$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa File: 8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa (raw, json) Hash identifier: oIoG0W/R376Pz38Wlbjc9H3X25vKB86EQRaY7VBvB3g= Subject key identifier: 49:4E:FA:0E:EA:AC:FF:93:F8:91:25:98:F1:3B:82:41:7B:67:AA:A3 Certificate issuer: /CN=903ec3cf-858a-457b-844f-8c6283f5e5d9 Certificate serial: 010D0C9F4328584949FE92B16A669AFC2DC62E40 Authority key identifier: 3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 30255 IP address blocks: 66.205.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:92:b1:6a:66:9a:fc:2d:c6:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=903ec3cf-858a-457b-844f-8c6283f5e5d9 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=1ef20a5c-93a7-4746-9ef3-5a49a4dddd0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d4:eb:89:3f:e5:2e:e0:8c:76:fa:03:15:45: 1a:7a:6f:a3:41:3d:3a:04:bd:11:16:46:c2:71:ca: 5e:89:e3:52:81:9f:33:af:04:29:34:e5:74:ea:98: 3e:d2:00:0b:d4:d7:9b:cd:8c:52:4d:e9:4f:db:87: 0a:5d:5d:70:40:0f:08:88:e6:df:7d:75:67:35:70: 08:00:fe:57:47:f1:8d:24:35:f2:02:73:7c:58:ba: ca:90:21:6b:4c:9f:4c:6f:9d:6b:28:03:5e:40:65: 69:80:23:6a:5a:42:4a:90:b0:dc:53:e3:d3:31:63: cd:37:39:c3:44:8c:47:56:14:ee:0b:fc:c3:bb:fe: 71:b4:7c:8b:d5:95:f5:65:be:05:28:a6:3a:5f:d1: 15:61:55:f5:de:4b:60:35:6f:61:f2:1a:41:b2:48: 65:85:61:dd:7e:90:78:11:b6:07:5b:0e:59:99:94: 48:ef:58:d3:8c:7b:9e:63:a1:f1:e4:a2:f1:5b:6d: 1c:79:af:69:a6:e1:92:bd:ab:87:58:ee:71:e4:76: 65:dd:d3:39:5e:e2:07:24:f9:e9:40:91:9c:30:14: c3:b6:53:6d:08:e5:a0:39:78:c2:ff:17:f7:6e:04: 1f:29:94:4c:65:52:8c:72:25:4d:5a:fa:42:b8:ea: 1f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4E:FA:0E:EA:AC:FF:93:F8:91:25:98:F1:3B:82:41:7B:67:AA:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.crl X509v3 Authority Key Identifier: keyid:3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer sbgp-ipAddrBlock: critical IPv4: 66.205.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:58:21:4d:5d:e1:2a:e3:16:ed:73:0f:95:7f:df:af:d1:ed: fc:82:c1:12:77:50:29:e6:aa:4a:3c:ef:b3:da:91:c5:47:55: 4f:ea:62:d3:4d:52:91:56:31:c2:21:61:a4:c9:77:09:cf:5e: 0b:d9:69:02:9a:cd:0a:73:f8:47:d0:97:91:d1:aa:cf:03:5b: 72:2a:24:0e:9b:7d:85:c8:66:2c:5f:b1:29:2f:5c:e3:39:d1: e7:2a:98:04:54:b4:25:9d:e5:ee:56:ae:2c:e8:4d:2c:a0:41: 01:83:c0:d9:e1:89:03:fb:9c:bf:65:ff:4c:c5:b4:db:6c:a0: 2b:f1:b9:09:f6:f8:ab:26:50:ff:95:ba:00:5f:49:39:45:2e: d4:01:a6:27:d2:8f:0c:d8:5e:e2:39:f4:9d:38:bd:e0:4a:e6: f8:36:c1:8d:4f:b4:a6:de:f9:0a:44:7c:24:1c:77:c4:0c:65: 4d:d1:ce:5f:cb:db:67:e7:08:39:0a:fa:2c:cb:6a:78:69:88: c1:33:2e:0b:ef:6d:17:b6:bd:a2:f5:e9:6e:12:e2:e5:ef:ad: d6:53:ef:6d:eb:a1:49:11:54:2d:02:5b:72:25:cc:69:b2:b3: 55:c3:c6:25:a7:13:a0:08:68:1a:2d:aa:1c:6c:07:3d:11:3c: cf:cc:4e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pKxamaa/C3GLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAzZWMzY2YtODU4YS00NTdiLTg0NGYtOGM2MjgzZjVl NWQ5MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk MWVmMjBhNWMtOTNhNy00NzQ2LTllZjMtNWE0OWE0ZGRkZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytTriT/lLuCMdvoDFUUaem+jQT06BL0RFkbC ccpeieNSgZ8zrwQpNOV06pg+0gAL1NebzYxSTelP24cKXV1wQA8IiObffXVnNXAI AP5XR/GNJDXyAnN8WLrKkCFrTJ9Mb51rKANeQGVpgCNqWkJKkLDcU+PTMWPNNznD RIxHVhTuC/zDu/5xtHyL1ZX1Zb4FKKY6X9EVYVX13ktgNW9h8hpBskhlhWHdfpB4 EbYHWw5ZmZRI71jTjHueY6Hx5KLxW20cea9ppuGSvauHWO5x5HZl3dM5XuIHJPnp QJGcMBTDtlNtCOWgOXjC/xf3bgQfKZRMZVKMciVNWvpCuOof4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElO+g7qrP+T+JElmPE7gkF7Z6qjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDNl YzNjZi04NThhLTQ1N2ItODQ0Zi04YzYyODNmNWU1ZDkvOGQ5MDc2OTQtZjA4NC0z NjYxLWI5ZDctMmU0ZWU5YTVkZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAzZWMzY2YtODU4YS00NTdiLTg0 NGYtOGM2MjgzZjVlNWQ5LzkwM2VjM2NmLTg1OGEtNDU3Yi04NDRmLThjNjI4M2Y1 ZTVkOS5jcmwwHwYDVR0jBBgwFoAUPVYhXxO4CO7AZA1SjS1VdeJwyO8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85MDNlYzNjZi04NThhLTQ1N2ItODQ0Zi04YzYy ODNmNWU1ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs3rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJYIU1d4SrjFu1zD5V/36/R7fyCwRJ3UCnmqko877PakcVHVU/qYtNN UpFWMcIhYaTJdwnPXgvZaQKazQpz+EfQl5HRqs8DW3IqJA6bfYXIZixfsSkvXOM5 0ecqmARUtCWd5e5WrizoTSygQQGDwNnhiQP7nL9l/0zFtNtsoCvxuQn2+KsmUP+V ugBfSTlFLtQBpifSjwzYXuI59J04veBK5vg2wY1PtKbe+QpEfCQcd8QMZU3Rzl/L 22fnCDkK+izLanhpiMEzLgvvbRe2vaL16W4S4uXvrdZT723roUkRVC0CW3IlzGmy s1XDxiWnE6AIaBotqhxsBz0RPM/MTiQ= -----END CERTIFICATE-----Generated at Tue Apr 29 09:28:19 2025 by rpki-client