$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/76fd5146-0a4e-316b-9c51-a775978d68a4.roa File: 76fd5146-0a4e-316b-9c51-a775978d68a4.roa (raw, json) Hash identifier: af3HcgarLRZngV1vqX8+xPe1BxLBxfs0IeQy7OWCcnA= Subject key identifier: D0:47:CF:7B:33:66:50:DF:38:E9:90:A7:BD:9F:DE:E2:F2:B0:4A:A7 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584957F4088E995E0C5281D7C000 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/76fd5146-0a4e-316b-9c51-a775978d68a4.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11290 IP address blocks: 66.171.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:08:8e:99:5e:0c:52:81:d7:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=b8da87e6-d86f-483b-9edd-a6ac74887121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ea:d3:97:06:86:ab:eb:74:fe:73:f2:00:ea: 60:0d:b8:99:8c:38:72:04:90:24:b0:91:42:2f:e7: ff:03:ba:be:d1:74:07:08:10:cf:2c:d2:88:36:80: ce:86:ef:e9:ec:95:8f:42:5c:4b:05:b9:44:b2:ea: 2e:d2:bd:ca:89:ef:06:bb:c0:af:7f:4b:fe:3a:a6: de:ad:1c:b0:df:70:10:39:c4:b4:9e:11:56:3e:2b: c3:10:1d:6c:aa:ad:68:3b:9d:fc:4e:3f:57:4e:a0: 57:41:ee:66:3f:4d:71:6e:33:33:db:67:7e:89:78: 92:55:51:ff:7b:52:c9:86:d6:e9:87:cc:a5:1a:bd: 2b:4d:b7:d0:42:2d:ce:48:f2:17:39:c5:94:6d:5c: f7:9f:84:ac:f7:76:a1:cd:8e:a6:74:f2:70:f2:71: 5e:25:e5:0d:6b:a6:fd:8a:8f:77:70:9b:17:a5:66: 77:8c:44:db:2a:5c:96:d3:0a:51:d3:72:7d:72:a5: e2:ce:b0:48:96:27:bc:39:6d:c8:e5:56:a5:e6:fd: 51:d7:7d:48:68:4a:d6:c2:7f:6f:a9:93:18:48:df: c7:0b:6f:5f:39:ab:cc:8a:67:50:7d:c0:3f:5c:14: 35:b5:e2:8a:31:f1:04:21:0a:65:f7:5d:44:b9:01: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:47:CF:7B:33:66:50:DF:38:E9:90:A7:BD:9F:DE:E2:F2:B0:4A:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/76fd5146-0a4e-316b-9c51-a775978d68a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 66.171.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:9c:97:6b:f5:2e:93:a5:5a:34:14:98:e6:e2:02:47:f1:8f: 6e:f8:a3:9b:92:7a:c3:cc:41:1a:ac:c1:ae:d3:9e:8c:1a:e0: 51:a2:f6:82:ec:40:a3:ab:31:c5:44:da:b0:dc:0b:c6:0a:be: 68:38:76:49:8c:3a:40:55:86:55:55:af:6e:46:48:5f:9f:ee: fc:8e:0f:79:78:07:c1:17:ab:7f:4b:81:54:17:ae:e6:46:0e: 8a:d6:3c:e1:7b:e0:20:1d:73:58:17:9d:ba:41:dd:bf:f2:f8: 8e:67:fa:b2:91:33:4d:e5:77:9b:6f:3e:ef:c6:a4:9c:05:8c: 88:11:c5:1d:63:44:ae:26:58:42:a8:b9:4b:8d:94:62:21:6d: c5:0e:0e:99:05:9f:1e:8c:8b:67:62:8d:a4:5b:99:c1:dd:af: 9a:ae:21:6d:f3:ed:77:a0:29:a0:92:e7:39:6a:56:e6:94:64: f5:ca:43:53:5b:ea:65:63:03:f3:6b:31:69:f4:e1:8d:94:f0: 1b:7d:ca:be:ee:49:6d:e3:49:fd:72:54:b9:da:43:8e:f5:85: 20:c8:50:3d:a7:cd:78:e5:6a:b0:37:91:b9:de:0b:6b:4a:e2: ec:5e:e2:ef:d5:1d:24:ef:29:e0:ae:34:ff:d0:e1:11:87:de: 27:45:72:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AiOmV4MUoHXwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YjhkYTg3ZTYtZDg2Zi00ODNiLTllZGQtYTZhYzc0ODg3MTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgerTlwaGq+t0/nPyAOpgDbiZjDhyBJAksJFC L+f/A7q+0XQHCBDPLNKINoDOhu/p7JWPQlxLBblEsuou0r3Kie8Gu8Cvf0v+Oqbe rRyw33AQOcS0nhFWPivDEB1sqq1oO538Tj9XTqBXQe5mP01xbjMz22d+iXiSVVH/ e1LJhtbph8ylGr0rTbfQQi3OSPIXOcWUbVz3n4Ss93ahzY6mdPJw8nFeJeUNa6b9 io93cJsXpWZ3jETbKlyW0wpR03J9cqXizrBIlie8OW3I5Val5v1R131IaErWwn9v qZMYSN/HC29fOavMimdQfcA/XBQ1teKKMfEEIQpl911EuQFeHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBHz3szZlDfOOmQp72f3uLysEqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNzZmZDUxNDYtMGE0ZS0z MTZiLTljNTEtYTc3NTk3OGQ2OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQqswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGecl2v1LpOlWjQUmObiAkfxj274o5uSesPMQRqswa7Tnowa4FGi9oLs QKOrMcVE2rDcC8YKvmg4dkmMOkBVhlVVr25GSF+f7vyOD3l4B8EXq39LgVQXruZG DorWPOF74CAdc1gXnbpB3b/y+I5n+rKRM03ld5tvPu/GpJwFjIgRxR1jRK4mWEKo uUuNlGIhbcUODpkFnx6Mi2dijaRbmcHdr5quIW3z7XegKaCS5zlqVuaUZPXKQ1Nb 6mVjA/NrMWn04Y2U8Bt9yr7uSW3jSf1yVLnaQ471hSDIUD2nzXjlarA3kbneC2tK 4uxe4u/VHSTvKeCuNP/Q4RGH3idFclg= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:16 2025 by rpki-client