$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa File: 6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa (raw, json) Hash identifier: QiFDxERTG1P/amfOesKhv3qt6p/haU7Unx9x0HzOMck= Subject key identifier: 2E:0A:16:60:07:C0:8C:2F:3D:E0:4D:1D:FB:FD:0F:E1:73:EB:A7:5E Certificate issuer: /CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Certificate serial: 010D0C9F43285848FD56C83F66F425D9E5096900 Authority key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 66.33.34.0/24 maxlen: 24 66.33.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c8:3f:66:f4:25:d9:e5:09:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=61d9e5a0-44d8-470e-ae10-099d488b6162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:37:fa:c2:77:87:49:25:d9:81:82:f8:ae: 69:bb:24:6e:59:5e:7e:87:4f:b4:b7:2a:e1:90:45: b8:13:d1:e9:b7:2c:f2:ec:1a:4e:ab:35:f7:59:42: 78:36:f8:5d:71:f7:2e:4f:56:96:b5:f6:0e:76:61: 66:bb:00:31:de:22:67:47:23:eb:e2:84:90:89:6c: f8:5c:6b:3c:57:ea:e6:0f:3c:1f:96:2d:e9:dd:46: 0d:3a:7b:3b:94:a0:c7:70:75:83:ff:26:c3:f2:8c: 7e:12:05:1c:bc:40:45:95:0f:2e:3f:8e:be:16:b3: c7:f0:59:1e:76:34:13:c2:ae:5d:c9:a8:23:0f:8d: 2f:98:f2:b6:0d:dd:32:61:08:2a:5d:bf:ec:38:c0: d8:6f:e2:b4:7a:7f:7b:a3:e1:14:ba:49:6c:0b:4e: 23:9a:bc:1e:c2:7c:df:84:9b:a0:48:92:85:c6:05: f4:73:81:7a:a0:43:c7:cd:25:ae:2d:58:ed:a3:01: 63:dc:47:b4:3d:f5:e0:e3:6f:e8:61:a6:fd:90:4f: ea:e9:42:93:5b:b9:0e:f7:50:5d:e5:54:84:43:8a: fe:5d:83:8d:ff:03:cd:14:52:83:3c:38:f8:de:db: ae:e7:e5:82:cd:68:30:ea:f1:92:24:42:a8:68:35: cc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0A:16:60:07:C0:8C:2F:3D:E0:4D:1D:FB:FD:0F:E1:73:EB:A7:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl X509v3 Authority Key Identifier: keyid:F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer sbgp-ipAddrBlock: critical IPv4: 66.33.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:05:c2:93:7e:0c:2a:62:12:65:0b:4e:5a:e4:87:ca:16:26: a5:f1:da:df:09:eb:6a:cf:59:e2:97:06:85:07:19:67:a8:bd: 66:70:ee:fc:27:c8:d8:48:75:be:17:68:c1:1e:ef:f3:30:27: 09:38:0d:29:13:d5:b0:24:9e:c4:4a:b9:f9:d2:24:8a:77:a8: 37:96:49:64:22:94:58:04:e6:56:5b:b7:76:e6:77:f0:2a:62: 04:fc:06:87:83:3d:0d:8d:f7:44:32:0c:db:8b:7c:ba:1a:69: 59:01:09:7b:77:e9:95:a1:a6:dc:18:7a:7f:fa:b0:5c:31:5b: 9b:17:c1:e1:5c:a8:1b:eb:d2:32:d8:8c:8f:c0:9f:51:84:59: 85:44:fc:1d:21:86:9c:85:b4:54:bf:fb:83:61:0a:9f:91:cc: a7:84:10:ec:3d:e4:8e:d6:17:62:59:c7:90:9f:3f:df:22:55: 6f:bc:ca:8c:75:95:de:03:60:32:84:1a:99:fb:9d:ba:45:ac: 66:fa:4c:87:62:8b:08:f5:f6:14:81:9c:2b:62:f8:85:55:00: bc:8c:be:22:de:2c:4e:31:fe:ac:b8:19:94:de:13:2b:fe:8d: 10:37:e0:fa:e4:c7:82:6e:3c:e9:7e:1e:71:fa:bb:db:e9:f5: 86:09:90:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vsg/ZvQl2eUJaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhNmZiYzQtNTllMi00OWI0LWEzNDUtM2VkZGU4MWYy NmE0MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NjFkOWU1YTAtNDRkOC00NzBlLWFlMTAtMDk5ZDQ4OGI2MTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM43+sJ3h0kl2YGC+K5puyRuWV5+h0+0tyrh kEW4E9Hptyzy7BpOqzX3WUJ4NvhdcfcuT1aWtfYOdmFmuwAx3iJnRyPr4oSQiWz4 XGs8V+rmDzwfli3p3UYNOns7lKDHcHWD/ybD8ox+EgUcvEBFlQ8uP46+FrPH8Fke djQTwq5dyagjD40vmPK2Dd0yYQgqXb/sOMDYb+K0en97o+EUuklsC04jmrwewnzf hJugSJKFxgX0c4F6oEPHzSWuLVjtowFj3Ee0PfXg42/oYab9kE/q6UKTW7kO91Bd 5VSEQ4r+XYON/wPNFFKDPDj43tuu5+WCzWgw6vGSJEKoaDXMzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4KFmAHwIwvPeBNHfv9D+Fz66deMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2 ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRkZTgxZjI2YTQvNmM5MWE3ZGMtYjMyOS0z YWM2LWJiODQtMTA1NDliZjNkNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDdhNmZiYzQtNTllMi00OWI0LWEz NDUtM2VkZGU4MWYyNmE0LzQ3YTZmYmM0LTU5ZTItNDliNC1hMzQ1LTNlZGRlODFm MjZhNC5jcmwwHwYDVR0jBBgwFoAU8A3+W3wnOkCARHzodZuLMa3LV1wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRk ZTgxZjI2YTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQiEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAFwpN+DCpiEmULTlrkh8oWJqXx2t8J62rPWeKXBoUHGWeovWZw7vwn yNhIdb4XaMEe7/MwJwk4DSkT1bAknsRKufnSJIp3qDeWSWQilFgE5lZbt3bmd/Aq YgT8BoeDPQ2N90QyDNuLfLoaaVkBCXt36ZWhptwYen/6sFwxW5sXweFcqBvr0jLY jI/An1GEWYVE/B0hhpyFtFS/+4NhCp+RzKeEEOw95I7WF2JZx5CfP98iVW+8yox1 ld4DYDKEGpn7nbpFrGb6TIdiiwj19hSBnCti+IVVALyMviLeLE4x/qy4GZTeEyv+ jRA34Prkx4JuPOl+HnH6u9vp9YYJkOI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:12 2025 by rpki-client