$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/65022e59-779c-30b5-b75e-3f62e70eb609.roa File: 65022e59-779c-30b5-b75e-3f62e70eb609.roa (raw, json) Hash identifier: ANg65d2ff2syMHa3nHRv1Al9s6IJTJth5+nd0LwXfzo= Subject key identifier: D1:50:88:EF:A3:51:F7:6B:C0:3C:69:02:6A:31:A5:C6:BF:37:77:0A Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584A103547C2636CE9402C32A140 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/65022e59-779c-30b5-b75e-3f62e70eb609.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 394457 IP address blocks: 66.45.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:47:c2:63:6c:e9:40:2c:32:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=58fada18-40b8-4545-ab73-0540f4bd5016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a1:ca:e4:2c:cc:7b:fd:9b:4f:64:c9:cc:39: 48:0b:a2:e6:98:e9:e8:58:df:47:0d:45:26:87:68: 50:ee:48:96:24:35:9a:a7:a5:10:fc:b2:fa:82:40: 8e:97:2a:bc:25:06:a8:35:8a:bd:a4:e9:28:29:62: 80:fe:7d:c3:04:40:04:fa:49:b9:fa:5f:56:8b:b3: 1a:9c:23:c7:cb:ad:22:62:9d:07:ab:0b:0e:3d:72: 78:c7:e3:ab:a6:df:4f:85:cd:73:49:77:18:27:98: 25:9a:6a:23:5a:57:86:a5:ef:f3:2c:9d:c4:3b:91: 30:b1:ed:ca:1a:e6:f7:b9:c9:6c:99:bf:aa:ba:90: 94:12:76:ad:40:01:64:21:7e:30:5a:40:fe:c6:50: a1:42:05:6d:53:5c:43:e9:91:c6:83:c1:ba:f6:ed: 00:2c:94:35:4a:e7:41:10:da:43:32:0c:fd:d1:17: ff:80:11:47:36:c1:1a:ec:a2:3b:c4:8d:e4:a9:0b: db:8c:07:b6:64:cd:34:e1:cd:63:cc:21:e9:01:c4: b2:ef:5d:ca:5e:f5:ab:8e:ba:7a:de:a5:4c:93:dc: c1:eb:3c:bb:92:6a:e7:13:a3:ee:d7:b7:5c:5e:1d: 12:cc:07:52:7f:62:7a:d2:55:82:b0:83:bb:cf:75: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:50:88:EF:A3:51:F7:6B:C0:3C:69:02:6A:31:A5:C6:BF:37:77:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/65022e59-779c-30b5-b75e-3f62e70eb609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 66.45.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:66:7f:ce:ec:fa:45:bb:f6:5d:8c:c8:bf:a3:0c:1e:bd:15: f6:02:c7:00:ef:5c:18:f8:0d:03:46:3b:16:fa:f6:f3:c2:2f: 49:a3:b9:68:07:e0:9e:17:79:62:31:42:8e:d3:6e:8f:4f:30: 60:7c:b9:09:41:ff:0c:8d:a4:88:74:4e:ac:a8:e8:6e:2e:a7: 28:67:22:78:0c:4b:fb:20:00:fc:09:5e:38:e9:f0:ab:77:ee: 03:95:4e:f1:96:9f:52:f3:96:59:15:58:04:f5:54:67:20:7d: 95:d8:2a:07:06:05:42:2a:25:c6:8e:c4:64:38:24:8e:67:69: 0f:ed:ce:f8:dc:3b:90:43:7e:6a:51:a8:eb:d1:26:b6:a0:1c: fd:e4:e8:95:01:b0:f7:17:8f:64:19:14:ff:9e:a9:c5:f8:a4: eb:f5:21:ba:a7:01:4c:e1:6b:cb:48:1e:cc:cc:f7:e1:ce:46: 56:a8:23:6b:2d:33:47:78:92:47:0b:ae:3b:eb:43:b6:52:34: 2c:50:c2:2d:d6:98:cc:e4:31:68:fc:a2:d3:c0:42:d2:6c:94: 64:0d:0f:4d:8a:ab:3f:c2:bb:3a:b6:ad:b7:4e:a3:c8:73:39: b2:39:83:0b:a5:44:41:38:6d:2e:70:8c:24:92:5f:5a:16:7b: 0a:7d:46:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUfCY2zpQCwyoUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk NThmYWRhMTgtNDBiOC00NTQ1LWFiNzMtMDU0MGY0YmQ1MDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqHK5CzMe/2bT2TJzDlIC6LmmOnoWN9HDUUm h2hQ7kiWJDWap6UQ/LL6gkCOlyq8JQaoNYq9pOkoKWKA/n3DBEAE+km5+l9Wi7Ma nCPHy60iYp0HqwsOPXJ4x+Orpt9Phc1zSXcYJ5glmmojWleGpe/zLJ3EO5Ewse3K Gub3uclsmb+qupCUEnatQAFkIX4wWkD+xlChQgVtU1xD6ZHGg8G69u0ALJQ1SudB ENpDMgz90Rf/gBFHNsEa7KI7xI3kqQvbjAe2ZM004c1jzCHpAcSy713KXvWrjrp6 3qVMk9zB6zy7kmrnE6Pu17dcXh0SzAdSf2J60lWCsIO7z3VuVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFQiO+jUfdrwDxpAmoxpca/N3cKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvNjUwMjJlNTktNzc5Yy0z MGI1LWI3NWUtM2Y2MmU3MGViNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQi29MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlmf87s+kW79l2MyL+jDB69FfYCxwDvXBj4DQNGOxb69vPCL0mjuWgH 4J4XeWIxQo7Tbo9PMGB8uQlB/wyNpIh0Tqyo6G4upyhnIngMS/sgAPwJXjjp8Kt3 7gOVTvGWn1LzllkVWAT1VGcgfZXYKgcGBUIqJcaOxGQ4JI5naQ/tzvjcO5BDfmpR qOvRJragHP3k6JUBsPcXj2QZFP+eqcX4pOv1IbqnAUzha8tIHszM9+HORlaoI2st M0d4kkcLrjvrQ7ZSNCxQwi3WmMzkMWj8otPAQtJslGQND02Kqz/Cuzq2rbdOo8hz ObI5gwulREE4bS5wjCSSX1oWewp9Rns= -----END CERTIFICATE-----Generated at Mon Jun 16 12:07:01 2025 by rpki-client