$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/fee4cbf6-6a2b-3327-8a8a-f819c34b6e2f.roa File: fee4cbf6-6a2b-3327-8a8a-f819c34b6e2f.roa (raw, json) Hash identifier: z/JdIvrGROKFeCYy6b8zpsRkjy6vWPfUPQpUvyylCtU= Subject key identifier: C0:4C:62:E1:30:58:0A:BE:D9:C2:D8:52:45:5D:09:C3:3B:F4:7B:F4 Certificate issuer: /CN=ec9034a3-96a4-4b09-a2c9-7f75c1740d36 Certificate serial: 010D0C9F43285849955F241548B96C995E38E880 Authority key identifier: D7:BE:84:9F:39:54:D9:00:21:0C:4F:C0:FD:CA:24:A1:7D:6E:47:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/fee4cbf6-6a2b-3327-8a8a-f819c34b6e2f.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 27235 IP address blocks: 66.220.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/ec9034a3-96a4-4b09-a2c9-7f75c1740d36.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/ec9034a3-96a4-4b09-a2c9-7f75c1740d36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:24:15:48:b9:6c:99:5e:38:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec9034a3-96a4-4b09-a2c9-7f75c1740d36 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=451c702e-f950-4fe8-a73d-d1de4477e89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:58:a4:1e:a0:58:69:70:54:98:e5:41:7c: f5:70:95:c8:98:99:50:aa:92:a3:d5:4a:87:36:9a: 2c:44:cb:f1:ef:ef:4c:2f:b4:8b:bb:9b:6f:8b:3f: 49:fe:aa:05:a0:91:76:3f:b3:1f:b8:3d:a8:19:d5: a1:bd:71:76:cb:86:05:de:69:eb:0c:ad:21:82:e8: f2:e3:7b:3d:28:dd:cc:ef:76:1f:5d:3e:53:d9:7a: 93:18:e7:3c:64:97:8c:9e:79:02:83:63:5c:08:f4: 52:85:87:ee:85:53:7a:e5:11:21:e9:72:4a:78:5a: 86:96:1b:89:38:17:e7:2f:a3:5a:9c:32:d7:f3:a3: d8:5d:92:96:ca:87:ae:e1:e2:94:96:cd:c4:37:45: f5:f5:d9:29:53:eb:75:e1:67:f1:91:a7:d9:1a:68: 4c:92:58:14:84:67:e1:51:23:f2:47:04:3b:12:d6: 24:80:9d:48:35:91:29:a5:1f:76:17:2a:8a:fd:8b: 5e:45:7e:68:6e:aa:0b:bd:e1:cd:91:7e:a5:a1:54: 00:39:b6:42:c4:8e:87:77:ae:69:85:51:70:28:3e: a3:b3:11:42:eb:f8:cd:87:a2:30:48:0d:ee:b7:9e: 9b:d6:de:5b:4f:bc:cb:33:a4:3b:47:7b:c2:00:a1: 6a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4C:62:E1:30:58:0A:BE:D9:C2:D8:52:45:5D:09:C3:3B:F4:7B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/fee4cbf6-6a2b-3327-8a8a-f819c34b6e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/ec9034a3-96a4-4b09-a2c9-7f75c1740d36.crl X509v3 Authority Key Identifier: keyid:D7:BE:84:9F:39:54:D9:00:21:0C:4F:C0:FD:CA:24:A1:7D:6E:47:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36.cer sbgp-ipAddrBlock: critical IPv4: 66.220.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e8:a2:99:75:0f:55:dc:90:75:f8:8a:4c:0e:77:f4:8e:f5: 0a:69:5f:b7:60:85:de:99:f9:e1:4c:9f:9d:27:96:79:f0:d1: 6e:60:e3:ee:88:09:30:f3:76:2f:58:34:f2:85:92:55:81:63: fc:6f:1c:4a:e2:d5:59:8e:37:be:93:d8:95:81:c1:ff:8f:ed: 30:02:34:92:da:c9:71:9e:db:40:cc:e9:de:94:04:1f:29:31: d8:de:55:0f:bc:29:77:5c:77:f9:9c:4f:a9:9a:6d:c7:ea:ef: 7d:a9:57:7b:ac:c9:0a:40:16:ea:1c:53:2f:1c:58:97:00:77: 27:66:17:40:f6:5a:bd:6d:e0:33:21:b3:11:88:f1:ac:61:60: e7:b0:09:74:10:49:5a:ac:98:c6:67:53:ab:a8:98:ab:3f:05: 9d:64:2e:c5:31:33:bd:db:ce:10:fc:6c:4d:c4:48:9d:5d:63: 18:1b:c7:3b:bf:a4:37:37:3e:3f:9b:ca:5c:d1:dd:a0:be:ba: 5b:a7:59:e9:c4:76:5a:d2:64:00:34:83:28:d6:5a:9f:4c:25: f0:ed:6e:51:d9:5a:2c:61:a4:6b:ae:53:d3:b5:36:37:9c:c6: 6c:f6:7e:21:2b:f5:16:20:72:68:c6:6a:d9:21:4d:22:23:ec: c9:81:10:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXyQVSLlsmV446IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM5MDM0YTMtOTZhNC00YjA5LWEyYzktN2Y3NWMxNzQw ZDM2MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk NDUxYzcwMmUtZjk1MC00ZmU4LWE3M2QtZDFkZTQ0NzdlODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDVYpB6gWGlwVJjlQXz1cJXImJlQqpKj1UqH NposRMvx7+9ML7SLu5tviz9J/qoFoJF2P7MfuD2oGdWhvXF2y4YF3mnrDK0hgujy 43s9KN3M73YfXT5T2XqTGOc8ZJeMnnkCg2NcCPRShYfuhVN65REh6XJKeFqGlhuJ OBfnL6NanDLX86PYXZKWyoeu4eKUls3EN0X19dkpU+t14WfxkafZGmhMklgUhGfh USPyRwQ7EtYkgJ1INZEppR92FyqK/YteRX5obqoLveHNkX6loVQAObZCxI6Hd65p hVFwKD6jsxFC6/jNh6IwSA3ut56b1t5bT7zLM6Q7R3vCAKFqcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBMYuEwWAq+2cLYUkVdCcM79Hv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzkw MzRhMy05NmE0LTRiMDktYTJjOS03Zjc1YzE3NDBkMzYvZmVlNGNiZjYtNmEyYi0z MzI3LThhOGEtZjgxOWMzNGI2ZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWM5MDM0YTMtOTZhNC00YjA5LWEy YzktN2Y3NWMxNzQwZDM2L2VjOTAzNGEzLTk2YTQtNGIwOS1hMmM5LTdmNzVjMTc0 MGQzNi5jcmwwHwYDVR0jBBgwFoAU176EnzlU2QAhDE/A/cokoX1uR80wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzkwMzRhMy05NmE0LTRiMDktYTJjOS03Zjc1 YzE3NDBkMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQtyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFboopl1D1XckHX4ikwOd/SO9QppX7dghd6Z+eFMn50nlnnw0W5g4+6I CTDzdi9YNPKFklWBY/xvHEri1VmON76T2JWBwf+P7TACNJLayXGe20DM6d6UBB8p MdjeVQ+8KXdcd/mcT6mabcfq732pV3usyQpAFuocUy8cWJcAdydmF0D2Wr1t4DMh sxGI8axhYOewCXQQSVqsmMZnU6uomKs/BZ1kLsUxM73bzhD8bE3ESJ1dYxgbxzu/ pDc3Pj+bylzR3aC+ulunWenEdlrSZAA0gyjWWp9MJfDtblHZWixhpGuuU9O1Njec xmz2fiEr9RYgcmjGatkhTSIj7MmBEOQ= -----END CERTIFICATE-----Generated at Mon Apr 28 19:34:06 2025 by rpki-client