$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/fe0afcd2-596a-3de4-9e29-5ffe884e3849.roa File: fe0afcd2-596a-3de4-9e29-5ffe884e3849.roa (raw, json) Hash identifier: X7i7TU9u/vBpuCWgOxeFJ9MdOqvsWce1FCWZAkfMfyo= Subject key identifier: 2F:61:10:18:D8:C3:BE:21:48:1A:2C:E7:58:02:06:6B:A1:61:57:DB Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584908817883C1AF2DA46AD9F1C0 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/fe0afcd2-596a-3de4-9e29-5ffe884e3849.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 11693 IP address blocks: 66.216.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:78:83:c1:af:2d:a4:6a:d9:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=10de4645-b5c7-4bda-bb18-8a0bbc5e9b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:0f:e9:bb:34:c6:87:f9:f3:a9:16:71:05: 0d:4d:52:5e:5d:f7:e8:fb:cd:ae:44:e9:64:2b:f7: 64:6f:65:cd:aa:d6:97:50:a1:e2:9e:8f:85:c7:c8: e2:88:f1:bd:53:20:8f:1d:b9:da:e5:da:32:d4:68: a4:b1:93:5a:19:db:41:e8:dc:03:ee:0b:ac:84:fc: 32:8c:b0:c9:80:08:92:75:64:1e:05:e2:1d:b1:40: c7:9a:57:74:37:2e:d7:7f:d6:19:a2:51:38:eb:46: 6d:19:a0:00:27:20:9e:1c:c5:18:02:53:34:02:6f: 58:c0:b9:06:01:5e:59:0f:e6:59:93:81:c0:c1:2c: c2:4b:79:f9:c0:4e:c0:b4:2d:e1:56:57:1d:19:b8: f9:f0:17:be:1d:b9:b8:f4:12:f3:b5:d6:fc:1a:ac: 2a:65:0a:c2:73:c9:b8:c2:a4:86:d1:60:a6:f4:49: 3e:ab:de:77:15:bd:88:de:6e:67:d0:21:e9:7e:24: 2e:c5:47:71:aa:28:c2:1e:73:d1:c9:6a:5b:f6:37: 8f:31:64:98:21:03:f3:3a:63:7e:2e:b8:85:a7:6b: c4:7c:46:a4:8d:f7:7e:bf:84:4a:ff:d7:11:a5:f3: 6e:56:e8:fd:5e:b3:8f:ad:58:d3:36:77:b3:6e:94: 5d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:61:10:18:D8:C3:BE:21:48:1A:2C:E7:58:02:06:6B:A1:61:57:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/fe0afcd2-596a-3de4-9e29-5ffe884e3849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 66.216.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:21:bc:67:6b:fc:a8:68:c1:6a:11:31:58:dd:01:50:01:e3: 3d:fc:09:9c:1d:8f:a2:cd:36:58:44:77:9b:ee:39:d3:6e:80: ed:52:65:6f:1d:6c:4b:1f:7b:7c:ae:5f:be:7a:aa:9f:25:c2: 30:47:5f:e7:8d:4b:5b:d5:f8:0b:fd:8e:56:36:b3:7a:99:36: 08:b6:66:83:f9:44:f0:3a:b4:a3:9a:bd:54:9f:11:96:b3:14: 47:48:af:69:0c:19:e3:08:1a:a4:01:cf:9f:68:90:95:0e:06: d8:3d:2e:74:27:77:93:62:df:04:fb:41:d8:c1:82:e6:cc:c6: 82:c3:72:6f:82:9d:38:51:37:75:f8:14:ed:89:29:35:10:ae: 49:2b:e8:89:21:90:6e:06:b9:68:dc:f0:b6:c7:83:36:f7:13: 7d:b8:1f:7e:83:dd:22:db:9b:ab:48:37:e6:4b:09:fe:21:3b: 7f:3b:b3:7a:cd:ff:65:67:16:b8:68:29:bc:6f:35:59:8b:70: 7f:24:7f:41:92:9c:67:5e:61:4a:3b:38:72:18:5f:0f:88:b0: 60:73:37:6a:81:45:e6:00:4f:00:0f:a7:2b:53:30:ac:9f:ac: 8c:0f:49:41:1d:5f:6c:0a:0c:93:87:4b:d3:61:d9:bb:53:d1: 33:50:da:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXiDwa8tpGrZ8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MTBkZTQ2NDUtYjVjNy00YmRhLWJiMTgtOGEwYmJjNWU5YjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7wP6bs0xof586kWcQUNTVJeXffo+82uROlk K/dkb2XNqtaXUKHino+Fx8jiiPG9UyCPHbna5doy1GiksZNaGdtB6NwD7gushPwy jLDJgAiSdWQeBeIdsUDHmld0Ny7Xf9YZolE460ZtGaAAJyCeHMUYAlM0Am9YwLkG AV5ZD+ZZk4HAwSzCS3n5wE7AtC3hVlcdGbj58Be+Hbm49BLztdb8GqwqZQrCc8m4 wqSG0WCm9Ek+q953Fb2I3m5n0CHpfiQuxUdxqijCHnPRyWpb9jePMWSYIQPzOmN+ LriFp2vEfEakjfd+v4RK/9cRpfNuVuj9XrOPrVjTNnezbpRd+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9hEBjYw74hSBos51gCBmuhYVfbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvZmUwYWZjZDItNTk2YS0z ZGU0LTllMjktNWZmZTg4NGUzODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtjGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIhvGdr/KhowWoRMVjdAVAB4z38CZwdj6LNNlhEd5vuOdNugO1SZW8d bEsfe3yuX756qp8lwjBHX+eNS1vV+Av9jlY2s3qZNgi2ZoP5RPA6tKOavVSfEZaz FEdIr2kMGeMIGqQBz59okJUOBtg9LnQnd5Ni3wT7QdjBgubMxoLDcm+CnThRN3X4 FO2JKTUQrkkr6IkhkG4GuWjc8LbHgzb3E324H36D3SLbm6tIN+ZLCf4hO387s3rN /2VnFrhoKbxvNVmLcH8kf0GSnGdeYUo7OHIYXw+IsGBzN2qBReYATwAPpytTMKyf rIwPSUEdX2wKDJOHS9Nh2btT0TNQ2mA= -----END CERTIFICATE-----Generated at Tue Apr 29 09:18:48 2025 by rpki-client