$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/3e85b5bc-9b0d-32ee-a2c0-353cb7015be1.roa File: 3e85b5bc-9b0d-32ee-a2c0-353cb7015be1.roa (raw, json) Hash identifier: vpkGK+2R0YGk3B1KkVjwSMKTH5JhWksVHxHKiWVEob8= Subject key identifier: 8D:A8:58:4B:92:5B:87:52:78:CE:50:16:9F:96:C5:E2:B5:3E:51:79 Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F432858494E2EB46B8A4A80BA7F2370C0 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/3e85b5bc-9b0d-32ee-a2c0-353cb7015be1.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 2559 IP address blocks: 66.185.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b4:6b:8a:4a:80:ba:7f:23:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=41f45d8a-d7f7-4a1f-937a-ed56067a9e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:0a:a5:d3:67:6a:a7:6b:61:8e:2d:55:3d: 66:7f:99:8b:39:56:65:04:ab:31:c9:fc:b3:91:84: f4:96:2d:c6:31:97:2f:cf:f3:2c:fb:76:a1:d0:53: 9e:72:ca:a5:2b:2a:83:8a:d5:ed:b3:ff:5c:d8:05: fd:07:65:0f:49:76:8d:a4:c8:86:e6:f9:f9:35:5c: b8:3f:a2:05:bd:39:74:b7:19:47:1c:be:3b:fe:ea: 3c:df:de:f6:59:a1:08:20:08:18:71:a9:a6:52:c7: c3:a3:f9:e2:4a:c5:41:14:ad:e8:c9:64:d4:14:94: 96:73:4c:80:7d:00:34:de:20:33:ea:86:70:a2:91: 04:90:76:6e:9b:d2:4e:2a:c3:b6:66:fa:48:aa:64: d4:38:d4:c1:b1:dc:b6:16:e8:0b:0c:90:c5:11:a6: f9:d9:36:05:13:2e:93:15:73:40:b4:7f:ca:1e:8f: ff:b0:36:a3:1f:a7:9d:38:e5:30:5c:71:22:14:fd: 5b:3f:31:41:47:f1:7b:9b:44:d0:97:9a:c5:64:70: 3b:8c:97:68:da:06:5b:0d:36:77:a1:b3:af:9f:30: d1:40:9c:27:09:f5:fa:ab:68:6a:c0:9f:4b:6d:fd: b1:5b:15:85:42:30:61:ec:5b:02:dc:ed:d5:e7:77: 16:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A8:58:4B:92:5B:87:52:78:CE:50:16:9F:96:C5:E2:B5:3E:51:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/3e85b5bc-9b0d-32ee-a2c0-353cb7015be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 66.185.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:fb:94:22:1c:89:5b:d2:3e:ba:a4:d6:4f:25:f1:b5:c2:1b: e4:c4:8c:d4:35:80:2e:d9:9b:ad:7e:5e:ac:32:0c:4a:97:a9: 75:d7:92:f8:45:30:5a:58:8d:0d:0d:53:74:dc:d8:96:fd:3e: 24:2b:5e:41:7b:84:96:17:da:da:37:aa:10:e7:5f:23:30:97: 19:d3:68:ba:86:6f:0e:15:ce:bd:15:c4:9f:9f:db:c2:02:e2: bc:24:40:8c:f0:3c:25:cd:f1:7a:b7:10:be:f8:a2:ad:86:ce: a1:f5:49:05:ef:ca:bc:fe:91:07:79:31:6c:42:88:40:da:0c: c9:69:3c:e1:dd:ea:bc:57:36:cf:c2:f6:77:30:3d:52:de:00: e8:bd:f0:ba:6e:c9:49:1f:a2:76:75:84:61:94:d9:69:61:d2: 1d:ba:78:8f:e1:c8:93:29:64:eb:31:63:d9:7b:77:7d:77:c4: e9:fc:83:6a:13:0c:7a:bf:64:6b:51:7e:7b:96:8e:4b:cf:54: 6c:01:8c:19:ee:c3:af:71:cc:bb:b2:34:f0:95:0b:16:8e:fc: 69:e6:ef:d5:ac:c0:06:df:d1:b1:e4:b6:1e:57:1b:47:10:36: e6:67:0d:95:ca:02:3d:46:91:e5:70:c2:0a:fc:a9:a5:b7:23: 60:d3:ea:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrRrikqAun8jcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NDFmNDVkOGEtZDdmNy00YTFmLTkzN2EtZWQ1NjA2N2E5ZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OAKpdNnaqdrYY4tVT1mf5mLOVZlBKsxyfyz kYT0li3GMZcvz/Ms+3ah0FOecsqlKyqDitXts/9c2AX9B2UPSXaNpMiG5vn5NVy4 P6IFvTl0txlHHL47/uo83972WaEIIAgYcammUsfDo/niSsVBFK3oyWTUFJSWc0yA fQA03iAz6oZwopEEkHZum9JOKsO2ZvpIqmTUONTBsdy2FugLDJDFEab52TYFEy6T FXNAtH/KHo//sDajH6edOOUwXHEiFP1bPzFBR/F7m0TQl5rFZHA7jJdo2gZbDTZ3 obOvnzDRQJwnCfX6q2hqwJ9Lbf2xWxWFQjBh7FsC3O3V53cWGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2oWEuSW4dSeM5QFp+WxeK1PlF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvM2U4NWI1YmMtOWIwZC0z MmVlLWEyYzAtMzUzY2I3MDE1YmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrm1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALn7lCIciVvSPrqk1k8l8bXCG+TEjNQ1gC7Zm61+XqwyDEqXqXXXkvhF MFpYjQ0NU3Tc2Jb9PiQrXkF7hJYX2to3qhDnXyMwlxnTaLqGbw4Vzr0VxJ+f28IC 4rwkQIzwPCXN8Xq3EL74oq2GzqH1SQXvyrz+kQd5MWxCiEDaDMlpPOHd6rxXNs/C 9ncwPVLeAOi98LpuyUkfonZ1hGGU2Wlh0h26eI/hyJMpZOsxY9l7d313xOn8g2oT DHq/ZGtRfnuWjkvPVGwBjBnuw69xzLuyNPCVCxaO/Gnm79WswAbf0bHkth5XG0cQ NuZnDZXKAj1GkeVwwgr8qaW3I2DT6lg= -----END CERTIFICATE-----Generated at Fri Apr 4 16:11:09 2025 by rpki-client