$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/896c1764-be24-3bf8-8415-b2e89ca224dc.roa File: 896c1764-be24-3bf8-8415-b2e89ca224dc.roa (raw, json) Hash identifier: HxujhiEKmzwvDCsv2oIvpDarXCuon10L8V21WwKeNOw= Subject key identifier: 32:7F:88:19:51:4E:6E:1D:05:9F:88:CC:95:B7:B0:66:A0:D7:8F:E8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784FAC8C8DB6C672054E380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/896c1764-be24-3bf8-8415-b2e89ca224dc.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 66.249.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fa:c8:c8:db:6c:67:20:54:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1adae887-c64b-4ec8-9773-6e3877ee7658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:07:cf:b4:c4:04:09:64:46:a7:41:0b:3d:e2: c2:48:af:78:10:25:04:6a:d8:14:cc:94:67:b8:11: 77:d6:97:d8:08:a7:87:13:e3:6a:b0:3b:35:16:e4: 44:aa:87:89:24:97:d6:94:0b:a0:60:ff:b3:f3:ef: 64:2d:49:10:e5:ba:9b:35:e3:99:4f:55:9a:b1:fe: bf:e9:35:f7:b9:21:2d:12:14:99:60:01:42:a9:9b: 5c:36:1a:77:38:1e:a5:68:77:a2:b7:73:8a:d1:f1: 00:1b:0d:b3:11:6d:8b:02:c5:b7:0c:e8:e7:d6:0f: cb:85:52:a3:9b:da:fb:21:b5:d4:1a:ea:7a:30:f3: a4:f9:53:03:c5:ea:4e:dd:80:e7:4d:96:f2:f7:3b: 53:c1:c1:67:78:77:c9:99:11:8b:89:34:c1:f1:34: 39:dd:ad:d0:7a:55:2b:35:a3:01:95:5a:d1:36:8e: 55:c1:68:14:97:f9:1b:65:02:e4:3c:62:9a:e8:bf: 16:32:9f:97:ec:92:1a:a4:05:3a:4e:ec:cb:73:23: b9:6a:df:40:3a:03:5a:c4:68:5f:85:43:2e:86:e4: a6:66:19:23:0d:50:e5:b8:e9:82:e6:91:f7:f7:81: ca:7f:d7:fb:0c:4c:8a:c2:b9:60:93:bd:bd:79:58: 2e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7F:88:19:51:4E:6E:1D:05:9F:88:CC:95:B7:B0:66:A0:D7:8F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/896c1764-be24-3bf8-8415-b2e89ca224dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3a:6e:ae:90:a0:95:9d:41:35:5e:1e:d4:32:fa:da:a5:7a: c5:c9:c2:92:78:d6:0f:c4:ae:4f:9d:08:8d:6f:5e:4d:a2:e6: e4:86:b2:60:f0:5f:9f:82:01:95:ac:a9:70:64:9f:bd:6a:d0: 5e:d6:bd:00:71:a3:ca:53:a6:ac:97:4d:93:74:f9:d4:d7:a8: 27:bf:8e:61:57:ae:c8:61:bf:f8:07:74:7f:3a:dc:f3:60:d4: 30:3e:b9:9a:59:9c:41:19:37:72:8e:4d:47:a4:ef:89:8e:04: 68:c7:b0:1a:84:29:59:f2:a5:6c:c5:e4:5a:80:61:57:57:3d: 4d:a0:f4:d7:78:6a:43:22:b8:36:f3:a3:a2:2c:99:1c:5a:8b: e1:22:32:0d:ab:26:a3:b3:84:96:0c:7e:b1:f2:11:23:de:c4: dd:77:92:cc:02:d4:e6:2e:d2:83:18:6b:1a:75:c4:e0:e5:60: 49:6f:3f:c2:c3:84:16:87:0c:38:e5:d2:e1:f1:ef:30:ac:21: 56:e6:89:11:24:b3:fa:25:7a:88:51:16:cd:cf:fb:9f:b7:a4: 4b:9c:39:29:00:03:65:94:94:ea:a7:f5:c1:37:04:cd:e4:af: 47:ca:ba:8e:7c:d1:73:88:e9:f3:be:f8:27:dd:f5:b8:6a:7d: 06:1d:4a:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPrIyNtsZyBU44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWFkYWU4ODctYzY0Yi00ZWM4LTk3NzMtNmUzODc3ZWU3NjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggfPtMQECWRGp0ELPeLCSK94ECUEatgUzJRn uBF31pfYCKeHE+NqsDs1FuREqoeJJJfWlAugYP+z8+9kLUkQ5bqbNeOZT1Wasf6/ 6TX3uSEtEhSZYAFCqZtcNhp3OB6laHeit3OK0fEAGw2zEW2LAsW3DOjn1g/LhVKj m9r7IbXUGup6MPOk+VMDxepO3YDnTZby9ztTwcFneHfJmRGLiTTB8TQ53a3QelUr NaMBlVrRNo5VwWgUl/kbZQLkPGKa6L8WMp+X7JIapAU6TuzLcyO5at9AOgNaxGhf hUMuhuSmZhkjDVDluOmC5pH394HKf9f7DEyKwrlgk729eVguTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJ/iBlRTm4dBZ+IzJW3sGag14/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODk2YzE3NjQtYmUyNC0z YmY4LTg0MTUtYjJlODljYTIyNGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQvlUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg6bq6QoJWdQTVeHtQy+tqlesXJwpJ41g/Erk+dCI1vXk2i5uSGsmDw X5+CAZWsqXBkn71q0F7WvQBxo8pTpqyXTZN0+dTXqCe/jmFXrshhv/gHdH863PNg 1DA+uZpZnEEZN3KOTUek74mOBGjHsBqEKVnypWzF5FqAYVdXPU2g9Nd4akMiuDbz o6IsmRxai+EiMg2rJqOzhJYMfrHyESPexN13kswC1OYu0oMYaxp1xODlYElvP8LD hBaHDDjl0uHx7zCsIVbmiREks/oleohRFs3P+5+3pEucOSkAA2WUlOqn9cE3BM3k r0fKuo580XOI6fO++Cfd9bhqfQYdSp4= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:19 2025 by rpki-client