$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/959877d0-e1a7-3d85-814d-8bfef58d1e7b.roa File: 959877d0-e1a7-3d85-814d-8bfef58d1e7b.roa (raw, json) Hash identifier: C58JxFZQDL1WsL6eml/73kxgNy49tJCMlNyH1TVBaPo= Subject key identifier: DD:4F:31:20:D0:6A:49:23:23:37:A9:C0:99:82:D7:68:69:4A:02:F3 Certificate issuer: /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Certificate serial: 010D0C9F432858493574E4229EBF1AC34C08B140 Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/959877d0-e1a7-3d85-814d-8bfef58d1e7b.roa Signing time: Sun 16 Mar 2025 16:27:11 +0000 ROA not before: Sun 16 Mar 2025 16:27:11 +0000 ROA not after: Sat 14 Jun 2025 16:27:11 +0000 asID: 22351 IP address blocks: 66.36.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:74:e4:22:9e:bf:1a:c3:4c:08:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Validity Not Before: Mar 16 16:27:11 2025 GMT Not After : Jun 14 16:27:11 2025 GMT Subject: CN=fc90b8c2-d2d9-4ecd-8cf0-c7e8465d602d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:66:6f:37:ca:3a:85:e4:a2:75:5e:15:ca: 85:b0:0f:ea:5e:d1:81:3a:db:87:5c:01:dc:6b:58: 4a:3b:36:56:9d:a3:10:c0:e4:17:db:9f:8b:0d:ce: ad:4d:41:ad:43:ca:16:1d:c2:ec:39:65:0d:7b:b8: ab:20:18:2a:f1:82:35:5e:9a:c6:66:3c:2f:45:08: 88:9d:96:7c:42:c5:41:ab:de:41:c4:d2:b6:c1:05: 92:be:e5:cd:4a:05:4f:d4:1b:79:ab:bf:b2:29:33: 65:a6:49:c7:02:a9:77:7f:ad:eb:98:3b:20:60:c8: c1:01:16:95:49:bf:30:36:02:f4:00:e4:dd:d1:74: 77:09:cb:68:76:d1:30:3e:eb:58:55:79:8b:a8:c9: 8b:6b:8a:fb:a6:57:2e:8d:e0:b5:78:c0:ed:65:82: 14:78:16:6d:4a:a4:18:8f:dc:ef:83:fb:b9:a6:12: ae:2c:7c:40:5d:65:56:36:33:38:7c:f8:64:c4:23: cd:76:a8:95:72:54:04:9c:ff:52:ae:8d:76:9c:71: 01:9e:8e:11:10:82:e9:8c:b2:3d:a6:71:7f:59:98: 61:d6:13:14:09:6e:ef:78:2b:90:08:a0:eb:3a:e8: 11:46:d8:0a:d7:ed:8f:15:df:11:5b:d2:8b:0e:ab: 3a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4F:31:20:D0:6A:49:23:23:37:A9:C0:99:82:D7:68:69:4A:02:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/959877d0-e1a7-3d85-814d-8bfef58d1e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl X509v3 Authority Key Identifier: keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer sbgp-ipAddrBlock: critical IPv4: 66.36.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3b:a1:f2:7a:aa:7c:fd:8f:f5:6d:ad:2e:a7:a2:e4:0e:4c: 7d:ec:9d:ed:75:a3:72:ce:45:5a:cf:f7:92:f1:58:33:9b:54: d9:00:b4:4a:1f:a1:c6:5e:42:48:33:5c:17:ba:7d:5f:86:4b: ec:86:e5:1b:33:bc:c1:d4:31:8c:0d:6a:ae:1b:9c:13:dc:1e: 2b:e1:a3:63:e6:fa:0e:54:58:14:6f:bb:3b:c8:22:0e:f5:64: 26:fb:ec:c7:94:91:fc:41:92:ed:50:3f:9a:6b:0c:60:78:7e: e5:20:5b:47:05:82:20:f2:94:76:f5:36:d5:a9:e1:d1:f8:5a: 26:1d:e8:83:58:09:eb:cc:08:5e:9f:e9:47:1a:ee:a5:35:9c: b5:2f:00:01:3d:b1:2f:62:56:ac:ce:a9:a7:19:bf:57:ed:71: 6f:81:04:94:e6:01:74:72:85:57:80:4c:c4:7b:4c:c2:53:c9: e7:3c:96:21:8b:30:14:a5:cf:3d:49:0c:85:7f:f5:36:47:40: 62:bf:83:40:a5:53:fe:c2:2e:6d:9b:87:fd:e2:06:01:af:bd: d3:ff:1b:82:8b:95:00:c3:eb:6f:a2:2b:20:c7:e1:25:bb:73: 2c:de:bd:56:d8:34:d6:82:b0:f0:36:09:2d:1d:f8:d8:e8:50: ac:e5:cb:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1dOQinr8aw0wIsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBlNGE0OWMtNjExYy00ZTgzLWI3NmQtNDBlZmNkMjlm YTUzMB4XDTI1MDMxNjE2MjcxMVoXDTI1MDYxNDE2MjcxMVowLzEtMCsGA1UEAxMk ZmM5MGI4YzItZDJkOS00ZWNkLThjZjAtYzdlODQ2NWQ2MDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMVmbzfKOoXkonVeFcqFsA/qXtGBOtuHXAHc a1hKOzZWnaMQwOQX25+LDc6tTUGtQ8oWHcLsOWUNe7irIBgq8YI1XprGZjwvRQiI nZZ8QsVBq95BxNK2wQWSvuXNSgVP1Bt5q7+yKTNlpknHAql3f63rmDsgYMjBARaV Sb8wNgL0AOTd0XR3CctodtEwPutYVXmLqMmLa4r7plcujeC1eMDtZYIUeBZtSqQY j9zvg/u5phKuLHxAXWVWNjM4fPhkxCPNdqiVclQEnP9Sro12nHEBno4REILpjLI9 pnF/WZhh1hMUCW7veCuQCKDrOugRRtgK1+2PFd8RW9KLDqs6AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1PMSDQakkjIzepwJmC12hpSgLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0 YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVmY2QyOWZhNTMvOTU5ODc3ZDAtZTFhNy0z ZDg1LTgxNGQtOGJmZWY1OGQxZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDBlNGE0OWMtNjExYy00ZTgzLWI3 NmQtNDBlZmNkMjlmYTUzLzAwZTRhNDljLTYxMWMtNGU4My1iNzZkLTQwZWZjZDI5 ZmE1My5jcmwwHwYDVR0jBBgwFoAU8smlwyRWacbuFJCQ3yj0WDDLkiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVm Y2QyOWZhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg7ofJ6qnz9j/VtrS6nouQOTH3sne11o3LORVrP95LxWDObVNkAtEof ocZeQkgzXBe6fV+GS+yG5RszvMHUMYwNaq4bnBPcHivho2Pm+g5UWBRvuzvIIg71 ZCb77MeUkfxBku1QP5prDGB4fuUgW0cFgiDylHb1NtWp4dH4WiYd6INYCevMCF6f 6Uca7qU1nLUvAAE9sS9iVqzOqacZv1ftcW+BBJTmAXRyhVeATMR7TMJTyec8liGL MBSlzz1JDIV/9TZHQGK/g0ClU/7CLm2bh/3iBgGvvdP/G4KLlQDD62+iKyDH4SW7 cyzevVbYNNaCsPA2CS0d+NjoUKzlyxo= -----END CERTIFICATE-----Generated at Mon Apr 28 00:34:51 2025 by rpki-client