$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa File: 8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa (raw, json) Hash identifier: mH+nC6BgpIpaoId2h4P5cEh3SXaKL57SN3BUicy5d8g= Subject key identifier: 4B:E5:ED:1B:E6:94:B3:E7:F8:B2:E1:68:B7:29:3D:0F:D1:C5:35:0F Certificate issuer: /CN=de8b5430-108d-4deb-960f-6c438a23adc4 Certificate serial: 010D0C9F432858499829D13C08D9A97A2C142E40 Authority key identifier: 85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16509 IP address blocks: 66.132.138.0/24 maxlen: 24 198.73.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d1:3c:08:d9:a9:7a:2c:14:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8b5430-108d-4deb-960f-6c438a23adc4 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=045821cf-82ef-46b6-9651-05f02f08594f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a1:f6:0a:9b:95:fd:72:d5:f6:36:e2:49:5d: 5f:85:96:67:20:1c:fe:51:d0:0d:bb:43:de:4d:89: 51:94:51:03:42:03:82:6e:6e:ff:9d:2a:15:40:f1: 4b:e4:18:a8:fa:0e:f5:60:63:f2:3c:b6:9e:be:86: 95:c0:c4:8a:d8:b1:00:9d:de:da:22:0e:b8:fa:a3: fd:21:8d:c2:da:25:b4:59:99:4a:64:ed:48:03:e1: f5:e5:db:90:56:e1:c2:88:69:f5:7a:b6:dd:19:73: a8:d8:f7:2e:1a:d4:8a:24:9e:a4:36:6a:f8:87:10: cd:ec:74:79:af:80:7d:61:69:a9:73:83:0b:a7:ec: 53:dd:d1:e4:4c:dc:c3:5f:dd:cb:a6:da:19:48:da: 18:26:6e:ee:5f:8f:b2:34:9b:d4:e4:e3:d0:9e:0c: 8b:0a:6b:4e:86:b8:4b:13:21:7b:9b:7b:06:a1:d3: a1:40:1a:c7:dd:39:81:b9:8c:36:50:5f:ed:21:4b: 74:55:b2:df:86:2b:27:2c:98:81:a0:5a:09:1d:49: ce:e6:1f:06:20:1f:e6:90:6c:2f:96:41:a5:ba:7e: 2f:c3:4d:de:86:41:fd:b1:a9:ca:a2:30:01:cb:6f: f0:4d:0c:60:f0:13:90:74:8c:de:f8:60:43:9b:03: 4a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E5:ED:1B:E6:94:B3:E7:F8:B2:E1:68:B7:29:3D:0F:D1:C5:35:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl X509v3 Authority Key Identifier: keyid:85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer sbgp-ipAddrBlock: critical IPv4: 66.132.138.0/24 198.73.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:3a:5d:89:e1:50:6c:5c:05:fe:b4:06:ab:d5:13:8f:0b:0d: 92:f7:d0:fb:df:16:3f:1c:11:40:39:16:e2:91:5f:13:b1:3d: 2d:7d:e8:07:ec:98:0e:a9:2a:e9:5b:ad:28:a1:48:70:50:e4: 8e:a0:32:47:14:79:ac:92:9a:5a:49:5b:50:1b:fa:bb:82:1a: 39:e9:1f:ef:3d:3d:23:f7:28:58:1f:8b:60:71:8c:37:22:69: d3:21:7a:18:90:66:ae:6b:aa:c0:05:e9:6e:08:6d:7a:d7:4c: ef:e7:d2:18:ee:af:a6:e6:61:e8:fb:f3:95:03:15:d7:13:fd: 79:5e:b0:13:3e:9b:d4:7c:70:6c:ec:ea:c6:97:7a:0e:ea:4e: 2f:1f:1c:cb:bf:71:7d:43:27:f8:6a:3d:4c:73:c0:cb:3f:30: 06:f5:09:0f:ac:68:0f:ac:fb:17:ac:73:85:c9:e4:88:f2:6c: 65:21:43:5a:2e:d1:2d:3c:52:bb:21:44:27:fa:62:6c:d7:8d: 71:63:36:ab:2b:98:86:c5:da:8a:ec:8a:64:5f:b9:fc:cb:22: 60:c7:06:70:c8:9d:a5:97:b8:78:e5:3a:bc:ac:be:0b:92:15: 63:5e:0e:42:7d:d7:2a:04:0f:c0:5e:c3:b8:7f:f6:b6:94:46: 95:7a:9f:6a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmYKdE8CNmpeiwULkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4YjU0MzAtMTA4ZC00ZGViLTk2MGYtNmM0MzhhMjNh ZGM0MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MDQ1ODIxY2YtODJlZi00NmI2LTk2NTEtMDVmMDJmMDg1OTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKH2CpuV/XLV9jbiSV1fhZZnIBz+UdANu0Pe TYlRlFEDQgOCbm7/nSoVQPFL5Bio+g71YGPyPLaevoaVwMSK2LEAnd7aIg64+qP9 IY3C2iW0WZlKZO1IA+H15duQVuHCiGn1erbdGXOo2PcuGtSKJJ6kNmr4hxDN7HR5 r4B9YWmpc4MLp+xT3dHkTNzDX93LptoZSNoYJm7uX4+yNJvU5OPQngyLCmtOhrhL EyF7m3sGodOhQBrH3TmBuYw2UF/tIUt0VbLfhisnLJiBoFoJHUnO5h8GIB/mkGwv lkGlun4vw03ehkH9sanKojABy2/wTQxg8BOQdIze+GBDmwNKkQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEvl7RvmlLPn+LLhaLcpPQ/RxTUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZThi NTQzMC0xMDhkLTRkZWItOTYwZi02YzQzOGEyM2FkYzQvOGY5OTc3YjQtYmYzZC0z ODg2LTg2ZDItMmU1NzRmZjE2ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU4YjU0MzAtMTA4ZC00ZGViLTk2 MGYtNmM0MzhhMjNhZGM0L2RlOGI1NDMwLTEwOGQtNGRlYi05NjBmLTZjNDM4YTIz YWRjNC5jcmwwHwYDVR0jBBgwFoAUha0TpZ716DwRUj8UxDGinwSP3TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZThiNTQzMC0xMDhkLTRkZWItOTYwZi02YzQz OGEyM2FkYzQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQoSKAwQA xkk1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJs6XYnhUGxcBf60BqvVE48LDZL30PvfFj8cEUA5FuKRXxOx PS196AfsmA6pKulbrSihSHBQ5I6gMkcUeaySmlpJW1Ab+ruCGjnpH+89PSP3KFgf i2BxjDciadMhehiQZq5rqsAF6W4IbXrXTO/n0hjur6bmYej785UDFdcT/XlesBM+ m9R8cGzs6saXeg7qTi8fHMu/cX1DJ/hqPUxzwMs/MAb1CQ+saA+s+xesc4XJ5Ijy bGUhQ1ou0S08UrshRCf6YmzXjXFjNqsrmIbF2orsimRfufzLImDHBnDInaWXuHjl OrysvguSFWNeDkJ91yoED8Bew7h/9raURpV6n2o= -----END CERTIFICATE-----Generated at Sat Apr 26 16:02:09 2025 by rpki-client