$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/8ee2a08b-770e-3be0-b580-1401678ad4a4.roa File: 8ee2a08b-770e-3be0-b580-1401678ad4a4.roa (raw, json) Hash identifier: fHPKfwYSYGkYOy4A8ShS8v1UjQn9lMw2vi9yL7kbgZQ= Subject key identifier: B6:1E:BC:CC:7D:E7:45:FE:31:F6:45:47:0D:E9:93:7A:96:EC:19:8A Certificate issuer: /CN=5d1f7581-692a-467e-ae71-d3c4921d0765 Certificate serial: 010D0C9F432858490E16B701E8346053D2284740 Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/8ee2a08b-770e-3be0-b580-1401678ad4a4.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 1299 IP address blocks: 66.187.0.0/23 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:b7:01:e8:34:60:53:d2:28:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=398ce930-9d64-4c78-ae7b-51f1d551789d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:10:78:49:35:d9:77:ff:f3:4e:ea:3d:73:d4: 70:57:4c:44:1f:26:0d:cb:70:bd:6c:6c:c7:ae:ff: 0f:de:13:69:eb:d8:d5:d7:4a:25:e6:4c:53:26:21: 89:42:f1:73:fe:26:e3:5a:3e:2e:42:0e:21:4a:98: 93:2b:4c:2c:18:fa:3e:c0:1c:9f:b9:7a:22:75:49: 67:f6:d7:c5:54:32:94:cd:6c:37:d1:4e:b0:e3:20: 8a:aa:f5:67:1a:3c:49:4a:2e:8a:98:e9:9e:5a:09: d7:ba:53:1c:35:a4:83:93:83:bf:ac:00:12:c4:6f: d5:3b:20:04:9c:48:a9:77:da:d3:46:e7:80:f6:ab: 6e:f9:d4:8f:81:c9:ff:4c:9f:ce:16:1e:8d:12:ad: b9:e7:b5:97:dd:c3:8d:2d:98:cb:d8:ff:78:90:28: 6d:62:19:77:75:23:eb:8f:80:25:49:10:51:c7:55: 38:30:17:61:f0:f3:10:08:d3:b8:c2:b2:a0:a1:38: 45:9b:c5:ab:6b:d8:6b:9a:d8:81:e2:56:25:b3:23: 64:c5:8b:90:0b:9f:aa:fd:2c:15:98:e4:c8:64:62: 9b:94:b4:f4:aa:bf:c3:28:74:1c:53:1d:56:94:9b: 81:ac:72:2d:38:1c:0c:d8:08:0b:c2:42:99:e3:bf: 9d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1E:BC:CC:7D:E7:45:FE:31:F6:45:47:0D:E9:93:7A:96:EC:19:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/8ee2a08b-770e-3be0-b580-1401678ad4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl X509v3 Authority Key Identifier: keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer sbgp-ipAddrBlock: critical IPv4: 66.187.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:fa:f9:c8:36:65:68:aa:79:b1:ba:56:2e:08:b2:ad:cc:7b: 6f:77:7b:3c:02:c4:4a:89:48:8e:a8:ea:60:ee:14:bf:de:a9: e7:48:c2:12:91:b2:9a:d8:0a:ed:74:ad:15:c5:28:a1:d6:bb: 2d:b2:aa:ae:59:e8:c7:48:54:d5:d9:9a:9f:8a:08:df:1a:9c: a8:81:d4:16:24:d3:76:72:48:01:ac:3c:ed:e3:37:91:f5:55: 1e:2b:cc:9e:7b:f0:c3:c7:d6:68:35:22:f5:57:23:64:d2:4f: 5a:26:11:21:e2:63:09:57:28:ec:25:a0:b7:02:fd:94:da:43: aa:6c:ab:a7:a1:4b:19:9b:31:00:69:56:97:54:cb:c3:d8:10: 8b:84:91:b4:f3:11:8e:cf:56:14:ca:50:c3:87:f3:67:67:ff: b0:24:73:59:84:d7:d8:2f:67:49:f9:91:7d:1a:f4:89:b0:62: 53:bf:85:15:e0:18:ac:90:bc:5b:0b:6d:54:35:6b:ed:51:30: 32:1f:f9:90:90:2c:4e:d6:6d:32:cb:ad:f5:04:4d:78:39:c8: 4f:ca:10:63:11:4b:77:91:21:0c:cb:a9:56:3d:c8:49:af:7e: dc:a8:df:9b:26:14:8f:22:d1:5d:5e:9b:f7:9d:dc:48:5a:40: 07:d3:f7:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFrcB6DRgU9IoR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQxZjc1ODEtNjkyYS00NjdlLWFlNzEtZDNjNDkyMWQw NzY1MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk Mzk4Y2U5MzAtOWQ2NC00Yzc4LWFlN2ItNTFmMWQ1NTE3ODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghB4STXZd//zTuo9c9RwV0xEHyYNy3C9bGzH rv8P3hNp69jV10ol5kxTJiGJQvFz/ibjWj4uQg4hSpiTK0wsGPo+wByfuXoidUln 9tfFVDKUzWw30U6w4yCKqvVnGjxJSi6KmOmeWgnXulMcNaSDk4O/rAASxG/VOyAE nEipd9rTRueA9qtu+dSPgcn/TJ/OFh6NEq2557WX3cONLZjL2P94kChtYhl3dSPr j4AlSRBRx1U4MBdh8PMQCNO4wrKgoThFm8Wra9hrmtiB4lYlsyNkxYuQC5+q/SwV mOTIZGKblLT0qr/DKHQcUx1WlJuBrHItOBwM2AgLwkKZ47+d3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYevMx950X+MfZFRw3pk3qW7BmKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFm NzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0OTIxZDA3NjUvOGVlMmEwOGItNzcwZS0z YmUwLWI1ODAtMTQwMTY3OGFkNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQxZjc1ODEtNjkyYS00NjdlLWFl NzEtZDNjNDkyMWQwNzY1LzVkMWY3NTgxLTY5MmEtNDY3ZS1hZTcxLWQzYzQ5MjFk MDc2NS5jcmwwHwYDVR0jBBgwFoAU/E+wVT9F4ouBttKQsjS83QRwJYYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFmNzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0 OTIxZDA3NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALD6+cg2ZWiqebG6Vi4Isq3Me293ezwCxEqJSI6o6mDuFL/eqedIwhKR sprYCu10rRXFKKHWuy2yqq5Z6MdIVNXZmp+KCN8anKiB1BYk03ZySAGsPO3jN5H1 VR4rzJ578MPH1mg1IvVXI2TST1omESHiYwlXKOwloLcC/ZTaQ6psq6ehSxmbMQBp VpdUy8PYEIuEkbTzEY7PVhTKUMOH82dn/7Akc1mE19gvZ0n5kX0a9ImwYlO/hRXg GKyQvFsLbVQ1a+1RMDIf+ZCQLE7WbTLLrfUETXg5yE/KEGMRS3eRIQzLqVY9yEmv ftyo35smFI8i0V1em/ed3EhaQAfT90E= -----END CERTIFICATE-----Generated at Sat Apr 26 17:49:58 2025 by rpki-client