$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/be712c95-8da1-3462-9104-f7ad39bb722c.roa File: be712c95-8da1-3462-9104-f7ad39bb722c.roa (raw, json) Hash identifier: 7AcriCjMsaMVs/zIc70e8zO1WBQNoYKZ4m1KCcp5fWo= Subject key identifier: 4E:09:1C:66:EA:51:39:78:D0:42:93:BD:53:F8:8D:A3:2A:E7:80:D1 Certificate issuer: /CN=0605680b-ca76-43b6-81d9-2ac50993c59e Certificate serial: 010D0C9F43285849849EFB87307E008AD1CF9D80 Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/be712c95-8da1-3462-9104-f7ad39bb722c.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 11758 IP address blocks: 66.85.43.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:fb:87:30:7e:00:8a:d1:cf:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=c5fdfffd-3053-4774-abb8-fb0105f4b6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:02:c3:66:00:d0:4b:7c:b8:38:c5:63:fd:b2: 38:d9:1a:0a:74:bd:59:1b:e0:92:bd:87:fe:2f:e3: 0e:98:8d:73:a8:6a:06:9b:e1:36:27:49:ea:43:56: c6:d8:a2:90:6a:40:d8:a3:fe:d7:b4:a0:3f:a5:1f: e8:ad:b7:b3:7f:8a:62:ec:92:87:4a:af:60:28:6c: 2c:4b:64:29:80:e4:e0:bc:f1:2d:11:96:ff:2d:0b: 8e:61:d0:33:9b:02:60:73:f1:ea:59:db:31:af:d8: b2:73:3e:25:63:2e:15:d7:77:fa:fd:42:5e:ba:80: c5:88:18:a8:19:b3:17:93:69:c5:fb:8c:14:45:7f: 40:6f:5e:1e:7b:22:91:48:cd:3d:1a:81:1d:30:a0: 7b:c5:33:1e:92:d1:9e:f4:ba:6a:e0:a1:5c:d8:a8: 96:6d:56:b1:c2:05:03:0e:ad:df:9f:e9:a0:84:34: ce:e4:e1:73:86:1c:16:fd:6e:00:96:fb:79:92:d4: 67:7c:b3:55:40:80:ee:74:4a:01:04:f3:39:36:58: 54:e4:0b:b4:7a:aa:81:9e:47:b3:8c:c1:a0:47:6f: 55:40:c6:1c:88:14:63:35:0d:bf:5d:d5:b5:21:bb: c3:a9:15:39:d6:ba:de:ec:0e:95:2f:4e:39:47:00: 5e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:09:1C:66:EA:51:39:78:D0:42:93:BD:53:F8:8D:A3:2A:E7:80:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/be712c95-8da1-3462-9104-f7ad39bb722c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl X509v3 Authority Key Identifier: keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer sbgp-ipAddrBlock: critical IPv4: 66.85.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:9c:25:64:c2:a0:49:00:4b:4f:8d:f4:ec:2d:04:d4:fb:06: e3:2c:ef:36:3d:df:62:4d:7b:6a:94:b3:77:56:2b:58:08:74: 94:09:6e:a9:52:9b:63:25:60:cc:81:3f:6d:6a:5b:75:d4:e9: d1:24:4e:4f:92:53:c0:8c:ec:d7:01:f8:a3:31:af:d0:19:fa: 57:e7:e4:23:e6:dd:8f:30:5c:bf:66:cf:4f:5d:c9:6f:70:0c: 45:77:7c:64:47:00:18:bc:98:8e:fb:4b:aa:d2:17:6a:3a:cb: 9c:c7:6f:48:01:8c:ca:1c:86:dc:82:b1:0a:aa:5d:d8:9d:07: b8:aa:8d:98:6f:90:6c:a8:63:af:76:59:66:ef:4a:14:b5:f4: a0:9b:a8:ed:f4:a9:0b:76:52:89:ab:d3:2f:8d:45:e7:c3:55: d4:30:64:06:64:24:b9:47:9a:67:5e:03:7e:36:53:31:58:78: a7:a0:47:07:87:87:89:ab:a5:eb:11:fe:bb:b7:bd:fc:5f:49: fe:88:7d:ee:38:d9:9b:20:5f:77:38:59:f6:55:d8:10:e7:00: 3c:b3:39:bc:c3:47:38:32:4e:f6:a7:6f:1d:bb:ab:38:8e:73: 8e:67:7e:1e:59:37:bb:91:4b:46:6b:8a:81:37:8d:d3:b5:97: 70:55:45:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmEnvuHMH4AitHPnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYwNTY4MGItY2E3Ni00M2I2LTgxZDktMmFjNTA5OTNj NTllMB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk YzVmZGZmZmQtMzA1My00Nzc0LWFiYjgtZmIwMTA1ZjRiNmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlALDZgDQS3y4OMVj/bI42RoKdL1ZG+CSvYf+ L+MOmI1zqGoGm+E2J0nqQ1bG2KKQakDYo/7XtKA/pR/orbezf4pi7JKHSq9gKGws S2QpgOTgvPEtEZb/LQuOYdAzmwJgc/HqWdsxr9iycz4lYy4V13f6/UJeuoDFiBio GbMXk2nF+4wURX9Ab14eeyKRSM09GoEdMKB7xTMektGe9Lpq4KFc2KiWbVaxwgUD Dq3fn+mghDTO5OFzhhwW/W4Alvt5ktRnfLNVQIDudEoBBPM5NlhU5Au0eqqBnkez jMGgR29VQMYciBRjNQ2/XdW1IbvDqRU51rre7A6VL045RwBeQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4JHGbqUTl40EKTvVP4jaMq54DRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1 NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5M2M1OWUvYmU3MTJjOTUtOGRhMS0z NDYyLTkxMDQtZjdhZDM5YmI3MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDYwNTY4MGItY2E3Ni00M2I2LTgx ZDktMmFjNTA5OTNjNTllLzA2MDU2ODBiLWNhNzYtNDNiNi04MWQ5LTJhYzUwOTkz YzU5ZS5jcmwwHwYDVR0jBBgwFoAUSUhmydhN2RQ18NBnqAdbMJX69FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1 MDk5M2M1OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+cJWTCoEkAS0+N9OwtBNT7BuMs7zY932JNe2qUs3dWK1gIdJQJbqlS m2MlYMyBP21qW3XU6dEkTk+SU8CM7NcB+KMxr9AZ+lfn5CPm3Y8wXL9mz09dyW9w DEV3fGRHABi8mI77S6rSF2o6y5zHb0gBjMochtyCsQqqXdidB7iqjZhvkGyoY692 WWbvShS19KCbqO30qQt2Uomr0y+NRefDVdQwZAZkJLlHmmdeA342UzFYeKegRweH h4mrpesR/ru3vfxfSf6Ife442ZsgX3c4WfZV2BDnADyzObzDRzgyTvanbx27qziO c45nfh5ZN7uRS0ZrioE3jdO1l3BVRUY= -----END CERTIFICATE-----Generated at Mon Apr 28 11:16:49 2025 by rpki-client