$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/ed5b7b8e-36ef-3b40-9002-b997253ceb2f.roa File: ed5b7b8e-36ef-3b40-9002-b997253ceb2f.roa (raw, json) Hash identifier: Rx+F685DZ3x/4Le04gWQLuCeqK5EOJjHRQ/cmOSRAe0= Subject key identifier: 85:2C:22:F8:6A:CA:54:E2:11:BD:F0:22:32:00:6E:DA:CD:0B:1C:3F Certificate issuer: /CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea Certificate serial: 010D0C9F432858498769BA6BB1088A611125A240 Authority key identifier: 54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/ed5b7b8e-36ef-3b40-9002-b997253ceb2f.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 5650 IP address blocks: 66.128.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ba:6b:b1:08:8a:61:11:25:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=390ff809-678b-4e2a-ba93-d194e07c21c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:30:aa:a9:40:17:25:7d:5f:6c:f6:9d:e8:51: 7b:df:38:23:27:3f:25:75:4e:ac:8c:d7:88:97:6b: 1d:81:3d:e0:79:4c:b2:6f:29:69:b6:83:cb:64:b6: 63:98:b7:8b:d0:17:38:0c:df:a3:97:62:73:86:56: 27:b4:b2:a6:18:e3:03:a3:77:9d:e4:c6:f0:b7:22: bd:6a:41:d6:da:cc:78:37:45:b9:b1:30:e3:f8:de: 10:94:15:a0:6a:41:fd:dd:61:ea:d8:1a:02:a4:ff: 22:12:68:80:8e:09:c7:94:0a:db:03:9e:79:96:c2: ed:e1:16:f9:e1:5b:ca:ec:f3:9e:fa:dd:08:68:30: b8:73:2f:10:bd:72:d6:9d:21:a5:33:ad:6d:5b:9e: 15:e5:10:fd:69:8d:b0:3a:5f:b1:a4:4a:c9:43:86: b9:31:b5:34:3c:45:ac:72:3e:b2:69:c2:8c:72:fb: fa:69:e2:3b:ee:7f:f2:a8:0e:d0:1c:ea:49:dd:9f: 4b:d9:53:74:db:c5:88:47:89:5b:c4:37:89:da:30: 7a:6a:1f:b5:7c:25:96:fe:28:41:4f:70:83:1f:8e: 25:14:3e:59:48:ba:5b:5e:a0:df:04:ed:48:62:0b: 48:f1:53:06:2f:b4:9c:e9:d6:24:1c:5c:02:df:64: 96:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2C:22:F8:6A:CA:54:E2:11:BD:F0:22:32:00:6E:DA:CD:0B:1C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/ed5b7b8e-36ef-3b40-9002-b997253ceb2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl X509v3 Authority Key Identifier: keyid:54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer sbgp-ipAddrBlock: critical IPv4: 66.128.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:51:4a:e9:e4:04:4c:9b:f8:69:62:be:e9:e6:ec:28:e6:d1: 33:6b:6e:14:57:92:3d:10:e2:c6:f4:4d:d3:53:a2:00:dd:65: 72:b9:2f:90:d3:ab:b4:f0:ac:a9:76:a7:01:af:06:f3:9b:9f: b3:3a:df:79:1c:61:14:52:60:9c:c4:32:9d:1c:ea:0b:4e:7d: 3d:4b:9f:71:8f:5f:4d:08:e9:5a:bc:8e:d0:ae:a4:f5:7a:b2: c4:60:db:8f:07:92:e1:be:31:ea:73:db:ff:12:bb:2f:d7:e9: 06:db:f4:be:3d:fb:7f:f9:c8:36:91:2f:35:6a:03:6f:19:5f: 52:c3:61:88:c3:f6:23:17:de:18:45:57:f3:75:51:69:f0:f6: 79:6f:d4:a6:cf:c7:c3:90:6c:fd:1d:c7:31:89:a5:7c:0c:9e: b4:d7:2e:a4:40:d7:99:54:17:40:47:e4:8d:d1:a5:19:8f:a5: 18:7f:17:a1:55:e8:df:06:27:03:46:e4:ff:55:b7:eb:57:0e: 3e:56:a2:c7:ba:b5:43:8a:c1:bf:1e:eb:7d:90:af:2a:a5:e1: 77:d6:9c:42:d8:58:af:5d:9b:f9:5e:29:87:d4:99:31:a4:0b: d0:51:11:b3:07:7b:72:1c:28:e2:ac:47:58:31:79:f4:66:7b: 76:bf:36:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabprsQiKYRElokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJhMzkyOTMtNWRkYi00Y2MwLTgzNTMtMmIyNThlMmU3 OGVhMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MzkwZmY4MDktNjc4Yi00ZTJhLWJhOTMtZDE5NGUwN2MyMWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjCqqUAXJX1fbPad6FF73zgjJz8ldU6sjNeI l2sdgT3geUyybylptoPLZLZjmLeL0Bc4DN+jl2JzhlYntLKmGOMDo3ed5MbwtyK9 akHW2sx4N0W5sTDj+N4QlBWgakH93WHq2BoCpP8iEmiAjgnHlArbA555lsLt4Rb5 4VvK7POe+t0IaDC4cy8QvXLWnSGlM61tW54V5RD9aY2wOl+xpErJQ4a5MbU0PEWs cj6yacKMcvv6aeI77n/yqA7QHOpJ3Z9L2VN028WIR4lbxDeJ2jB6ah+1fCWW/ihB T3CDH44lFD5ZSLpbXqDfBO1IYgtI8VMGL7Sc6dYkHFwC32SWYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUsIvhqylTiEb3wIjIAbtrNCxw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MmEz OTI5My01ZGRiLTRjYzAtODM1My0yYjI1OGUyZTc4ZWEvZWQ1YjdiOGUtMzZlZi0z YjQwLTkwMDItYjk5NzI1M2NlYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzJhMzkyOTMtNWRkYi00Y2MwLTgz NTMtMmIyNThlMmU3OGVhLzcyYTM5MjkzLTVkZGItNGNjMC04MzUzLTJiMjU4ZTJl NzhlYS5jcmwwHwYDVR0jBBgwFoAUVOojygUguMpCgH0pZ/g+ofnu28MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MmEzOTI5My01ZGRiLTRjYzAtODM1My0yYjI1 OGUyZTc4ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQoDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJRSunkBEyb+Glivunm7Cjm0TNrbhRXkj0Q4sb0TdNTogDdZXK5L5DT q7TwrKl2pwGvBvObn7M633kcYRRSYJzEMp0c6gtOfT1Ln3GPX00I6Vq8jtCupPV6 ssRg248HkuG+Mepz2/8Suy/X6Qbb9L49+3/5yDaRLzVqA28ZX1LDYYjD9iMX3hhF V/N1UWnw9nlv1KbPx8OQbP0dxzGJpXwMnrTXLqRA15lUF0BH5I3RpRmPpRh/F6FV 6N8GJwNG5P9Vt+tXDj5Wose6tUOKwb8e632Qryql4XfWnELYWK9dm/leKYfUmTGk C9BREbMHe3IcKOKsR1gxefRme3a/NnA= -----END CERTIFICATE-----Generated at Sat Apr 26 22:51:50 2025 by rpki-client