$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/153865f9-f37c-3fd0-9bbe-09fa4b966381.roa File: 153865f9-f37c-3fd0-9bbe-09fa4b966381.roa (raw, json) Hash identifier: oicHZ8w5hjQLPDWzEIaOn9Mpld4GtuJmuK30rWXj2H0= Subject key identifier: FA:AA:2B:0B:33:7F:BB:5C:D3:83:07:BC:88:CD:3A:29:42:78:66:07 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584985E6371CA86A72E5C1095800 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/153865f9-f37c-3fd0-9bbe-09fa4b966381.roa Signing time: Mon 14 Apr 2025 12:00:11 +0000 ROA not before: Mon 14 Apr 2025 12:00:11 +0000 ROA not after: Sun 13 Jul 2025 12:00:11 +0000 asID: 23473 IP address blocks: 66.253.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:85:e6:37:1c:a8:6a:72:e5:c1:09:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 14 12:00:11 2025 GMT Not After : Jul 13 12:00:11 2025 GMT Subject: CN=5b411458-9910-49e9-a0c4-130923405f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e5:e1:7e:1a:9f:39:63:ad:22:a8:e6:6e:11: b7:bd:f1:65:f9:3b:99:cb:97:33:bf:71:0c:0f:f6: 7a:35:1e:66:f5:55:3e:1b:b8:f7:6a:01:ff:54:9a: de:d0:5b:aa:4d:6e:36:87:42:d9:ee:c8:84:2f:ad: 60:68:db:75:b3:49:dd:d2:1d:17:7f:d1:c6:0f:e9: 71:62:6b:a8:c0:eb:50:6f:00:76:33:f1:ef:95:a5: 8e:8a:ec:73:4f:a0:90:ef:2a:87:66:a0:60:bd:d3: ef:43:de:66:a0:b9:c0:57:13:96:d0:50:f1:9b:df: 29:76:e8:e8:91:0b:58:0b:a8:8d:ca:77:e5:80:7a: 9c:66:28:bd:ae:05:03:88:b7:4e:71:58:10:22:88: 6b:cc:2c:d8:bc:9f:e3:20:d5:80:e1:1a:c6:5d:8f: 08:ee:80:48:eb:37:10:ee:05:87:b6:52:df:d7:22: ee:a1:14:dd:af:46:f7:70:cf:9b:7a:7f:21:ad:73: 9d:0b:1a:df:9e:9d:6e:26:d3:b9:9f:51:9f:40:e9: 63:ac:17:17:05:e3:28:00:ef:b2:28:59:37:6e:e8: 81:7c:14:15:8d:fe:f1:93:3e:ae:b4:b9:c1:9f:7e: 37:1d:b7:4c:b6:a9:53:6f:6d:ec:c8:35:db:b2:82: f1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AA:2B:0B:33:7F:BB:5C:D3:83:07:BC:88:CD:3A:29:42:78:66:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/153865f9-f37c-3fd0-9bbe-09fa4b966381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:9f:e7:01:46:51:c0:13:c7:97:58:0d:d5:db:aa:60:1d:c2: 1a:bf:78:60:72:c3:02:93:01:40:54:f6:76:24:69:fc:c9:bc: 0c:50:4c:33:1f:44:fa:42:63:c2:3f:20:8b:4c:78:51:09:a6: ea:0e:71:09:e5:9c:8f:34:95:4e:e3:3b:85:c1:68:16:f8:a8: 4e:7a:ad:58:95:46:61:79:cd:43:38:87:1d:2a:1b:21:c9:d0: 69:5e:e2:c1:fa:8d:0c:10:b3:25:06:49:08:88:7e:03:a7:f4: bf:63:94:c5:48:84:c3:0e:05:06:6b:54:42:4c:80:70:7d:77: 4f:cf:b6:33:64:05:91:52:77:2a:9f:dc:c4:59:60:e9:08:e8: 7a:2a:47:bc:8e:8a:d3:48:4d:ca:35:62:28:f5:1c:dd:19:f7: 89:99:95:29:d1:ae:39:03:a8:2a:14:5a:83:0c:a7:3f:2e:75: 2c:23:1a:a3:0c:6d:aa:30:81:61:c8:b6:f7:ae:96:e6:b2:57: 00:fd:08:d7:7e:ff:b1:d6:ea:4b:63:76:fc:4a:a2:21:b6:a2: c9:9e:4c:32:2b:03:eb:82:db:11:d0:08:4a:46:0d:83:9a:93: 33:eb:19:33:a1:20:d9:96:c8:df:f9:67:b8:66:0a:01:ae:3f: 2c:2e:a3:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmF5jccqGpy5cEJWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDQxNDEyMDAxMVoXDTI1MDcxMzEyMDAxMVowLzEtMCsGA1UEAxMk NWI0MTE0NTgtOTkxMC00OWU5LWEwYzQtMTMwOTIzNDA1ZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeXhfhqfOWOtIqjmbhG3vfFl+TuZy5czv3EM D/Z6NR5m9VU+G7j3agH/VJre0FuqTW42h0LZ7siEL61gaNt1s0nd0h0Xf9HGD+lx YmuowOtQbwB2M/HvlaWOiuxzT6CQ7yqHZqBgvdPvQ95moLnAVxOW0FDxm98pdujo kQtYC6iNynflgHqcZii9rgUDiLdOcVgQIohrzCzYvJ/jINWA4RrGXY8I7oBI6zcQ 7gWHtlLf1yLuoRTdr0b3cM+ben8hrXOdCxrfnp1uJtO5n1GfQOljrBcXBeMoAO+y KFk3buiBfBQVjf7xkz6utLnBn343HbdMtqlTb23syDXbsoLx8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqqKwszf7tc04MHvIjNOilCeGYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMTUzODY1ZjktZjM3Yy0z ZmQwLTliYmUtMDlmYTRiOTY2MzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQv3yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSf5wFGUcATx5dYDdXbqmAdwhq/eGBywwKTAUBU9nYkafzJvAxQTDMf RPpCY8I/IItMeFEJpuoOcQnlnI80lU7jO4XBaBb4qE56rViVRmF5zUM4hx0qGyHJ 0Gle4sH6jQwQsyUGSQiIfgOn9L9jlMVIhMMOBQZrVEJMgHB9d0/PtjNkBZFSdyqf 3MRZYOkI6HoqR7yOitNITco1Yij1HN0Z94mZlSnRrjkDqCoUWoMMpz8udSwjGqMM baowgWHItveuluayVwD9CNd+/7HW6ktjdvxKoiG2osmeTDIrA+uC2xHQCEpGDYOa kzPrGTOhINmWyN/5Z7hmCgGuPywuo2U= -----END CERTIFICATE-----Generated at Mon Apr 28 02:09:06 2025 by rpki-client