$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa File: 209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa (raw, json) Hash identifier: jb9ETLmEhtmYrSjO+bfnyIYibDJv/mhIHNcNSAfWfZE= Subject key identifier: 6B:B6:D6:05:A7:E3:05:19:A7:8F:10:0F:56:02:33:3A:C9:0B:A2:53 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D3E2ED7AFB2E2A8C4600 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 931 IP address blocks: 66.118.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d3:e2:ed:7a:fb:2e:2a:8c:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=81ac3b5a-349e-42be-86a0-a3e38ab2e5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ab:70:8f:69:1b:90:f5:34:ec:9d:b5:3a:5d: a4:99:87:8c:df:aa:a7:1c:b9:01:9f:7e:7e:c7:6e: 6d:68:03:0e:29:12:b2:31:e5:4e:ad:01:92:5f:20: a3:c3:5f:a5:d3:b9:d5:86:48:77:b8:dd:3f:8d:b9: ca:f7:6f:a9:56:ac:6a:d5:fd:f3:31:b2:34:87:a8: fa:b6:ca:f1:dc:28:a7:03:2f:d5:b9:f4:14:26:32: 36:51:8d:59:36:c6:26:12:a6:d2:f2:da:6c:3c:bf: 97:a6:3f:d5:02:48:30:f2:a2:61:7c:13:c8:0a:8a: 91:45:c5:f3:3e:53:2b:8e:f3:0e:cd:09:ca:b6:12: 16:cd:69:bc:16:34:8a:5a:86:44:ab:0a:f2:0a:2c: 86:30:ac:fe:cd:24:2c:47:3b:73:fd:f1:f8:25:71: ff:4a:f8:f2:3d:60:2e:77:dc:a3:85:30:e2:3e:76: 85:80:5d:43:a5:10:aa:78:1b:6f:cb:17:b2:bb:03: 9f:1c:f5:8b:df:45:b9:d4:01:bc:f4:24:2d:17:c3: db:e5:c7:af:c3:0b:27:7e:6b:8c:b1:6f:46:f5:0c: 17:62:2b:80:d4:af:fc:06:f6:49:c1:27:4e:14:e8: 1e:31:1d:6f:ae:ed:05:f2:72:cf:d3:c0:f5:57:6a: 31:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B6:D6:05:A7:E3:05:19:A7:8F:10:0F:56:02:33:3A:C9:0B:A2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c7:b7:16:bb:82:e7:73:eb:5b:ae:3b:4e:c5:98:cb:c6:7e: ff:b7:89:32:ac:54:2b:d9:1c:b4:0e:89:90:94:67:be:4e:a1: bb:e4:60:c1:b0:7f:61:03:90:27:df:14:5f:f2:0b:fc:28:6c: bf:a4:d4:99:e2:2b:7a:94:06:3b:da:f6:c4:94:e6:5b:95:fc: aa:3f:cc:f5:c2:88:99:51:d0:9a:89:77:23:4b:aa:45:fb:0c: fa:44:32:a6:a6:3b:56:c0:fa:58:db:6f:50:0a:36:6a:79:55: c0:3c:6e:40:dd:c4:6e:27:8a:ea:ce:e4:90:e9:44:d4:1d:4b: 63:3d:70:74:83:ca:e1:0b:36:79:45:2a:10:e8:f9:52:d7:20: 80:1e:33:63:4b:88:fa:14:94:75:7c:9e:5a:61:ab:1b:77:d7: 31:6e:da:1c:50:10:62:2b:41:5f:d8:8c:c6:d6:65:39:95:38: 60:03:e9:6a:04:68:9e:b5:93:52:eb:c8:00:b6:fb:8b:6d:f3: 6e:8d:85:a7:dd:6d:ba:ff:c9:ec:9f:cf:77:21:9b:d1:df:71: ce:23:4f:35:af:12:85:33:0c:a0:2c:3d:d1:b7:11:88:05:f5: 21:16:06:84:16:e1:a3:c9:4d:b5:5b:22:23:c9:af:9d:98:0a: fb:aa:50:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidPi7Xr7LiqMRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ODFhYzNiNWEtMzQ5ZS00MmJlLTg2YTAtYTNlMzhhYjJlNWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16twj2kbkPU07J21Ol2kmYeM36qnHLkBn35+ x25taAMOKRKyMeVOrQGSXyCjw1+l07nVhkh3uN0/jbnK92+pVqxq1f3zMbI0h6j6 tsrx3CinAy/VufQUJjI2UY1ZNsYmEqbS8tpsPL+Xpj/VAkgw8qJhfBPICoqRRcXz PlMrjvMOzQnKthIWzWm8FjSKWoZEqwryCiyGMKz+zSQsRztz/fH4JXH/SvjyPWAu d9yjhTDiPnaFgF1DpRCqeBtvyxeyuwOfHPWL30W51AG89CQtF8Pb5cevwwsnfmuM sW9G9QwXYiuA1K/8BvZJwSdOFOgeMR1vru0F8nLP08D1V2oxvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGu21gWn4wUZp48QD1YCMzrJC6JTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMjA5ZTUyYTktN2FkMC0z ZDNkLThlYTktOWVjOTZjNjkwOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDHtxa7gudz61uuO07FmMvGfv+3iTKsVCvZHLQOiZCUZ75OobvkYMGw f2EDkCffFF/yC/wobL+k1JniK3qUBjva9sSU5luV/Ko/zPXCiJlR0JqJdyNLqkX7 DPpEMqamO1bA+ljbb1AKNmp5VcA8bkDdxG4niurO5JDpRNQdS2M9cHSDyuELNnlF KhDo+VLXIIAeM2NLiPoUlHV8nlphqxt31zFu2hxQEGIrQV/YjMbWZTmVOGAD6WoE aJ61k1LryAC2+4tt826Nhafdbbr/yeyfz3chm9Hfcc4jTzWvEoUzDKAsPdG3EYgF 9SEWBoQW4aPJTbVbIiPJr52YCvuqUAs= -----END CERTIFICATE-----Generated at Sun Apr 27 02:28:40 2025 by rpki-client