$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/1a6b350d-413d-3535-b410-8172ceaf133d.roa File: 1a6b350d-413d-3535-b410-8172ceaf133d.roa (raw, json) Hash identifier: RRR9C6BbZ2RhEftbPGJYeYU75/usaK6A+XenFptsGHE= Subject key identifier: 64:A3:18:D1:83:63:88:9E:69:A5:3F:A4:C2:2D:4E:19:78:C0:23:D1 Certificate issuer: /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Certificate serial: 010D0C9F43285849BC74ABE0DD492302390F2B80 Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/1a6b350d-413d-3535-b410-8172ceaf133d.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 400610 IP address blocks: 66.219.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:ab:e0:dd:49:23:02:39:0f:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=2bdfcdcc-e90f-4774-a9e6-98eacc554a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:11:4a:ee:3b:b1:5f:68:18:07:4c:27:e9: c3:88:d1:61:64:b0:1c:21:23:04:07:2d:74:78:68: 40:05:c2:e5:33:63:2b:41:3c:69:cf:13:eb:fd:64: f2:60:8f:d6:38:a1:a4:8b:de:ce:2e:eb:27:c6:ac: cd:fd:fb:d2:92:86:00:59:f9:4d:56:7e:9d:90:e3: 49:4c:fd:b0:d8:4c:22:f0:68:cc:47:ea:83:af:a2: 24:75:b8:45:a8:58:28:b7:e6:d5:d0:1a:21:01:87: 4e:f3:09:0f:6c:e4:b8:1b:19:a5:98:a4:ab:5b:75: f7:d2:e7:52:20:c2:a7:b9:9d:2a:10:24:ef:11:1e: 3e:d6:70:03:cd:7a:bb:73:6f:1f:72:c4:d3:14:04: 01:ce:b0:15:dd:72:25:aa:75:43:cb:16:20:27:b5: 6a:b6:7a:41:48:8e:64:00:23:72:12:f5:19:dc:5f: 73:3d:ee:00:ff:6c:ca:de:bc:22:da:a6:45:c4:1a: 21:6b:de:4d:ac:78:33:49:66:c7:16:36:c1:9d:cf: 94:ab:0d:91:1f:79:bf:9b:0b:de:fe:c9:79:fe:dc: 80:84:80:cc:30:fc:cc:c8:06:41:16:c5:f3:b9:7a: c8:6e:aa:96:26:5d:50:12:dd:f1:0b:5c:05:06:ec: f1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A3:18:D1:83:63:88:9E:69:A5:3F:A4:C2:2D:4E:19:78:C0:23:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/1a6b350d-413d-3535-b410-8172ceaf133d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl X509v3 Authority Key Identifier: keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer sbgp-ipAddrBlock: critical IPv4: 66.219.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:3c:70:f1:7e:eb:3f:c7:6f:1a:3e:5c:0e:eb:fc:34:f5:7c: d5:fe:c5:6b:38:60:03:cc:44:49:f3:8a:7f:71:c6:a3:b6:10: f1:7c:1e:12:f1:23:e0:d3:94:1f:32:c1:ba:4c:cb:ab:6e:b1: 7f:3e:9a:f3:f5:f4:ba:67:4f:4c:52:69:67:9e:97:63:29:0a: 8f:e2:17:f7:a8:da:7d:67:20:26:fb:eb:8b:90:5f:18:50:e3: c5:f6:7c:ad:c5:de:19:f6:23:de:d3:70:4d:69:b8:20:ec:e9: 72:d1:16:e3:51:68:42:15:5b:58:31:52:1d:98:49:9a:b3:43: a0:ff:4e:7f:d8:2a:5b:9e:15:20:c2:79:43:40:e0:9e:19:20: 8e:72:3d:9c:a6:bc:e7:fc:90:ec:0b:36:52:82:cb:bd:ba:29: 34:15:73:6e:b9:d0:51:37:7b:fd:59:92:90:11:e0:5b:d4:97: 89:d5:43:f8:26:82:26:05:cf:58:3a:4a:69:3a:17:dd:5c:d3: 63:dd:d1:40:00:b6:fe:08:65:3e:da:9e:31:30:be:4b:1d:ac: 08:27:25:79:b1:99:b6:0e:95:07:78:73:5b:cc:7f:d7:36:db: 3e:94:78:52:70:79:59:f6:f6:d9:77:b6:80:e8:f9:43:e3:9c: 15:0a:42:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dKvg3UkjAjkPK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm MmUzMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk MmJkZmNkY2MtZTkwZi00Nzc0LWE5ZTYtOThlYWNjNTU0YTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG4RSu47sV9oGAdMJ+nDiNFhZLAcISMEBy10 eGhABcLlM2MrQTxpzxPr/WTyYI/WOKGki97OLusnxqzN/fvSkoYAWflNVn6dkONJ TP2w2Ewi8GjMR+qDr6IkdbhFqFgot+bV0BohAYdO8wkPbOS4GxmlmKSrW3X30udS IMKnuZ0qECTvER4+1nADzXq7c28fcsTTFAQBzrAV3XIlqnVDyxYgJ7VqtnpBSI5k ACNyEvUZ3F9zPe4A/2zK3rwi2qZFxBoha95NrHgzSWbHFjbBnc+Uqw2RH3m/mwve /sl5/tyAhIDMMPzMyAZBFsXzuXrIbqqWJl1QEt3xC1wFBuzxhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSjGNGDY4ieaaU/pMItThl4wCPRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1 NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvMWE2YjM1MGQtNDEzZC0z NTM1LWI0MTAtODE3MmNlYWYxMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5 YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4 ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtt2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo8cPF+6z/Hbxo+XA7r/DT1fNX+xWs4YAPMREnzin9xxqO2EPF8HhLx I+DTlB8ywbpMy6tusX8+mvP19LpnT0xSaWeel2MpCo/iF/eo2n1nICb764uQXxhQ 48X2fK3F3hn2I97TcE1puCDs6XLRFuNRaEIVW1gxUh2YSZqzQ6D/Tn/YKlueFSDC eUNA4J4ZII5yPZymvOf8kOwLNlKCy726KTQVc2650FE3e/1ZkpAR4FvUl4nVQ/gm giYFz1g6Smk6F91c02Pd0UAAtv4IZT7anjEwvksdrAgnJXmxmbYOlQd4c1vMf9c2 2z6UeFJweVn29tl3toDo+UPjnBUKQgs= -----END CERTIFICATE-----Generated at Mon Jun 16 15:08:38 2025 by rpki-client