$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/c1708cac-36d8-3098-a5cd-cfef82e7b56c.roa File: c1708cac-36d8-3098-a5cd-cfef82e7b56c.roa (raw, json) Hash identifier: oG5lbEZYCH49rk86pa0eoQctVr9Ah+jJF/P/FoVJf6Q= Subject key identifier: 70:2C:38:F0:67:EA:C7:97:3A:20:E3:CC:C9:E0:81:89:4B:58:02:B5 Certificate issuer: /CN=0eee8d2b-8dbc-4819-9142-4b1b45d5a094 Certificate serial: 010D0C9F43285849B149EAEF748BD0B25289A200 Authority key identifier: 9B:3A:51:CD:D1:B6:39:CD:DA:B9:7D:D2:65:BA:8C:2A:83:84:BF:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/c1708cac-36d8-3098-a5cd-cfef82e7b56c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 11817 IP address blocks: 66.11.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:ea:ef:74:8b:d0:b2:52:89:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eee8d2b-8dbc-4819-9142-4b1b45d5a094 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=40b68599-76a5-4170-96a3-1065504e1901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:98:d3:9c:7a:9f:e7:29:7f:8a:09:d9:e0:cf: 40:d5:03:52:15:e9:db:b5:ca:cb:23:0e:f6:2a:99: c4:c4:94:6f:0a:e3:01:a6:91:57:52:5c:ad:30:85: ab:bb:c0:66:e5:f9:5b:ab:a0:41:ca:09:15:47:ed: 8c:ba:3d:f9:3e:77:58:48:7b:3e:ac:e5:de:ff:b7: 9a:e5:94:cc:16:ec:62:fa:3c:d5:bd:49:a7:14:1c: c4:80:e3:db:77:ee:2e:f7:3e:3c:a6:c2:12:46:b0: bc:4e:50:d6:9a:61:6e:41:28:2f:76:79:82:14:49: 89:70:c2:d8:3d:b0:68:f2:d0:ac:ac:47:a8:22:f7: c6:f0:9c:d8:74:73:51:dc:e4:3e:5d:91:b6:e5:45: 5a:72:d2:2d:5b:05:61:83:ce:d0:46:e1:5f:ca:98: 22:ca:06:0a:0b:bf:7b:5d:cc:48:65:87:50:1e:c8: 78:b1:b7:ff:90:dd:24:93:aa:53:f2:c8:2a:76:7c: c0:fc:cf:dc:ff:f5:5f:8b:d5:30:2e:61:de:e7:00: 95:c9:6c:f3:62:20:8c:33:61:87:ee:2c:21:f1:a5: 65:98:aa:2f:0d:4b:6c:7e:7b:05:43:ba:68:ed:76: 6f:1d:03:84:ba:d5:1d:eb:2d:c0:fb:09:53:73:c9: e8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2C:38:F0:67:EA:C7:97:3A:20:E3:CC:C9:E0:81:89:4B:58:02:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/c1708cac-36d8-3098-a5cd-cfef82e7b56c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.crl X509v3 Authority Key Identifier: keyid:9B:3A:51:CD:D1:B6:39:CD:DA:B9:7D:D2:65:BA:8C:2A:83:84:BF:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer sbgp-ipAddrBlock: critical IPv4: 66.11.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:bf:fb:b7:1d:35:bc:92:21:bd:6c:5c:76:0f:d8:50:c4:e6: 53:bd:e9:97:d8:ac:a3:36:ce:9f:bc:8b:52:e9:16:62:de:1f: 72:e5:ed:8e:20:c7:e4:2d:27:f7:13:65:8e:05:bc:08:3f:f0: 73:1f:90:5f:77:ac:df:11:9c:00:05:5e:c1:1f:9f:df:64:07: 83:55:4f:a4:3c:51:ad:df:0f:5a:5a:48:fe:c3:6a:fb:90:84: 08:67:36:49:12:7a:08:af:8c:40:11:41:6c:86:68:1e:c0:72: 37:76:aa:97:39:7e:15:8a:6e:1a:84:f8:fb:d7:c2:b3:9b:c5: 42:b5:ca:b8:ad:85:dd:1c:a0:ac:99:b9:9f:45:1c:68:34:c7: 0c:b3:23:3b:9e:62:06:98:38:90:d0:3e:07:16:ae:4a:c1:36: 05:7f:70:5f:02:06:17:df:34:c3:41:6a:91:8f:42:7e:e3:b2: 59:0a:f0:9a:f0:2a:0d:0b:74:5b:4d:7b:a3:80:85:20:d8:3f: 5f:17:4e:ab:98:f7:46:8c:26:5c:be:92:df:f0:39:56:aa:19: 8f:8f:7e:7f:7b:60:90:e5:a7:8d:1d:cb:d1:be:39:44:12:b8: c8:7d:96:54:42:d8:9f:c3:0f:84:24:ef:d5:e9:4b:94:91:85: ce:9d:0a:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxServdIvQslKJogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVlZThkMmItOGRiYy00ODE5LTkxNDItNGIxYjQ1ZDVh MDk0MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDBiNjg1OTktNzZhNS00MTcwLTk2YTMtMTA2NTUwNGUxOTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJjTnHqf5yl/ignZ4M9A1QNSFenbtcrLIw72 KpnExJRvCuMBppFXUlytMIWru8Bm5flbq6BBygkVR+2Muj35PndYSHs+rOXe/7ea 5ZTMFuxi+jzVvUmnFBzEgOPbd+4u9z48psISRrC8TlDWmmFuQSgvdnmCFEmJcMLY PbBo8tCsrEeoIvfG8JzYdHNR3OQ+XZG25UVactItWwVhg87QRuFfypgiygYKC797 XcxIZYdQHsh4sbf/kN0kk6pT8sgqdnzA/M/c//Vfi9UwLmHe5wCVyWzzYiCMM2GH 7iwh8aVlmKovDUtsfnsFQ7po7XZvHQOEutUd6y3A+wlTc8nofwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAsOPBn6seXOiDjzMnggYlLWAK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wZWVl OGQyYi04ZGJjLTQ4MTktOTE0Mi00YjFiNDVkNWEwOTQvYzE3MDhjYWMtMzZkOC0z MDk4LWE1Y2QtY2ZlZjgyZTdiNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGVlZThkMmItOGRiYy00ODE5LTkx NDItNGIxYjQ1ZDVhMDk0LzBlZWU4ZDJiLThkYmMtNDgxOS05MTQyLTRiMWI0NWQ1 YTA5NC5jcmwwHwYDVR0jBBgwFoAUmzpRzdG2Oc3auX3SZbqMKoOEv7QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wZWVlOGQyYi04ZGJjLTQ4MTktOTE0Mi00YjFi NDVkNWEwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQguAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm/+7cdNbySIb1sXHYP2FDE5lO96ZfYrKM2zp+8i1LpFmLeH3Ll7Y4g x+QtJ/cTZY4FvAg/8HMfkF93rN8RnAAFXsEfn99kB4NVT6Q8Ua3fD1paSP7DavuQ hAhnNkkSegivjEARQWyGaB7Acjd2qpc5fhWKbhqE+PvXwrObxUK1yrithd0coKyZ uZ9FHGg0xwyzIzueYgaYOJDQPgcWrkrBNgV/cF8CBhffNMNBapGPQn7jslkK8Jrw Kg0LdFtNe6OAhSDYP18XTquY90aMJly+kt/wOVaqGY+Pfn97YJDlp40dy9G+OUQS uMh9llRC2J/DD4Qk79XpS5SRhc6dCm8= -----END CERTIFICATE-----Generated at Wed May 7 10:06:53 2025 by rpki-client