$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa File: a661538f-4136-32b8-a899-88104881e2db.roa (raw, json) Hash identifier: XZWpgI9rXkuVYz+KWnbL7TlMh+0fS5uo2PCx3k6jkNk= Subject key identifier: 32:98:AA:08:4B:4E:F5:A4:A3:70:E7:70:C7:A6:43:22:FF:40:6C:BA Certificate issuer: /CN=d64341ea-4a31-4684-bf89-237774f5a468 Certificate serial: 010D0C9F432858495ABEC2B1866DD58938887680 Authority key identifier: A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16509 IP address blocks: 66.22.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:c2:b1:86:6d:d5:89:38:88:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d64341ea-4a31-4684-bf89-237774f5a468 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=7f50637c-9260-49e0-a219-cf0d6047ae99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:29:ad:37:c8:d0:d9:cf:87:46:62:ae:a2:69: ac:37:52:af:f4:3c:b7:73:18:70:8e:f9:34:dd:93: f5:53:e9:9e:fa:a1:16:1e:fd:7c:fb:06:87:76:e1: d3:5a:b8:f8:6d:cf:0c:13:5f:ff:95:47:bc:d2:4a: 16:ca:d0:70:ea:9a:dd:4b:0f:af:11:7f:3e:00:83: 00:1a:71:07:17:8d:b6:86:3c:02:ea:ba:20:9e:52: 46:7d:a9:d5:ac:33:32:df:df:29:bf:0c:4b:42:c7: ce:35:38:f6:7c:69:43:28:9c:69:2e:12:7e:6e:a9: 50:64:a1:15:c0:9b:93:34:00:58:7c:22:e2:7d:2f: 6d:55:a8:40:72:a8:2d:47:da:5c:cb:a0:02:e1:79: 3a:25:be:bc:b7:b2:bc:23:29:35:a9:06:c7:4f:63: 6d:ab:0b:26:d0:f5:2a:1d:37:78:58:15:7e:12:1a: 02:7e:47:a8:98:6a:50:db:65:20:f6:dd:30:0e:d5: 36:a9:fd:bb:95:30:ae:f3:83:02:f5:ba:9c:17:9a: f1:22:65:f2:26:1f:54:e5:a2:ed:9f:bf:75:0b:24: 3d:3a:b3:cf:87:bc:d1:80:3d:44:c5:b9:11:c9:30: b1:44:17:9a:80:ad:52:0e:e7:28:92:05:12:ac:59: ea:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:AA:08:4B:4E:F5:A4:A3:70:E7:70:C7:A6:43:22:FF:40:6C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.crl X509v3 Authority Key Identifier: keyid:A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer sbgp-ipAddrBlock: critical IPv4: 66.22.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:35:3d:d0:8e:3a:d9:b9:5d:c4:f3:85:a4:89:37:79:ec:51: 4b:d8:3f:e1:31:fa:24:23:7d:19:c3:27:06:71:f6:7c:1a:b5: 93:17:46:33:b1:0d:c7:86:2a:9e:57:97:b7:11:86:27:03:35: c1:34:19:d6:81:b4:47:ca:3b:be:b9:85:dd:8e:fe:8e:0c:38: 7e:5d:7a:a9:fe:b9:54:fd:ba:6a:11:6d:98:a0:35:ff:a1:95: 06:25:6d:a6:95:2f:fd:eb:47:3d:15:1e:a5:13:d5:4c:fe:75: 36:4f:b9:9a:85:c3:98:4d:2a:73:f0:00:47:f6:55:06:53:c1: e2:d0:7e:2f:88:57:ef:8a:52:3b:04:8f:31:d2:a7:6d:4e:b9: 08:c1:94:00:ee:a3:60:40:e6:0d:09:be:3a:7e:47:d2:db:56: 1a:f2:af:5f:29:d6:b3:88:85:b9:10:9e:f0:07:31:25:20:d8: 66:17:00:59:64:d1:f1:ee:1b:f4:7a:34:ed:74:35:c5:d6:71: 44:8b:a1:a3:2d:e1:0b:67:5e:b4:a1:2d:57:59:ef:86:40:b6: c9:b9:e2:1a:1e:58:23:d8:24:21:56:8e:95:37:15:a1:6e:d6: 0c:22:4b:14:14:ff:fb:38:ff:85:e0:29:44:fd:42:cc:d4:3d: 0a:3c:a2:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavsKxhm3ViTiIdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY0MzQxZWEtNGEzMS00Njg0LWJmODktMjM3Nzc0ZjVh NDY4MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk N2Y1MDYzN2MtOTI2MC00OWUwLWEyMTktY2YwZDYwNDdhZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSmtN8jQ2c+HRmKuommsN1Kv9Dy3cxhwjvk0 3ZP1U+me+qEWHv18+waHduHTWrj4bc8ME1//lUe80koWytBw6prdSw+vEX8+AIMA GnEHF422hjwC6rognlJGfanVrDMy398pvwxLQsfONTj2fGlDKJxpLhJ+bqlQZKEV wJuTNABYfCLifS9tVahAcqgtR9pcy6AC4Xk6Jb68t7K8Iyk1qQbHT2Ntqwsm0PUq HTd4WBV+EhoCfkeomGpQ22Ug9t0wDtU2qf27lTCu84MC9bqcF5rxImXyJh9U5aLt n791CyQ9OrPPh7zRgD1ExbkRyTCxRBeagK1SDucokgUSrFnqbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKYqghLTvWko3DncMemQyL/QGy6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNjQz NDFlYS00YTMxLTQ2ODQtYmY4OS0yMzc3NzRmNWE0NjgvYTY2MTUzOGYtNDEzNi0z MmI4LWE4OTktODgxMDQ4ODFlMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDY0MzQxZWEtNGEzMS00Njg0LWJm ODktMjM3Nzc0ZjVhNDY4L2Q2NDM0MWVhLTRhMzEtNDY4NC1iZjg5LTIzNzc3NGY1 YTQ2OC5jcmwwHwYDVR0jBBgwFoAUoO8vnwBda9ZyIfSWE7ac8RT9OlQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNjQzNDFlYS00YTMxLTQ2ODQtYmY4OS0yMzc3 NzRmNWE0NjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF01PdCOOtm5XcTzhaSJN3nsUUvYP+Ex+iQjfRnDJwZx9nwatZMXRjOx DceGKp5Xl7cRhicDNcE0GdaBtEfKO765hd2O/o4MOH5deqn+uVT9umoRbZigNf+h lQYlbaaVL/3rRz0VHqUT1Uz+dTZPuZqFw5hNKnPwAEf2VQZTweLQfi+IV++KUjsE jzHSp21OuQjBlADuo2BA5g0Jvjp+R9LbVhryr18p1rOIhbkQnvAHMSUg2GYXAFlk 0fHuG/R6NO10NcXWcUSLoaMt4QtnXrShLVdZ74ZAtsm54hoeWCPYJCFWjpU3FaFu 1gwiSxQU//s4/4XgKUT9QszUPQo8olk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:10 2025 by rpki-client