$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa File: a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa (raw, json) Hash identifier: D5OSwpVdKu1ppIBE1fCXf13ny27SazSVZF9bGy8IfJA= Subject key identifier: 0D:83:5E:1F:7D:EC:D1:62:98:77:17:5C:5C:BD:5C:01:46:D1:5A:E5 Certificate issuer: /CN=2cf622f9-718a-4280-a116-72e2088c51e3 Certificate serial: 010D0C9F432858492CB21F13A86B41B7A689C280 Authority key identifier: 30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 394490 IP address blocks: 66.45.13.0/24 maxlen: 24 2620:dd:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:1f:13:a8:6b:41:b7:a6:89:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cf622f9-718a-4280-a116-72e2088c51e3 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=7ce6ea84-bfc2-4e00-9506-3880cb6172ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f3:bd:18:26:58:a3:85:6f:b4:77:e7:c5:e6: ab:21:bd:52:2a:cd:7a:13:8d:b8:9a:c7:a4:c5:b9: 2d:f9:9a:34:e9:7f:45:8f:21:c6:7c:a0:8b:dd:46: f4:78:c0:02:4f:bd:0b:c5:7d:ba:9a:b2:37:ed:db: 0e:93:12:3c:aa:cb:ef:cf:1e:e8:67:d0:c9:09:b0: 4e:68:40:c4:1c:69:cc:25:3c:af:14:76:6e:fa:ef: 71:4e:9e:ab:28:70:94:1c:d3:e3:a0:d6:44:da:80: d8:71:11:a1:65:6b:bd:71:cf:98:f7:4a:91:24:12: c9:20:d7:4b:49:de:5b:1b:73:0d:1e:23:1a:91:0f: 8b:82:63:ec:dd:a0:1f:b5:da:af:83:e0:79:42:28: 0a:62:65:96:85:1e:9c:7f:4f:67:34:7f:05:7f:c5: 47:dd:a7:d9:d6:30:ea:d1:1b:d9:46:68:2e:08:41: 62:0e:8a:b0:c4:3e:5d:63:99:b4:6a:72:5f:de:76: 35:8c:bc:3c:76:0b:df:e4:a7:57:a2:07:3e:9b:ce: 1a:a2:3d:38:aa:d0:34:5f:18:5e:f1:9e:e7:a0:70: 1b:56:78:5b:59:10:4d:a5:98:7e:53:c1:d6:28:79: 7e:c0:55:c1:e9:87:2a:57:76:df:47:98:88:45:da: 18:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:83:5E:1F:7D:EC:D1:62:98:77:17:5C:5C:BD:5C:01:46:D1:5A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.crl X509v3 Authority Key Identifier: keyid:30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer sbgp-ipAddrBlock: critical IPv4: 66.45.13.0/24 IPv6: 2620:dd:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:34:76:17:b2:4d:10:60:53:7e:ba:c3:4f:0b:82:7a:4c:af: 0e:35:1f:e0:ad:d8:6e:a0:42:c0:b9:46:94:2d:e6:2e:04:e7: ab:40:c3:00:4e:96:39:07:f4:8d:9c:16:e6:5a:ae:f7:27:9d: e2:44:2a:4c:ab:06:a4:9c:19:a7:4d:63:2d:17:c0:c8:87:0d: 5f:3b:0f:0c:99:3c:6f:82:ea:33:af:dd:a6:01:df:2a:27:cd: f6:5a:10:e6:c6:89:0a:49:85:3c:6d:68:64:a0:76:d5:3b:90: 56:03:5b:f5:f9:3c:30:8a:8e:45:02:fe:18:a4:24:49:8c:e6: 4e:79:43:e3:58:00:87:ed:02:f9:c4:86:76:42:d2:f4:fa:73: 64:fd:a8:68:b6:9f:bb:05:40:fc:ee:41:97:ec:fb:45:f2:f3: 6e:a1:b3:a4:d6:df:c8:ef:52:7f:39:e8:f9:1b:3e:39:bb:5d: f0:78:8a:13:4b:cf:f6:8d:69:bf:f3:ca:48:a2:24:96:fa:7c: a7:29:6f:a2:ab:c0:6c:a9:c0:fa:08:43:86:c3:02:4b:6a:06: ea:9a:a1:57:c2:ef:36:58:da:7a:d6:7e:88:ae:66:cf:8a:7b: 90:41:c9:09:e5:3b:dc:ea:e4:4d:c2:b5:ed:30:fd:b2:cc:9e: de:61:f7:79 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkssh8TqGtBt6aJwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNmNjIyZjktNzE4YS00MjgwLWExMTYtNzJlMjA4OGM1 MWUzMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk N2NlNmVhODQtYmZjMi00ZTAwLTk1MDYtMzg4MGNiNjE3MmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/O9GCZYo4VvtHfnxearIb1SKs16E424msek xbkt+Zo06X9FjyHGfKCL3Ub0eMACT70LxX26mrI37dsOkxI8qsvvzx7oZ9DJCbBO aEDEHGnMJTyvFHZu+u9xTp6rKHCUHNPjoNZE2oDYcRGhZWu9cc+Y90qRJBLJINdL Sd5bG3MNHiMakQ+LgmPs3aAftdqvg+B5QigKYmWWhR6cf09nNH8Ff8VH3afZ1jDq 0RvZRmguCEFiDoqwxD5dY5m0anJf3nY1jLw8dgvf5KdXogc+m84aoj04qtA0Xxhe 8Z7noHAbVnhbWRBNpZh+U8HWKHl+wFXB6YcqV3bfR5iIRdoYLwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFA2DXh997NFimHcXXFy9XAFG0VrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yY2Y2 MjJmOS03MThhLTQyODAtYTExNi03MmUyMDg4YzUxZTMvYTFlYmY0NGEtODIzYi0z NzdlLWJmMzYtNWE2MWMzMTZiMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmNmNjIyZjktNzE4YS00MjgwLWEx MTYtNzJlMjA4OGM1MWUzLzJjZjYyMmY5LTcxOGEtNDI4MC1hMTE2LTcyZTIwODhj NTFlMy5jcmwwHwYDVR0jBBgwFoAUMGLaWKnwufvsj2/Mg0mYz+O0DGowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yY2Y2MjJmOS03MThhLTQyODAtYTExNi03MmUy MDg4YzUxZTMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQi0NMA8E AgACMAkDBwAmIADdwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAizR2F7JNEGBTfrrDTwuCekyvDjUf4K3Y bqBCwLlGlC3mLgTnq0DDAE6WOQf0jZwW5lqu9yed4kQqTKsGpJwZp01jLRfAyIcN XzsPDJk8b4LqM6/dpgHfKifN9loQ5saJCkmFPG1oZKB21TuQVgNb9fk8MIqORQL+ GKQkSYzmTnlD41gAh+0C+cSGdkLS9PpzZP2oaLafuwVA/O5Bl+z7RfLzbqGzpNbf yO9Sfzno+Rs+Obtd8HiKE0vP9o1pv/PKSKIklvp8pylvoqvAbKnA+ghDhsMCS2oG 6pqhV8LvNljaetZ+iK5mz4p7kEHJCeU73OrkTcK17TD9ssye3mH3eQ== -----END CERTIFICATE-----Generated at Sat Apr 12 12:28:43 2025 by rpki-client