$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/ad6cfd8e-7306-3391-a07f-a207fb0468db.roa File: ad6cfd8e-7306-3391-a07f-a207fb0468db.roa (raw, json) Hash identifier: P2FZLWFiP/W7F6qSMxh7zLUmL1RinHkD002WAhFJh1g= Subject key identifier: E9:AE:A8:C2:FE:6C:8B:D2:F5:4B:05:46:5F:F8:D9:22:8E:42:CD:75 Certificate issuer: /CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea Certificate serial: 010D0C9F43285848A830A4D1D8308BF935073680 Authority key identifier: 54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/ad6cfd8e-7306-3391-a07f-a207fb0468db.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 10753 IP address blocks: 66.128.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:a4:d1:d8:30:8b:f9:35:07:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=a6d3fcee-f0cd-46b5-8fd6-c2095d7ef5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5d:f9:f9:44:c6:6f:c2:cb:49:3d:75:ea:76: 8f:0a:31:a6:0f:12:ce:0c:11:82:c6:42:b4:47:8e: 74:a6:7c:d2:79:4c:5b:fe:59:2d:f3:e4:02:53:ab: 88:d7:4b:1e:10:07:f8:43:88:50:79:4e:d2:6d:fb: f9:8e:63:2d:9b:d5:2c:56:1f:d1:c1:52:71:6b:2d: 44:4c:cb:2f:2a:73:91:80:a8:d9:30:0a:6c:78:8b: c8:8c:2e:d8:81:06:35:d1:87:a8:ce:5b:b1:25:c7: ff:3c:ef:79:4a:69:74:94:26:6c:47:b5:36:e9:9c: b1:bf:8f:72:99:a4:11:cf:62:5c:91:dd:e1:1d:17: 4b:dd:f7:b9:ab:28:83:ee:5f:70:94:c0:9a:a9:94: a1:b6:66:e0:2b:73:34:42:13:3e:75:d6:ed:dd:05: a4:43:77:ab:96:46:c7:6b:7e:93:ab:3c:3e:2f:e1: 7f:3a:02:87:09:c3:bf:90:1c:eb:b9:f0:e8:03:86: 27:34:0b:47:d7:66:cc:a8:d9:c0:2b:6b:58:02:fb: 81:b3:47:39:5a:04:14:3e:e7:98:79:1c:42:43:8e: c7:a0:cd:7a:33:50:80:4b:ac:c9:0a:f7:c4:1d:90: 81:96:89:ec:02:a4:a7:4a:65:d9:ff:af:bd:bd:0b: 90:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AE:A8:C2:FE:6C:8B:D2:F5:4B:05:46:5F:F8:D9:22:8E:42:CD:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/ad6cfd8e-7306-3391-a07f-a207fb0468db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl X509v3 Authority Key Identifier: keyid:54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer sbgp-ipAddrBlock: critical IPv4: 66.128.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:0c:55:2f:bc:86:14:59:ab:bc:4d:d4:eb:0d:e4:8a:25:d8: ac:a8:ac:13:21:d9:3c:d6:8f:e0:f9:04:10:5f:86:bb:cd:e9: 6d:96:32:40:c3:85:16:4c:27:1b:a1:8a:b6:44:46:a2:7a:30: 45:40:a2:55:bc:67:48:fb:b5:46:65:95:bc:e1:93:fd:fe:1c: b0:96:a3:96:42:ed:1d:6e:6d:06:14:12:26:5d:33:d0:02:87: 67:47:6d:36:76:da:e6:52:8b:a8:0d:42:73:a9:1b:8e:aa:6a: a5:00:82:bd:4b:dc:13:0c:aa:5e:26:5d:f9:93:8e:c1:1c:fe: 8a:90:e3:86:24:b0:06:32:55:84:eb:0b:14:b7:8a:17:dc:bc: d4:58:63:35:8c:1b:44:82:56:07:e1:32:7e:44:95:4a:31:48: fa:b2:28:e2:d2:e3:7e:65:77:b6:0f:5b:1c:a5:3a:de:97:11: e3:46:4d:07:1d:94:1b:6c:3e:72:bc:70:aa:32:9a:61:91:4d: 6f:1c:25:8e:c4:f2:d2:03:38:c4:05:d0:f2:57:5e:fc:dd:18: 85:a5:45:69:89:b7:18:d3:f2:90:f7:93:39:81:c9:fc:00:42: 08:6d:61:c7:ed:c2:02:82:df:25:5d:d4:7d:da:4c:9e:db:af: 65:4f:12:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMKTR2DCL+TUHNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJhMzkyOTMtNWRkYi00Y2MwLTgzNTMtMmIyNThlMmU3 OGVhMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk YTZkM2ZjZWUtZjBjZC00NmI1LThmZDYtYzIwOTVkN2VmNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV35+UTGb8LLST116naPCjGmDxLODBGCxkK0 R450pnzSeUxb/lkt8+QCU6uI10seEAf4Q4hQeU7Sbfv5jmMtm9UsVh/RwVJxay1E TMsvKnORgKjZMApseIvIjC7YgQY10YeozluxJcf/PO95Sml0lCZsR7U26Zyxv49y maQRz2Jckd3hHRdL3fe5qyiD7l9wlMCaqZShtmbgK3M0QhM+ddbt3QWkQ3erlkbH a36Tqzw+L+F/OgKHCcO/kBzrufDoA4YnNAtH12bMqNnAK2tYAvuBs0c5WgQUPueY eRxCQ47HoM16M1CAS6zJCvfEHZCBlonsAqSnSmXZ/6+9vQuQzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmuqML+bIvS9UsFRl/42SKOQs11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MmEz OTI5My01ZGRiLTRjYzAtODM1My0yYjI1OGUyZTc4ZWEvYWQ2Y2ZkOGUtNzMwNi0z MzkxLWEwN2YtYTIwN2ZiMDQ2OGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzJhMzkyOTMtNWRkYi00Y2MwLTgz NTMtMmIyNThlMmU3OGVhLzcyYTM5MjkzLTVkZGItNGNjMC04MzUzLTJiMjU4ZTJl NzhlYS5jcmwwHwYDVR0jBBgwFoAUVOojygUguMpCgH0pZ/g+ofnu28MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MmEzOTI5My01ZGRiLTRjYzAtODM1My0yYjI1 OGUyZTc4ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQoDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcMVS+8hhRZq7xN1OsN5Iol2KyorBMh2TzWj+D5BBBfhrvN6W2WMkDD hRZMJxuhirZERqJ6MEVAolW8Z0j7tUZllbzhk/3+HLCWo5ZC7R1ubQYUEiZdM9AC h2dHbTZ22uZSi6gNQnOpG46qaqUAgr1L3BMMql4mXfmTjsEc/oqQ44YksAYyVYTr CxS3ihfcvNRYYzWMG0SCVgfhMn5ElUoxSPqyKOLS435ld7YPWxylOt6XEeNGTQcd lBtsPnK8cKoymmGRTW8cJY7E8tIDOMQF0PJXXvzdGIWlRWmJtxjT8pD3kzmByfwA QghtYcftwgKC3yVd1H3aTJ7br2VPEqw= -----END CERTIFICATE-----Generated at Fri Mar 14 10:21:26 2025 by rpki-client