$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa File: cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa (raw, json) Hash identifier: EotljAHy2mX7eptUVPOXrfgFbWygF9NmKY5aWFzkE48= Subject key identifier: 66:72:A8:D2:F6:3D:A9:0D:16:B4:D0:5C:52:8C:CB:C1:4E:70:B2:8B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A784ED8E45F6EE3C801C4500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 66.249.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ed:8e:45:f6:ee:3c:80:1c:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a649d902-6006-4c59-b670-06ad0528be2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:35:49:10:01:61:64:28:3f:e1:28:ed:cf:df: 81:90:17:42:5d:d8:c4:c2:12:1c:59:b7:f8:7e:d7: 0c:1a:8a:0a:2d:a2:62:a3:ef:86:1d:19:ea:c4:8a: 82:26:55:64:78:fe:c7:2c:a1:0e:34:2b:da:ad:eb: 58:46:6c:08:d6:d2:5e:95:85:9d:85:98:17:30:57: a6:87:f8:cf:5c:78:fd:38:09:e6:db:40:ae:20:ff: 4a:19:fc:5e:b1:42:f7:ef:15:57:3b:e8:ef:b5:61: 99:e1:2a:2e:e9:98:89:1b:42:49:4f:00:50:39:8d: 14:22:ce:75:64:8a:75:a8:a0:28:40:eb:6f:a9:b0: a3:05:14:43:90:ab:41:9d:e1:28:11:ce:99:21:98: 4f:dd:c7:e6:f7:b6:15:5a:07:59:44:d1:e9:02:a2: f0:7f:7e:bc:66:7b:6a:ff:9c:60:83:ea:3a:c9:56: f7:b8:d6:4e:17:96:81:d0:7f:32:21:15:88:de:fe: eb:e0:60:72:cd:7f:ab:2b:9a:b7:25:6e:15:b6:4c: b9:f9:cd:00:de:61:8e:b3:46:63:10:87:a2:2e:72: ea:d9:45:e4:33:9f:61:72:4f:28:84:20:03:47:06: 9f:e9:c1:ea:db:50:97:99:4c:f6:8a:34:5b:96:4c: 48:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:72:A8:D2:F6:3D:A9:0D:16:B4:D0:5C:52:8C:CB:C1:4E:70:B2:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:59:ea:89:89:15:d6:38:01:4d:df:ae:7d:f3:42:0d:8a:ca: 61:73:76:a2:77:07:2a:1a:57:ba:4f:b9:45:52:99:05:69:48: 38:45:6f:2a:12:94:72:03:db:b8:10:6e:62:9e:ec:c7:cb:ba: c6:5d:6b:83:68:8a:18:1a:04:56:42:31:d3:88:44:8a:68:47: 74:6b:ce:40:b0:c8:f8:c3:9c:ba:1d:72:73:6f:09:4c:7d:d0: 40:2e:47:b7:37:d7:93:ad:55:af:fe:7a:61:ff:4f:15:a9:a7: 5e:bf:85:49:6e:af:40:16:47:ce:f1:04:2a:73:34:c8:cf:bb: de:0c:09:33:51:3e:c7:f5:c8:91:1b:85:15:1e:ee:5b:15:8f: cd:bc:8a:27:fd:16:48:3c:7f:89:4c:17:ce:36:48:75:01:7a: 02:74:5d:74:66:8d:e1:b1:80:65:fe:27:cd:2c:b7:2f:83:6b: 55:b5:85:95:9e:b9:4e:15:c6:c8:c7:f7:9f:7c:d6:b8:a2:43: fb:bf:eb:6f:23:01:90:71:f2:3c:2d:56:2e:2c:ef:07:a1:45: 78:bf:5c:23:fe:31:23:0a:2b:94:6d:4f:9a:16:ba:6b:56:35: 85:99:85:b8:2b:00:9a:3b:9b:0c:da:94:90:89:ed:25:66:5c: 56:05:fa:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhO2ORfbuPIAcRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTY0OWQ5MDItNjAwNi00YzU5LWI2NzAtMDZhZDA1MjhiZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDVJEAFhZCg/4Sjtz9+BkBdCXdjEwhIcWbf4 ftcMGooKLaJio++GHRnqxIqCJlVkeP7HLKEONCvaretYRmwI1tJelYWdhZgXMFem h/jPXHj9OAnm20CuIP9KGfxesUL37xVXO+jvtWGZ4Sou6ZiJG0JJTwBQOY0UIs51 ZIp1qKAoQOtvqbCjBRRDkKtBneEoEc6ZIZhP3cfm97YVWgdZRNHpAqLwf368Zntq /5xgg+o6yVb3uNZOF5aB0H8yIRWI3v7r4GByzX+rK5q3JW4Vtky5+c0A3mGOs0Zj EIeiLnLq2UXkM59hck8ohCADRwaf6cHq21CXmUz2ijRblkxITwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZyqNL2PakNFrTQXFKMy8FOcLKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Y1NjJlMzEtZjEyNi0z NGE1LThmZjQtNmRiN2M5MTFkOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQvlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpZ6omJFdY4AU3frn3zQg2KymFzdqJ3ByoaV7pPuUVSmQVpSDhFbyoS lHID27gQbmKe7MfLusZda4NoihgaBFZCMdOIRIpoR3RrzkCwyPjDnLodcnNvCUx9 0EAuR7c315OtVa/+emH/TxWpp16/hUlur0AWR87xBCpzNMjPu94MCTNRPsf1yJEb hRUe7lsVj828iif9Fkg8f4lMF842SHUBegJ0XXRmjeGxgGX+J80sty+Da1W1hZWe uU4VxsjH95981riiQ/u/628jAZBx8jwtVi4s7wehRXi/XCP+MSMKK5RtT5oWumtW NYWZhbgrAJo7mwzalJCJ7SVmXFYF+iY= -----END CERTIFICATE-----Generated at Sun Apr 27 01:04:11 2025 by rpki-client