$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa File: 04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa (raw, json) Hash identifier: EC4vmpLsugjlu4txOiveVDs5lns42He/UseBdnI1nXw= Subject key identifier: 1B:47:60:32:8F:C8:22:1A:5A:AF:3B:2A:35:9D:8B:D7:D7:8D:04:3A Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Certificate serial: 010D0C9F43285848FBA5890AC91A97E619E41F80 Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa Signing time: Sun 23 Feb 2025 23:28:19 +0000 ROA not before: Sun 23 Feb 2025 23:28:19 +0000 ROA not after: Sat 24 May 2025 22:28:19 +0000 asID: 54309 IP address blocks: 66.33.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fb:a5:89:0a:c9:1a:97:e6:19:e4:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Validity Not Before: Feb 23 23:28:19 2025 GMT Not After : May 24 22:28:19 2025 GMT Subject: CN=5d034ebe-7303-4f70-9d08-9c3b4ed23ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:db:14:62:a6:c6:1c:0a:6e:78:99:a1:8f:e0: 40:de:31:c2:e6:05:6c:d5:8d:d1:49:14:0b:d2:23: 43:89:3e:39:42:04:f3:49:31:a0:24:d7:2e:a5:13: 29:70:c9:e9:f5:e5:04:a5:3d:a8:34:4e:c3:fb:2b: a7:c2:25:20:de:c0:e2:26:fd:f3:03:ba:13:b4:25: 69:92:b3:79:51:85:95:f1:17:c7:ac:ec:12:06:ee: 62:09:4d:e2:92:e1:82:d8:3e:45:71:ef:7d:ae:55: f3:74:6d:a0:7c:55:dd:91:e6:b3:fb:43:68:0e:99: 7e:3c:92:e5:30:8a:9e:1a:0d:30:c4:3e:8f:74:14: c4:bf:0b:04:c4:00:2e:bb:48:5f:37:30:50:d6:f3: 7b:51:bc:ce:83:50:d1:6e:85:be:12:9e:80:c6:2c: 7b:99:d2:5a:50:24:0c:5c:a4:81:b2:00:64:2f:52: 52:67:96:22:e2:04:97:d4:bf:1a:80:31:c0:b7:ba: 21:e2:21:90:64:d4:de:49:ee:50:33:e0:51:1a:37: 8f:50:2f:d7:87:8a:fb:6e:b3:dc:ee:4b:b0:7e:27: 03:3a:16:87:58:b1:46:f8:e6:cc:36:35:71:71:11: fb:58:d0:54:64:fb:77:60:1b:fa:4d:6b:1e:66:5c: bf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:47:60:32:8F:C8:22:1A:5A:AF:3B:2A:35:9D:8B:D7:D7:8D:04:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl X509v3 Authority Key Identifier: keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer sbgp-ipAddrBlock: critical IPv4: 66.33.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:76:8b:9c:8d:52:45:c0:13:f8:04:7a:c4:30:b9:37:76:aa: ad:96:87:e1:fa:1d:53:9f:b5:5f:ad:6b:39:f9:8b:f7:2a:aa: 4d:b2:08:19:6d:1e:38:1d:f5:f0:52:2c:e2:d7:60:80:91:be: 02:68:2e:00:ac:53:14:b5:a9:24:99:b6:c0:e3:e9:7d:b2:90: 8f:56:14:a0:16:8a:8b:4a:a7:88:05:af:ae:c5:9f:24:a7:b5: 64:3a:ec:41:88:bf:7c:13:59:e8:fc:ee:74:91:34:a3:54:79: a6:6b:6b:f4:39:50:87:13:94:8c:19:1d:18:ee:e4:3f:82:6b: cf:0d:51:21:ec:18:a5:37:00:b7:40:a4:b0:a4:6d:3a:71:9c: c5:d7:df:55:7a:21:5c:43:3d:6d:21:06:1d:a8:80:8d:bc:dd: 22:bf:f0:46:97:40:ad:b7:03:95:2d:07:76:00:e5:29:6c:63: d2:ef:c6:2a:1d:b8:08:14:80:d9:f9:4f:b4:b0:89:9e:f3:0c: 8e:b5:b8:ea:bb:e8:c1:4d:26:37:a4:0c:82:8f:fc:7a:cb:96: 42:2b:28:bf:f5:6c:77:06:34:1e:c2:81:ae:c3:4b:ae:90:fa: 38:65:f5:c2:dc:17:c9:0c:aa:96:74:6a:66:d0:c6:30:e9:5d: b6:39:72:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj7pYkKyRqX5hnkH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm MDkxMB4XDTI1MDIyMzIzMjgxOVoXDTI1MDUyNDIyMjgxOVowLzEtMCsGA1UEAxMk NWQwMzRlYmUtNzMwMy00ZjcwLTlkMDgtOWMzYjRlZDIzYWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NsUYqbGHApueJmhj+BA3jHC5gVs1Y3RSRQL 0iNDiT45QgTzSTGgJNcupRMpcMnp9eUEpT2oNE7D+yunwiUg3sDiJv3zA7oTtCVp krN5UYWV8RfHrOwSBu5iCU3ikuGC2D5Fce99rlXzdG2gfFXdkeaz+0NoDpl+PJLl MIqeGg0wxD6PdBTEvwsExAAuu0hfNzBQ1vN7UbzOg1DRboW+Ep6Axix7mdJaUCQM XKSBsgBkL1JSZ5Yi4gSX1L8agDHAt7oh4iGQZNTeSe5QM+BRGjePUC/Xh4r7brPc 7kuwficDOhaHWLFG+ObMNjVxcRH7WNBUZPt3YBv6TWseZly/DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtHYDKPyCIaWq87KjWdi9fXjQQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5 ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvMDRmNGEzZmItNDQyZS0z MzE0LTkwYjktYjExZDkzY2JjYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5 ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk MTYyOWYwOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd2i5yNUkXAE/gEesQwuTd2qq2Wh+H6HVOftV+tazn5i/cqqk2yCBlt Hjgd9fBSLOLXYICRvgJoLgCsUxS1qSSZtsDj6X2ykI9WFKAWiotKp4gFr67FnySn tWQ67EGIv3wTWej87nSRNKNUeaZra/Q5UIcTlIwZHRju5D+Ca88NUSHsGKU3ALdA pLCkbTpxnMXX31V6IVxDPW0hBh2ogI283SK/8EaXQK23A5UtB3YA5SlsY9Lvxiod uAgUgNn5T7SwiZ7zDI61uOq76MFNJjekDIKP/HrLlkIrKL/1bHcGNB7Cga7DS66Q +jhl9cLcF8kMqpZ0ambQxjDpXbY5ck8= -----END CERTIFICATE-----Generated at Sun Apr 27 23:14:43 2025 by rpki-client