$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/4040c7b5-4595-325a-b7f7-dc9b51cfc1c6.roa File: 4040c7b5-4595-325a-b7f7-dc9b51cfc1c6.roa (raw, json) Hash identifier: VtN9s21DvAYdM5/Cqo2ovLwi3jb7EYzJOXAhZufa9sM= Subject key identifier: FA:AB:55:18:11:DF:EF:21:88:DB:63:E8:31:39:34:C8:25:05:74:E9 Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F43285848F65BCB44F8356879A2B81800 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/4040c7b5-4595-325a-b7f7-dc9b51cfc1c6.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16904 IP address blocks: 66.242.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:cb:44:f8:35:68:79:a2:b8:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=80ba66eb-aa2c-4874-b649-dfd7df07e673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:64:56:01:d3:7b:23:27:99:fc:74:1d:66: ec:f7:b6:a0:e7:e8:13:23:b3:83:ac:81:5d:5e:84: 9f:2b:43:f1:c9:ad:bc:f9:9d:b2:b3:10:98:59:76: 90:79:f5:70:4e:06:fc:49:75:20:57:20:44:02:99: 80:fa:72:2c:8e:96:32:93:b6:68:b0:93:b4:b6:13: 83:27:85:1f:60:95:aa:28:bd:ae:31:a6:4c:0f:20: 37:ad:9a:d4:ec:61:08:63:78:1a:17:75:79:75:fe: 00:d0:74:f1:b8:e0:a2:14:38:1c:e9:34:5e:9a:f4: fc:9f:5d:1c:80:4c:3d:60:51:5a:87:09:2e:76:e4: e3:62:d8:83:b0:c5:0c:19:8c:c8:39:62:da:e1:ea: 96:5e:c7:c2:87:89:b6:bf:fd:4c:c3:04:40:ce:31: 4c:65:5a:1f:28:0e:76:5e:2f:29:21:7d:ce:bb:ed: cc:fd:74:86:48:1b:5d:00:60:d6:d8:30:03:c3:a1: b9:e4:47:1a:d9:dc:41:38:25:62:e3:bc:01:90:24: ed:e1:3c:2e:65:f1:47:93:96:78:49:8d:fa:be:9c: 1a:b3:77:59:96:08:ee:7b:a3:77:5f:83:87:aa:a2: 18:c0:01:2c:73:37:51:81:d3:f9:35:d7:ae:ef:10: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AB:55:18:11:DF:EF:21:88:DB:63:E8:31:39:34:C8:25:05:74:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/4040c7b5-4595-325a-b7f7-dc9b51cfc1c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv4: 66.242.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:54:54:10:80:9b:40:b4:8c:52:b8:e9:e9:4d:74:31:4f:39: 1c:1f:91:24:77:50:50:40:ba:d9:af:51:bd:5e:b1:b2:06:85: 90:6a:91:65:75:bd:fe:3c:1f:7c:75:d3:42:64:ac:bf:31:39: de:8f:e9:35:36:a6:70:d4:bf:99:5f:5a:45:a1:55:83:6b:63: e3:09:d3:5f:69:af:8e:dc:36:35:32:1d:be:91:72:70:26:ec: b0:bb:a2:ad:c7:d7:aa:ca:e5:3c:6f:b9:45:60:d3:f8:f9:8f: d5:ef:45:49:af:af:db:f0:af:53:c4:54:17:e7:21:a5:09:bc: d3:85:12:de:c6:8a:08:07:fa:ac:c7:6e:b9:3c:da:49:72:ec: eb:41:3f:ff:a9:18:b1:d7:db:f7:20:90:6d:5e:b3:ac:9b:4d: a0:10:03:a8:39:25:89:6a:28:f2:75:09:7d:4f:9b:e8:da:49: 71:59:84:1d:70:35:a9:70:31:c2:3a:90:75:33:27:be:f8:1c: 6b:61:b4:ec:e4:f7:33:b6:e4:15:c5:41:c5:18:33:1a:b4:75: ab:a1:63:d8:74:42:ae:62:84:96:09:85:a4:c2:25:ef:d0:fb: 6e:ba:40:b4:c7:8e:fa:71:5c:6e:3a:f8:2e:2b:b4:69:74:82: 1a:55:78:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W8tE+DVoeaK4GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ODBiYTY2ZWItYWEyYy00ODc0LWI2NDktZGZkN2RmMDdlNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzlkVgHTeyMnmfx0HWbs97ag5+gTI7ODrIFd XoSfK0Pxya28+Z2ysxCYWXaQefVwTgb8SXUgVyBEApmA+nIsjpYyk7ZosJO0thOD J4UfYJWqKL2uMaZMDyA3rZrU7GEIY3gaF3V5df4A0HTxuOCiFDgc6TRemvT8n10c gEw9YFFahwkuduTjYtiDsMUMGYzIOWLa4eqWXsfCh4m2v/1MwwRAzjFMZVofKA52 Xi8pIX3Ou+3M/XSGSBtdAGDW2DADw6G55Eca2dxBOCVi47wBkCTt4TwuZfFHk5Z4 SY36vpwas3dZlgjue6N3X4OHqqIYwAEsczdRgdP5Ndeu7xDj8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqrVRgR3+8hiNtj6DE5NMglBXTpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvNDA0MGM3YjUtNDU5NS0z MjVhLWI3ZjctZGM5YjUxY2ZjMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvJVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVUVBCAm0C0jFK46elNdDFPORwfkSR3UFBAutmvUb1esbIGhZBqkWV1 vf48H3x100JkrL8xOd6P6TU2pnDUv5lfWkWhVYNrY+MJ019pr47cNjUyHb6RcnAm 7LC7oq3H16rK5TxvuUVg0/j5j9XvRUmvr9vwr1PEVBfnIaUJvNOFEt7GiggH+qzH brk82kly7OtBP/+pGLHX2/cgkG1es6ybTaAQA6g5JYlqKPJ1CX1Pm+jaSXFZhB1w NalwMcI6kHUzJ774HGthtOzk9zO25BXFQcUYMxq0dauhY9h0Qq5ihJYJhaTCJe/Q +266QLTHjvpxXG46+C4rtGl0ghpVeFE= -----END CERTIFICATE-----Generated at Sat Apr 12 14:49:46 2025 by rpki-client