$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/dc041d99-8872-3e16-ac74-885f3001767d.roa File: dc041d99-8872-3e16-ac74-885f3001767d.roa (raw, json) Hash identifier: 3gufSk8Y4DpI/bxcQaBAy54XU7ACOOLpM4J0b7jJNDw= Subject key identifier: 27:54:8E:49:E1:C6:C6:26:4F:7F:54:D3:27:36:FA:A4:1A:CB:8F:3C Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584993F9E1C5D01C65708C4EFA00 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/dc041d99-8872-3e16-ac74-885f3001767d.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 46378 IP address blocks: 66.172.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e1:c5:d0:1c:65:70:8c:4e:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=43e20782-f999-45d2-a714-9fbe41e35b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:0f:ff:15:8d:a3:54:ab:e6:95:a8:9c:37: df:5e:bc:2e:af:4f:ae:13:b8:8c:54:1a:ae:3c:ce: 76:72:18:d5:66:ae:16:1a:c9:d6:93:65:af:05:63: 05:84:11:9b:30:8c:46:e8:83:0f:72:ac:1b:53:ff: d5:b6:dd:7d:25:6e:fa:fe:3c:c5:eb:32:f9:46:fc: 70:d5:27:3b:0e:72:4f:1e:5c:5b:79:b6:d7:da:42: db:5d:28:43:67:c8:8b:24:c9:cd:31:1a:80:fa:2b: 88:cb:97:6a:c1:67:43:15:b8:f8:f8:f8:44:d6:68: 80:a8:b7:cc:56:84:bb:fe:8d:a4:8e:e8:82:50:d3: 69:94:72:f8:a3:d2:0f:e7:62:10:69:37:62:5d:71: e7:4c:d5:e5:2b:e6:05:41:78:6e:80:c7:b7:02:4f: 2f:b6:1e:a4:22:1b:38:ac:de:b4:b3:e3:14:3c:d3: e3:c3:cf:0b:71:9e:f9:06:af:7d:e5:d4:95:10:25: 6c:0f:20:f3:b9:9f:a4:ce:ea:30:bd:37:20:aa:21: ad:ce:c3:e3:86:b8:ae:30:91:6b:98:1a:82:19:d7: e6:15:77:a0:51:c3:9c:be:26:bc:4f:a5:4f:c6:fd: 1b:d9:38:2c:c6:e7:c8:c5:f5:34:9d:ca:a2:1d:ff: 91:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:54:8E:49:E1:C6:C6:26:4F:7F:54:D3:27:36:FA:A4:1A:CB:8F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/dc041d99-8872-3e16-ac74-885f3001767d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 66.172.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ee:45:b5:7b:62:55:15:f7:0b:a1:f4:e1:00:1a:e4:53:8c: 62:9d:00:4c:0e:b8:73:48:99:0e:95:3b:90:bc:19:69:ad:4a: 4f:42:ca:ee:28:07:b0:bb:3d:08:d9:72:7c:93:1f:43:13:3d: 32:ce:02:a6:2c:d9:0a:c5:63:13:36:d1:c1:d9:fc:f0:dc:bb: 2a:3a:85:bb:fb:5d:d5:bf:3b:65:d0:02:b6:21:b4:84:78:b4: fd:8a:1e:e6:4d:99:1f:b0:99:3c:d6:6d:c9:64:28:95:b5:c4: 37:b1:44:cc:be:cd:c2:43:13:a7:7e:d2:df:20:ed:80:a3:b0: a8:65:6c:04:f2:3b:ac:7d:af:5b:8b:c8:f6:9a:cd:77:fb:eb: 0c:f4:8c:17:0e:74:03:d5:ef:30:de:66:b1:16:a4:20:57:29: e7:90:b5:24:33:3f:f6:68:78:e1:12:c0:2c:2b:99:1a:68:0c: dd:fe:e2:78:d0:6c:e1:f6:65:b6:80:af:0c:c7:b6:4e:5c:86: b7:df:79:05:62:a6:4f:3c:47:1a:bd:de:eb:ca:44:2e:ce:11: 98:94:56:2b:0c:1f:26:5b:4b:37:44:72:3e:a1:be:98:a9:2d: ec:83:26:a6:69:ec:42:d1:89:6d:bc:5a:9b:0a:9b:10:75:25: ed:1c:18:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eHF0BxlcIxO+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NDNlMjA3ODItZjk5OS00NWQyLWE3MTQtOWZiZTQxZTM1YjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOgP/xWNo1Sr5pWonDffXrwur0+uE7iMVBqu PM52chjVZq4WGsnWk2WvBWMFhBGbMIxG6IMPcqwbU//Vtt19JW76/jzF6zL5Rvxw 1Sc7DnJPHlxbebbX2kLbXShDZ8iLJMnNMRqA+iuIy5dqwWdDFbj4+PhE1miAqLfM VoS7/o2kjuiCUNNplHL4o9IP52IQaTdiXXHnTNXlK+YFQXhugMe3Ak8vth6kIhs4 rN60s+MUPNPjw88LcZ75Bq995dSVECVsDyDzuZ+kzuowvTcgqiGtzsPjhriuMJFr mBqCGdfmFXegUcOcvia8T6VPxv0b2TgsxufIxfU0ncqiHf+ReQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdUjknhxsYmT39U0yc2+qQay488MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvZGMwNDFkOTktODg3Mi0z ZTE2LWFjNzQtODg1ZjMwMDE3NjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQqwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/uRbV7YlUV9wuh9OEAGuRTjGKdAEwOuHNImQ6VO5C8GWmtSk9Cyu4o B7C7PQjZcnyTH0MTPTLOAqYs2QrFYxM20cHZ/PDcuyo6hbv7XdW/O2XQArYhtIR4 tP2KHuZNmR+wmTzWbclkKJW1xDexRMy+zcJDE6d+0t8g7YCjsKhlbATyO6x9r1uL yPaazXf76wz0jBcOdAPV7zDeZrEWpCBXKeeQtSQzP/ZoeOESwCwrmRpoDN3+4njQ bOH2ZbaArwzHtk5chrffeQVipk88Rxq93uvKRC7OEZiUVisMHyZbSzdEcj6hvpip LeyDJqZp7ELRiW28WpsKmxB1Je0cGCY= -----END CERTIFICATE-----Generated at Mon Apr 28 01:00:55 2025 by rpki-client