$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa File: 8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa (raw, json) Hash identifier: bJP9cGhiV10VDcc0xPM1qrUw/GfD8WGEN/Eng7RP9eA= Subject key identifier: C9:38:4E:DE:E7:A3:5F:E3:DF:BE:68:40:8F:0E:FD:38:12:DA:80:21 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584981D45D40A6D44CCBCACD02B0 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 13768 IP address blocks: 66.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:5d:40:a6:d4:4c:cb:ca:cd:02:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=23b3532d-95c1-499f-baa8-cd4edb7d9f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:55:27:85:db:b2:44:e5:4c:c3:e0:61:05:33: f9:1e:33:74:72:4d:e5:44:c6:c8:15:af:c3:46:3b: 9d:63:6b:cf:e9:63:d9:62:1b:67:57:9f:5b:e3:08: 95:a5:93:8a:de:6f:fc:d7:43:b5:4a:36:8d:df:1e: ee:7d:1a:3a:98:07:58:40:e1:bd:0e:96:6e:b3:44: b2:3f:9e:6d:cb:e5:bd:23:86:1f:69:6a:ed:3c:4e: 7a:00:1f:2a:85:95:af:ff:5b:ef:66:7b:53:58:44: 4f:07:53:00:73:ab:e9:2e:3f:56:be:08:ec:23:38: fb:24:cc:05:0d:56:af:71:59:79:b3:91:da:5e:d1: 57:07:a9:62:76:7d:0c:af:ef:3e:a1:b9:56:26:10: 9f:86:52:b9:b7:22:b6:97:ac:0c:91:a8:5a:59:db: 12:ec:28:1c:97:25:b1:6a:d3:5e:19:c4:7e:0f:5c: c2:92:50:07:6e:47:1d:ae:3e:73:f0:86:20:59:c3: 68:44:0c:88:2d:46:82:23:3a:97:03:ca:32:db:ab: 5d:d0:fa:5a:96:8c:ea:56:ca:2e:28:d9:29:3e:56: 50:c2:e7:4b:2a:81:89:3e:1b:cf:7f:25:ce:07:a8: e9:89:83:da:7e:1a:8a:33:cb:c1:3e:f2:ab:8c:2c: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:38:4E:DE:E7:A3:5F:E3:DF:BE:68:40:8F:0E:FD:38:12:DA:80:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 66.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:2b:f0:44:4d:16:87:03:9d:a9:66:b5:4d:3d:38:40:13:14: 52:6e:a8:4d:bb:9d:21:48:3f:55:25:ee:da:6d:1d:0f:95:1a: f9:c5:b0:21:f6:03:04:6e:92:e8:cf:11:6f:fa:91:d9:5f:54: a8:8b:1c:5c:44:8c:c2:0d:ae:d9:ba:a2:80:03:50:de:42:9c: 81:c8:67:97:af:72:98:fd:12:a3:25:a7:9b:8c:71:2f:4e:5a: a7:b1:e4:17:c9:b9:c4:d8:65:d1:41:a4:e4:d4:43:45:b3:1b: 13:38:e8:19:88:0a:f2:21:1d:61:2b:29:cc:6b:dc:58:96:57: a9:88:74:6a:f7:ca:1c:a8:f3:37:25:6d:a5:aa:48:2b:01:49: 74:c5:7f:86:fa:dc:0a:e7:37:a5:e9:b5:bb:92:6e:36:fa:a6: 42:fe:b7:76:a1:87:c6:4a:ff:5e:92:5a:8d:22:d8:b1:62:f0: 61:c0:00:24:8f:92:84:d9:8d:21:ba:3d:55:e4:4d:d9:f8:00: 4c:77:db:87:28:bc:7c:10:14:08:17:68:20:a8:0d:8b:d3:00: cb:d2:01:1a:ee:fc:ba:79:21:9a:44:48:6c:3c:94:db:dd:78: 5d:88:6f:75:74:56:02:06:5b:ec:e2:37:29:63:70:e0:f6:7d: 61:76:05:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1F1AptRMy8rNArAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk MjNiMzUzMmQtOTVjMS00OTlmLWJhYTgtY2Q0ZWRiN2Q5ZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FUnhduyROVMw+BhBTP5HjN0ck3lRMbIFa/D RjudY2vP6WPZYhtnV59b4wiVpZOK3m/810O1SjaN3x7ufRo6mAdYQOG9DpZus0Sy P55ty+W9I4YfaWrtPE56AB8qhZWv/1vvZntTWERPB1MAc6vpLj9WvgjsIzj7JMwF DVavcVl5s5HaXtFXB6lidn0Mr+8+oblWJhCfhlK5tyK2l6wMkahaWdsS7CgclyWx atNeGcR+D1zCklAHbkcdrj5z8IYgWcNoRAyILUaCIzqXA8oy26td0PpalozqVsou KNkpPlZQwudLKoGJPhvPfyXOB6jpiYPafhqKM8vBPvKrjCzctwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk4Tt7no1/j375oQI8O/TgS2oAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvOGRhMGIxNTMtNTYzYi0z YmYzLTk4ZTMtMTZmNWM0OGZjMmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJor8ERNFocDnalmtU09OEATFFJuqE27nSFIP1Ul7tptHQ+VGvnFsCH2 AwRukujPEW/6kdlfVKiLHFxEjMINrtm6ooADUN5CnIHIZ5evcpj9EqMlp5uMcS9O Wqex5BfJucTYZdFBpOTUQ0WzGxM46BmICvIhHWErKcxr3FiWV6mIdGr3yhyo8zcl baWqSCsBSXTFf4b63ArnN6XptbuSbjb6pkL+t3ahh8ZK/16SWo0i2LFi8GHAACSP koTZjSG6PVXkTdn4AEx324covHwQFAgXaCCoDYvTAMvSARru/Lp5IZpESGw8lNvd eF2Ib3V0VgIGW+ziNyljcOD2fWF2BSg= -----END CERTIFICATE-----Generated at Sun Apr 27 22:12:19 2025 by rpki-client