$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa File: 254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa (raw, json) Hash identifier: tm7ANXu3x1ZG4cp31515T9GDaGUjtDobspyyUMhAu0M= Subject key identifier: 41:B1:99:27:45:D6:D2:07:A0:68:F6:D4:84:D6:27:38:21:95:D6:C9 Certificate issuer: /CN=89a397c2-4860-4547-8d71-faf2481535cf Certificate serial: 010D0C9F4328584940394FDD85E9FC529F7DAB00 Authority key identifier: F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 401164 IP address blocks: 66.45.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4f:dd:85:e9:fc:52:9f:7d:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a397c2-4860-4547-8d71-faf2481535cf Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=29c3065c-9ff4-499e-a1cc-dfaf36f4d627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:7e:e6:1d:cf:69:fb:6a:70:a3:51:e6:89: ab:03:aa:a3:6d:7a:00:cf:1f:8a:a5:17:6e:03:82: 61:8a:a4:bb:6c:c8:5c:02:6c:b5:83:a8:e4:40:70: f5:42:e8:51:3d:d9:ad:02:aa:d3:db:22:ea:37:2a: 7f:db:e3:bb:a4:3c:5f:33:25:a9:fb:6e:66:3b:ea: e2:88:d1:77:f1:92:8b:85:e5:31:e9:f8:d5:04:12: 82:bb:b0:ae:5f:ea:62:9d:c9:04:3c:49:8f:9e:78: 4e:ba:84:bc:d9:0d:cc:0c:08:db:94:72:84:42:c2: ad:88:ae:bd:3b:e7:09:d6:ba:02:da:b8:ed:75:46: a3:46:9a:0b:cc:aa:a4:fa:7a:3f:02:14:8a:7d:7f: 58:e5:97:85:37:16:e1:a2:7a:f8:0e:29:7c:7a:11: 02:b6:af:d2:b2:5f:c6:75:34:78:5d:ec:72:0a:34: 98:71:ad:7e:6e:41:9a:7b:71:4f:ad:53:33:dc:ba: 7b:51:74:83:21:f8:e0:da:b6:16:79:b9:bc:84:95: 52:f6:fa:70:6e:55:39:4c:40:13:a2:d2:14:dc:dd: bb:84:ff:a9:63:d5:ec:d2:45:85:27:fc:7c:4b:41: db:1e:8d:81:ea:89:8e:c8:19:04:b0:a8:97:45:20: 2a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B1:99:27:45:D6:D2:07:A0:68:F6:D4:84:D6:27:38:21:95:D6:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.crl X509v3 Authority Key Identifier: keyid:F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer sbgp-ipAddrBlock: critical IPv4: 66.45.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ea:be:66:99:88:6c:de:60:96:22:65:05:98:06:a2:29:15: 9c:7c:09:77:11:5e:ef:bf:69:0f:a0:1c:9b:b3:77:d7:e9:27: ae:7c:90:e9:36:ed:35:a6:de:23:91:8c:60:65:9e:48:2d:ef: 62:29:15:e0:df:06:e1:4a:d8:95:1b:16:18:09:05:55:75:bb: 5e:2c:5e:f7:a9:90:91:ec:85:ea:a7:cc:18:4f:18:9a:af:6c: 76:a3:ee:ff:13:61:98:17:e9:22:11:82:d4:7c:53:56:40:6d: 36:f8:64:c2:68:2c:cb:62:0d:3d:66:8f:bd:42:c2:e7:7f:8e: 06:4d:55:74:7b:8e:9e:83:3e:45:cb:59:3a:41:6f:2d:f3:3b: 6f:b3:42:c6:50:6b:8d:80:a9:2e:45:fc:45:c5:b4:50:9b:a5: 59:d7:18:75:d8:ea:20:9f:5e:db:8d:e5:1d:62:9f:b5:38:57: db:62:1e:dd:25:46:35:e3:fe:cb:ae:7a:27:d2:9d:c5:55:b9: 31:46:0c:95:5b:f0:aa:20:cd:fc:7f:d0:f8:91:f1:57:4e:2b: 0a:a1:fb:85:ba:a3:29:0b:b4:91:56:c7:05:b3:3d:51:a6:a5: b5:91:1f:7d:d9:29:f6:a7:be:2c:cc:3b:be:2a:18:7b:3e:6f: 77:1e:83:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOU/dhen8Up99qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlhMzk3YzItNDg2MC00NTQ3LThkNzEtZmFmMjQ4MTUz NWNmMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MjljMzA2NWMtOWZmNC00OTllLWExY2MtZGZhZjM2ZjRkNjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBt+5h3PaftqcKNR5omrA6qjbXoAzx+KpRdu A4JhiqS7bMhcAmy1g6jkQHD1QuhRPdmtAqrT2yLqNyp/2+O7pDxfMyWp+25mO+ri iNF38ZKLheUx6fjVBBKCu7CuX+pinckEPEmPnnhOuoS82Q3MDAjblHKEQsKtiK69 O+cJ1roC2rjtdUajRpoLzKqk+no/AhSKfX9Y5ZeFNxbhonr4Dil8ehECtq/Ssl/G dTR4XexyCjSYca1+bkGae3FPrVMz3Lp7UXSDIfjg2rYWebm8hJVS9vpwblU5TEAT otIU3N27hP+pY9Xs0kWFJ/x8S0HbHo2B6omOyBkEsKiXRSAqPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGxmSdF1tIHoGj21ITWJzghldbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84OWEz OTdjMi00ODYwLTQ1NDctOGQ3MS1mYWYyNDgxNTM1Y2YvMjU0OTkzZmMtZDNkNC0z NThjLWFlMGMtMzMzNmI1ZWI0YzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODlhMzk3YzItNDg2MC00NTQ3LThk NzEtZmFmMjQ4MTUzNWNmLzg5YTM5N2MyLTQ4NjAtNDU0Ny04ZDcxLWZhZjI0ODE1 MzVjZi5jcmwwHwYDVR0jBBgwFoAU8HXuQsnRPwQOkovH/F2W9wvrvq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84OWEzOTdjMi00ODYwLTQ1NDctOGQ3MS1mYWYy NDgxNTM1Y2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQi11MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbqvmaZiGzeYJYiZQWYBqIpFZx8CXcRXu+/aQ+gHJuzd9fpJ658kOk2 7TWm3iORjGBlnkgt72IpFeDfBuFK2JUbFhgJBVV1u14sXvepkJHsheqnzBhPGJqv bHaj7v8TYZgX6SIRgtR8U1ZAbTb4ZMJoLMtiDT1mj71Cwud/jgZNVXR7jp6DPkXL WTpBby3zO2+zQsZQa42AqS5F/EXFtFCbpVnXGHXY6iCfXtuN5R1in7U4V9tiHt0l RjXj/suueifSncVVuTFGDJVb8Kogzfx/0PiR8VdOKwqh+4W6oykLtJFWxwWzPVGm pbWRH33ZKfanvizMO74qGHs+b3ceg2Q= -----END CERTIFICATE-----Generated at Sat Apr 12 16:05:41 2025 by rpki-client