$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/9b788c72-aec8-3e82-a409-5b8355050a3b.roa File: 9b788c72-aec8-3e82-a409-5b8355050a3b.roa (raw, json) Hash identifier: J/Ge0IIIxpBCYyUPbpnrTKfNAE9dCYSNZ22p5Qx8cVE= Subject key identifier: B4:78:39:0A:93:25:0F:C8:E1:5C:C6:AF:9D:9B:35:2B:D6:6B:A4:C6 Certificate issuer: /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170 Certificate serial: 010D0C9F4328584967EC842E6E8666A4B2FBD300 Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/9b788c72-aec8-3e82-a409-5b8355050a3b.roa Signing time: Thu 03 Apr 2025 18:18:38 +0000 ROA not before: Thu 03 Apr 2025 18:18:38 +0000 ROA not after: Wed 02 Jul 2025 18:18:38 +0000 asID: 16509 IP address blocks: 66.235.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:ec:84:2e:6e:86:66:a4:b2:fb:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170 Validity Not Before: Apr 3 18:18:38 2025 GMT Not After : Jul 2 18:18:38 2025 GMT Subject: CN=99c099b7-e9f6-4e8c-b636-c5ae58847e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f5:5d:f0:b2:45:67:38:ff:d9:b7:f7:3b:3a: ae:11:63:9b:c5:f2:82:4d:13:01:b3:77:30:91:6b: 35:7b:3f:90:b3:5b:99:bb:50:e6:54:f7:5a:a5:04: 47:2c:1e:9b:2f:97:41:a1:b4:0b:9a:55:ea:99:a0: 9f:48:92:44:c9:32:b5:4a:fb:59:29:fd:c0:90:57: 79:55:a9:bf:0d:67:51:e3:50:74:db:fb:c3:7b:4f: 48:5a:b0:17:d5:41:27:c0:cd:cb:14:3f:57:71:51: c1:2e:e3:d2:52:3f:f4:10:8d:0e:46:e7:4a:b1:35: 67:13:c1:ed:e5:4c:ba:8b:bc:b2:66:0b:43:08:c7: 0c:30:74:8f:0e:94:0f:b5:49:d9:27:9f:9c:39:36: ff:28:69:7a:35:66:62:56:38:e3:98:77:2b:71:e9: c7:53:c9:64:9e:14:f8:ae:12:9b:bd:5a:0d:7b:49: dd:13:b7:4c:66:6e:42:11:e2:44:d2:7d:cd:e8:05: a5:21:00:0f:6d:d3:66:79:0e:be:90:d5:53:75:69: d8:b2:f1:35:e7:3a:7c:b6:06:34:88:71:fd:cb:2a: bc:09:e4:14:79:d1:44:49:91:f0:19:84:26:d1:6d: 07:6c:6e:e7:8d:5b:c3:46:63:5c:7f:14:82:24:14: 35:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:78:39:0A:93:25:0F:C8:E1:5C:C6:AF:9D:9B:35:2B:D6:6B:A4:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/9b788c72-aec8-3e82-a409-5b8355050a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl X509v3 Authority Key Identifier: keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer sbgp-ipAddrBlock: critical IPv4: 66.235.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c3:51:b8:c9:37:44:64:de:b9:73:1d:bb:a0:27:02:ce:73: 52:01:00:a5:88:8f:7b:dd:37:d2:44:30:d0:21:71:79:c1:8d: 31:70:99:6b:1a:94:e2:fe:34:c2:01:9c:69:f0:c7:43:69:81: 5a:4e:bc:82:64:01:cf:b9:72:87:60:d9:0c:e0:a1:be:38:2d: 69:60:49:16:32:17:8c:05:02:67:f7:26:1c:7e:04:30:cf:22: 11:c8:87:0f:a2:65:3f:15:83:7c:c0:27:db:46:48:2b:1f:cf: ef:6c:e0:d6:16:9f:0a:f6:1c:38:92:ff:d3:4f:90:52:1a:8d: c8:43:c2:a9:82:8d:0f:6d:2f:46:77:de:91:c7:12:eb:3e:d5: 7e:0c:5f:f1:46:a1:f0:5d:40:ac:48:1a:c8:37:db:7e:0f:01: 56:73:94:68:85:68:66:14:bf:60:93:4b:42:28:21:53:f7:d3: 0d:5e:b7:1b:4e:5f:62:ff:db:bb:16:82:08:b2:fb:68:2c:cc: a4:a4:02:ea:94:11:3b:1d:9a:22:45:e5:70:df:da:14:9a:9f: 71:bd:b9:f6:cf:af:b9:59:48:73:8a:12:49:0a:44:66:0f:62: de:f5:36:d1:40:2a:65:bb:40:79:06:b3:dc:cb:64:11:e9:5f: 46:3c:8c:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEln7IQuboZmpLL70wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ3MjJiMjAtZjI4OC00YmQ4LWJmYzctNGViN2VhZDlk MTcwMB4XDTI1MDQwMzE4MTgzOFoXDTI1MDcwMjE4MTgzOFowLzEtMCsGA1UEAxMk OTljMDk5YjctZTlmNi00ZThjLWI2MzYtYzVhZTU4ODQ3ZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPVd8LJFZzj/2bf3OzquEWObxfKCTRMBs3cw kWs1ez+Qs1uZu1DmVPdapQRHLB6bL5dBobQLmlXqmaCfSJJEyTK1SvtZKf3AkFd5 Vam/DWdR41B02/vDe09IWrAX1UEnwM3LFD9XcVHBLuPSUj/0EI0ORudKsTVnE8Ht 5Uy6i7yyZgtDCMcMMHSPDpQPtUnZJ5+cOTb/KGl6NWZiVjjjmHcrcenHU8lknhT4 rhKbvVoNe0ndE7dMZm5CEeJE0n3N6AWlIQAPbdNmeQ6+kNVTdWnYsvE15zp8tgY0 iHH9yyq8CeQUedFESZHwGYQm0W0HbG7njVvDRmNcfxSCJBQ1jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLR4OQqTJQ/I4VzGr52bNSvWa6TGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDcy MmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3ZWFkOWQxNzAvOWI3ODhjNzItYWVjOC0z ZTgyLWE0MDktNWI4MzU1MDUwYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ3MjJiMjAtZjI4OC00YmQ4LWJm YzctNGViN2VhZDlkMTcwL2ZkNzIyYjIwLWYyODgtNGJkOC1iZmM3LTRlYjdlYWQ5 ZDE3MC5jcmwwHwYDVR0jBBgwFoAUD6H2SRALtv19Wb/tcfGsC09Uy7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZDcyMmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3 ZWFkOWQxNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQutyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/DUbjJN0Rk3rlzHbugJwLOc1IBAKWIj3vdN9JEMNAhcXnBjTFwmWsa lOL+NMIBnGnwx0NpgVpOvIJkAc+5codg2Qzgob44LWlgSRYyF4wFAmf3Jhx+BDDP IhHIhw+iZT8Vg3zAJ9tGSCsfz+9s4NYWnwr2HDiS/9NPkFIajchDwqmCjQ9tL0Z3 3pHHEus+1X4MX/FGofBdQKxIGsg3234PAVZzlGiFaGYUv2CTS0IoIVP30w1etxtO X2L/27sWggiy+2gszKSkAuqUETsdmiJF5XDf2hSan3G9ufbPr7lZSHOKEkkKRGYP Yt71NtFAKmW7QHkGs9zLZBHpX0Y8jJ4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:00:27 2025 by rpki-client