$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/453c48aa-717a-3f97-94e0-a121f55d388a.roa File: 453c48aa-717a-3f97-94e0-a121f55d388a.roa (raw, json) Hash identifier: 8m32AsyN+Ca7she+GFyipC2dEVOcWGdEoKXFLoleK5A= Subject key identifier: 5F:33:3C:9A:37:0E:E4:5E:75:2A:5C:34:0B:5D:C5:13:C5:E9:81:A2 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D5BB154C866BD0EAE480 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/453c48aa-717a-3f97-94e0-a121f55d388a.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 66.118.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d5:bb:15:4c:86:6b:d0:ea:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=da775d21-db0e-4ee7-82be-9974459832cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:10:10:f9:83:59:da:b9:8e:4a:7c:f6:5a:fd: 0b:ad:68:d4:17:d3:ee:32:93:aa:81:54:d1:7a:39: 30:2e:8f:76:ac:8b:b6:63:02:21:38:a1:65:7d:c7: e5:5f:28:28:07:e2:cf:d5:2f:f1:78:44:c1:dd:21: 77:ed:41:6e:1b:5f:8e:2c:e5:21:71:ba:cc:8b:01: 54:12:30:d8:b7:ab:38:8b:60:21:0d:01:ea:94:24: 4e:a6:b1:ea:bb:7f:63:8a:83:b4:54:61:80:72:e7: 3d:46:b5:0a:de:eb:a1:54:a4:66:ef:07:77:bd:47: 22:8f:69:9f:a6:7f:a9:ee:a0:fe:ef:0a:84:77:91: d3:20:7a:0b:b4:da:5b:bb:22:c5:fb:77:ce:41:df: bd:e0:d9:1a:89:81:cd:1d:b9:2a:16:84:b1:c5:4c: 1e:2a:cd:78:63:e3:31:89:56:59:67:20:9d:5f:e3: 71:49:0c:7a:25:74:1c:91:25:d8:0b:13:c4:74:4b: 70:32:c6:2f:a9:56:93:7a:85:36:2b:d2:ab:90:cf: cc:60:91:c6:5c:31:5d:6f:39:02:32:6b:0b:f4:ad: 99:a6:d1:97:90:85:17:62:50:bc:12:c0:82:0a:ee: fb:23:18:78:9d:d5:4d:49:89:7a:8e:9c:d7:2f:c4: 31:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:33:3C:9A:37:0E:E4:5E:75:2A:5C:34:0B:5D:C5:13:C5:E9:81:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/453c48aa-717a-3f97-94e0-a121f55d388a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:20:36:63:e6:46:eb:7d:22:f3:3d:1a:e7:92:eb:a1:4e:85: db:32:51:e8:3b:c2:04:a8:31:d3:a3:31:d3:b9:0a:64:5c:77: 11:56:84:26:2b:4e:fc:2d:8f:77:3f:8b:7a:ad:ba:a1:b8:6c: 3c:29:40:1f:93:5c:b7:3d:1e:a6:f8:73:af:cf:8e:5d:a9:d9: 72:5a:f6:ee:fd:9c:24:f4:83:9b:2e:d7:95:3d:52:63:4c:bd: 74:2b:75:39:9e:2b:18:87:c7:6f:3f:3e:1e:cc:b2:04:44:4c: b0:4d:e7:ae:0c:8a:58:a0:72:0b:57:e7:7c:3c:8c:97:70:98: fe:bb:0a:b9:82:7a:93:71:e6:c3:b9:94:63:62:46:58:06:ab: fa:54:bd:19:3b:4e:56:d7:a6:b9:07:49:17:8f:c9:54:7f:1f: 97:03:d6:e3:65:8a:9e:4e:3f:96:41:52:0f:82:68:72:a0:14: 7f:c5:6f:85:7b:bc:1f:fc:fd:c5:de:b9:aa:1f:25:98:a7:1d: 01:31:63:80:87:77:88:ce:95:9e:12:ec:dc:b8:1c:33:d3:1c: 57:e7:b6:2b:8b:a1:55:e5:c7:4e:7f:ff:1b:f2:c1:7f:f4:20: 0b:6c:cf:aa:f2:42:22:bf:68:6c:38:1f:0c:50:04:45:fb:68: 9f:24:fe:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidW7FUyGa9Dq5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZGE3NzVkMjEtZGIwZS00ZWU3LTgyYmUtOTk3NDQ1OTgzMmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhAQ+YNZ2rmOSnz2Wv0LrWjUF9PuMpOqgVTR ejkwLo92rIu2YwIhOKFlfcflXygoB+LP1S/xeETB3SF37UFuG1+OLOUhcbrMiwFU EjDYt6s4i2AhDQHqlCROprHqu39jioO0VGGAcuc9RrUK3uuhVKRm7wd3vUcij2mf pn+p7qD+7wqEd5HTIHoLtNpbuyLF+3fOQd+94NkaiYHNHbkqFoSxxUweKs14Y+Mx iVZZZyCdX+NxSQx6JXQckSXYCxPEdEtwMsYvqVaTeoU2K9KrkM/MYJHGXDFdbzkC MmsL9K2ZptGXkIUXYlC8EsCCCu77Ixh4ndVNSYl6jpzXL8Qx4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8zPJo3DuRedSpcNAtdxRPF6YGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNDUzYzQ4YWEtNzE3YS0z Zjk3LTk0ZTAtYTEyMWY1NWQzODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUgNmPmRut9IvM9GueS66FOhdsyUeg7wgSoMdOjMdO5CmRcdxFWhCYr Tvwtj3c/i3qtuqG4bDwpQB+TXLc9Hqb4c6/Pjl2p2XJa9u79nCT0g5su15U9UmNM vXQrdTmeKxiHx28/Ph7MsgRETLBN564MiligcgtX53w8jJdwmP67CrmCepNx5sO5 lGNiRlgGq/pUvRk7TlbXprkHSRePyVR/H5cD1uNlip5OP5ZBUg+CaHKgFH/Fb4V7 vB/8/cXeuaofJZinHQExY4CHd4jOlZ4S7Ny4HDPTHFfntiuLoVXlx05//xvywX/0 IAtsz6ryQiK/aGw4HwxQBEX7aJ8k/oY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:17:46 2025 by rpki-client