$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa File: 66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa (raw, json) Hash identifier: 56JcQ5vqa3ncXOA5FuhOZTNank6qfRk0AVUgHm+X/bQ= Subject key identifier: F4:63:8B:EC:D5:50:FA:9D:95:65:77:1E:C9:8D:42:BC:95:D5:DF:28 Certificate issuer: /CN=5cf06829-25a9-43c5-8a21-38599a1fb23f Certificate serial: 010D0C9F432858487DD56A5E5098C645A5952740 Authority key identifier: 1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa Signing time: Thu 09 Jan 2025 21:52:56 +0000 ROA not before: Thu 09 Jan 2025 21:52:56 +0000 ROA not after: Wed 09 Apr 2025 20:52:56 +0000 asID: 397376 IP address blocks: 142.202.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7d:d5:6a:5e:50:98:c6:45:a5:95:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf06829-25a9-43c5-8a21-38599a1fb23f Validity Not Before: Jan 9 21:52:56 2025 GMT Not After : Apr 9 20:52:56 2025 GMT Subject: CN=ffa73a7f-a066-4da5-b83b-e7b3fbe1bcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5d:27:8d:79:17:ec:8a:c8:1c:b0:56:0d:84: 47:ea:f8:30:9d:ef:4e:ee:ba:fd:d4:b3:11:3b:42: 86:23:b0:75:12:2e:cd:a2:6c:6b:db:be:25:09:62: e2:7f:42:17:50:28:56:7c:49:88:0f:56:80:be:9b: 74:8b:af:c5:f5:ca:09:97:93:3c:75:8f:ab:e6:55: 09:cc:14:52:8d:ae:ef:67:c2:a1:e1:26:c1:fb:0e: 86:ac:ca:28:49:af:70:a6:80:da:3c:8a:7f:db:70: dd:14:75:1e:2e:dc:ea:0a:b2:33:fa:2a:c9:47:0d: af:65:e4:0e:86:25:df:c5:92:db:f4:8c:7f:23:c6: 39:fc:a8:2a:dc:4f:ed:64:77:a2:63:48:fd:0e:24: 4c:18:ee:9a:f5:0c:f3:c0:e1:66:ad:38:d5:6d:37: 79:12:6a:da:61:36:d1:9b:53:5c:29:02:56:66:49: ed:cf:24:55:c4:6d:cb:a5:32:5b:60:a5:29:58:cd: b6:25:dc:0d:e4:7f:4c:0f:99:2a:2f:c8:12:f5:da: 83:65:53:a7:cc:12:1f:a9:54:ff:62:0a:dc:02:56: 73:df:62:94:42:df:fa:a2:2a:0e:68:a2:1e:33:e0: d9:67:13:be:1b:f7:2a:5a:e3:fa:57:29:ea:22:3a: 6d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:63:8B:EC:D5:50:FA:9D:95:65:77:1E:C9:8D:42:BC:95:D5:DF:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl X509v3 Authority Key Identifier: keyid:1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer sbgp-ipAddrBlock: critical IPv4: 142.202.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:28:6d:68:16:7e:f8:95:59:50:be:0c:75:dd:7b:e5:bb:b6: 0c:ce:50:55:b1:57:d3:6a:a1:c8:55:b5:4b:a4:03:c7:9e:4f: 69:09:97:6f:74:2c:16:c1:35:e3:cf:b4:02:17:f8:1c:7b:c9: cf:20:06:f2:f2:88:98:6c:30:aa:36:97:34:dc:b7:b6:30:d9: 93:89:16:19:f2:21:c7:d2:f4:07:2a:a9:aa:8f:a8:a7:27:2c: df:fe:a8:c4:90:29:29:ec:85:56:18:26:4c:b6:6f:2a:8c:83: 1d:cf:9d:37:63:4e:69:13:49:57:ec:d0:54:ac:53:68:78:ef: d6:9c:15:d4:1a:21:dd:2a:dd:24:2b:ee:77:2f:4f:7f:25:bb: 71:c1:c2:6e:db:bc:46:1d:d4:7b:12:c0:21:b3:4e:90:d8:a2: bb:7f:1e:b7:5f:48:0d:6d:06:f5:fe:27:22:30:39:04:6e:56: 86:05:4a:16:a3:56:3f:c8:b6:53:b1:72:c6:4e:1a:9d:e8:e9: 67:e5:64:e2:fa:8b:67:e6:04:9a:5b:64:ea:8b:69:05:33:48: ba:fb:5e:0a:ab:8f:43:ee:99:70:c5:0e:03:b3:da:19:9b:96: 71:93:fd:94:47:78:98:93:47:91:e6:f5:95:24:1a:75:15:9a: 76:49:44:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh91WpeUJjGRaWVJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNmMDY4MjktMjVhOS00M2M1LThhMjEtMzg1OTlhMWZi MjNmMB4XDTI1MDEwOTIxNTI1NloXDTI1MDQwOTIwNTI1NlowLzEtMCsGA1UEAxMk ZmZhNzNhN2YtYTA2Ni00ZGE1LWI4M2ItZTdiM2ZiZTFiY2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj10njXkX7IrIHLBWDYRH6vgwne9O7rr91LMR O0KGI7B1Ei7Nomxr274lCWLif0IXUChWfEmID1aAvpt0i6/F9coJl5M8dY+r5lUJ zBRSja7vZ8Kh4SbB+w6GrMooSa9wpoDaPIp/23DdFHUeLtzqCrIz+irJRw2vZeQO hiXfxZLb9Ix/I8Y5/Kgq3E/tZHeiY0j9DiRMGO6a9QzzwOFmrTjVbTd5EmraYTbR m1NcKQJWZkntzyRVxG3LpTJbYKUpWM22JdwN5H9MD5kqL8gS9dqDZVOnzBIfqVT/ YgrcAlZz32KUQt/6oioOaKIeM+DZZxO+G/cqWuP6VynqIjptUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRji+zVUPqdlWV3HsmNQryV1d8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81Y2Yw NjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5OWExZmIyM2YvNjZiNWI4MmEtMzZiMy0z YTk3LWE5ZDctODFlYThkYWQ3ZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWNmMDY4MjktMjVhOS00M2M1LThh MjEtMzg1OTlhMWZiMjNmLzVjZjA2ODI5LTI1YTktNDNjNS04YTIxLTM4NTk5YTFm YjIzZi5jcmwwHwYDVR0jBBgwFoAUH9np46Ez8Srh0OVGuPMg26EbbcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81Y2YwNjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5 OWExZmIyM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsrkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYobWgWfviVWVC+DHXde+W7tgzOUFWxV9NqochVtUukA8eeT2kJl290 LBbBNePPtAIX+Bx7yc8gBvLyiJhsMKo2lzTct7Yw2ZOJFhnyIcfS9AcqqaqPqKcn LN/+qMSQKSnshVYYJky2byqMgx3PnTdjTmkTSVfs0FSsU2h479acFdQaId0q3SQr 7ncvT38lu3HBwm7bvEYd1HsSwCGzTpDYort/HrdfSA1tBvX+JyIwOQRuVoYFShaj Vj/ItlOxcsZOGp3o6WflZOL6i2fmBJpbZOqLaQUzSLr7Xgqrj0PumXDFDgOz2hmb lnGT/ZRHeJiTR5Hm9ZUkGnUVmnZJRDo= -----END CERTIFICATE-----Generated at Wed Feb 5 10:39:18 2025 by rpki-client