$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a71a6b1c-dd84-33b2-898c-4f69915afa83.roa File: a71a6b1c-dd84-33b2-898c-4f69915afa83.roa (raw, json) Hash identifier: /1TXwwN2Tvb/d/wXZqU0V75H3hqMXXmehvbG5jr/Yyk= Subject key identifier: 8E:4A:7F:D4:4A:82:97:BA:AE:88:D5:1D:B8:CC:09:49:AB:CA:D1:56 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A1EF7601BE45D14EE5B62CC0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a71a6b1c-dd84-33b2-898c-4f69915afa83.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 399114 IP address blocks: 66.118.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:76:01:be:45:d1:4e:e5:b6:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=0ee54a9a-567e-460e-af24-ce127afb390b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:47:c0:aa:d0:1b:06:ff:11:fe:e4:23:dc: 47:3b:6e:ed:70:7c:05:46:a7:e2:6d:81:24:20:c2: 06:27:10:bb:76:29:83:b6:de:6e:c6:da:e6:14:33: bf:26:1a:72:87:f5:44:c4:1c:bb:d0:7e:87:45:88: d8:bf:36:5b:2c:cc:81:34:5f:82:c6:47:34:ff:d0: d7:cb:c9:a9:4a:a6:3c:fb:01:af:e5:d0:07:94:5b: 0d:8c:63:b3:95:98:8e:63:93:7c:fb:07:7b:66:65: 1c:ab:4b:4a:4b:f5:a0:9b:d6:f7:8a:19:cf:b4:bc: 18:b6:da:90:ff:38:35:41:36:22:f2:de:c0:74:e5: 07:4f:76:fd:39:53:e0:ba:97:13:bb:9d:87:e8:9b: 2b:d0:d3:e1:e9:40:cd:bd:d0:0e:2b:bc:ae:1e:60: a5:bd:b6:0b:2d:5f:10:92:ff:3b:52:4e:c7:1c:f3: 0d:be:95:58:9d:df:80:df:c3:a2:0e:64:23:f6:85: 6f:28:ae:1a:89:42:ca:ed:ac:e5:69:0a:ee:c6:98: b4:c7:68:02:41:a5:14:ba:cd:29:77:6f:81:18:cf: ea:ef:67:f9:30:82:52:25:93:e9:d5:d2:31:d3:f9: 91:74:9d:c9:9b:42:0a:6d:ed:2f:c1:ce:bf:6a:c0: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4A:7F:D4:4A:82:97:BA:AE:88:D5:1D:B8:CC:09:49:AB:CA:D1:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a71a6b1c-dd84-33b2-898c-4f69915afa83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:86:3f:c4:2b:db:6c:a8:ee:bf:7e:5a:f5:97:5a:69:c3:6b: 8f:58:4b:b5:b9:0b:26:39:8c:84:34:5c:d9:eb:53:ab:05:d1: aa:8d:68:60:79:fc:4f:62:2a:70:e4:14:07:77:b3:5a:b4:39: ff:b4:0f:3b:74:3d:84:cc:35:09:b7:c6:1c:91:8b:a2:5e:89: 4e:0d:81:de:49:b5:9d:37:3c:a8:7d:a6:02:02:d5:93:32:17: 26:ac:60:cd:4c:c8:a5:77:07:34:89:c8:0f:aa:a9:d1:e3:fa: 87:a4:ff:bb:07:8d:f2:0c:26:86:9d:4f:d1:52:bf:d3:bd:a3: 9d:b5:ba:fe:e2:49:3f:71:4d:f4:34:7f:ac:33:dd:9d:4b:96: 70:75:1f:62:91:21:91:10:c1:ad:f4:85:94:12:63:f8:ea:6a: ad:52:8d:d8:26:64:d0:9b:21:44:4b:e9:13:50:a7:1b:a7:a4: 22:57:bd:58:93:d3:77:a0:0e:8b:89:da:59:ae:94:6c:a4:24: db:7c:3a:4d:f4:ca:01:22:8a:24:74:2f:2a:56:69:4a:83:aa: 4a:e1:d5:13:b6:56:38:6b:fe:bd:e8:ff:0f:f6:1a:3f:eb:e0: b1:60:8c:32:81:d3:0b:3b:c6:17:cb:52:55:41:66:18:c4:2a: fa:59:76:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73YBvkXRTuW2LMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MGVlNTRhOWEtNTY3ZS00NjBlLWFmMjQtY2UxMjdhZmIzOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEpHwKrQGwb/Ef7kI9xHO27tcHwFRqfibYEk IMIGJxC7dimDtt5uxtrmFDO/Jhpyh/VExBy70H6HRYjYvzZbLMyBNF+Cxkc0/9DX y8mpSqY8+wGv5dAHlFsNjGOzlZiOY5N8+wd7ZmUcq0tKS/Wgm9b3ihnPtLwYttqQ /zg1QTYi8t7AdOUHT3b9OVPgupcTu52H6Jsr0NPh6UDNvdAOK7yuHmClvbYLLV8Q kv87Uk7HHPMNvpVYnd+A38OiDmQj9oVvKK4aiULK7azlaQruxpi0x2gCQaUUus0p d2+BGM/q72f5MIJSJZPp1dIx0/mRdJ3Jm0IKbe0vwc6/asAxaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5Kf9RKgpe6rojVHbjMCUmrytFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTcxYTZiMWMtZGQ4NC0z M2IyLTg5OGMtNGY2OTkxNWFmYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2GP8Qr22yo7r9+WvWXWmnDa49YS7W5CyY5jIQ0XNnrU6sF0aqNaGB5 /E9iKnDkFAd3s1q0Of+0Dzt0PYTMNQm3xhyRi6JeiU4Ngd5JtZ03PKh9pgIC1ZMy FyasYM1MyKV3BzSJyA+qqdHj+oek/7sHjfIMJoadT9FSv9O9o521uv7iST9xTfQ0 f6wz3Z1LlnB1H2KRIZEQwa30hZQSY/jqaq1SjdgmZNCbIURL6RNQpxunpCJXvViT 03egDouJ2lmulGykJNt8Ok30ygEiiiR0LypWaUqDqkrh1RO2Vjhr/r3o/w/2Gj/r 4LFgjDKB0ws7xhfLUlVBZhjEKvpZdiY= -----END CERTIFICATE-----Generated at Sun Apr 27 15:53:17 2025 by rpki-client