$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa File: a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa (raw, json) Hash identifier: h6S+dXLKneafm+kZc8+krcnhsy2ogb5zh1tp75S7mLM= Subject key identifier: 70:97:14:4D:9C:DA:29:AB:80:44:68:7D:B9:BE:DB:47:0D:FF:47:C5 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D5CCF72D400787137300 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 66.118.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d5:cc:f7:2d:40:07:87:13:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=103a3b19-33c6-44cb-ab9e-e23dbcd9827b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:be:43:49:f7:79:ee:3f:b8:90:d2:73:7d:d6: 17:df:0d:ab:04:de:d4:ae:cd:c4:de:25:a4:6d:e4: 6f:04:bd:15:fd:35:70:25:a9:3a:30:c6:d9:75:d6: 71:76:5d:5c:b7:a2:5a:af:18:57:c4:c8:e6:f9:24: 75:9d:b4:e9:06:74:1b:df:3d:8a:99:dc:e9:03:ab: 5f:73:b8:4a:4d:86:21:44:81:19:3c:72:d8:f2:68: 2d:ab:7e:a9:ce:a2:7e:a5:1b:65:30:fd:61:4c:c0: 75:54:29:c4:d3:61:34:87:fa:cd:14:a4:13:97:35: 09:5b:43:dd:78:87:db:fd:bf:cd:68:ab:b6:83:8b: c7:bf:90:f2:51:7d:8c:57:ab:1f:15:47:a9:1c:54: 36:bb:86:16:ce:3a:89:ef:50:6a:bd:98:c9:44:6d: f1:ba:aa:2f:9a:53:c3:75:d5:0e:76:29:92:b0:74: 70:16:d2:e0:95:24:35:bf:c7:a9:da:6e:70:5d:c9: 6c:36:9f:74:72:02:41:ed:22:e7:ce:ae:d2:8c:c3: 53:33:22:5b:95:6d:4c:8f:3b:be:28:85:88:f3:80: 9e:bd:dd:8e:67:39:88:5e:31:cc:9b:03:b7:6b:65: ee:3f:f9:5d:5b:de:78:1f:71:71:9a:d7:e8:40:12: 78:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:97:14:4D:9C:DA:29:AB:80:44:68:7D:B9:BE:DB:47:0D:FF:47:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a00e5d0a-8d5b-37f5-9759-b2e9a8987923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:77:aa:da:8e:0d:90:bd:cb:2d:32:3b:9e:21:ed:3a:18:78: 4f:c8:e3:8b:d3:2c:03:81:08:3e:3e:44:91:31:8d:74:92:40: 33:ea:c0:fc:1a:61:2a:5e:1c:59:bf:e0:ee:18:9f:eb:fc:dd: c6:3f:cf:59:49:51:93:c7:89:3a:e8:6a:45:9f:ad:d5:c4:86: e8:9d:c9:0f:43:b6:01:10:83:97:ee:64:5e:64:ea:dd:90:6a: 1c:9a:8f:22:3d:1d:50:3c:7e:2d:68:e8:22:c0:5c:f7:95:bc: 50:60:84:31:5c:3b:67:02:0d:12:c6:5e:3a:0e:32:88:6c:24: 3b:5d:e3:9d:4c:b1:d6:e1:d3:b2:34:75:7e:83:5f:41:66:f0: 35:1a:c8:34:fd:17:da:10:a3:cb:65:66:f0:5c:d0:3e:89:11: 21:36:c5:90:24:43:69:65:91:89:5f:67:4b:2f:e2:96:33:22: 6a:be:03:72:da:ee:a8:6c:b1:bf:a1:9d:de:0c:f0:8d:fb:77: 26:35:9b:d8:c5:ba:b4:22:39:27:2b:d9:4f:fd:f9:b6:3f:39: 3b:9a:6c:cc:60:9e:b7:9d:35:02:dc:b9:42:95:c2:78:2d:8a: 61:de:8c:a0:0c:da:f5:59:7a:ed:2d:c7:78:53:de:0e:cf:3b: af:be:87:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidXM9y1AB4cTcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MTAzYTNiMTktMzNjNi00NGNiLWFiOWUtZTIzZGJjZDk4MjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb5DSfd57j+4kNJzfdYX3w2rBN7Urs3E3iWk beRvBL0V/TVwJak6MMbZddZxdl1ct6JarxhXxMjm+SR1nbTpBnQb3z2KmdzpA6tf c7hKTYYhRIEZPHLY8mgtq36pzqJ+pRtlMP1hTMB1VCnE02E0h/rNFKQTlzUJW0Pd eIfb/b/NaKu2g4vHv5DyUX2MV6sfFUepHFQ2u4YWzjqJ71BqvZjJRG3xuqovmlPD ddUOdimSsHRwFtLglSQ1v8ep2m5wXclsNp90cgJB7SLnzq7SjMNTMyJblW1Mjzu+ KIWI84Cevd2OZzmIXjHMmwO3a2XuP/ldW954H3FxmtfoQBJ4BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCXFE2c2imrgERofbm+20cN/0fFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTAwZTVkMGEtOGQ1Yi0z N2Y1LTk3NTktYjJlOWE4OTg3OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp3qtqODZC9yy0yO54h7ToYeE/I44vTLAOBCD4+RJExjXSSQDPqwPwa YSpeHFm/4O4Yn+v83cY/z1lJUZPHiTroakWfrdXEhuidyQ9DtgEQg5fuZF5k6t2Q ahyajyI9HVA8fi1o6CLAXPeVvFBghDFcO2cCDRLGXjoOMohsJDtd451Msdbh07I0 dX6DX0Fm8DUayDT9F9oQo8tlZvBc0D6JESE2xZAkQ2llkYlfZ0sv4pYzImq+A3La 7qhssb+hnd4M8I37dyY1m9jFurQiOScr2U/9+bY/OTuabMxgnredNQLcuUKVwngt imHejKAM2vVZeu0tx3hT3g7PO6++h5s= -----END CERTIFICATE-----Generated at Sat Apr 26 16:13:42 2025 by rpki-client