$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa File: 5acde123-8b2a-32d5-8223-e6b8a8424390.roa (raw, json) Hash identifier: 6yB90PYIvxDQXZFHhcfoTqW4cKIxeEZnoJ5/9UbpiVY= Subject key identifier: 5B:BC:0B:8C:29:06:17:13:6D:17:11:73:E8:44:9C:C3:65:81:53:9F Certificate issuer: /CN=a05c180d-6db0-4307-bc39-264e11bb765c Certificate serial: 010D0C9F4328584949FE8C439E8DD010E90B1500 Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 27768 IP address blocks: 66.249.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:8c:43:9e:8d:d0:10:e9:0b:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=9996bad6-0465-4d46-9f20-f4cc78825f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:01:dd:c1:ea:55:3e:c4:24:93:5e:5f:22:c7: 2a:2b:00:f3:4e:9c:9d:31:33:fb:c2:57:dc:eb:86: dc:79:a8:31:e6:f0:30:45:ef:20:23:65:71:f3:2c: 55:8e:55:bb:ca:da:f8:41:26:df:d1:22:c1:44:ca: 57:c9:7e:c8:96:77:c8:2e:34:8d:28:5d:90:70:86: b3:ad:c7:4c:da:64:0e:6b:b5:97:b3:f4:1e:bf:1d: 59:73:b6:22:89:46:83:a4:bb:71:04:44:70:23:a4: 74:63:0f:91:4c:bf:7c:ee:ee:47:e8:78:13:fb:a4: 8f:9f:99:84:4a:92:c5:ae:c6:2c:43:37:2c:20:12: ed:3b:80:64:54:a0:f6:f3:09:3b:09:cb:46:b4:d5: 97:98:ee:f3:98:b9:fb:8a:ee:7f:18:fd:88:da:c3: 4d:fd:ae:dc:13:c5:15:31:be:33:10:9e:84:92:d2: de:49:8a:50:fe:c6:00:e5:12:cf:c0:ea:e7:16:bb: 65:26:b4:32:fe:a5:92:0f:4d:b6:84:15:d6:fc:da: 29:15:06:ba:3d:a1:c4:b4:02:c5:5e:e5:84:9a:cb: 90:ff:bf:db:23:1f:be:a0:31:40:7b:72:cf:ff:d9: 76:6b:e7:14:13:c0:fb:34:c8:9b:6f:31:7a:2a:e1: ca:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BC:0B:8C:29:06:17:13:6D:17:11:73:E8:44:9C:C3:65:81:53:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl X509v3 Authority Key Identifier: keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer sbgp-ipAddrBlock: critical IPv4: 66.249.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:00:5f:cb:ac:33:58:3a:57:7f:62:ce:90:88:98:90:2b:22: e8:4d:99:3f:28:5f:48:68:39:84:0a:86:f4:75:81:ff:4b:46: 91:e0:2b:ea:28:59:bd:b0:7b:73:d9:71:92:d6:6d:b4:65:16: de:95:60:7d:2d:86:93:b0:65:e9:d1:1d:f8:f7:46:a0:61:76: e2:35:3d:1f:b1:cd:77:b2:67:4c:c0:65:f6:8f:1b:4a:ca:8c: 83:1e:9d:f9:85:cc:00:37:ff:a6:39:d3:d0:0b:5b:9d:d0:15: 35:61:0c:55:41:5e:52:4e:24:10:09:8a:99:68:0d:e4:9e:30: ec:39:15:35:37:8a:ca:4e:51:f7:86:93:d3:c9:1b:02:f6:18: aa:d2:1d:3c:b3:7d:22:8e:6f:71:53:3d:93:e5:c2:bf:27:e5: 1f:97:c7:9c:63:2d:b9:18:7f:8e:79:11:7d:d2:34:87:b3:ae: 68:49:86:d8:a3:11:b9:3f:3f:63:8c:9f:a0:11:fc:6c:24:fd: 10:d3:c6:24:38:75:75:00:5b:b1:f6:ca:37:e8:1c:cf:8e:9a: 76:87:8a:50:df:0a:99:46:35:af:38:28:c8:83:d8:c9:3d:6a: 02:46:44:90:4f:d9:8e:79:67:48:b8:d6:a8:90:08:5d:f4:8b: 46:bb:de:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/oxDno3QEOkLFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA1YzE4MGQtNmRiMC00MzA3LWJjMzktMjY0ZTExYmI3 NjVjMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk OTk5NmJhZDYtMDQ2NS00ZDQ2LTlmMjAtZjRjYzc4ODI1ZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQHdwepVPsQkk15fIscqKwDzTpydMTP7wlfc 64bceagx5vAwRe8gI2Vx8yxVjlW7ytr4QSbf0SLBRMpXyX7IlnfILjSNKF2QcIaz rcdM2mQOa7WXs/Qevx1Zc7YiiUaDpLtxBERwI6R0Yw+RTL987u5H6HgT+6SPn5mE SpLFrsYsQzcsIBLtO4BkVKD28wk7CctGtNWXmO7zmLn7iu5/GP2I2sNN/a7cE8UV Mb4zEJ6EktLeSYpQ/sYA5RLPwOrnFrtlJrQy/qWSD022hBXW/NopFQa6PaHEtALF XuWEmsuQ/7/bIx++oDFAe3LP/9l2a+cUE8D7NMibbzF6KuHKAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFu8C4wpBhcTbRcRc+hEnMNlgVOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVj MTgwZC02ZGIwLTQzMDctYmMzOS0yNjRlMTFiYjc2NWMvNWFjZGUxMjMtOGIyYS0z MmQ1LTgyMjMtZTZiOGE4NDI0MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTA1YzE4MGQtNmRiMC00MzA3LWJj MzktMjY0ZTExYmI3NjVjL2EwNWMxODBkLTZkYjAtNDMwNy1iYzM5LTI2NGUxMWJi NzY1Yy5jcmwwHwYDVR0jBBgwFoAU+pb0gpyNY4Nb+8DqdIVg9ekxZVgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMDVjMTgwZC02ZGIwLTQzMDctYmMzOS0yNjRl MTFiYjc2NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4AX8usM1g6V39izpCImJArIuhNmT8oX0hoOYQKhvR1gf9LRpHgK+oo Wb2we3PZcZLWbbRlFt6VYH0thpOwZenRHfj3RqBhduI1PR+xzXeyZ0zAZfaPG0rK jIMenfmFzAA3/6Y509ALW53QFTVhDFVBXlJOJBAJiploDeSeMOw5FTU3ispOUfeG k9PJGwL2GKrSHTyzfSKOb3FTPZPlwr8n5R+Xx5xjLbkYf455EX3SNIezrmhJhtij Ebk/P2OMn6AR/Gwk/RDTxiQ4dXUAW7H2yjfoHM+OmnaHilDfCplGNa84KMiD2Mk9 agJGRJBP2Y55Z0i41qiQCF30i0a73o4= -----END CERTIFICATE-----Generated at Tue Apr 29 22:38:57 2025 by rpki-client