$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/435ca439-240f-3cb8-a981-de5080176e6e.roa File: 435ca439-240f-3cb8-a981-de5080176e6e.roa (raw, json) Hash identifier: ikcfBYDI8WIu+w0byDs2Teo7PvBjEVjHjUc0BwY97+o= Subject key identifier: D1:D3:9E:25:28:B9:40:03:40:CC:F3:F2:58:5D:48:EE:7B:17:C0:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D16578EA25BE535702491F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/435ca439-240f-3cb8-a981-de5080176e6e.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 22258 IP address blocks: 75.66.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:78:ea:25:be:53:57:02:49:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=08f33723-6295-4c5c-a7e5-0863efb8bf62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:75:f5:8f:9c:8b:5a:f3:b5:b2:73:96:5b: 4e:03:d7:ff:70:cc:b1:da:5b:36:9f:9e:b9:32:0c: 21:57:28:cb:79:26:e6:72:3f:8a:e4:4a:63:bc:cd: 33:84:6a:eb:52:1b:73:ed:6d:ae:95:9a:14:83:47: b8:41:b1:17:9d:75:8b:a9:70:df:4d:fa:e6:fb:d1: 99:aa:5b:ab:a9:aa:c3:6b:4e:41:86:7b:16:b0:82: d7:bc:de:84:fb:0e:94:8f:4d:bf:c3:9c:37:84:ed: 1f:5f:16:e2:e4:0d:ac:5f:e2:c5:f5:e8:90:dc:cc: ee:4e:50:cd:23:da:2a:1d:16:d9:0b:c0:88:d4:bc: df:c6:a6:63:64:df:16:5a:f0:e1:62:41:3f:30:b8: 8f:18:a6:8c:c6:c5:da:5b:ac:03:33:2d:c8:a2:bf: 5b:5b:5d:b2:b5:fe:a6:89:57:12:97:a5:e5:3a:09: 5e:94:76:75:0e:ba:7e:2e:75:5e:80:14:c1:61:3b: 1b:25:b2:3f:5f:3c:c9:81:29:d6:65:fb:66:68:fd: 9f:a3:64:01:72:3f:48:ab:03:f6:fb:ff:41:52:88: 41:c4:1b:b1:d3:05:c2:10:64:e6:29:68:ca:6d:09: 8d:aa:eb:a9:f3:01:91:07:ce:5c:58:2e:f6:29:02: 1c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D3:9E:25:28:B9:40:03:40:CC:F3:F2:58:5D:48:EE:7B:17:C0:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/435ca439-240f-3cb8-a981-de5080176e6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 75.66.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:02:b0:03:28:e1:bf:1a:a8:63:26:e9:91:7d:99:8b:18:58: a1:73:20:e5:57:e3:54:59:c3:39:26:69:49:e2:20:5e:b9:55: 9c:17:f1:78:d8:5e:e0:e0:c2:23:3a:dd:65:7d:3a:3d:7f:e4: cc:ea:86:e3:8d:65:e1:d4:04:d0:6a:63:cf:74:6a:1a:50:2d: 75:5a:4a:e3:0e:66:9c:d4:6a:c4:7e:b1:bb:f6:49:f0:38:76: b4:76:09:82:7d:b8:df:aa:40:95:18:33:3f:0a:f6:9e:da:74: d9:38:df:28:af:e5:b5:88:56:f6:88:eb:7e:15:f9:cf:b6:df: 85:f4:f9:cd:56:22:30:10:a7:39:d8:28:db:b6:4a:c3:74:c2: 90:15:6e:03:fd:f0:30:9d:59:52:38:de:74:4d:1c:fb:b0:a5: 75:11:9c:a7:29:55:46:f8:55:26:e2:6e:e0:b9:9d:54:78:35: 95:ce:d6:33:4e:93:8b:c6:59:3b:10:5e:cc:95:4f:69:24:0e: e8:75:9a:d8:da:b4:78:da:14:1e:98:e0:84:14:c3:63:db:d5: 26:90:83:ca:8f:57:44:c9:e2:72:2d:c5:cb:7b:eb:dd:ea:55: 65:18:21:17:b1:c3:27:4c:71:b0:08:cd:42:8b:ca:37:34:89: a4:13:9f:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZXjqJb5TVwJJHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MDhmMzM3MjMtNjI5NS00YzVjLWE3ZTUtMDg2M2VmYjhiZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIZ19Y+ci1rztbJzlltOA9f/cMyx2ls2n565 MgwhVyjLeSbmcj+K5EpjvM0zhGrrUhtz7W2ulZoUg0e4QbEXnXWLqXDfTfrm+9GZ qlurqarDa05BhnsWsILXvN6E+w6Uj02/w5w3hO0fXxbi5A2sX+LF9eiQ3MzuTlDN I9oqHRbZC8CI1LzfxqZjZN8WWvDhYkE/MLiPGKaMxsXaW6wDMy3Ior9bW12ytf6m iVcSl6XlOglelHZ1Drp+LnVegBTBYTsbJbI/XzzJgSnWZftmaP2fo2QBcj9IqwP2 +/9BUohBxBux0wXCEGTmKWjKbQmNquup8wGRB85cWC72KQIcEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHTniUouUADQMzz8lhdSO57F8BaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM1Y2E0MzktMjQwZi0z Y2I4LWE5ODEtZGU1MDgwMTc2ZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS0IUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABACsAMo4b8aqGMm6ZF9mYsYWKFzIOVX41RZwzkmaUniIF65VZwX8XjY XuDgwiM63WV9Oj1/5MzqhuONZeHUBNBqY890ahpQLXVaSuMOZpzUasR+sbv2SfA4 drR2CYJ9uN+qQJUYMz8K9p7adNk43yiv5bWIVvaI634V+c+234X0+c1WIjAQpznY KNu2SsN0wpAVbgP98DCdWVI43nRNHPuwpXURnKcpVUb4VSbibuC5nVR4NZXO1jNO k4vGWTsQXsyVT2kkDuh1mtjatHjaFB6Y4IQUw2Pb1SaQg8qPV0TJ4nItxct7693q VWUYIRexwydMcbAIzUKLyjc0iaQTnxE= -----END CERTIFICATE-----Generated at Tue Jun 3 06:19:24 2025 by rpki-client