$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/c1a8df51-cd13-36bf-8ae8-c10d54a82d18.roa File: c1a8df51-cd13-36bf-8ae8-c10d54a82d18.roa (raw, json) Hash identifier: oPS1plXpsA+FzCS++eM0NAW8g8ZjDOHZRlM/0YwfYMY= Subject key identifier: C3:1F:BD:CA:AA:BE:65:7C:90:E9:F8:21:BA:57:C2:54:C6:FD:C6:32 Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Certificate serial: 010D0C9F43285849393E798DE17F7367F2576880 Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/c1a8df51-cd13-36bf-8ae8-c10d54a82d18.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 13335 IP address blocks: 66.118.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:79:8d:e1:7f:73:67:f2:57:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=a68b0a2b-30d6-434c-a26b-62f2974cf425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ed:31:80:bf:8e:60:a8:e2:c8:9f:d7:03:7a: d6:94:6c:db:07:82:71:cd:29:62:75:bd:7b:bb:c7: 59:91:38:62:47:86:11:93:78:c9:ad:75:92:14:29: 48:40:da:33:c8:71:3e:7f:1c:66:9b:a2:ca:b5:1b: af:06:77:56:ab:0f:21:01:20:2a:10:b6:ca:87:00: 08:de:8e:da:a4:a5:cb:e6:97:6f:f2:07:70:5d:01: da:bf:b1:4c:7a:65:bf:3f:49:11:4f:2d:83:63:a9: 14:c2:c9:21:ee:4f:de:d6:30:cf:e3:a6:7e:cd:83: 00:95:28:c7:20:dc:f6:32:a9:b3:da:33:56:58:da: 3e:b0:19:a4:6b:f6:2d:6b:ca:ce:ff:26:d3:c1:c0: 71:fe:23:b9:b5:91:e2:8c:a8:74:6e:c6:1e:ab:e6: 03:96:64:b0:e3:ec:f7:55:1b:0f:b6:d1:38:fe:18: 30:48:96:77:aa:fa:e0:70:26:82:23:a1:6d:1f:b8: 09:da:42:48:3f:ff:ab:9f:c3:92:52:da:65:e1:71: f6:2c:3c:df:a7:98:2e:d6:c4:ef:6f:37:f4:fc:93: 63:c7:e9:f1:21:d4:93:f9:67:c2:49:2e:fa:04:b2: 68:39:cb:4b:de:57:d3:ed:99:65:a7:fe:e2:e7:79: 93:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1F:BD:CA:AA:BE:65:7C:90:E9:F8:21:BA:57:C2:54:C6:FD:C6:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/c1a8df51-cd13-36bf-8ae8-c10d54a82d18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl X509v3 Authority Key Identifier: keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer sbgp-ipAddrBlock: critical IPv4: 66.118.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:ae:7d:b2:43:42:d4:9d:82:50:22:6c:e6:67:34:e3:a8:5d: e5:7d:f9:8e:c9:45:b1:7b:09:61:cb:a7:a0:fd:35:a2:fd:43: 00:1f:6e:4e:d6:43:79:c2:39:9a:e1:70:6b:a2:9d:dd:d7:94: 81:58:c9:be:86:3e:8f:62:90:20:f9:00:ca:08:a1:51:99:ac: 44:86:ba:a8:db:5f:98:ff:34:dd:c3:fc:85:c5:94:6d:17:43: 61:51:51:43:bd:1c:4c:87:a2:81:aa:fa:3e:c6:ff:f1:35:70: ed:9a:ea:ed:dd:62:f9:e4:37:cd:40:47:fb:0a:b9:ae:69:8f: 51:03:ae:1b:69:9f:ef:40:0c:42:ea:a7:a1:3d:a4:18:c6:16: 28:cf:49:ff:42:4a:9a:86:6c:92:b4:a7:df:47:2d:a1:5c:2f: 38:7f:59:66:a5:ef:c9:ec:61:a4:b0:d1:de:4b:2b:38:8d:cd: ca:4f:6d:3b:df:00:63:55:85:18:d8:15:8b:19:94:5d:1e:8e: 08:a6:bc:df:7e:b8:9a:c9:df:e4:fe:9b:8a:75:89:be:a6:2c: e2:93:38:8a:af:32:31:17:dc:44:4e:79:7c:59:aa:83:9b:05: 3a:0d:16:77:97:3a:45:94:62:08:fa:94:53:77:25:55:f7:84: 71:78:50:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PnmN4X9zZ/JXaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRkYTAxM2QtOGJhMy00YWY1LTgwYWQtNzY3NGJkMGNj NDAzMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk YTY4YjBhMmItMzBkNi00MzRjLWEyNmItNjJmMjk3NGNmNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+0xgL+OYKjiyJ/XA3rWlGzbB4JxzSlidb17 u8dZkThiR4YRk3jJrXWSFClIQNozyHE+fxxmm6LKtRuvBndWqw8hASAqELbKhwAI 3o7apKXL5pdv8gdwXQHav7FMemW/P0kRTy2DY6kUwskh7k/e1jDP46Z+zYMAlSjH INz2Mqmz2jNWWNo+sBmka/Yta8rO/ybTwcBx/iO5tZHijKh0bsYeq+YDlmSw4+z3 VRsPttE4/hgwSJZ3qvrgcCaCI6FtH7gJ2kJIP/+rn8OSUtpl4XH2LDzfp5gu1sTv bzf0/JNjx+nxIdST+WfCSS76BLJoOctL3lfT7Zllp/7i53mToQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMfvcqqvmV8kOn4IbpXwlTG/cYyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGRh MDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQwY2M0MDMvYzFhOGRmNTEtY2QxMy0z NmJmLThhZTgtYzEwZDU0YTgyZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRkYTAxM2QtOGJhMy00YWY1LTgw YWQtNzY3NGJkMGNjNDAzLzY0ZGEwMTNkLThiYTMtNGFmNS04MGFkLTc2NzRiZDBj YzQwMy5jcmwwHwYDVR0jBBgwFoAULdEBwduz9WxXjIPl1BW4QAapnzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0 YmQwY2M0MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOufbJDQtSdglAibOZnNOOoXeV9+Y7JRbF7CWHLp6D9NaL9QwAfbk7W Q3nCOZrhcGuind3XlIFYyb6GPo9ikCD5AMoIoVGZrESGuqjbX5j/NN3D/IXFlG0X Q2FRUUO9HEyHooGq+j7G//E1cO2a6u3dYvnkN81AR/sKua5pj1EDrhtpn+9ADELq p6E9pBjGFijPSf9CSpqGbJK0p99HLaFcLzh/WWal78nsYaSw0d5LKziNzcpPbTvf AGNVhRjYFYsZlF0ejgimvN9+uJrJ3+T+m4p1ib6mLOKTOIqvMjEX3EROeXxZqoOb BToNFneXOkWUYgj6lFN3JVX3hHF4UOc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:20:34 2025 by rpki-client