$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa File: ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa (raw, json) Hash identifier: p+YD6g2Hc1pat7VBzMYuzFSHDn/h202MpjzfbhptPvg= Subject key identifier: A3:10:30:1D:BC:78:35:72:EC:90:01:EB:8F:FF:12:57:FB:E4:E9:B8 Certificate issuer: /CN=fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff Certificate serial: 010D0C9F43285849E0BF8D90ABBF596848B11C80 Authority key identifier: 35:65:B2:69:5E:FF:A6:97:15:1F:58:7B:B3:A5:0A:DE:04:BC:7F:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa Signing time: Sat 17 May 2025 01:00:47 +0000 ROA not before: Sat 17 May 2025 01:00:47 +0000 ROA not after: Fri 15 Aug 2025 01:00:47 +0000 asID: 54381 IP address blocks: 66.180.72.0/21 maxlen: 24 199.122.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e0:bf:8d:90:ab:bf:59:68:48:b1:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff Validity Not Before: May 17 01:00:47 2025 GMT Not After : Aug 15 01:00:47 2025 GMT Subject: CN=0d51dd79-8d7c-4913-b9ff-bad17b15bed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:87:c8:4a:cc:2d:69:fa:13:bf:97:10:aa:8a: a6:ec:a8:5d:50:26:a9:71:db:a7:65:ac:ca:8c:23: f4:91:f9:62:89:a3:21:c7:ef:36:2f:93:c3:b0:89: b7:22:39:fc:4c:08:40:4a:9e:dd:67:54:c5:e0:b4: f2:b7:da:82:16:13:b2:f2:21:27:8d:15:3e:a0:15: 00:1b:26:27:ec:93:3e:9c:4d:0b:f1:e6:03:61:2d: 0d:a3:25:0d:2f:09:79:5b:d7:bf:a4:c2:5a:9b:d4: 75:93:40:96:ec:ff:6b:7d:b7:a0:8c:38:3e:ac:3c: 09:60:64:e4:73:2e:d8:06:74:e2:ed:b9:cc:79:b9: 98:0f:b1:1f:c4:a8:2d:08:c7:01:30:b8:ba:5c:b8: 6f:47:7b:0c:bd:65:b8:28:44:58:76:4a:bf:4a:3b: 8d:c0:86:37:b0:e8:dd:36:ac:9b:be:ea:1e:8b:73: 94:12:0f:37:6c:c1:c8:7e:cb:a5:89:90:a0:aa:be: 05:97:a5:0e:20:a3:1b:81:8a:73:be:29:38:22:98: 5e:11:76:41:f8:48:8d:eb:3f:eb:c6:89:80:8a:72: 76:9a:1e:42:7a:11:62:95:be:28:61:8d:86:44:c1: 85:c9:47:03:7c:22:d3:10:dd:39:99:e2:ad:79:fc: 60:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:10:30:1D:BC:78:35:72:EC:90:01:EB:8F:FF:12:57:FB:E4:E9:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.crl X509v3 Authority Key Identifier: keyid:35:65:B2:69:5E:FF:A6:97:15:1F:58:7B:B3:A5:0A:DE:04:BC:7F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer sbgp-ipAddrBlock: critical IPv4: 66.180.72.0/21 199.122.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:60:62:0e:ca:11:cf:b8:33:40:d3:b8:c8:4d:19:a1:4d:c2: 30:4c:aa:e5:3a:1f:2f:c0:0f:8e:e6:39:60:db:e4:e8:60:f8: 3a:31:a1:03:84:ff:bc:9f:41:08:ee:5a:f6:5d:45:0a:53:41: 6b:d6:a5:04:f8:62:3d:bd:be:85:5e:06:c3:a8:cf:5d:c4:29: 42:9f:c8:b8:a0:ac:a5:7a:9f:85:a6:23:f1:4a:3f:f2:14:ae: 88:a7:8d:24:b7:10:f0:17:e3:09:92:fd:5f:e4:30:e7:a1:8d: e4:6e:46:e9:c5:5e:05:be:7b:85:f5:bf:e8:42:84:16:b3:bd: 1c:7d:c2:0d:55:3e:fd:4f:33:bc:df:36:21:ed:ec:f8:20:e8: 1b:7d:69:4a:6d:fd:63:93:6b:75:72:8e:27:4d:e3:c8:0e:35: 43:b4:dc:5d:21:79:83:54:45:cf:58:43:53:65:3e:0c:35:c6: 02:14:af:58:93:43:9a:8e:a7:68:24:92:c8:bc:a3:54:ec:ad: a7:b3:d2:3f:7f:88:b8:8f:44:6b:a1:af:cc:bf:8f:8f:3e:bd: 87:57:1d:9d:e6:b2:cc:2b:20:f4:fb:61:c8:25:f7:ee:d1:6c: e3:d5:b1:00:56:8a:4c:3b:cc:11:f5:e8:2c:27:53:40:10:bb: ec:db:1f:20 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEngv42Qq79ZaEixHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU0ZTRhNWEtYzhlNC00NDQ0LTk4M2QtYWJmZTZjNWU5 ZWZmMB4XDTI1MDUxNzAxMDA0N1oXDTI1MDgxNTAxMDA0N1owLzEtMCsGA1UEAxMk MGQ1MWRkNzktOGQ3Yy00OTEzLWI5ZmYtYmFkMTdiMTViZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIfISswtafoTv5cQqoqm7KhdUCapcdunZazK jCP0kfliiaMhx+82L5PDsIm3Ijn8TAhASp7dZ1TF4LTyt9qCFhOy8iEnjRU+oBUA GyYn7JM+nE0L8eYDYS0NoyUNLwl5W9e/pMJam9R1k0CW7P9rfbegjDg+rDwJYGTk cy7YBnTi7bnMebmYD7EfxKgtCMcBMLi6XLhvR3sMvWW4KERYdkq/SjuNwIY3sOjd Nqybvuoei3OUEg83bMHIfsuliZCgqr4Fl6UOIKMbgYpzvik4IpheEXZB+EiN6z/r xomAinJ2mh5CehFilb4oYY2GRMGFyUcDfCLTEN05meKtefxgBQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKMQMB28eDVy7JAB64//Elf75Om4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZTRl NGE1YS1jOGU0LTQ0NDQtOTgzZC1hYmZlNmM1ZTllZmYvZmY0NWY2ZjktOGFmYS0z ZjIxLWEyNGYtMmE2OGVmZDNiZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmU0ZTRhNWEtYzhlNC00NDQ0LTk4 M2QtYWJmZTZjNWU5ZWZmL2ZlNGU0YTVhLWM4ZTQtNDQ0NC05ODNkLWFiZmU2YzVl OWVmZi5jcmwwHwYDVR0jBBgwFoAUNWWyaV7/ppcVH1h7s6UK3gS8fwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZTRlNGE1YS1jOGU0LTQ0NDQtOTgzZC1hYmZl NmM1ZTllZmYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQrRIAwQC x3pwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACBgYg7KEc+4M0DTuMhNGaFNwjBMquU6Hy/AD47mOWDb5Ohg +DoxoQOE/7yfQQjuWvZdRQpTQWvWpQT4Yj29voVeBsOoz13EKUKfyLigrKV6n4Wm I/FKP/IUroinjSS3EPAX4wmS/V/kMOehjeRuRunFXgW+e4X1v+hChBazvRx9wg1V Pv1PM7zfNiHt7Pgg6Bt9aUpt/WOTa3VyjidN48gONUO03F0heYNURc9YQ1NlPgw1 xgIUr1iTQ5qOp2gkksi8o1Tsraez0j9/iLiPRGuhr8y/j48+vYdXHZ3msswrIPT7 Ycgl9+7RbOPVsQBWikw7zBH16CwnU0AQu+zbHyA= -----END CERTIFICATE-----Generated at Mon Jun 30 13:04:54 2025 by rpki-client