$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/6dadc9da-5e7f-30b5-887e-51c41be833ef.roa File: 6dadc9da-5e7f-30b5-887e-51c41be833ef.roa (raw, json) Hash identifier: CreGmkeYBb5qGz8q4qibTOJhOSa0W978dmAiRhWRUJA= Subject key identifier: F5:5A:80:F9:CC:CF:66:BE:CB:AF:72:FF:FE:50:BA:F1:07:86:ED:D2 Certificate issuer: /CN=dc81e524-050d-4a15-9043-39314922cc81 Certificate serial: 010D0C9F432858499829D2FC5A88F0C01B958AE0 Authority key identifier: 12:2A:C3:3E:9D:1C:2C:9B:21:56:7F:E9:B3:E8:03:87:FD:C6:56:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/6dadc9da-5e7f-30b5-887e-51c41be833ef.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 400146 IP address blocks: 66.33.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d2:fc:5a:88:f0:c0:1b:95:8a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc81e524-050d-4a15-9043-39314922cc81 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=69bfb419-8ac4-4d43-87ab-f6914dd84d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:f2:2c:5b:e9:8b:e5:09:f3:cf:f5:1c:94: 6b:8e:76:97:13:95:21:4f:a4:6e:8f:b5:c9:21:95: 77:08:69:3b:a6:38:37:35:39:a4:b8:cb:41:59:1a: 74:f1:48:1f:cb:f3:55:4a:41:06:9b:98:f8:85:be: d7:4e:4d:ca:55:fc:f8:e9:65:6f:19:bc:f1:d2:07: 29:0c:d4:3d:09:eb:28:98:b9:2d:1c:2f:8e:2a:fb: b7:0b:f1:38:41:82:59:c9:50:4f:50:d9:1c:d2:01: 10:42:a9:c2:c9:64:ff:b3:2e:05:a2:23:84:17:1e: 98:49:41:76:b2:43:f3:78:94:f6:35:e0:f2:7e:4f: 1a:ad:3d:2d:b0:44:a6:93:1e:8a:18:6e:14:26:2a: ca:58:70:b9:b5:97:a6:c8:96:29:ec:aa:98:73:dc: db:d6:2a:1f:68:6c:c1:86:e8:59:a7:77:40:f4:b6: 51:9d:f0:a6:d3:da:56:dd:99:7b:ef:9a:61:c0:a4: 9f:8c:cc:43:48:71:64:23:00:5d:83:c5:2b:13:aa: f0:12:b0:d9:96:7a:35:25:14:b3:61:7b:9f:85:6c: 5e:a0:5d:b0:1a:74:7c:4d:d1:61:05:99:75:74:11: 18:01:cb:f6:20:92:6c:b2:b8:e0:76:5b:dc:84:96: 5c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5A:80:F9:CC:CF:66:BE:CB:AF:72:FF:FE:50:BA:F1:07:86:ED:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/6dadc9da-5e7f-30b5-887e-51c41be833ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.crl X509v3 Authority Key Identifier: keyid:12:2A:C3:3E:9D:1C:2C:9B:21:56:7F:E9:B3:E8:03:87:FD:C6:56:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer sbgp-ipAddrBlock: critical IPv4: 66.33.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:b5:39:8f:79:a2:e0:86:6c:ee:ae:07:0d:f3:76:2f:3d:0c: a9:2a:05:3b:bf:9a:96:21:0c:e0:ef:18:7d:9c:48:ef:a2:cb: 0a:d5:e5:f7:b6:fc:ad:4e:83:09:5c:47:ba:9a:db:16:1d:52: ce:1d:43:4a:0a:df:fd:b2:24:7c:3f:0e:0e:49:01:59:28:97: 64:96:cb:2a:63:b1:b8:d7:14:1e:28:54:12:15:9c:b4:62:70: d4:d8:a3:90:95:e5:68:74:81:f1:5b:51:45:9b:fb:39:c7:80: 94:c5:d6:b9:78:e3:2c:a3:73:f9:6f:39:23:d5:99:b1:b8:3c: b6:1f:9b:8c:dd:cd:cd:6d:21:7b:e1:d7:ec:0e:8f:7a:80:36: de:35:95:2f:8f:94:bc:ec:a7:44:7a:6f:8d:dc:69:ea:e8:cd: b5:9d:27:da:56:68:50:75:76:c7:88:7d:63:42:c1:24:59:d8: f0:44:0c:01:6d:9e:e5:dd:a5:bc:4d:4c:ce:10:28:1a:7b:40: a0:e3:cf:8e:38:52:23:a1:bd:e4:6f:ea:5c:16:af:72:58:01: af:80:90:6b:4b:dc:8c:d6:ab:9d:db:8a:3a:5f:90:3b:d8:77: c9:10:6d:eb:16:52:00:83:97:54:a6:d9:11:70:2b:0b:0a:4a: 5e:bd:34:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdL8WojwwBuViuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM4MWU1MjQtMDUwZC00YTE1LTkwNDMtMzkzMTQ5MjJj YzgxMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NjliZmI0MTktOGFjNC00ZDQzLTg3YWItZjY5MTRkZDg0ZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweTyLFvpi+UJ88/1HJRrjnaXE5UhT6Ruj7XJ IZV3CGk7pjg3NTmkuMtBWRp08Ugfy/NVSkEGm5j4hb7XTk3KVfz46WVvGbzx0gcp DNQ9CesomLktHC+OKvu3C/E4QYJZyVBPUNkc0gEQQqnCyWT/sy4FoiOEFx6YSUF2 skPzeJT2NeDyfk8arT0tsESmkx6KGG4UJirKWHC5tZemyJYp7KqYc9zb1iofaGzB huhZp3dA9LZRnfCm09pW3Zl775phwKSfjMxDSHFkIwBdg8UrE6rwErDZlno1JRSz YXufhWxeoF2wGnR8TdFhBZl1dBEYAcv2IJJssrjgdlvchJZcEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVagPnMz2a+y69y//5QuvEHhu3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzgx ZTUyNC0wNTBkLTRhMTUtOTA0My0zOTMxNDkyMmNjODEvNmRhZGM5ZGEtNWU3Zi0z MGI1LTg4N2UtNTFjNDFiZTgzM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM4MWU1MjQtMDUwZC00YTE1LTkw NDMtMzkzMTQ5MjJjYzgxL2RjODFlNTI0LTA1MGQtNGExNS05MDQzLTM5MzE0OTIy Y2M4MS5jcmwwHwYDVR0jBBgwFoAUEirDPp0cLJshVn/ps+gDh/3GVlgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzgxZTUyNC0wNTBkLTRhMTUtOTA0My0zOTMx NDkyMmNjODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAy1OY95ouCGbO6uBw3zdi89DKkqBTu/mpYhDODvGH2cSO+iywrV5fe2 /K1OgwlcR7qa2xYdUs4dQ0oK3/2yJHw/Dg5JAVkol2SWyypjsbjXFB4oVBIVnLRi cNTYo5CV5Wh0gfFbUUWb+znHgJTF1rl44yyjc/lvOSPVmbG4PLYfm4zdzc1tIXvh 1+wOj3qANt41lS+PlLzsp0R6b43caerozbWdJ9pWaFB1dseIfWNCwSRZ2PBEDAFt nuXdpbxNTM4QKBp7QKDjz444UiOhveRv6lwWr3JYAa+AkGtL3IzWq53bijpfkDvY d8kQbesWUgCDl1Sm2RFwKwsKSl69NFE= -----END CERTIFICATE-----Generated at Mon Apr 28 22:10:45 2025 by rpki-client