$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a71a6b1c-dd84-33b2-898c-4f69915afa83.roa File: a71a6b1c-dd84-33b2-898c-4f69915afa83.roa (raw, json) Hash identifier: bqo9FTrKpGS2tzyO5LVV3PXPp5mYG3cPQQKj3ru79Sk= Subject key identifier: 28:4E:A3:37:DF:1A:12:1F:AF:EB:39:9C:B4:7B:9A:0E:96:87:6A:36 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285848C2B63B05189D78A4BEC50F80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a71a6b1c-dd84-33b2-898c-4f69915afa83.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 399114 IP address blocks: 66.118.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:3b:05:18:9d:78:a4:be:c5:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=0728fd5c-7870-4f93-b06f-4bbf9d750e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:0c:07:0e:f5:51:03:b5:db:c1:f9:35:77: e4:53:74:e0:e1:32:82:d6:c7:db:31:e1:60:2b:e2: 19:22:d6:bb:ad:0b:f9:bb:31:e9:ea:d4:c0:d6:70: a2:a4:91:71:70:63:5a:16:d9:4e:60:33:a8:5c:35: e9:59:cc:42:a7:06:4b:0a:22:54:1b:f3:91:2e:61: aa:2d:dd:d1:fb:23:32:f4:d6:27:fd:56:10:a5:39: dd:32:39:11:2c:5a:df:77:02:4a:1d:0a:22:8d:06: 79:43:85:09:b7:38:ec:f7:1e:f3:8f:b4:9c:5a:45: c0:f9:49:72:69:77:12:53:38:5f:b9:4f:ae:f6:54: ff:31:34:ec:6a:e7:86:17:d9:0d:9a:68:31:fa:45: 77:7c:1d:c2:46:a4:ac:89:21:b0:14:3f:14:ae:6b: d0:4d:6c:ae:5f:af:87:7b:6d:c6:d4:19:a1:6a:35: ea:e8:1c:74:0b:36:96:98:2d:b7:ca:50:27:4c:60: bd:08:51:6b:3f:4c:4f:cb:dd:da:5c:87:e7:f8:ea: bb:b5:b9:07:39:2b:12:ad:d2:3f:a7:a4:07:3b:c9: 7e:36:70:1a:b7:58:30:a0:0a:ff:cf:df:a8:27:a7: 19:5d:a6:1b:44:4c:a8:ab:ac:29:f7:4c:ff:ba:6e: a8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4E:A3:37:DF:1A:12:1F:AF:EB:39:9C:B4:7B:9A:0E:96:87:6A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a71a6b1c-dd84-33b2-898c-4f69915afa83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:3b:3c:29:40:f4:ba:c7:f4:57:42:98:49:83:cb:9f:68:c7: 0e:7d:73:76:d0:62:80:f5:fb:04:19:1c:db:56:46:f6:1e:ed: 37:80:4d:72:6d:ce:6c:44:2f:7e:b7:be:3c:69:ad:a5:22:a3: 38:cf:9b:10:21:37:d2:d0:df:95:cb:87:bf:66:16:38:a8:74: e2:7d:68:c2:bf:2e:bf:21:12:ff:f4:57:d4:02:cd:6f:ea:f3: ee:5d:66:24:52:2a:76:41:11:3b:a5:6f:f9:ae:b4:40:74:ed: b8:34:8d:97:cf:58:f7:1f:a0:6b:9b:0b:a8:cc:b3:b9:93:0e: c6:f6:97:c2:3b:d8:92:bb:26:d7:e5:e7:ea:2e:9c:9e:e9:8b: 2e:b7:ff:67:b2:ce:13:65:3d:f3:18:cc:1c:e5:b0:87:71:81: 92:73:8d:99:97:7d:4e:06:af:1a:ce:6e:3a:13:8a:74:30:ca: ad:5b:25:cd:c4:81:14:07:bd:16:a0:d3:0d:c6:10:15:7e:0b: 11:dc:b1:c1:63:9e:96:c9:47:b8:e7:56:15:02:43:6f:48:f7: dd:29:b5:0d:58:27:4f:c0:15:84:a7:ac:f1:00:84:6b:c0:92: ba:a4:f5:18:d7:53:3d:70:b1:bd:a2:25:ec:96:98:79:49:96: ab:0b:87:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtjsFGJ14pL7FD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk MDcyOGZkNWMtNzg3MC00ZjkzLWIwNmYtNGJiZjlkNzUwZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngQMBw71UQO128H5NXfkU3Tg4TKC1sfbMeFg K+IZIta7rQv5uzHp6tTA1nCipJFxcGNaFtlOYDOoXDXpWcxCpwZLCiJUG/ORLmGq Ld3R+yMy9NYn/VYQpTndMjkRLFrfdwJKHQoijQZ5Q4UJtzjs9x7zj7ScWkXA+Uly aXcSUzhfuU+u9lT/MTTsaueGF9kNmmgx+kV3fB3CRqSsiSGwFD8UrmvQTWyuX6+H e23G1BmhajXq6Bx0CzaWmC23ylAnTGC9CFFrP0xPy93aXIfn+Oq7tbkHOSsSrdI/ p6QHO8l+NnAat1gwoAr/z9+oJ6cZXaYbREyoq6wp90z/um6o/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChOozffGhIfr+s5nLR7mg6Wh2o2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTcxYTZiMWMtZGQ4NC0z M2IyLTg5OGMtNGY2OTkxNWFmYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY7PClA9LrH9FdCmEmDy59oxw59c3bQYoD1+wQZHNtWRvYe7TeATXJt zmxEL363vjxpraUiozjPmxAhN9LQ35XLh79mFjiodOJ9aMK/Lr8hEv/0V9QCzW/q 8+5dZiRSKnZBETulb/mutEB07bg0jZfPWPcfoGubC6jMs7mTDsb2l8I72JK7Jtfl 5+ounJ7piy63/2eyzhNlPfMYzBzlsIdxgZJzjZmXfU4GrxrObjoTinQwyq1bJc3E gRQHvRag0w3GEBV+CxHcscFjnpbJR7jnVhUCQ29I990ptQ1YJ0/AFYSnrPEAhGvA krqk9RjXUz1wsb2iJeyWmHlJlqsLh9k= -----END CERTIFICATE-----Generated at Sun Apr 6 12:01:01 2025 by rpki-client