$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb7dbaf1-4a08-35ac-838c-d52e1cc18301.roa File: cb7dbaf1-4a08-35ac-838c-d52e1cc18301.roa (raw, json) Hash identifier: f5IAEPZGmyEpKwX9M515RIY/jDWdm/pw3Yaj46N4Bc8= Subject key identifier: 17:EF:B1:ED:DB:FE:01:03:B3:FF:43:34:C0:B4:F1:F0:B7:37:53:A7 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A1EF76260FE262479139D360 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb7dbaf1-4a08-35ac-838c-d52e1cc18301.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 399114 IP address blocks: 66.118.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:76:26:0f:e2:62:47:91:39:d3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=76cfdb08-0d0f-460a-b481-bcf8b354b04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a9:80:0b:76:01:67:16:9d:05:28:ce:bb:8c: 86:ec:06:36:af:24:48:99:a1:14:27:95:c4:57:ac: 12:f5:80:3d:b9:c7:2d:94:48:f5:64:90:4c:62:fa: 36:9d:77:19:9a:1e:c8:7e:0e:50:45:b5:17:23:ca: 60:1e:9d:46:3c:b1:76:70:5c:11:a8:42:d6:35:74: c0:a1:64:57:c3:01:87:8d:01:93:15:ec:b6:e4:f6: 43:ed:63:8b:14:53:1f:e0:da:db:08:9d:b2:45:99: a3:b3:5e:bc:f2:b0:b1:77:34:00:33:0c:ef:50:df: 45:22:9b:1d:55:bb:a1:fe:4f:3c:13:f3:81:12:9b: 8a:db:7f:a2:86:5d:2b:ac:4d:2c:f5:e1:01:d2:57: bd:ee:f4:78:ea:56:54:ad:7e:cd:00:39:e0:e1:34: f1:d3:39:e8:90:41:40:54:99:72:f9:f9:63:8d:9f: b9:20:7f:77:a1:f8:3f:3c:9b:62:dc:16:87:13:da: 8e:16:79:b8:5c:c9:97:27:62:98:da:61:8f:8d:e7: c3:52:4d:33:08:19:b0:1a:88:b1:17:0e:83:f0:64: 4d:f5:7a:61:52:a3:c2:36:36:e4:6a:75:f3:c7:86: 3f:fa:9d:c7:80:29:e9:28:66:2e:35:10:79:8a:77: 9e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EF:B1:ED:DB:FE:01:03:B3:FF:43:34:C0:B4:F1:F0:B7:37:53:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb7dbaf1-4a08-35ac-838c-d52e1cc18301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3c:5b:a0:3c:ae:a0:10:db:8c:5a:41:b6:64:98:87:02:28: 7e:35:c7:3d:4b:7b:ec:59:06:7a:1d:53:45:b9:86:31:f2:73: 52:e0:4a:8a:a7:1b:a2:3a:26:13:3c:c6:78:e4:10:f4:5d:59: de:f1:18:c6:d3:7f:26:cc:ed:81:a0:d3:d9:56:07:37:3d:cd: 4a:6b:e6:29:65:8d:98:ac:bb:f1:84:53:06:ac:58:39:1e:86: 71:2c:40:3c:ec:97:c6:2e:1a:95:97:24:29:7e:3e:50:d6:86: f6:95:52:38:63:59:e4:99:c5:aa:4b:c1:cb:16:9a:d3:ae:2e: 56:fd:8b:79:42:76:c7:c7:2b:3d:be:23:9b:1e:07:32:64:8f: 69:9a:77:7f:26:12:c2:90:17:d9:88:94:67:6c:0d:3d:ab:fe: 19:ed:b4:cf:ba:de:45:ec:ef:6f:b5:ed:84:55:41:28:f7:54: b2:05:01:a0:5a:21:f6:0f:45:d7:25:d5:62:da:fa:b1:d8:2e: 65:7f:8e:9e:2c:dd:6f:d4:52:60:d2:87:1a:79:84:c0:1c:98: 13:3a:d9:b8:fa:8d:c7:a7:1f:0d:2e:1f:8b:97:a8:ae:cf:ba: d8:b2:c6:f0:a4:7a:22:ff:b2:bb:f5:1c:cb:bf:73:90:f9:56: 28:58:21:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73YmD+JiR5E502AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NzZjZmRiMDgtMGQwZi00NjBhLWI0ODEtYmNmOGIzNTRiMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjamAC3YBZxadBSjOu4yG7AY2ryRImaEUJ5XE V6wS9YA9ucctlEj1ZJBMYvo2nXcZmh7Ifg5QRbUXI8pgHp1GPLF2cFwRqELWNXTA oWRXwwGHjQGTFey25PZD7WOLFFMf4NrbCJ2yRZmjs1688rCxdzQAMwzvUN9FIpsd Vbuh/k88E/OBEpuK23+ihl0rrE0s9eEB0le97vR46lZUrX7NADng4TTx0znokEFA VJly+fljjZ+5IH93ofg/PJti3BaHE9qOFnm4XMmXJ2KY2mGPjefDUk0zCBmwGoix Fw6D8GRN9XphUqPCNjbkanXzx4Y/+p3HgCnpKGYuNRB5ineeKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfvse3b/gEDs/9DNMC08fC3N1OnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvY2I3ZGJhZjEtNGEwOC0z NWFjLTgzOGMtZDUyZTFjYzE4MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE48W6A8rqAQ24xaQbZkmIcCKH41xz1Le+xZBnodU0W5hjHyc1LgSoqn G6I6JhM8xnjkEPRdWd7xGMbTfybM7YGg09lWBzc9zUpr5illjZisu/GEUwasWDke hnEsQDzsl8YuGpWXJCl+PlDWhvaVUjhjWeSZxapLwcsWmtOuLlb9i3lCdsfHKz2+ I5seBzJkj2mad38mEsKQF9mIlGdsDT2r/hnttM+63kXs72+17YRVQSj3VLIFAaBa IfYPRdcl1WLa+rHYLmV/jp4s3W/UUmDShxp5hMAcmBM62bj6jcenHw0uH4uXqK7P utiyxvCkeiL/srv1HMu/c5D5VihYIcw= -----END CERTIFICATE-----Generated at Sun Apr 27 11:29:14 2025 by rpki-client