$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/8bd5efe1-cfef-3ef4-a09e-ff3c2d932fdd.roa File: 8bd5efe1-cfef-3ef4-a09e-ff3c2d932fdd.roa (raw, json) Hash identifier: YxaIqGKTyuiPhuBdaP6Zr8vComd7ogjq96zSdjzb0Gs= Subject key identifier: 18:85:50:FD:DA:6B:D2:61:F6:A7:E4:AB:13:70:95:0F:C4:97:F5:1D Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F432858491AA6CF5314A0D50E86E27340 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/8bd5efe1-cfef-3ef4-a09e-ff3c2d932fdd.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 7106 IP address blocks: 66.209.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:cf:53:14:a0:d5:0e:86:e2:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=127c0532-8c7e-4be9-82d3-b19d023222ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ea:05:52:16:af:aa:d1:ad:59:9f:6c:48:30: f9:6d:04:5f:dd:22:fb:34:f2:c7:97:29:37:37:14: 14:80:99:3a:d2:75:58:a2:e5:e0:b9:80:24:58:cb: 05:86:76:51:33:03:f6:9d:e1:86:a4:36:d2:43:dd: a6:d4:fa:93:c9:00:db:e0:82:92:ec:24:c0:b2:7a: 7e:b1:66:59:3a:58:ca:cc:0a:7c:27:d4:2f:e3:02: f9:02:d1:7f:86:bb:05:fa:d5:65:de:f4:52:8e:46: 32:90:6e:45:bb:67:ca:04:c2:1f:c8:ff:c8:06:33: 11:45:b3:3a:7d:f6:9a:24:97:11:95:db:b8:83:ec: 6e:04:91:5a:8b:85:49:f1:a4:08:52:34:41:76:dc: 05:17:35:12:6d:0f:bc:0f:6d:a9:8f:ae:11:ce:2b: b8:77:49:30:e3:69:e9:56:b3:9e:48:7b:fd:34:49: b6:b6:4f:a4:bd:45:22:5a:66:24:12:2d:ef:ac:d6: 1c:c4:92:2e:4d:94:b5:9d:1a:02:79:24:33:cc:44: 6f:04:98:83:48:8d:90:63:bf:66:cb:2d:38:ef:1f: 6d:11:88:8b:ac:76:b2:1d:84:f0:1d:01:84:48:f9: e0:f3:51:0f:b3:51:ae:ff:98:38:e3:df:4b:07:ae: 39:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:85:50:FD:DA:6B:D2:61:F6:A7:E4:AB:13:70:95:0F:C4:97:F5:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/8bd5efe1-cfef-3ef4-a09e-ff3c2d932fdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 66.209.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a7:86:4a:54:9f:50:5d:ea:a7:b3:a9:51:a8:9c:83:92:a8: 76:4a:cb:fd:62:91:cc:0c:cd:76:34:62:84:b3:16:64:ec:3d: f1:c0:9c:b0:2f:85:b4:15:86:7b:2c:f3:6d:9a:d2:10:39:48: cf:00:39:80:28:39:f6:85:de:f4:bc:e9:48:1c:a0:5c:95:cf: ac:1e:ed:43:ed:95:1e:92:55:90:34:86:56:58:72:ff:b4:49: 17:41:0b:de:bb:e8:fa:f8:11:5a:7b:4f:44:b7:1e:d1:e6:74: 51:cc:4c:02:f7:35:8b:f1:d2:0a:52:8d:0a:97:05:29:14:90: 9e:db:25:1a:fe:af:2a:47:d5:7d:64:d9:2e:a3:ab:b8:05:02: b1:2a:d1:ca:67:6f:37:87:0a:75:79:7a:6f:7d:f1:7c:ad:d5: ec:9a:03:f8:7b:07:5b:75:0c:ad:5f:ad:7a:29:cb:c3:e0:9f: f3:85:9e:e3:70:03:cf:81:e4:f6:3c:bf:c9:f2:e6:89:a1:c3: b5:b1:e2:0a:eb:23:49:66:dd:47:4b:a1:5b:96:38:a8:35:11: c9:7c:54:4c:37:1e:9b:29:2b:98:e3:a4:62:e5:33:4d:e0:bc: 37:66:f5:bb:a1:95:1f:e4:02:50:24:36:7e:c1:6e:c6:d3:aa: d0:da:4f:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaps9TFKDVDobic0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk MTI3YzA1MzItOGM3ZS00YmU5LTgyZDMtYjE5ZDAyMzIyMmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+oFUhavqtGtWZ9sSDD5bQRf3SL7NPLHlyk3 NxQUgJk60nVYouXguYAkWMsFhnZRMwP2neGGpDbSQ92m1PqTyQDb4IKS7CTAsnp+ sWZZOljKzAp8J9Qv4wL5AtF/hrsF+tVl3vRSjkYykG5Fu2fKBMIfyP/IBjMRRbM6 ffaaJJcRldu4g+xuBJFai4VJ8aQIUjRBdtwFFzUSbQ+8D22pj64Rziu4d0kw42np VrOeSHv9NEm2tk+kvUUiWmYkEi3vrNYcxJIuTZS1nRoCeSQzzERvBJiDSI2QY79m yy047x9tEYiLrHayHYTwHQGESPng81EPs1Gu/5g4499LB6457wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiFUP3aa9Jh9qfkqxNwlQ/El/UdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvOGJkNWVmZTEtY2ZlZi0z ZWY0LWEwOWUtZmYzYzJkOTMyZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQtGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIanhkpUn1Bd6qezqVGonIOSqHZKy/1ikcwMzXY0YoSzFmTsPfHAnLAv hbQVhnss822a0hA5SM8AOYAoOfaF3vS86UgcoFyVz6we7UPtlR6SVZA0hlZYcv+0 SRdBC9676Pr4EVp7T0S3HtHmdFHMTAL3NYvx0gpSjQqXBSkUkJ7bJRr+rypH1X1k 2S6jq7gFArEq0cpnbzeHCnV5em998Xyt1eyaA/h7B1t1DK1frXopy8Pgn/OFnuNw A8+B5PY8v8ny5omhw7Wx4grrI0lm3UdLoVuWOKg1Ecl8VEw3HpspK5jjpGLlM03g vDdm9buhlR/kAlAkNn7BbsbTqtDaT3A= -----END CERTIFICATE-----Generated at Sat Apr 5 00:04:13 2025 by rpki-client