$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ead6ca88-e08b-3af1-9c9a-2822470b5b0d.roa File: ead6ca88-e08b-3af1-9c9a-2822470b5b0d.roa (raw, json) Hash identifier: 3La0L+DpqnEsbTTtZY9pMQuYWmco12JgvRexWXI7kWs= Subject key identifier: B2:A7:6E:C3:3A:79:F2:B3:55:58:49:E1:3D:DA:D9:AE:93:74:1E:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DB9906A95F8873504FE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ead6ca88-e08b-3af1-9c9a-2822470b5b0d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 66.41.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:b9:90:6a:95:f8:87:35:04:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=af27bfd1-6b92-4ed5-b4e4-45a1d4efbae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:1d:b7:1e:45:e1:be:82:a4:cd:4e:11:14: f3:52:3f:d3:1c:61:7d:59:d5:0b:23:a0:c3:98:5f: 5b:25:e4:e9:99:d3:c5:a1:58:1c:ba:f6:d0:8b:c4: 2a:0d:30:fd:ad:94:54:7a:cc:02:01:53:b9:a7:c1: 4f:95:ae:03:65:58:5d:a3:9b:c4:ae:9c:79:1d:12: 5c:77:b1:27:2f:f3:50:59:a8:7c:fe:b5:e6:23:48: 6e:e8:84:ab:c6:f0:11:50:c7:8b:0b:24:6a:57:3a: a5:18:5f:72:18:eb:42:a1:73:14:07:c6:28:bc:44: 54:2a:b7:42:77:61:c8:12:d8:86:26:65:b0:e8:76: cd:9a:51:ca:77:74:60:ac:a4:92:29:e7:05:ed:8f: 1b:e4:57:9c:63:ac:a7:54:00:a7:cc:c1:ba:12:3d: 01:6c:61:3d:58:83:77:76:61:90:c4:a4:c3:40:66: a4:a8:98:f6:24:73:db:95:b7:87:25:8f:6e:99:72: e2:40:5d:07:24:3a:68:3f:a3:cb:a9:11:e3:10:97: f9:08:7a:44:07:66:44:7f:02:a6:b1:7b:fd:35:62: 74:34:cf:00:cb:a8:13:65:b3:ec:d3:ca:22:0e:ff: 72:ed:69:d4:43:ae:cb:27:f6:87:c8:83:91:80:93: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A7:6E:C3:3A:79:F2:B3:55:58:49:E1:3D:DA:D9:AE:93:74:1E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ead6ca88-e08b-3af1-9c9a-2822470b5b0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.41.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ee:4c:c8:c4:6c:8c:6d:8a:06:25:a8:0c:e9:8a:bf:1c:f6: 34:c0:2a:f5:48:2f:e8:f2:7b:0a:6d:a6:b9:df:bd:d2:3f:e8: 4e:94:d4:e9:4a:99:91:1e:62:9f:0b:3d:c1:7c:64:b7:f9:82: 09:f4:a6:aa:be:69:c2:9b:51:0c:25:5e:2c:35:86:b3:18:a8: 59:df:81:f8:ca:3f:30:39:32:57:be:b2:ee:87:a8:50:b6:36: a0:3b:f3:1c:5e:00:fc:e6:c2:1b:d2:dd:8e:fe:f4:10:e6:5f: 83:b3:cf:ad:db:e0:43:b6:78:e6:18:3a:96:84:3b:04:79:b9: 7e:a8:54:2b:e2:ae:4a:4f:e7:a0:db:2e:8d:a2:0d:2c:fa:1b: 26:c3:0e:3a:45:8c:58:15:52:48:71:a7:7c:ad:17:c8:7c:82: ed:0e:37:8a:55:ac:4d:50:34:7c:a3:0d:6a:fc:60:cf:1c:f7: b9:47:34:8b:f4:bd:19:e1:ad:41:60:04:89:15:7a:3b:19:32: 9d:f9:b3:fc:c7:11:dd:49:99:ac:96:53:bc:a7:92:0d:51:76: 50:ae:50:52:99:12:7e:71:72:c9:73:00:a2:e9:5e:82:f5:17: 09:b6:f4:8e:a8:c9:a0:09:c4:0d:02:66:c9:77:99:f8:f7:b5: d0:ef:0b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebbmQapX4hzUE/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YWYyN2JmZDEtNmI5Mi00ZWQ1LWI0ZTQtNDVhMWQ0ZWZiYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9kdtx5F4b6CpM1OERTzUj/THGF9WdULI6DD mF9bJeTpmdPFoVgcuvbQi8QqDTD9rZRUeswCAVO5p8FPla4DZVhdo5vErpx5HRJc d7EnL/NQWah8/rXmI0hu6ISrxvARUMeLCyRqVzqlGF9yGOtCoXMUB8YovERUKrdC d2HIEtiGJmWw6HbNmlHKd3RgrKSSKecF7Y8b5FecY6ynVACnzMG6Ej0BbGE9WIN3 dmGQxKTDQGakqJj2JHPblbeHJY9umXLiQF0HJDpoP6PLqRHjEJf5CHpEB2ZEfwKm sXv9NWJ0NM8Ay6gTZbPs08oiDv9y7WnUQ67LJ/aHyIORgJNuvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKnbsM6efKzVVhJ4T3a2a6TdB76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWFkNmNhODgtZTA4Yi0z YWYxLTljOWEtMjgyMjQ3MGI1YjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQilEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHuTMjEbIxtigYlqAzpir8c9jTAKvVIL+jyewptprnfvdI/6E6U1OlK mZEeYp8LPcF8ZLf5ggn0pqq+acKbUQwlXiw1hrMYqFnfgfjKPzA5Mle+su6HqFC2 NqA78xxeAPzmwhvS3Y7+9BDmX4Ozz63b4EO2eOYYOpaEOwR5uX6oVCvirkpP56Db Lo2iDSz6GybDDjpFjFgVUkhxp3ytF8h8gu0ON4pVrE1QNHyjDWr8YM8c97lHNIv0 vRnhrUFgBIkVejsZMp35s/zHEd1JmayWU7ynkg1RdlCuUFKZEn5xcslzAKLpXoL1 Fwm29I6oyaAJxA0CZsl3mfj3tdDvC9I= -----END CERTIFICATE-----Generated at Mon Apr 7 06:26:38 2025 by rpki-client