$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2c4bedad-c8e4-37be-a4e4-38ba77694658.roa File: 2c4bedad-c8e4-37be-a4e4-38ba77694658.roa (raw, json) Hash identifier: NXb5noh/oKz/1C/Vj7PuHy89L/mjEqeWFIQi+qbzG3s= Subject key identifier: D6:5F:03:87:DF:FA:64:BE:62:49:BA:92:69:A8:79:20:57:BC:97:C5 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285849DF5A72BDBE389F9F4A339C40 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2c4bedad-c8e4-37be-a4e4-38ba77694658.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 13445 IP address blocks: 66.114.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:72:bd:be:38:9f:9f:4a:33:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=0041d91e-5ba9-442d-8d7b-faf9aaaede3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:32:5a:12:dd:7f:15:9a:42:46:5a:a5:8e:a5: 84:d5:7b:68:b4:e3:f7:a7:9a:a5:ff:e9:6f:be:01: 53:6c:d9:f0:8c:a8:9f:b4:c6:3a:2e:aa:9f:c0:d3: 45:53:96:48:a5:38:1d:0e:1b:10:0e:ec:9c:fb:ed: 45:f9:86:ad:43:9c:71:00:3c:c9:1c:c6:f2:54:98: a9:3a:71:5b:f9:e3:7e:2e:ee:1a:82:3f:1c:20:89: d6:4b:74:17:69:eb:db:f0:7b:21:cd:a1:0c:32:44: d2:cd:e3:bf:55:18:4a:a9:05:88:70:70:1d:4e:d3: 66:fb:4f:bf:02:a0:bc:41:84:26:a2:e5:ed:6a:9f: d1:a5:c8:8b:3b:5c:16:0a:a0:e0:3f:c6:61:e2:9c: 78:59:cd:6f:92:b2:3a:b7:8a:86:c2:2d:1e:7d:32: b2:0d:ec:89:79:01:3d:8c:12:13:ee:e7:02:e5:c9: f3:17:b2:3c:e2:75:96:be:70:ba:07:37:4d:be:21: 67:c3:71:db:5e:6c:14:90:07:1a:d0:e8:e9:cd:f1: db:5d:fd:f5:93:ce:61:a9:af:82:a2:d0:26:9a:e8: e7:a9:dc:f0:7b:fb:a3:42:82:e8:d4:6f:e5:20:aa: ed:30:cd:c2:2e:41:f3:a5:34:2a:49:f6:11:89:db: 7f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5F:03:87:DF:FA:64:BE:62:49:BA:92:69:A8:79:20:57:BC:97:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2c4bedad-c8e4-37be-a4e4-38ba77694658.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 66.114.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:82:a4:7b:5e:3b:54:d2:d6:7c:d2:c9:e7:72:67:ce:28:cb: 7a:0a:8e:70:1f:b4:0e:27:16:1b:53:9e:a8:d4:f4:44:bc:94: 89:83:b4:27:2a:26:cf:71:57:55:49:4e:6e:52:80:31:ad:dd: 3f:f9:a9:a2:fa:8e:06:08:5e:b8:bb:14:52:43:23:de:14:1e: 57:dd:90:07:73:19:ee:35:38:8d:22:7f:f2:d1:16:7d:13:1d: a7:28:7b:db:38:58:50:3f:51:9e:97:c1:af:a8:ea:e6:d9:47: fa:c6:c1:64:47:5f:17:d9:fd:9c:26:dd:75:5d:31:d4:7c:49: dc:1b:90:e6:3c:ee:6c:b2:f6:ac:a4:df:81:48:84:72:49:9b: 93:be:57:c9:a6:be:2c:c4:e4:73:3f:a0:da:77:36:0b:63:3a: fb:01:97:e3:0e:0f:b4:66:87:1b:a9:17:20:4e:28:93:1b:12: 70:73:5a:6e:1f:84:41:c5:28:cb:cb:a5:eb:92:85:61:d4:8a: e6:a2:c7:78:87:e3:84:19:62:1b:08:75:42:6b:2f:10:33:87: 43:7f:f5:e2:22:b8:69:db:2f:33:98:ff:96:f8:c3:58:7f:af: 04:73:56:27:11:4f:22:86:c8:62:a1:2c:a5:6c:37:2b:45:cf: 54:34:60:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnK9vjifn0oznEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MDA0MWQ5MWUtNWJhOS00NDJkLThkN2ItZmFmOWFhYWVkZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDJaEt1/FZpCRlqljqWE1XtotOP3p5ql/+lv vgFTbNnwjKiftMY6LqqfwNNFU5ZIpTgdDhsQDuyc++1F+YatQ5xxADzJHMbyVJip OnFb+eN+Lu4agj8cIInWS3QXaevb8HshzaEMMkTSzeO/VRhKqQWIcHAdTtNm+0+/ AqC8QYQmouXtap/RpciLO1wWCqDgP8Zh4px4Wc1vkrI6t4qGwi0efTKyDeyJeQE9 jBIT7ucC5cnzF7I84nWWvnC6BzdNviFnw3HbXmwUkAca0OjpzfHbXf31k85hqa+C otAmmujnqdzwe/ujQoLo1G/lIKrtMM3CLkHzpTQqSfYRidt/bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZfA4ff+mS+Ykm6kmmoeSBXvJfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvMmM0YmVkYWQtYzhlNC0z N2JlLWE0ZTQtMzhiYTc3Njk0NjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+CpHteO1TS1nzSyedyZ84oy3oKjnAftA4nFhtTnqjU9ES8lImDtCcq Js9xV1VJTm5SgDGt3T/5qaL6jgYIXri7FFJDI94UHlfdkAdzGe41OI0if/LRFn0T Hacoe9s4WFA/UZ6Xwa+o6ubZR/rGwWRHXxfZ/Zwm3XVdMdR8SdwbkOY87myy9qyk 34FIhHJJm5O+V8mmvizE5HM/oNp3NgtjOvsBl+MOD7RmhxupFyBOKJMbEnBzWm4f hEHFKMvLpeuShWHUiuaix3iH44QZYhsIdUJrLxAzh0N/9eIiuGnbLzOY/5b4w1h/ rwRzVicRTyKGyGKhLKVsNytFz1Q0YAg= -----END CERTIFICATE-----Generated at Sun Jun 15 17:50:06 2025 by rpki-client