$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa File: faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa (raw, json) Hash identifier: LAow0AL6TfRnQvLagjqvZJt4GaaUvflYhiKOQ5dnNwA= Subject key identifier: EF:E3:8B:FB:70:C2:3B:86:D4:01:91:87:47:FE:9C:C3:66:B1:76:F0 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F43285848E16BE1F418C35C2761FBB780 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 5511 IP address blocks: 66.112.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e1:f4:18:c3:5c:27:61:fb:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=b27a29db-08ee-4195-a896-03a21a78dca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f7:59:f6:74:f3:e9:00:77:bc:66:87:ee:5d: 53:5b:7c:6a:c4:38:32:a0:cf:da:8a:70:e6:58:ae: 40:e3:95:76:72:80:2d:46:a8:40:59:19:b0:5a:02: bd:c3:4c:6b:3e:2d:6c:2c:7d:2c:ef:dc:71:63:86: d3:2c:7c:ae:b6:03:cd:2d:96:b8:55:69:59:2e:f5: 71:07:78:7f:4d:a4:4d:06:2b:8a:f6:92:b2:f1:8d: aa:ed:d2:dc:4c:06:07:92:bc:9d:8b:47:b1:24:be: e4:b7:a2:86:07:da:c7:2c:5d:5a:b2:b9:a6:16:5e: 48:33:67:63:f5:72:83:47:18:62:83:9e:49:3b:d0: a5:bb:2b:bf:5b:bc:23:e3:69:f4:a0:1d:34:82:f7: 77:78:73:f5:99:ec:7b:d7:8e:f5:35:2d:8e:cf:1c: b1:6b:80:19:9f:eb:22:c7:99:af:5b:41:de:24:f4: 9f:11:e8:ca:37:fa:3a:08:c5:6a:3a:c4:f5:db:81: 4b:de:31:9d:06:67:1a:5a:0f:cf:30:a5:bb:9e:e7: 33:8e:6e:fe:70:6e:ff:c7:47:aa:d8:10:65:d7:49: 2a:4d:15:51:6f:6a:e6:15:f7:bb:eb:dd:ba:ad:e6: 09:6c:35:1a:0f:16:1f:07:0c:81:1c:b1:ab:ab:e1: d2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E3:8B:FB:70:C2:3B:86:D4:01:91:87:47:FE:9C:C3:66:B1:76:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:fc:ca:8f:3e:3c:aa:63:d7:d6:12:1e:3a:01:bc:19:6d:f5: 5d:84:ef:88:7e:9a:9a:07:a2:8c:4b:4d:36:a8:7a:b2:58:60: 51:ac:6c:1f:23:bc:70:e1:b7:16:82:4c:85:c3:a4:2f:73:ef: 7c:98:ea:e6:4a:f7:b4:e8:67:42:a0:e7:da:64:5c:6f:4f:2c: ba:b9:47:17:17:e6:bd:e4:2f:38:6f:d3:6e:f2:39:79:0d:ea: 51:22:b7:be:7d:f0:ec:3c:8d:69:60:06:33:de:a6:4d:80:4e: 1b:cf:4a:48:3b:2f:08:66:e8:4f:29:05:6c:6f:ff:9d:04:1b: 59:ec:e5:4c:35:d0:77:f6:a5:96:42:1f:a3:a6:b1:11:75:58: a3:3e:c8:a6:8d:a6:e6:aa:56:2b:2e:63:52:cd:03:cd:e6:25: c0:82:e9:64:a0:fb:7c:08:7a:65:da:18:3b:d8:58:5a:9c:f5: a9:d3:8d:42:3f:7f:31:e2:ec:94:9a:91:c6:14:20:60:6e:46: 84:81:37:79:42:50:fc:60:c3:12:a0:2f:a3:72:22:65:ce:d0: 4d:4c:16:5a:da:2a:4d:0f:ad:37:cf:e6:2c:74:80:98:74:62: e7:56:ab:da:5e:40:c9:82:ef:ae:4d:77:05:1f:84:3a:55:ab: f8:c6:7a:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+H0GMNcJ2H7t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk YjI3YTI5ZGItMDhlZS00MTk1LWE4OTYtMDNhMjFhNzhkY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvdZ9nTz6QB3vGaH7l1TW3xqxDgyoM/ainDm WK5A45V2coAtRqhAWRmwWgK9w0xrPi1sLH0s79xxY4bTLHyutgPNLZa4VWlZLvVx B3h/TaRNBiuK9pKy8Y2q7dLcTAYHkrydi0exJL7kt6KGB9rHLF1asrmmFl5IM2dj 9XKDRxhig55JO9Cluyu/W7wj42n0oB00gvd3eHP1mex71471NS2Ozxyxa4AZn+si x5mvW0HeJPSfEejKN/o6CMVqOsT124FL3jGdBmcaWg/PMKW7nuczjm7+cG7/x0eq 2BBl10kqTRVRb2rmFfe76926reYJbDUaDxYfBwyBHLGrq+HSnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/ji/twwjuG1AGRh0f+nMNmsXbwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZmFhZjk0ODgtNzVhNy0z NjEyLWI1YjYtYTY1YTllNGY2YTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH8yo8+PKpj19YSHjoBvBlt9V2E74h+mpoHooxLTTaoerJYYFGsbB8j vHDhtxaCTIXDpC9z73yY6uZK97ToZ0Kg59pkXG9PLLq5RxcX5r3kLzhv027yOXkN 6lEit7598Ow8jWlgBjPepk2AThvPSkg7Lwhm6E8pBWxv/50EG1ns5Uw10Hf2pZZC H6OmsRF1WKM+yKaNpuaqVisuY1LNA83mJcCC6WSg+3wIemXaGDvYWFqc9anTjUI/ fzHi7JSakcYUIGBuRoSBN3lCUPxgwxKgL6NyImXO0E1MFlraKk0PrTfP5ix0gJh0 YudWq9peQMmC765NdwUfhDpVq/jGerg= -----END CERTIFICATE-----Generated at Sun Apr 27 05:44:23 2025 by rpki-client