$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa File: ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa (raw, json) Hash identifier: ID3eFi2ZDFCrxg33m01dW92R/tvIROQq8pbyzXN0R7w= Subject key identifier: 54:E2:9E:9B:74:FF:89:8E:1D:D6:EA:77:D0:6C:15:4F:81:DA:82:90 Certificate issuer: /CN=654e0ef8-ac77-456b-9a63-98fdb228488b Certificate serial: 010D0C9F43285849244E67AD1163E46D59602940 Authority key identifier: 20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 400404 IP address blocks: 66.71.208.0/21 maxlen: 24 96.45.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:67:ad:11:63:e4:6d:59:60:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654e0ef8-ac77-456b-9a63-98fdb228488b Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=2a091450-2ce1-4c27-8a0c-f2ce8faa6b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c8:16:b6:fa:7c:57:e1:75:f7:4e:46:02:23: 97:21:9f:e3:13:cb:b4:14:6a:ff:7f:94:41:60:e2: e6:49:18:3a:90:f0:6c:bc:a6:90:c0:00:56:68:b6: 59:73:67:1b:bb:f6:75:82:42:c2:be:27:43:b1:58: df:02:d2:8c:3e:e2:dc:2e:69:56:30:8f:88:33:da: bb:4c:70:e4:be:65:6f:66:3a:04:74:04:39:67:d5: d6:e1:30:b9:d4:9d:27:17:b0:47:ee:dd:a2:ba:55: 77:39:b6:61:9e:37:bf:c4:ab:5c:9e:22:c1:65:53: f5:1c:1f:94:50:fb:14:d6:f7:4b:c8:02:77:2c:9b: 39:cd:93:43:b5:e5:8f:58:8a:26:87:87:eb:6a:10: 00:be:89:93:15:c4:2e:fe:1c:d3:b1:ea:75:f0:3d: 00:a4:d9:37:61:d1:a6:3b:00:05:c4:99:72:d5:a4: a1:ac:d5:f3:6b:17:20:fd:0e:b4:5e:e1:5e:6b:84: 90:67:2f:e5:5b:45:b1:e1:a0:ff:d7:6b:bb:00:64: e5:fa:a0:92:b2:b4:d1:af:c0:f2:fc:47:ee:5f:d9: 22:a0:e6:29:f9:80:66:98:5d:76:f4:a4:c2:55:7b: 40:2a:7b:ed:60:89:2f:8b:b7:95:d1:4c:78:4c:0f: a9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E2:9E:9B:74:FF:89:8E:1D:D6:EA:77:D0:6C:15:4F:81:DA:82:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl X509v3 Authority Key Identifier: keyid:20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer sbgp-ipAddrBlock: critical IPv4: 66.71.208.0/21 96.45.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f9:df:29:c7:11:1c:8f:d1:76:13:32:b2:89:2c:61:27:8a: e5:61:f9:3b:3b:61:55:5a:60:87:0e:ab:56:cf:3a:99:a0:4f: ea:43:cf:57:e9:e3:c4:f7:ca:39:02:d6:eb:f5:f7:cf:56:a3: 0a:50:c5:29:8c:fd:2e:65:45:06:ff:59:f6:15:88:c0:1f:0b: ea:f8:a8:61:86:e5:19:1d:44:99:f2:08:21:ed:4a:8a:55:62: f5:ab:85:a3:36:17:de:33:27:68:a5:19:1a:ad:23:5d:3a:f8: d0:f3:00:fb:f1:f1:68:eb:96:42:11:c7:fe:5c:1a:bf:bf:17: 52:1d:e8:4f:f4:b9:09:4a:b3:7b:98:dc:88:0d:94:dd:aa:7e: f6:a1:1d:e7:02:d8:7c:ac:da:a0:72:f1:89:a6:07:67:84:4b: e3:a7:41:39:fa:a3:02:2d:86:b5:a8:cd:06:cb:48:72:9b:e0: bb:03:ec:a1:f4:7c:e7:8d:60:77:e6:46:07:c4:2a:87:f8:81: 98:24:bc:63:a6:89:ab:6b:c5:7a:b3:78:d0:f5:21:24:03:0f: 98:3f:d3:b5:2d:db:21:0e:7d:aa:14:fb:18:c3:f1:5c:53:d0: 36:26:ae:a5:62:0b:db:f8:23:6a:b9:7f:96:c2:15:f8:67:78: d4:6e:bf:49 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkkTmetEWPkbVlgKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU0ZTBlZjgtYWM3Ny00NTZiLTlhNjMtOThmZGIyMjg0 ODhiMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MmEwOTE0NTAtMmNlMS00YzI3LThhMGMtZjJjZThmYWE2YjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMgWtvp8V+F1905GAiOXIZ/jE8u0FGr/f5RB YOLmSRg6kPBsvKaQwABWaLZZc2cbu/Z1gkLCvidDsVjfAtKMPuLcLmlWMI+IM9q7 THDkvmVvZjoEdAQ5Z9XW4TC51J0nF7BH7t2iulV3ObZhnje/xKtcniLBZVP1HB+U UPsU1vdLyAJ3LJs5zZNDteWPWIomh4frahAAvomTFcQu/hzTsep18D0ApNk3YdGm OwAFxJly1aShrNXzaxcg/Q60XuFea4SQZy/lW0Wx4aD/12u7AGTl+qCSsrTRr8Dy /EfuX9kioOYp+YBmmF129KTCVXtAKnvtYIkvi7eV0Ux4TA+pWwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFTinpt0/4mOHdbqd9BsFU+B2oKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRl MGVmOC1hYzc3LTQ1NmItOWE2My05OGZkYjIyODQ4OGIvZmZhMzRlMTUtNGVjYS0z NDFiLWE1ZDEtOTZkNTE0M2IwNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjU0ZTBlZjgtYWM3Ny00NTZiLTlh NjMtOThmZGIyMjg0ODhiLzY1NGUwZWY4LWFjNzctNDU2Yi05YTYzLTk4ZmRiMjI4 NDg4Yi5jcmwwHwYDVR0jBBgwFoAUIIAKlrpCPOd9vFC7tCAnZ+KIXMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRlMGVmOC1hYzc3LTQ1NmItOWE2My05OGZk YjIyODQ4OGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQkfQAwQE YC2QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH353ynHERyP0XYTMrKJLGEniuVh+Ts7YVVaYIcOq1bPOpmg T+pDz1fp48T3yjkC1uv1989WowpQxSmM/S5lRQb/WfYViMAfC+r4qGGG5RkdRJny CCHtSopVYvWrhaM2F94zJ2ilGRqtI106+NDzAPvx8WjrlkIRx/5cGr+/F1Id6E/0 uQlKs3uY3IgNlN2qfvahHecC2Hys2qBy8YmmB2eES+OnQTn6owIthrWozQbLSHKb 4LsD7KH0fOeNYHfmRgfEKof4gZgkvGOmiatrxXqzeND1ISQDD5g/07Ut2yEOfaoU +xjD8VxT0DYmrqViC9v4I2q5f5bCFfhneNRuv0k= -----END CERTIFICATE-----Generated at Tue Apr 29 09:36:56 2025 by rpki-client