$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/226b32ca-ad89-3cf4-96a8-369a5696412e.roa File: 226b32ca-ad89-3cf4-96a8-369a5696412e.roa (raw, json) Hash identifier: BoWIkr08FEO97Mto/y5K+TNRfXcMitmmht79uD0Lp08= Subject key identifier: 2E:79:E0:71:D3:0D:BA:58:4B:FE:F3:EA:85:58:54:41:C1:E6:36:2C Certificate issuer: /CN=1fc9a95e-53c1-4e1e-9c7b-39f8f242418e Certificate serial: 010D0C9F43285848F926A8B177185B7A985F7300 Authority key identifier: BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/226b32ca-ad89-3cf4-96a8-369a5696412e.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 394584 IP address blocks: 66.43.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a8:b1:77:18:5b:7a:98:5f:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc9a95e-53c1-4e1e-9c7b-39f8f242418e Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=d4312baa-6976-4e77-8da6-b7c0706a0db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:73:30:5e:ab:da:8a:cb:57:2e:76:eb:78:99: d3:f3:61:51:8a:d3:8d:62:02:3a:09:73:6e:16:e7: d7:f5:42:ea:fa:2d:b0:8f:33:f8:61:20:7a:90:09: 64:60:56:eb:23:26:fc:6d:1a:13:dc:a3:d4:44:3e: e6:45:1e:0c:ad:f8:f6:af:86:c1:4e:33:68:dd:ba: 67:ad:1d:df:84:8c:f1:4f:82:87:45:c6:69:fa:d3: 2f:d7:76:96:99:1d:06:af:4f:26:78:2a:f3:ca:a7: 28:81:1a:d6:f8:fc:b5:5a:a7:28:23:ea:bd:b2:38: 95:94:05:f3:c7:1b:cd:0b:77:e0:9b:30:2c:d3:f8: 87:04:91:fc:1d:eb:c4:c1:7d:c9:83:97:f9:ef:de: 05:db:62:fc:00:e9:3b:44:f1:05:73:6d:07:90:13: 2f:d8:10:76:05:c3:fa:8b:1a:a3:46:31:42:33:99: 3c:f1:d2:da:dd:bb:4e:c2:99:c8:ce:69:e7:91:b6: 7f:85:c7:d8:3b:3a:60:9f:f6:a8:97:ca:9d:f5:42: 78:39:50:4f:51:4d:5a:4b:68:3a:99:f3:05:9e:7b: b5:54:20:6b:a8:7e:9f:04:1e:9d:62:91:00:27:9a: 3c:36:16:c6:2c:24:85:c7:6f:67:ab:22:03:c6:49: 13:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:79:E0:71:D3:0D:BA:58:4B:FE:F3:EA:85:58:54:41:C1:E6:36:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/226b32ca-ad89-3cf4-96a8-369a5696412e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.crl X509v3 Authority Key Identifier: keyid:BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer sbgp-ipAddrBlock: critical IPv4: 66.43.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:12:ed:cb:33:cf:05:49:a7:2f:d1:48:a5:c7:00:e2:94:33: ca:43:e7:ed:1e:35:a2:f8:27:26:7a:bb:7c:aa:0e:dc:bd:24: be:e7:2b:7a:d9:78:17:00:40:63:d9:bb:9f:d6:41:7a:87:68: 17:80:d0:1a:dd:33:da:1f:2a:cd:d2:bd:50:93:60:51:67:84: c5:bd:4b:68:2e:1d:b0:fc:4c:c3:e6:68:ed:37:74:18:7b:b1: 23:86:df:bd:44:fe:d4:44:32:4f:3b:92:66:4d:ab:08:9f:09: 77:a2:da:34:a4:25:5d:45:6a:1c:86:18:49:c8:41:58:fc:7b: 1f:66:26:e4:03:b2:86:ac:96:fb:57:2b:20:b4:d7:53:c0:91: e6:6f:a8:fc:62:a5:ec:e3:bb:2a:f8:06:d8:9c:14:08:b1:d5: 1f:03:f3:96:af:23:c7:66:1e:c2:55:b5:62:65:d4:2a:5e:06: 7a:3a:10:dd:c7:60:09:3f:85:03:2f:e3:15:0c:75:c6:42:ab: 38:d1:14:57:8c:48:87:f3:a8:d6:9c:58:3c:3d:10:9b:f7:92: ac:80:8d:7b:8c:7d:e1:52:a3:55:f9:ee:ee:51:54:e4:9d:bf: 76:db:65:ad:3a:80:35:20:ee:b1:b3:7c:ce:fb:4d:22:b4:76: f6:d1:c6:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqixdxhbephfcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjOWE5NWUtNTNjMS00ZTFlLTljN2ItMzlmOGYyNDI0 MThlMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDQzMTJiYWEtNjk3Ni00ZTc3LThkYTYtYjdjMDcwNmEwZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnMwXqvaistXLnbreJnT82FRitONYgI6CXNu FufX9ULq+i2wjzP4YSB6kAlkYFbrIyb8bRoT3KPURD7mRR4Mrfj2r4bBTjNo3bpn rR3fhIzxT4KHRcZp+tMv13aWmR0Gr08meCrzyqcogRrW+Py1WqcoI+q9sjiVlAXz xxvNC3fgmzAs0/iHBJH8HevEwX3Jg5f5794F22L8AOk7RPEFc20HkBMv2BB2BcP6 ixqjRjFCM5k88dLa3btOwpnIzmnnkbZ/hcfYOzpgn/aol8qd9UJ4OVBPUU1aS2g6 mfMFnnu1VCBrqH6fBB6dYpEAJ5o8NhbGLCSFx29nqyIDxkkTfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC554HHTDbpYS/7z6oVYVEHB5jYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmM5 YTk1ZS01M2MxLTRlMWUtOWM3Yi0zOWY4ZjI0MjQxOGUvMjI2YjMyY2EtYWQ4OS0z Y2Y0LTk2YTgtMzY5YTU2OTY0MTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjOWE5NWUtNTNjMS00ZTFlLTlj N2ItMzlmOGYyNDI0MThlLzFmYzlhOTVlLTUzYzEtNGUxZS05YzdiLTM5ZjhmMjQy NDE4ZS5jcmwwHwYDVR0jBBgwFoAUv7hHWl8zbbcL3sRLmQA2rGdA0N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmM5YTk1ZS01M2MxLTRlMWUtOWM3Yi0zOWY4 ZjI0MjQxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQisAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYS7cszzwVJpy/RSKXHAOKUM8pD5+0eNaL4JyZ6u3yqDty9JL7nK3rZ eBcAQGPZu5/WQXqHaBeA0BrdM9ofKs3SvVCTYFFnhMW9S2guHbD8TMPmaO03dBh7 sSOG371E/tREMk87kmZNqwifCXei2jSkJV1FahyGGEnIQVj8ex9mJuQDsoaslvtX KyC011PAkeZvqPxipezjuyr4BticFAix1R8D85avI8dmHsJVtWJl1CpeBno6EN3H YAk/hQMv4xUMdcZCqzjRFFeMSIfzqNacWDw9EJv3kqyAjXuMfeFSo1X57u5RVOSd v3bbZa06gDUg7rGzfM77TSK0dvbRxkI= -----END CERTIFICATE-----Generated at Fri Apr 4 16:18:30 2025 by rpki-client