$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/dfd7e73a-4121-3249-8bfe-b9f1d8ba284e.roa File: dfd7e73a-4121-3249-8bfe-b9f1d8ba284e.roa (raw, json) Hash identifier: /TA6FdsM39702N6ufgZm0bQS9tCSkcoYdDJHPv6eP04= Subject key identifier: 4F:53:DC:DF:98:19:7B:50:4C:7B:68:1E:65:A7:B4:EB:55:5D:72:33 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858494B6402C074E3E8B055164380 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/dfd7e73a-4121-3249-8bfe-b9f1d8ba284e.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 13576 IP address blocks: 66.115.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:02:c0:74:e3:e8:b0:55:16:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=6a8db294-4900-49aa-b909-cfbb170cee40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ce:6d:0b:40:23:3d:8e:f7:c9:04:2a:af:05: 28:47:0b:38:ca:b0:16:6a:e9:e8:5e:28:08:4d:04: cd:62:89:22:70:ec:25:e7:ba:42:25:ab:ca:31:8f: e8:ac:2e:a4:24:40:e3:53:2f:b5:8e:3c:6e:a5:a6: 08:4b:11:a7:55:15:41:53:f8:bf:8d:67:87:7f:b5: d0:a6:bd:03:55:95:b1:13:b8:2d:94:d7:e5:d4:20: 90:50:14:ef:ca:08:cc:ab:4b:d6:77:ca:a1:9a:69: 83:60:dd:0f:5d:72:f9:32:3a:5c:4c:69:ed:99:b2: bd:fa:6a:a0:4c:f1:06:c5:f9:2d:db:f3:9d:04:27: 81:7b:d7:1c:e1:13:28:ba:92:01:0d:79:e7:1d:74: a4:ed:d8:fe:32:40:d1:7d:3e:7d:f7:a3:ff:bf:e1: 1f:5d:57:9e:ef:36:f9:d8:71:7c:dc:c4:58:44:c2: 6f:65:c4:23:bd:90:80:36:92:70:69:5b:fc:24:ec: 7d:88:b9:fb:6e:42:29:2d:17:e6:13:53:4b:00:0a: 95:55:fb:b1:a8:cb:b1:58:21:fb:ea:b0:e8:13:8f: 86:0b:87:bd:24:d2:4c:67:b5:d2:bc:9d:99:00:fc: aa:8d:27:b9:3c:ff:e1:14:84:41:94:a2:63:d1:18: db:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:53:DC:DF:98:19:7B:50:4C:7B:68:1E:65:A7:B4:EB:55:5D:72:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/dfd7e73a-4121-3249-8bfe-b9f1d8ba284e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:f0:99:d1:a2:ba:c3:b0:9b:69:a2:4e:86:62:92:66:36:fb: f8:8a:41:92:57:a0:97:3c:1d:dd:c0:90:9a:0d:37:eb:73:e5: d6:fb:8e:00:aa:42:5f:69:64:47:df:d8:19:2d:e0:8d:96:d7: f6:9f:e2:8b:df:2a:32:cd:89:bf:4d:bf:36:18:b0:d3:b0:e3: 97:fc:3d:af:cb:b0:e3:4d:17:63:0a:1b:19:0f:2d:03:8c:0f: a8:77:0d:d1:57:6e:04:00:25:8b:4f:45:50:fc:a3:bd:33:0e: 4c:63:fc:14:c8:49:23:b4:e6:5b:67:af:5c:5f:57:42:75:70: 2e:e5:c9:27:12:70:36:84:fe:99:74:75:ca:cc:ba:fc:16:8c: 9b:52:3b:81:f8:7a:a4:55:4d:63:28:d6:7e:ac:7f:d3:29:d2: 22:c8:23:7b:e0:ab:a9:3e:db:81:c0:d2:8c:5c:60:cd:64:ca: 69:c1:30:9f:8b:00:4f:b5:a6:92:43:3d:00:b6:49:e4:6b:d1: fe:34:ea:c6:1b:f6:d1:62:01:14:44:b8:08:1d:a8:b5:f5:8a: 46:49:26:ff:82:a6:7e:43:87:ad:22:04:7a:b8:63:11:14:9d: 78:4f:55:9c:45:90:90:d6:7a:76:a0:25:1c:d1:6c:5c:48:41: 59:a3:32:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZALAdOPosFUWQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NmE4ZGIyOTQtNDkwMC00OWFhLWI5MDktY2ZiYjE3MGNlZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM5tC0AjPY73yQQqrwUoRws4yrAWaunoXigI TQTNYokicOwl57pCJavKMY/orC6kJEDjUy+1jjxupaYISxGnVRVBU/i/jWeHf7XQ pr0DVZWxE7gtlNfl1CCQUBTvygjMq0vWd8qhmmmDYN0PXXL5MjpcTGntmbK9+mqg TPEGxfkt2/OdBCeBe9cc4RMoupIBDXnnHXSk7dj+MkDRfT5996P/v+EfXVee7zb5 2HF83MRYRMJvZcQjvZCANpJwaVv8JOx9iLn7bkIpLRfmE1NLAAqVVfuxqMuxWCH7 6rDoE4+GC4e9JNJMZ7XSvJ2ZAPyqjSe5PP/hFIRBlKJj0RjbgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9T3N+YGXtQTHtoHmWntOtVXXIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZGZkN2U3M2EtNDEyMS0z MjQ5LThiZmUtYjlmMWQ4YmEyODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLwmdGiusOwm2miToZikmY2+/iKQZJXoJc8Hd3AkJoNN+tz5db7jgCq Ql9pZEff2Bkt4I2W1/af4ovfKjLNib9NvzYYsNOw45f8Pa/LsONNF2MKGxkPLQOM D6h3DdFXbgQAJYtPRVD8o70zDkxj/BTISSO05ltnr1xfV0J1cC7lyScScDaE/pl0 dcrMuvwWjJtSO4H4eqRVTWMo1n6sf9Mp0iLII3vgq6k+24HA0oxcYM1kymnBMJ+L AE+1ppJDPQC2SeRr0f406sYb9tFiARREuAgdqLX1ikZJJv+Cpn5Dh60iBHq4YxEU nXhPVZxFkJDWenagJRzRbFxIQVmjMh0= -----END CERTIFICATE-----Generated at Sun Apr 27 18:43:46 2025 by rpki-client