$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa File: 7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa (raw, json) Hash identifier: GiFTuOH8PA4X+zHotXOIImvFjqh1xH6tp/KB4UUTueE= Subject key identifier: 66:B8:ED:E2:27:F2:F2:51:BA:FC:DA:EB:21:40:CC:50:39:9B:60:31 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858494B6402F73B92698186360680 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 13576 IP address blocks: 66.115.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:02:f7:3b:92:69:81:86:36:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=cab70466-9017-4d3f-96c5-7349e3b736a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:33:b2:ff:c6:ff:cd:ef:11:b0:ec:75:3e:06: 84:26:b9:92:b9:3f:48:51:86:4b:4d:e5:2e:e7:46: a6:c7:74:0c:9b:e6:e3:8a:aa:dc:8a:de:d2:65:d9: 14:fd:07:f2:d3:bf:cf:68:17:f6:0b:71:4b:aa:ab: 74:c8:fa:7d:7e:62:95:88:81:04:4c:af:81:6b:d5: ca:f8:23:75:c5:e3:ef:03:8d:63:13:a0:f0:78:24: 70:a0:a8:2e:2d:7f:1e:a5:3c:f2:f0:94:db:fb:67: e3:63:1c:a7:90:68:fd:ab:8c:82:c4:03:ac:b6:6f: f8:6f:27:51:e3:5d:49:b5:c1:91:fa:b3:3e:7d:d4: 2f:68:90:9e:f9:8f:9b:6f:2f:5c:7b:70:ff:84:97: fe:30:fa:7f:0c:52:b4:3e:1c:a5:b0:a5:6e:38:f0: 84:f3:b7:4e:73:12:d8:8e:f8:c2:52:44:96:99:a3: 28:1d:60:ef:c4:a1:76:71:4e:1d:80:04:85:0c:6f: 0f:0e:3c:31:b2:4b:05:84:85:24:2c:8c:5a:e6:71: ee:80:05:6e:15:f4:ec:26:d2:24:14:0b:60:ec:a8: e2:1f:10:3b:6d:8c:7b:af:6d:7a:2a:e3:38:95:7a: c8:40:ae:e8:a4:d5:e3:f2:20:97:9f:e3:b3:34:75: e5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B8:ED:E2:27:F2:F2:51:BA:FC:DA:EB:21:40:CC:50:39:9B:60:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:f6:7b:c2:69:67:7f:37:9f:16:64:80:7e:45:f8:56:b4:90: fe:6a:03:b8:3a:19:d7:d5:18:35:e0:53:e7:a4:f1:27:bc:84: 9b:07:48:6d:a4:82:21:4b:e6:31:c7:c3:00:82:ea:6d:55:44: cb:1f:29:d0:7c:ef:0b:04:a0:a6:63:90:45:0f:15:cc:3e:28: ab:9d:b2:f5:05:0d:9d:bb:4a:84:a0:63:af:99:3a:bd:f3:23: 4e:e2:76:cf:78:83:db:0c:b8:c8:15:4d:8e:df:81:45:e5:bd: ab:cf:06:f1:0a:9b:2b:33:2e:eb:bf:7f:17:43:5f:55:6b:18: 4c:2e:3f:bb:0f:43:dc:75:f2:14:53:99:43:00:41:e6:1b:f5: 1b:e5:69:12:d8:d7:e7:85:2e:e6:91:a9:eb:a1:e0:3b:f4:ed: 14:e2:a9:59:66:ac:b2:eb:07:b0:01:14:aa:83:a8:f0:88:6b: e7:82:3a:97:ac:e4:54:ac:fb:1b:b9:45:40:9a:03:27:85:77: 85:b6:72:a3:bf:89:c3:98:c3:e5:50:70:4b:ec:75:f0:b8:a6: 50:79:ca:bb:a5:03:d2:f5:32:cd:f7:2c:ba:b3:8b:fc:f3:c4: 6d:69:23:7c:d5:39:ea:8c:1e:39:5e:c6:04:57:0e:66:84:b5: b5:c3:a7:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAL3O5JpgYY2BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk Y2FiNzA0NjYtOTAxNy00ZDNmLTk2YzUtNzM0OWUzYjczNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTOy/8b/ze8RsOx1PgaEJrmSuT9IUYZLTeUu 50amx3QMm+bjiqrcit7SZdkU/Qfy07/PaBf2C3FLqqt0yPp9fmKViIEETK+Ba9XK +CN1xePvA41jE6DweCRwoKguLX8epTzy8JTb+2fjYxynkGj9q4yCxAOstm/4bydR 411JtcGR+rM+fdQvaJCe+Y+bby9ce3D/hJf+MPp/DFK0PhylsKVuOPCE87dOcxLY jvjCUkSWmaMoHWDvxKF2cU4dgASFDG8PDjwxsksFhIUkLIxa5nHugAVuFfTsJtIk FAtg7KjiHxA7bYx7r216KuM4lXrIQK7opNXj8iCXn+OzNHXlPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGa47eIn8vJRuvza6yFAzFA5m2AxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNzkxMWU3Y2ItZTA2MC0z MGRmLTg1YTgtZjhjOWI3MGNlYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMX2e8JpZ383nxZkgH5F+Fa0kP5qA7g6GdfVGDXgU+ek8Se8hJsHSG2k giFL5jHHwwCC6m1VRMsfKdB87wsEoKZjkEUPFcw+KKudsvUFDZ27SoSgY6+ZOr3z I07ids94g9sMuMgVTY7fgUXlvavPBvEKmyszLuu/fxdDX1VrGEwuP7sPQ9x18hRT mUMAQeYb9RvlaRLY1+eFLuaRqeuh4Dv07RTiqVlmrLLrB7ABFKqDqPCIa+eCOpes 5FSs+xu5RUCaAyeFd4W2cqO/icOYw+VQcEvsdfC4plB5yrulA9L1Ms33LLqzi/zz xG1pI3zVOeqMHjlexgRXDmaEtbXDp34= -----END CERTIFICATE-----Generated at Sun Apr 27 15:03:13 2025 by rpki-client