$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5e0f428b-1b18-3926-8bdc-eb08486bab6c.roa File: 5e0f428b-1b18-3926-8bdc-eb08486bab6c.roa (raw, json) Hash identifier: stMxq9xVJpCk34nP2OCFw1HdtPpLVMNCRruemgUh4PI= Subject key identifier: C9:3C:65:0B:9A:5B:6A:AD:35:0B:C0:33:7C:7F:9D:19:35:CB:C8:26 Certificate issuer: /CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60 Certificate serial: 010D0C9F43285849244E7B145265A62CCC684330 Authority key identifier: 3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5e0f428b-1b18-3926-8bdc-eb08486bab6c.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 3561 IP address blocks: 66.207.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7b:14:52:65:a6:2c:cc:68:43:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=46053e39-58b3-42a2-a2f2-4b94a910d90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c8:64:fc:df:c1:1c:d6:3f:b3:ea:3a:b8:50: 79:84:72:2b:8e:e7:9a:da:5f:2a:7a:b4:8f:12:73: cc:04:7e:e1:73:50:df:e8:ae:32:3d:c9:ac:e1:25: fb:1a:2d:22:32:28:2b:0a:c9:68:6b:6e:d6:59:d1: 59:ee:30:1a:42:d9:ae:5d:c6:12:01:7e:4a:6c:e8: 40:af:ec:60:24:e3:13:43:cc:94:e5:0d:9a:0a:66: 91:10:4a:a5:88:c8:b6:2f:6b:76:2c:1e:ff:33:b1: 98:b3:59:9c:9e:5d:56:ce:10:1a:1d:fb:c7:8d:9d: b4:66:26:90:06:e7:4f:8a:6e:67:19:b2:91:77:ca: 8d:d6:53:10:ed:dc:10:61:dd:e8:ee:4b:2e:37:a8: 09:73:e4:91:d7:fd:ff:f5:4e:d9:d1:19:12:43:9c: 8a:6f:41:47:2d:af:2e:9c:d3:a2:60:3e:94:ad:33: 3a:7b:9c:48:b9:80:f3:97:0e:5d:61:a6:b9:5c:b5: ba:af:94:f5:c6:f5:d9:d7:47:8e:49:df:9c:79:ec: f0:74:e2:6e:1d:77:7e:fb:81:2a:c0:29:d7:f8:20: a7:57:25:6f:e0:b2:64:b0:5d:50:03:ce:fc:78:26: f4:9d:a6:9a:36:98:d4:38:a9:e2:3d:58:e5:35:50: d3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3C:65:0B:9A:5B:6A:AD:35:0B:C0:33:7C:7F:9D:19:35:CB:C8:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5e0f428b-1b18-3926-8bdc-eb08486bab6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl X509v3 Authority Key Identifier: keyid:3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer sbgp-ipAddrBlock: critical IPv4: 66.207.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ca:20:fb:4c:9e:78:ff:fb:ca:5b:9e:78:cf:08:46:95:ff: 69:ee:3f:cd:16:c6:e6:22:4c:de:48:d0:b4:a5:52:94:62:e9: a1:e0:45:bf:4c:47:56:1f:51:0e:17:e9:ca:ee:6e:22:de:1e: 39:9d:16:86:59:4d:93:b6:57:88:9d:8a:7c:77:48:62:ee:60: be:f5:81:20:f8:9f:ae:89:80:34:94:33:25:06:cd:11:32:dd: 6c:90:f5:91:b4:9a:2f:9e:7f:66:88:36:77:02:85:5a:61:3f: e0:95:64:03:33:a4:1e:a9:18:dd:7c:5f:b2:48:ca:70:d3:b4: d8:23:03:ba:9a:51:26:19:6b:5c:bf:f2:52:bd:cf:d1:0d:ff: 86:3f:be:f5:4b:31:dc:b9:67:b4:6e:2a:f5:45:ee:d1:e1:19: 81:e4:85:23:31:1b:d0:ac:ca:86:c3:90:a2:52:38:4c:55:42: b0:6c:e2:67:bf:c8:5e:ca:ac:c5:3a:80:f2:93:05:9f:9b:a2: f3:42:cf:9b:55:75:7d:72:ea:d0:b7:0b:ee:5d:67:55:67:07: 0f:57:ab:a4:15:f6:dc:f7:76:ab:e5:61:bb:3f:b7:79:1c:07: 90:af:e1:c7:bb:6d:0e:47:8c:c2:a4:ea:42:df:4b:6d:a8:3a: 82:1f:47:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnsUUmWmLMxoQzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YTUzYzItYWQzZC00ODI2LThjNDktODQ4NTdkZDRk YjYwMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NDYwNTNlMzktNThiMy00MmEyLWEyZjItNGI5NGE5MTBkOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4chk/N/BHNY/s+o6uFB5hHIrjuea2l8qerSP EnPMBH7hc1Df6K4yPcms4SX7Gi0iMigrCsloa27WWdFZ7jAaQtmuXcYSAX5KbOhA r+xgJOMTQ8yU5Q2aCmaREEqliMi2L2t2LB7/M7GYs1mcnl1WzhAaHfvHjZ20ZiaQ BudPim5nGbKRd8qN1lMQ7dwQYd3o7ksuN6gJc+SR1/3/9U7Z0RkSQ5yKb0FHLa8u nNOiYD6UrTM6e5xIuYDzlw5dYaa5XLW6r5T1xvXZ10eOSd+ceezwdOJuHXd++4Eq wCnX+CCnVyVv4LJksF1QA878eCb0naaaNpjUOKniPVjlNVDTLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk8ZQuaW2qtNQvAM3x/nRk1y8gmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh NTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1N2RkNGRiNjAvNWUwZjQyOGItMWIxOC0z OTI2LThiZGMtZWIwODQ4NmJhYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YTUzYzItYWQzZC00ODI2LThj NDktODQ4NTdkZDRkYjYwLzVjNWE1M2MyLWFkM2QtNDgyNi04YzQ5LTg0ODU3ZGQ0 ZGI2MC5jcmwwHwYDVR0jBBgwFoAUOpNtDGAmuMECDnX45ZtKtMXiNyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhNTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1 N2RkNGRiNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQs+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzKIPtMnnj/+8pbnnjPCEaV/2nuP80WxuYiTN5I0LSlUpRi6aHgRb9M R1YfUQ4X6crubiLeHjmdFoZZTZO2V4idinx3SGLuYL71gSD4n66JgDSUMyUGzREy 3WyQ9ZG0mi+ef2aINncChVphP+CVZAMzpB6pGN18X7JIynDTtNgjA7qaUSYZa1y/ 8lK9z9EN/4Y/vvVLMdy5Z7RuKvVF7tHhGYHkhSMxG9CsyobDkKJSOExVQrBs4me/ yF7KrMU6gPKTBZ+bovNCz5tVdX1y6tC3C+5dZ1VnBw9Xq6QV9tz3dqvlYbs/t3kc B5Cv4ce7bQ5HjMKk6kLfS22oOoIfR4U= -----END CERTIFICATE-----Generated at Sun Apr 27 16:30:49 2025 by rpki-client