$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/8d688a7e-be14-37fa-9233-e8b2572cd686.roa File: 8d688a7e-be14-37fa-9233-e8b2572cd686.roa (raw, json) Hash identifier: D2dQVA2Kh4AQDoIEdj1Zjo7rfB7bUag3FsOLrY2mAuw= Subject key identifier: A4:5A:00:C0:8A:4D:F5:BE:61:C5:48:09:B5:78:2F:44:19:7D:58:B8 Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F432858494CC94EA720A4BC7FF591B500 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/8d688a7e-be14-37fa-9233-e8b2572cd686.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 19740 IP address blocks: 66.249.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4e:a7:20:a4:bc:7f:f5:91:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=16c059c4-633a-49a6-8bd8-7889b74ba79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:25:ac:56:95:3d:42:72:b4:c8:8b:85:e3:7b: c1:53:0c:46:6f:d7:77:85:13:21:d6:e1:b3:56:43: 5d:ff:b9:44:87:38:78:16:06:f8:03:6e:4d:d0:2c: e0:37:93:cf:60:a3:5e:3b:a7:7d:52:0e:e3:bb:7c: 0e:09:67:33:2a:55:5f:a4:46:91:69:8a:d1:89:db: 21:5c:34:ed:ee:94:29:15:b2:57:d8:11:7f:1a:7f: 87:31:98:4c:b9:e4:58:19:66:97:1f:92:9f:f8:ec: e0:bf:70:46:dd:4e:17:d3:d7:e0:d8:35:38:94:11: aa:0e:45:4b:30:24:e6:1a:20:61:aa:99:0a:33:5b: 6a:84:2b:f9:f4:bd:b9:d3:1c:fe:d1:97:e2:a3:81: 26:87:ff:ba:4b:00:90:b0:c8:8f:3f:b0:c2:4d:af: 2b:42:e7:86:8f:87:63:6b:81:db:7d:5b:50:bb:12: 4e:80:3f:08:18:17:68:6d:bb:08:66:23:d3:c1:e6: 8d:fa:b8:9b:ff:92:0f:c9:ed:3f:39:d4:bb:a7:c5: de:14:e9:1e:11:b6:6c:48:07:84:07:1e:91:fb:e3: fe:8d:e6:a5:12:97:c1:d2:75:2c:f6:6a:7f:fc:6d: 36:d9:dd:aa:67:ee:e5:ae:78:23:f3:31:c1:94:51: 13:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5A:00:C0:8A:4D:F5:BE:61:C5:48:09:B5:78:2F:44:19:7D:58:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/8d688a7e-be14-37fa-9233-e8b2572cd686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:4e:7e:14:b6:fd:4a:1d:7a:e6:d4:c7:13:3b:4c:f6:a0:9b: cc:90:16:fd:4c:52:10:72:8e:11:7a:ec:72:44:d7:0b:b7:c5: aa:de:50:84:a1:04:8b:42:99:c4:b7:b7:6c:36:b3:4b:08:1f: 6b:90:db:ad:64:c5:50:77:2c:ed:46:a9:cc:2f:1c:da:77:aa: f9:ae:30:6e:e4:bb:90:7f:44:15:d6:f2:39:20:66:5d:52:e7: 84:a9:08:13:52:6b:f0:4c:70:0d:bb:be:f4:5e:ab:52:a3:d8: 8d:fa:81:72:a8:4d:55:0e:ac:7a:45:a9:f5:7d:c2:04:cc:b1: 77:92:98:0a:a2:31:07:d4:07:3d:f8:d8:7e:1d:2a:20:25:fd: 4d:b8:d2:f0:3f:b4:59:a3:02:d7:56:03:a0:5d:1e:bc:c2:da: cc:e0:52:24:a4:99:78:5b:cc:d5:84:54:5a:56:f5:5d:1a:83: 25:a5:73:d5:86:b2:21:8b:f7:84:0c:f2:6b:1d:9a:b2:da:79: 89:69:09:e0:e8:e9:6c:d7:c3:5a:80:e5:1d:49:bd:d9:48:9b: 8c:45:97:55:44:ae:4a:b0:10:29:83:21:a6:79:a0:e6:11:c7: 57:b5:c8:f9:1a:8e:c7:5d:ba:b0:94:1b:1a:e5:62:89:22:51: e2:03:43:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyU6nIKS8f/WRtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MTZjMDU5YzQtNjMzYS00OWE2LThiZDgtNzg4OWI3NGJhNzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yWsVpU9QnK0yIuF43vBUwxGb9d3hRMh1uGz VkNd/7lEhzh4Fgb4A25N0CzgN5PPYKNeO6d9Ug7ju3wOCWczKlVfpEaRaYrRidsh XDTt7pQpFbJX2BF/Gn+HMZhMueRYGWaXH5Kf+Ozgv3BG3U4X09fg2DU4lBGqDkVL MCTmGiBhqpkKM1tqhCv59L250xz+0Zfio4Emh/+6SwCQsMiPP7DCTa8rQueGj4dj a4HbfVtQuxJOgD8IGBdobbsIZiPTweaN+rib/5IPye0/OdS7p8XeFOkeEbZsSAeE Bx6R++P+jealEpfB0nUs9mp//G022d2qZ+7lrngj8zHBlFET1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRaAMCKTfW+YcVICbV4L0QZfVi4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvOGQ2ODhhN2UtYmUxNC0z N2ZhLTkyMzMtZThiMjU3MmNkNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvmEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpOfhS2/UodeubUxxM7TPagm8yQFv1MUhByjhF67HJE1wu3xareUISh BItCmcS3t2w2s0sIH2uQ261kxVB3LO1GqcwvHNp3qvmuMG7ku5B/RBXW8jkgZl1S 54SpCBNSa/BMcA27vvReq1Kj2I36gXKoTVUOrHpFqfV9wgTMsXeSmAqiMQfUBz34 2H4dKiAl/U240vA/tFmjAtdWA6BdHrzC2szgUiSkmXhbzNWEVFpW9V0agyWlc9WG siGL94QM8msdmrLaeYlpCeDo6WzXw1qA5R1JvdlIm4xFl1VErkqwECmDIaZ5oOYR x1e1yPkajsddurCUGxrlYokiUeIDQ7o= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:02 2025 by rpki-client