$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/5fea9aa0-fd40-3207-aee7-a4bd9ead9313.roa File: 5fea9aa0-fd40-3207-aee7-a4bd9ead9313.roa (raw, json) Hash identifier: 8u1KEWUwZU4jRy7dCVYmojBqtVTX1YPQngZ6YuLT120= Subject key identifier: 41:99:04:23:8D:67:1E:72:6D:E4:43:D4:A2:0B:56:D1:55:5C:89:8A Certificate issuer: /CN=1e536701-e40c-420a-abd0-993bf8e0eac8 Certificate serial: 010D0C9F432858491ED6D7732F42886552DF0180 Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/5fea9aa0-fd40-3207-aee7-a4bd9ead9313.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 3356 IP address blocks: 66.180.128.0/22 maxlen: 24 66.180.138.0/23 maxlen: 24 66.180.141.0/24 maxlen: 24 66.180.144.0/24 maxlen: 24 66.180.147.0/24 maxlen: 24 66.180.148.0/23 maxlen: 24 66.180.151.0/24 maxlen: 24 66.180.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d7:73:2f:42:88:65:52:df:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=cdbd7504-b9b5-4e47-901e-24a770c50d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:58:45:d5:f7:95:f8:eb:53:60:56:80:60: e4:6c:9a:be:cf:55:e7:57:6a:ab:75:c8:69:0b:36: 0d:59:c0:b6:14:a1:8d:4f:f3:f6:4d:47:4b:5d:13: 14:6e:ad:50:b9:68:d1:a4:5d:57:8f:a2:34:43:e3: 0b:b6:66:76:39:be:55:40:5b:fa:69:ba:fd:56:05: cf:97:40:ae:6c:4e:f6:2f:b7:b1:4b:92:11:8b:39: 9e:12:5d:5d:9d:9e:0c:59:47:96:98:58:04:85:97: 6f:8a:a9:73:ae:27:e4:e7:01:1f:5e:50:d7:9c:f9: 36:de:f2:44:94:64:d7:36:31:c9:d5:7a:7f:f3:32: da:a0:9c:7e:e6:8f:8e:3b:b2:e9:0b:08:c2:5a:8e: c1:f5:e3:c0:8a:13:9a:47:0e:e0:8a:e3:85:ec:f3: 2e:d2:e3:6c:00:c1:8f:78:57:6f:4c:12:86:3a:2b: cb:46:dc:dd:43:eb:ab:ab:81:27:e4:a6:e4:f3:8c: cd:55:fb:a6:1a:84:03:f4:f7:3f:dc:c3:2c:0c:fb: 2f:78:3a:9e:f1:da:2b:46:33:45:d1:66:84:a2:1c: 38:17:39:fd:bd:88:75:5d:4a:89:c3:8f:77:29:c5: 7e:c9:ae:95:ce:0e:3d:a9:e0:28:37:98:4a:9b:f6: 37:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:99:04:23:8D:67:1E:72:6D:E4:43:D4:A2:0B:56:D1:55:5C:89:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/5fea9aa0-fd40-3207-aee7-a4bd9ead9313.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl X509v3 Authority Key Identifier: keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer sbgp-ipAddrBlock: critical IPv4: 66.180.128.0/22 66.180.138.0/23 66.180.141.0/24 66.180.144.0/24 66.180.147.0-66.180.149.255 66.180.151.0-66.180.153.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:46:52:b2:a6:5f:39:9d:d2:0a:b7:e9:d7:74:7a:be:d4:71: 10:a1:e8:92:a1:6e:52:92:da:f7:dc:e4:0f:79:b3:e0:ba:42: 14:3b:70:55:1a:e7:4f:84:49:2c:c6:eb:57:31:20:84:2e:d7: 72:e8:7d:f6:04:0d:34:57:d8:5f:1e:8b:84:81:35:c5:bf:c8: 16:00:f1:6b:8c:ef:19:18:8a:63:8c:a6:a7:48:4c:0f:08:7d: 50:0a:59:c7:59:56:08:08:45:75:69:c8:d1:b8:93:d7:38:01: cf:e6:fc:7b:91:ca:8d:3c:14:a2:2d:0d:a0:7b:54:db:c4:20: 8c:f8:18:59:3f:7c:76:93:ba:87:6a:4a:e9:b1:6a:3f:cc:7b: fb:06:e5:9f:05:86:25:c5:02:12:80:23:32:13:c4:8a:b0:6a: d2:cc:52:54:da:7e:61:06:13:62:c5:5a:a5:32:10:45:51:43: ed:f3:5b:d1:99:e1:90:9c:4d:e1:2c:53:36:99:1b:03:97:04: 1b:1c:eb:c4:1b:84:45:a3:a1:ee:a8:d9:1f:3f:a3:36:3d:4e: 3e:47:04:f1:7a:30:6a:a0:11:bf:81:dd:06:94:51:19:9e:70: b8:5d:7d:bd:d2:31:ba:75:cb:3e:4a:cf:eb:47:28:4f:70:e5: 73:37:4f:a2 -----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgIUAQ0Mn0MoWEke1tdzL0KIZVLfAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU1MzY3MDEtZTQwYy00MjBhLWFiZDAtOTkzYmY4ZTBl YWM4MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk Y2RiZDc1MDQtYjliNS00ZTQ3LTkwMWUtMjRhNzcwYzUwZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJhYRdX3lfjrU2BWgGDkbJq+z1XnV2qrdchp CzYNWcC2FKGNT/P2TUdLXRMUbq1QuWjRpF1Xj6I0Q+MLtmZ2Ob5VQFv6abr9VgXP l0CubE72L7exS5IRizmeEl1dnZ4MWUeWmFgEhZdviqlzrifk5wEfXlDXnPk23vJE lGTXNjHJ1Xp/8zLaoJx+5o+OO7LpCwjCWo7B9ePAihOaRw7giuOF7PMu0uNsAMGP eFdvTBKGOivLRtzdQ+urq4En5Kbk84zNVfumGoQD9Pc/3MMsDPsveDqe8dorRjNF 0WaEohw4Fzn9vYh1XUqJw493KcV+ya6Vzg49qeAoN5hKm/Y3YwIDAQABo4IDgzCC A38wHQYDVR0OBBYEFEGZBCONZx5ybeRD1KILVtFVXImKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTUz NjcwMS1lNDBjLTQyMGEtYWJkMC05OTNiZjhlMGVhYzgvNWZlYTlhYTAtZmQ0MC0z MjA3LWFlZTctYTRiZDllYWQ5MzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU1MzY3MDEtZTQwYy00MjBhLWFi ZDAtOTkzYmY4ZTBlYWM4LzFlNTM2NzAxLWU0MGMtNDIwYS1hYmQwLTk5M2JmOGUw ZWFjOC5jcmwwHwYDVR0jBBgwFoAUTOj0knFEJlIJQflQP4AuKyHOilswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTUzNjcwMS1lNDBjLTQyMGEtYWJkMC05OTNi ZjhlMGVhYzguY2VyME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQCQrSAAwQB QrSKAwQAQrSNAwQAQrSQMAwDBABCtJMDBAFCtJQwDAMEAEK0lwMEAUK0mDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQDeRlKypl85ndIKt+nXdHq+1HEQoeiSoW5Sktr33OQPebPgukIUO3BVGudP hEksxutXMSCELtdy6H32BA00V9hfHouEgTXFv8gWAPFrjO8ZGIpjjKanSEwPCH1Q ClnHWVYICEV1acjRuJPXOAHP5vx7kcqNPBSiLQ2ge1TbxCCM+BhZP3x2k7qHakrp sWo/zHv7BuWfBYYlxQISgCMyE8SKsGrSzFJU2n5hBhNixVqlMhBFUUPt81vRmeGQ nE3hLFM2mRsDlwQbHOvEG4RFo6HuqNkfP6M2PU4+RwTxejBqoBG/gd0GlFEZnnC4 XX290jG6dcs+Ss/rRyhPcOVzN0+i -----END CERTIFICATE-----Generated at Sat Apr 26 19:52:37 2025 by rpki-client