$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa File: 5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa (raw, json) Hash identifier: nrrNeqimhasYEndbvQbQPOapObSegvxyzRIfCZdK6eE= Subject key identifier: 66:9E:F3:66:3D:DC:BA:89:D6:A4:CB:88:F1:33:52:BF:87:DB:67:12 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F432858498CFF0F1CADADF68BB5229840 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 36298 IP address blocks: 209.166.148.0/24 maxlen: 24 209.166.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:0f:1c:ad:ad:f6:8b:b5:22:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=e826d1a4-8987-4a1b-83c1-65d0853ccca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:51:25:cb:f4:92:56:65:f2:d9:d4:98:5e: 28:14:a1:21:e4:0b:05:fb:df:ef:c7:a8:38:94:fc: ed:a9:52:4c:2a:70:02:c3:0d:a7:62:a1:18:73:14: aa:f0:54:fd:30:45:d4:6c:6c:97:cd:45:d2:9a:bd: 49:1c:f9:fc:0e:57:de:4a:75:a2:77:ff:fc:7f:4b: 9c:d6:fb:28:84:37:0f:34:58:0c:a0:9c:5a:28:73: 18:15:4c:64:2c:c6:da:0e:fa:c5:3e:f8:37:b7:36: fc:9d:a3:34:34:bb:4b:66:b7:2d:c3:98:83:7f:68: c2:98:58:66:19:e1:3c:83:14:62:ba:63:f9:d1:cf: 72:31:42:7a:e3:f3:b5:5b:af:f2:08:ef:0c:c4:78: ff:ab:e9:17:36:83:60:30:06:38:66:92:5a:54:dc: cb:ca:52:35:70:ec:bd:9a:19:9e:22:72:5e:39:2b: a1:2e:a6:a5:47:70:18:de:0e:79:bc:3b:b5:c3:5e: a0:f1:68:5b:61:65:bd:b4:0d:a2:43:f3:42:b0:00: 51:f5:0b:10:73:ea:45:fb:1d:d6:2d:47:cb:0c:6d: 11:af:10:55:66:d6:03:28:e4:11:93:67:83:d1:c8: 19:1f:28:af:5a:02:c0:7a:04:cb:f3:8e:f0:f0:2b: b7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9E:F3:66:3D:DC:BA:89:D6:A4:CB:88:F1:33:52:BF:87:DB:67:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.166.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:3a:20:4e:ea:42:fa:be:b8:e3:bc:8e:5c:2a:53:73:6d:44: 9d:41:fa:f5:b9:85:14:54:56:4a:e8:bb:7a:b6:ec:a9:56:c1: ba:95:9b:9f:93:7b:1c:d1:bd:04:70:b7:0c:39:40:41:be:07: f2:f7:e3:45:33:6c:9a:1e:f3:fb:b2:5f:0c:50:df:3e:f1:c5: 06:59:2e:34:f1:28:64:80:c8:04:2e:17:73:78:07:5a:3c:7f: 89:80:87:78:b7:1d:44:17:f1:c2:6c:62:fc:58:93:e2:2f:84: 69:22:83:cc:10:e9:13:d9:e5:b4:ab:3c:8c:10:a6:2a:2e:86: 16:0e:8f:bb:2a:d9:9d:02:f9:97:6e:dd:32:b9:c4:22:db:a1: 05:af:d9:12:9c:90:08:bc:2f:c8:45:6f:b4:31:45:7e:44:54: d9:c0:ca:c5:8d:1b:f8:df:29:c2:3d:3a:3a:4a:a5:da:36:02: ad:7e:1d:42:67:4d:0b:5c:bb:be:f3:41:ba:cc:66:66:23:1b: 27:0a:22:a9:70:73:e6:99:a3:db:2e:5b:ab:1a:e8:df:79:6e: 88:47:8e:13:5b:7c:3b:02:90:5b:77:b3:9b:24:fa:25:67:17: 71:80:e1:95:bc:fa:3d:1a:87:7a:fe:97:71:68:1a:30:aa:fb: 7f:c7:bd:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/w8cra32i7UimEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ZTgyNmQxYTQtODk4Ny00YTFiLTgzYzEtNjVkMDg1M2NjY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjlRJcv0klZl8tnUmF4oFKEh5AsF+9/vx6g4 lPztqVJMKnACww2nYqEYcxSq8FT9MEXUbGyXzUXSmr1JHPn8DlfeSnWid//8f0uc 1vsohDcPNFgMoJxaKHMYFUxkLMbaDvrFPvg3tzb8naM0NLtLZrctw5iDf2jCmFhm GeE8gxRiumP50c9yMUJ64/O1W6/yCO8MxHj/q+kXNoNgMAY4ZpJaVNzLylI1cOy9 mhmeInJeOSuhLqalR3AY3g55vDu1w16g8WhbYWW9tA2iQ/NCsABR9QsQc+pF+x3W LUfLDG0RrxBVZtYDKOQRk2eD0cgZHyivWgLAegTL847w8Cu3hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGae82Y93LqJ1qTLiPEzUr+H22cSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNWNjNGQ2YzEtZWZmMi0z YTQwLTg2MTktNWY2MTZmOGFmMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0aaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE6IE7qQvq+uOO8jlwqU3NtRJ1B+vW5hRRUVkrou3q27KlWwbqVm5+T exzRvQRwtww5QEG+B/L340UzbJoe8/uyXwxQ3z7xxQZZLjTxKGSAyAQuF3N4B1o8 f4mAh3i3HUQX8cJsYvxYk+IvhGkig8wQ6RPZ5bSrPIwQpiouhhYOj7sq2Z0C+Zdu 3TK5xCLboQWv2RKckAi8L8hFb7QxRX5EVNnAysWNG/jfKcI9OjpKpdo2Aq1+HUJn TQtcu77zQbrMZmYjGycKIqlwc+aZo9suW6sa6N95bohHjhNbfDsCkFt3s5sk+iVn F3GA4ZW8+j0ah3r+l3FoGjCq+3/HvVQ= -----END CERTIFICATE-----Generated at Mon Apr 28 08:27:13 2025 by rpki-client