$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c73f39ea-7ec1-3285-b8bd-b03e76b825cd.roa File: c73f39ea-7ec1-3285-b8bd-b03e76b825cd.roa (raw, json) Hash identifier: 9Wi6fdHQtiglCUXHOLF79saEvatKglwL741ZF40sqvg= Subject key identifier: DE:FA:2F:6A:1A:F1:9E:47:DC:31:A1:DC:DF:E0:1E:20:42:1C:39:14 Certificate issuer: /CN=c3a36226-716b-451a-a34c-4a9038599291 Certificate serial: 010D0C9F43285849ABB49F8195E61B3889AFC440 Authority key identifier: F7:92:28:39:E5:D4:95:39:97:0C:B8:B2:14:90:97:65:29:F1:92:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c73f39ea-7ec1-3285-b8bd-b03e76b825cd.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 400516 IP address blocks: 66.220.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c3a36226-716b-451a-a34c-4a9038599291.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c3a36226-716b-451a-a34c-4a9038599291.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9f:81:95:e6:1b:38:89:af:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a36226-716b-451a-a34c-4a9038599291 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=95db9ffc-50d2-4f70-a5f8-32f7e1d1d15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d4:1f:49:8d:1d:43:03:34:85:ff:84:d6:4e: 47:6d:e0:f1:79:0b:5f:b7:05:d6:b4:ce:77:b9:5f: 1d:a5:3b:95:0e:7c:0f:e6:00:24:ee:d5:10:1a:d4: 41:84:ed:84:80:ce:66:95:df:76:26:a3:cc:b1:e2: 56:50:da:16:d5:94:53:76:aa:09:e7:ce:0f:67:67: 88:fd:8b:ca:55:6d:f3:a5:7a:46:86:f6:dc:96:87: 38:a6:7a:e5:17:b4:fd:c4:ce:8f:f6:da:d8:de:b0: ed:88:c6:c6:9c:35:25:b5:0a:f2:a9:22:f6:c3:55: 6f:d7:c6:82:78:7e:ff:e7:38:4d:dd:10:7a:79:7a: 61:96:1b:17:18:7c:b7:12:66:c3:3d:77:64:09:bc: 52:dd:12:75:da:02:5e:4f:58:ff:c2:64:48:86:5c: 1f:ac:95:84:b1:a1:f4:96:40:06:cb:38:74:eb:a8: fc:28:37:e4:66:75:36:1f:74:31:05:c1:04:d1:60: 0f:1d:17:f4:ef:f1:42:49:9a:ac:26:8b:91:84:a1: 08:c3:20:ab:f1:af:09:d5:83:12:4f:2d:53:36:96: 26:08:e0:63:71:ed:69:2a:db:b8:00:65:f9:54:27: 87:38:40:df:a9:3b:26:36:60:f0:e6:b1:8a:4f:68: d5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FA:2F:6A:1A:F1:9E:47:DC:31:A1:DC:DF:E0:1E:20:42:1C:39:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c73f39ea-7ec1-3285-b8bd-b03e76b825cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c3a36226-716b-451a-a34c-4a9038599291.crl X509v3 Authority Key Identifier: keyid:F7:92:28:39:E5:D4:95:39:97:0C:B8:B2:14:90:97:65:29:F1:92:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291.cer sbgp-ipAddrBlock: critical IPv4: 66.220.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:6e:e1:17:e6:a1:00:5e:07:a5:b3:25:a3:06:f9:b1:ac:94: 6a:95:6d:75:26:18:e0:5c:b2:45:11:ed:b7:4a:a3:9c:eb:4b: f0:1e:ed:9a:cf:ac:74:cb:bb:bb:b9:11:6b:b7:e3:5d:7f:d8: 17:b6:50:10:90:51:6f:73:3d:04:85:38:28:5a:f7:41:ee:1a: 96:24:7a:4a:41:20:df:9f:9b:8b:92:13:7c:8d:72:8f:0a:1b: 42:f9:ac:bf:3a:fc:23:55:78:1b:a3:c5:cb:58:bd:85:71:59: d3:30:2e:3d:02:e3:98:d1:1d:84:8f:db:76:02:80:eb:53:2e: 7d:ab:4b:62:e0:83:ae:df:20:22:fa:e9:08:c4:49:63:fc:e4: 14:b6:af:a3:25:7c:27:01:c9:6c:89:df:df:46:ef:40:1a:a7: d9:88:45:49:7a:fc:c1:a5:6e:d2:96:ea:b4:5c:bf:02:d4:da: 70:79:eb:af:2f:9a:c8:3c:a7:2e:24:da:48:4d:ad:fe:00:3c: 22:76:a3:eb:b3:5c:5d:aa:cf:4a:ed:8c:e4:9a:95:0e:4f:1f: ce:06:0c:8b:0e:3e:af:c4:83:cf:3c:74:93:5a:5f:33:a6:41: 66:b0:58:0d:83:89:f2:4b:5c:47:39:d5:50:3e:d7:d6:c3:6f: 18:3e:9b:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJ+BleYbOImvxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhMzYyMjYtNzE2Yi00NTFhLWEzNGMtNGE5MDM4NTk5 MjkxMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk OTVkYjlmZmMtNTBkMi00ZjcwLWE1ZjgtMzJmN2UxZDFkMTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9QfSY0dQwM0hf+E1k5HbeDxeQtftwXWtM53 uV8dpTuVDnwP5gAk7tUQGtRBhO2EgM5mld92JqPMseJWUNoW1ZRTdqoJ584PZ2eI /YvKVW3zpXpGhvbcloc4pnrlF7T9xM6P9trY3rDtiMbGnDUltQryqSL2w1Vv18aC eH7/5zhN3RB6eXphlhsXGHy3EmbDPXdkCbxS3RJ12gJeT1j/wmRIhlwfrJWEsaH0 lkAGyzh066j8KDfkZnU2H3QxBcEE0WAPHRf07/FCSZqsJouRhKEIwyCr8a8J1YMS Ty1TNpYmCOBjce1pKtu4AGX5VCeHOEDfqTsmNmDw5rGKT2jVGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN76L2oa8Z5H3DGh3N/gHiBCHDkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jM2Ez NjIyNi03MTZiLTQ1MWEtYTM0Yy00YTkwMzg1OTkyOTEvYzczZjM5ZWEtN2VjMS0z Mjg1LWI4YmQtYjAzZTc2YjgyNWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzNhMzYyMjYtNzE2Yi00NTFhLWEz NGMtNGE5MDM4NTk5MjkxL2MzYTM2MjI2LTcxNmItNDUxYS1hMzRjLTRhOTAzODU5 OTI5MS5jcmwwHwYDVR0jBBgwFoAU95IoOeXUlTmXDLiyFJCXZSnxktAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jM2EzNjIyNi03MTZiLTQ1MWEtYTM0Yy00YTkw Mzg1OTkyOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtwlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZu4RfmoQBeB6WzJaMG+bGslGqVbXUmGOBcskUR7bdKo5zrS/Ae7ZrP rHTLu7u5EWu3411/2Be2UBCQUW9zPQSFOCha90HuGpYkekpBIN+fm4uSE3yNco8K G0L5rL86/CNVeBujxctYvYVxWdMwLj0C45jRHYSP23YCgOtTLn2rS2Lgg67fICL6 6QjESWP85BS2r6MlfCcByWyJ399G70Aap9mIRUl6/MGlbtKW6rRcvwLU2nB5668v msg8py4k2khNrf4APCJ2o+uzXF2qz0rtjOSalQ5PH84GDIsOPq/Eg888dJNaXzOm QWawWA2DifJLXEc51VA+19bDbxg+m4U= -----END CERTIFICATE-----Generated at Tue May 6 16:09:20 2025 by rpki-client