$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa File: e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa (raw, json) Hash identifier: Ew3RAxeaDeZ+kVbaijCE0zZKaRo9G79GUzBwLGtVI4k= Subject key identifier: 73:BA:43:7C:C5:D0:97:E0:90:7C:5F:BF:57:05:B4:26:96:87:50:05 Certificate issuer: /CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a Certificate serial: 010D0C9F432858496A19A5BFB68CB12B2AA52D80 Authority key identifier: F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 23465 IP address blocks: 66.44.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:a5:bf:b6:8c:b1:2b:2a:a5:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=e8c8eba1-72e1-496c-85e9-b6f73e5f0f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:36:31:0b:8b:0a:73:0d:66:ba:42:e5:d0:5e: 95:88:21:95:32:02:91:b0:43:cd:33:a7:d4:df:e9: 6a:ce:01:82:2d:a9:ed:be:96:4b:b9:fd:ff:cf:55: 5a:96:b7:92:f2:eb:78:97:04:b5:02:5e:53:d8:5d: 89:d7:26:e2:78:f2:a7:db:58:93:fa:12:12:45:aa: 81:d3:16:e3:6d:10:01:07:29:52:b1:27:05:9e:01: c1:68:9a:01:91:f3:c5:20:1b:f8:58:df:92:b2:0b: 23:8d:af:26:87:48:6c:42:22:63:13:1c:a0:da:d3: ba:0e:f7:21:f6:1b:8e:10:89:1a:07:9a:7e:9e:b5: 76:13:1b:ae:df:37:89:34:5d:6d:0e:08:ea:ca:b4: f7:7b:af:e9:74:25:36:84:e4:ce:28:c2:b2:80:77: d7:ea:bf:88:cd:22:b2:2f:65:50:97:45:3b:6c:18: cf:fc:5b:80:18:76:f0:9b:e5:de:4d:93:21:de:1a: 0f:d0:32:70:51:06:af:c6:07:3f:ff:21:6a:ba:68: a6:0b:8a:7a:c3:05:a5:8a:2e:56:6c:2d:79:83:0b: 1d:b7:be:84:4a:08:46:26:24:93:b9:fe:e4:a8:6a: d7:f0:cd:42:51:b9:1b:ef:c4:27:ed:24:c8:85:20: 3a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BA:43:7C:C5:D0:97:E0:90:7C:5F:BF:57:05:B4:26:96:87:50:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl X509v3 Authority Key Identifier: keyid:F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer sbgp-ipAddrBlock: critical IPv4: 66.44.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a4:46:79:cd:8f:7c:9d:1c:1e:d6:76:c0:4f:7a:6e:70:2c: 74:4b:b5:17:9b:c3:82:4b:69:e4:ea:33:92:49:5c:2d:3b:5f: 85:68:66:b9:19:3a:01:9f:af:d6:da:58:09:2e:a1:53:01:24: 84:93:cc:40:4c:3b:e7:ee:ae:3d:a9:40:21:e6:5f:de:86:f1: fa:3d:35:26:74:62:45:83:09:8b:91:51:6d:74:66:41:a5:c0: 2c:d1:63:7b:04:2f:08:0e:b9:60:0a:dd:d7:5f:cb:56:7a:42: 52:ca:48:91:c0:e8:ed:59:d6:05:f4:65:e9:c8:2e:3b:fc:22: 71:ee:df:27:cc:ee:76:15:68:80:b8:9e:43:36:ab:ab:2e:63: 0f:0e:45:8f:4c:77:e0:fc:bd:fb:2d:85:9d:a1:8b:7b:a5:17: cb:15:7b:b3:c7:63:df:f7:95:c4:12:de:a6:2b:74:d2:29:48: e9:af:2e:4e:b1:32:cb:74:17:a5:43:4c:b6:eb:c5:f9:38:43: 7e:92:6e:9e:23:10:fb:f4:e0:1e:b7:52:db:9f:0d:46:f9:ec: 6e:02:78:05:36:71:0c:6c:66:fd:82:97:32:7d:8d:77:ee:42: 15:8a:86:f8:0a:95:37:9b:30:77:89:b6:df:6d:7c:ca:c0:f6: 23:95:7f:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGaW/toyxKyqlLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRhZTUyYTUtY2RiNy00MTVjLWFkNDQtNTEyNWJiMTIz YTdhMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk ZThjOGViYTEtNzJlMS00OTZjLTg1ZTktYjZmNzNlNWYwZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTYxC4sKcw1mukLl0F6ViCGVMgKRsEPNM6fU 3+lqzgGCLantvpZLuf3/z1ValreS8ut4lwS1Al5T2F2J1ybiePKn21iT+hISRaqB 0xbjbRABBylSsScFngHBaJoBkfPFIBv4WN+Ssgsjja8mh0hsQiJjExyg2tO6Dvch 9huOEIkaB5p+nrV2Exuu3zeJNF1tDgjqyrT3e6/pdCU2hOTOKMKygHfX6r+IzSKy L2VQl0U7bBjP/FuAGHbwm+XeTZMh3hoP0DJwUQavxgc//yFqumimC4p6wwWlii5W bC15gwsdt76ESghGJiSTuf7kqGrX8M1CUbkb78Qn7STIhSA6jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHO6Q3zF0JfgkHxfv1cFtCaWh1AFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFl NTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1YmIxMjNhN2EvZTFhNjlkZDEtMWE0Mi0z YjcxLWE2ZmYtN2VlNWYzYjQ2YWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRhZTUyYTUtY2RiNy00MTVjLWFk NDQtNTEyNWJiMTIzYTdhL2RkYWU1MmE1LWNkYjctNDE1Yy1hZDQ0LTUxMjViYjEy M2E3YS5jcmwwHwYDVR0jBBgwFoAU8OMjUuuNKxXWUGX45vcgpyceMvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFlNTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1 YmIxMjNhN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQiyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWkRnnNj3ydHB7WdsBPem5wLHRLtRebw4JLaeTqM5JJXC07X4VoZrkZ OgGfr9baWAkuoVMBJISTzEBMO+furj2pQCHmX96G8fo9NSZ0YkWDCYuRUW10ZkGl wCzRY3sELwgOuWAK3ddfy1Z6QlLKSJHA6O1Z1gX0ZenILjv8InHu3yfM7nYVaIC4 nkM2q6suYw8ORY9Md+D8vfsthZ2hi3ulF8sVe7PHY9/3lcQS3qYrdNIpSOmvLk6x Mst0F6VDTLbrxfk4Q36Sbp4jEPv04B63UtufDUb57G4CeAU2cQxsZv2ClzJ9jXfu QhWKhvgKlTebMHeJtt9tfMrA9iOVf00= -----END CERTIFICATE-----Generated at Mon Apr 7 16:54:48 2025 by rpki-client