fe:95:3e:50: 28:93:69:51:4a:36:34:fa:f9:cc:dc:b0:fe:f3:1b: 9e:20:96:95:e2:01:54:82:d4:6d:55:f9:09:e4:c1: 91:f5:37:c5:d1:ee:0c:83:2c:71:14:72:7e:53:1d: 16:1a:be:44:fe:d2:c5:7a:08:d7:55:e4:2b:b4:33: bf:d1:02:e9:d2:ec:71:d1:ea:fe:40:37:63:df:39: 78:ae:63:8f:f0:02:3b:17:c8:a7:1b:68:9b:af:c8: 5b:78:ba:6b:9f:9e:81:d8:a0:97:7e:65:6d:6f:fd: a3:43:eb:58:0d:a7:a9:9f:a6:bf:66:9f:68:98:b0: 75:33:9c:39:bc:4c:af:df:82:21:2a:b0:91:3f:2e: 2f:dc:c2:83:72:17:17:f7:f0:7a:b7:50:b5:cd:47: 23:22:66:b5:a4:30:39:1e:23:1c:5f:85:7d:0d:0b: 1d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:69:92:4C:80:60:22:5C:D8:76:12:FA:BC:0A:53:03:56:E2:8F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl X509v3 Authority Key Identifier: keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer sbgp-ipAddrBlock: critical IPv4: 66.118.224.0/22 104.255.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:4d:84:6a:3c:ce:f3:38:11:04:c1:0a:a5:1e:08:d8:60:a3: 02:44:8b:4c:1e:aa:f7:b7:86:e1:2a:ee:bf:84:b2:79:e6:1a: a2:db:78:e5:44:b9:d8:de:97:0d:bb:da:3a:a9:e8:50:e9:e2: f4:24:28:17:50:25:6e:b7:88:ec:99:14:d3:e3:d9:dd:cf:05: 42:96:3a:0b:bb:18:0f:c1:ab:e0:a5:45:35:b8:fd:69:6d:9d: 17:38:85:3c:15:34:76:c9:2b:f5:60:ed:6d:c8:4d:14:05:1d: 8b:c8:ac:fc:7f:c1:a9:0d:f2:ad:7d:d3:a3:03:c0:ca:cf:42: c3:41:0e:e1:a8:84:36:9c:d9:cd:56:64:26:04:44:cb:bd:fe: 0c:c8:4c:b2:7b:20:09:9c:e2:12:e9:f2:f9:1a:f7:40:4a:bf: 6e:67:86:08:b8:66:46:3e:6e:b6:7a:f9:4b:17:ef:0b:a7:ba: 2d:3d:35:67:b5:27:7a:81:6c:13:5b:00:82:86:b7:ea:8b:16: d8:ee:5b:ee:7c:46:dc:0e:20:8b:e2:1d:6a:7b:c9:6c:da:8f: de:7b:fe:9a:0b:61:cf:db:83:b7:8e:73:9b:98:1d:84:e0:15: 84:d7:bc:e9:1f:6d:81:9d:a9:96:08:73:25:90:61:d1:3b:cd: 69:e7:0e:43 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElVKVNc7PnlNK9niQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMzkyYTEtMDdlOS00OWY0LTlhMDMtZGY1MDA1MzMz NzA4MB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk NzJiYWIwZDctMDMxMC00NGM2LWJkNzMtZjU3NTIxMWE1NjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1lp2/AJHWXLMObDUPso9R20/0DhDcgi/xvT ovsrEsXrAIYRda07qqFNKrjtL0nMald1GSNPm/nDZdk2bepzhEyYMeHKpj/FPJ+8 H/YaiaYEbCOaov6VPlAok2lRSjY0+vnM3LD+8xueIJaV4gFUgtRtVfkJ5MGR9TfF 0e4MgyxxFHJ+Ux0WGr5E/tLFegjXVeQrtDO/0QLp0uxx0er+QDdj3zl4rmOP8AI7 F8inG2ibr8hbeLprn56B2KCXfmVtb/2jQ+tYDaepn6a/Zp9omLB1M5w5vEyv34Ih KrCRPy4v3MKDchcX9/B6t1C1zUcjIma1pDA5HiMcX4V9DQsdWQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDNpkkyAYCJc2HYS+rwKUwNW4o/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYz OTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUwMDUzMzM3MDgvMjMwM2Q1NjYtYzIxZi0z MjQ0LThkNGMtNmQ4ZDMxNGM3OWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FmMzkyYTEtMDdlOS00OWY0LTlh MDMtZGY1MDA1MzMzNzA4L2NhZjM5MmExLTA3ZTktNDlmNC05YTAzLWRmNTAwNTMz MzcwOC5jcmwwHwYDVR0jBBgwFoAURC8Ry3nbTZVcRvWNkst9EsMqGU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYzOTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUw MDUzMzM3MDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQnbgAwQC aP+0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACJNhGo8zvM4EQTBCqUeCNhgowJEi0weqve3huEq7r+Esnnm GqLbeOVEudjelw272jqp6FDp4vQkKBdQJW63iOyZFNPj2d3PBUKWOgu7GA/Bq+Cl RTW4/WltnRc4hTwVNHbJK/Vg7W3ITRQFHYvIrPx/wakN8q1906MDwMrPQsNBDuGo hDac2c1WZCYERMu9/gzITLJ7IAmc4hLp8vka90BKv25nhgi4ZkY+brZ6+UsX7wun ui09NWe1J3qBbBNbAIKGt+qLFtjuW+58RtwOIIviHWp7yWzaj957/poLYc/bg7eO c5uYHYTgFYTXvOkfbYGdqZYIcyWQYdE7zWnnDkM= -----END CERTIFICATE-----Generated at Sat Apr 12 16:08:09 2025 by rpki-client