$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2609eb60-2038-36dc-aeef-9bde88489e86.roa File: 2609eb60-2038-36dc-aeef-9bde88489e86.roa (raw, json) Hash identifier: 0g2ZC6P4uoqKv80s+KZJsfuSOb+oY9P+1KFN1mnG0nI= Subject key identifier: 54:27:5F:56:F8:BC:A9:FD:25:5A:F7:C6:68:6C:F5:9F:D7:A3:59:3E Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858497C3EE91B54B0FBF421958000 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2609eb60-2038-36dc-aeef-9bde88489e86.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 40509 IP address blocks: 66.51.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:e9:1b:54:b0:fb:f4:21:95:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=4cc5a368-0a79-4a7b-bad9-15d3711d0bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:a3:1b:2f:76:6e:e4:56:83:f6:ba:3a:0c: 85:da:7d:af:30:8e:de:b2:f7:23:de:66:af:e0:6d: db:5e:9e:7b:6d:ca:44:9c:4b:94:d5:20:d8:4c:fa: d8:55:ca:bd:89:77:07:19:4b:78:76:34:f5:32:2c: 4b:e8:03:cb:3c:47:cb:08:f0:5f:a1:89:bb:64:db: 99:f6:52:ae:fd:cf:e6:c3:ca:70:59:83:2c:aa:71: 50:68:db:d7:bc:23:df:51:55:f9:a2:48:01:f8:1f: b2:59:ae:70:0a:40:f3:0a:29:5c:fb:82:f9:5b:3b: d2:84:2e:24:72:d5:b6:a7:8f:2f:67:72:ef:32:9f: 4c:75:c2:da:9c:19:d3:26:95:ce:c5:b8:1f:e9:69: 3f:88:1d:29:4c:65:40:2b:4b:1c:b5:dd:9a:38:b9: fd:0c:94:aa:43:3c:2c:82:25:d0:37:70:45:6e:44: aa:d8:65:31:3a:2f:00:21:e8:3d:bc:54:94:48:12: 1c:00:ae:5d:73:6d:29:d4:de:4b:10:fa:ea:39:0b: 57:9c:4d:82:61:4f:67:fb:5f:cc:0a:c2:a7:30:07: 2c:ee:97:9c:ed:e8:0f:3b:81:72:60:ab:8c:30:49: 8e:d2:5d:ca:0f:bf:f8:f6:96:f0:e2:86:de:77:7b: 49:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:27:5F:56:F8:BC:A9:FD:25:5A:F7:C6:68:6C:F5:9F:D7:A3:59:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2609eb60-2038-36dc-aeef-9bde88489e86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 66.51.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c2:2d:13:2a:33:70:78:f6:63:47:eb:be:28:41:28:80:8d: 9d:e2:a9:47:05:d8:54:b8:25:62:e3:10:be:87:0c:fb:fe:1b: da:20:fc:f6:d0:a4:27:35:f6:67:e1:32:48:3b:bd:d6:48:21: 12:e7:b1:c0:05:37:e7:c9:2b:8b:68:18:53:12:aa:d8:2a:97: 39:9c:17:54:4d:66:31:90:23:93:88:d6:20:df:6b:2c:68:92: 83:7d:6f:5e:47:06:ed:b3:ed:4c:99:f4:61:e7:8b:06:c4:98: aa:3d:42:9a:af:a6:92:33:07:8d:ef:f1:e8:b9:86:b0:bc:5c: d8:4f:15:89:86:c4:07:e5:71:c0:a8:04:04:8e:9d:fd:31:3d: 02:9d:bc:b3:43:ed:ec:de:7d:ac:32:21:4a:ee:1b:07:2f:ae: 49:f2:41:50:2e:b7:02:9d:09:3c:d3:60:8e:e0:c6:5b:27:2d: eb:ed:ad:13:b4:8f:06:44:82:02:c0:35:57:05:69:e0:5d:cb: f2:79:ec:bd:7f:ec:11:12:6d:c8:47:67:86:5f:42:dd:8e:dd: 7b:75:8f:6a:69:3a:79:11:a0:cb:f2:66:0b:cc:8a:8b:f9:4b: 13:9d:0c:a0:d4:33:4c:ec:5c:a6:bc:c9:14:32:3e:87:93:b8: da:f3:a3:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PukbVLD79CGVgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk NGNjNWEzNjgtMGE3OS00YTdiLWJhZDktMTVkMzcxMWQwYmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW2jGy92buRWg/a6OgyF2n2vMI7esvcj3mav 4G3bXp57bcpEnEuU1SDYTPrYVcq9iXcHGUt4djT1MixL6APLPEfLCPBfoYm7ZNuZ 9lKu/c/mw8pwWYMsqnFQaNvXvCPfUVX5okgB+B+yWa5wCkDzCilc+4L5WzvShC4k ctW2p48vZ3LvMp9MdcLanBnTJpXOxbgf6Wk/iB0pTGVAK0sctd2aOLn9DJSqQzws giXQN3BFbkSq2GUxOi8AIeg9vFSUSBIcAK5dc20p1N5LEPrqOQtXnE2CYU9n+1/M CsKnMAcs7pec7egPO4FyYKuMMEmO0l3KD7/49pbw4obed3tJaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQnX1b4vKn9JVr3xmhs9Z/Xo1k+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMjYwOWViNjAtMjAzOC0z NmRjLWFlZWYtOWJkZTg4NDg5ZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQjN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3CLRMqM3B49mNH674oQSiAjZ3iqUcF2FS4JWLjEL6HDPv+G9og/PbQ pCc19mfhMkg7vdZIIRLnscAFN+fJK4toGFMSqtgqlzmcF1RNZjGQI5OI1iDfayxo koN9b15HBu2z7UyZ9GHniwbEmKo9QpqvppIzB43v8ei5hrC8XNhPFYmGxAflccCo BASOnf0xPQKdvLND7ezefawyIUruGwcvrknyQVAutwKdCTzTYI7gxlsnLevtrRO0 jwZEggLANVcFaeBdy/J57L1/7BESbchHZ4ZfQt2O3Xt1j2ppOnkRoMvyZgvMiov5 SxOdDKDUM0zsXKa8yRQyPoeTuNrzo7E= -----END CERTIFICATE-----Generated at Mon May 12 22:59:14 2025 by rpki-client