$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0ed0ff30-7a33-3ff8-962b-e5a6bd4aaa2b.roa File: 0ed0ff30-7a33-3ff8-962b-e5a6bd4aaa2b.roa (raw, json) Hash identifier: 66KIR/C3wG7A21/RQ4XXRFTrQePPlZ67SQbO4yj4Llo= Subject key identifier: 92:7C:25:8A:EB:57:24:AC:3E:10:D6:FF:49:1D:2C:3E:B0:5A:AA:FE Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F432858496FAF06BF6F2ED02F2FC1BD00 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0ed0ff30-7a33-3ff8-962b-e5a6bd4aaa2b.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 63062 IP address blocks: 66.82.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:06:bf:6f:2e:d0:2f:2f:c1:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=1d19158a-060a-46cc-adbb-50bf883c4e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:3d:9f:e9:8f:92:5b:b1:aa:2b:ed:46:b4: 1f:64:54:75:04:54:63:5b:96:26:39:b5:28:f1:db: 1d:f7:6d:44:8b:39:68:33:8e:cf:55:04:91:9b:5e: d5:63:b6:f5:dc:79:74:33:8f:71:88:b4:80:0b:ce: 8d:a0:1e:c2:3b:bc:c6:7f:4a:0f:6d:e0:73:6e:bb: 77:c4:88:58:67:f8:c1:c1:50:99:21:21:fc:db:dd: 51:b6:e2:61:05:d4:44:cc:96:76:05:f8:8e:72:05: 88:19:36:ab:38:7e:79:3d:08:c8:24:c7:7e:b7:89: 71:ec:e3:e5:3e:65:a1:8a:44:d9:69:9c:c5:4f:8e: d5:7a:04:38:93:c5:48:5c:5e:d4:b4:b0:0a:b5:5e: c8:1b:06:b8:a4:8e:db:4a:cb:3a:c7:e6:96:c7:0b: 3f:aa:cc:55:fb:ea:8b:d6:fe:74:a7:5d:4a:2a:94: f6:4e:97:64:81:c7:04:d2:8e:25:86:01:ec:27:c8: cd:0a:2b:a5:77:bd:66:ce:16:3d:3e:09:ba:1b:1a: 47:da:37:f7:07:3b:7b:f7:ed:73:dc:c2:16:34:83: 6b:35:35:32:5d:db:19:9c:86:c3:2f:6c:c3:a4:2f: 2e:35:f3:7a:54:0a:c1:43:64:ec:3c:79:14:7f:cd: 66:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7C:25:8A:EB:57:24:AC:3E:10:D6:FF:49:1D:2C:3E:B0:5A:AA:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0ed0ff30-7a33-3ff8-962b-e5a6bd4aaa2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 66.82.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:40:6b:8b:06:db:e5:5f:be:49:74:eb:c7:a1:bd:5a:d5:41: 53:fc:ac:79:87:cb:2f:e5:53:6c:f5:81:83:2c:0a:2e:07:8d: e7:d8:f9:67:db:74:6e:59:e2:a8:39:9c:43:7c:26:4a:3a:1b: df:af:12:12:95:ac:f2:fd:18:0a:a2:cf:9c:60:73:c5:d2:d2: bd:e1:83:9b:ca:b9:5d:73:2e:4a:2d:f6:35:e6:44:b9:ae:54: 37:41:0c:35:8f:43:b0:cf:a6:d7:63:7e:26:c1:32:e7:28:88: 80:0f:39:f4:48:77:f3:45:15:86:43:9f:dd:74:eb:d8:83:f7: 7b:54:b3:86:53:ff:de:40:87:0b:5c:43:b9:8c:b4:e4:94:33: a0:8c:b6:49:22:cf:d0:60:6d:47:67:13:2b:e6:af:6c:d4:6b: 59:32:1a:37:40:8c:95:3c:63:82:5d:89:4e:7d:32:36:91:ce: 58:34:55:ae:9f:19:3f:d1:af:3b:8c:0c:b4:6c:ac:9c:d2:d9: 72:00:e7:d6:6a:27:cb:4c:9c:98:da:1f:da:33:2f:df:55:47: 40:69:8f:ba:71:48:13:58:29:57:f0:50:91:e9:bc:d1:63:be: 2f:b0:99:78:49:a2:36:e2:03:7d:70:a1:a0:96:60:70:24:d4: 8b:c7:2b:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrwa/by7QLy/BvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk MWQxOTE1OGEtMDYwYS00NmNjLWFkYmItNTBiZjg4M2M0ZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNM9n+mPkluxqivtRrQfZFR1BFRjW5YmObUo 8dsd921EizloM47PVQSRm17VY7b13Hl0M49xiLSAC86NoB7CO7zGf0oPbeBzbrt3 xIhYZ/jBwVCZISH8291RtuJhBdREzJZ2BfiOcgWIGTarOH55PQjIJMd+t4lx7OPl PmWhikTZaZzFT47VegQ4k8VIXF7UtLAKtV7IGwa4pI7bSss6x+aWxws/qsxV++qL 1v50p11KKpT2TpdkgccE0o4lhgHsJ8jNCiuld71mzhY9Pgm6GxpH2jf3Bzt79+1z 3MIWNINrNTUyXdsZnIbDL2zDpC8uNfN6VArBQ2TsPHkUf81mHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJ8JYrrVySsPhDW/0kdLD6wWqr+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMGVkMGZmMzAtN2EzMy0z ZmY4LTk2MmItZTVhNmJkNGFhYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlJ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENAa4sG2+Vfvkl068ehvVrVQVP8rHmHyy/lU2z1gYMsCi4HjefY+Wfb dG5Z4qg5nEN8Jko6G9+vEhKVrPL9GAqiz5xgc8XS0r3hg5vKuV1zLkot9jXmRLmu VDdBDDWPQ7DPptdjfibBMucoiIAPOfRId/NFFYZDn91069iD93tUs4ZT/95Ahwtc Q7mMtOSUM6CMtkkiz9BgbUdnEyvmr2zUa1kyGjdAjJU8Y4JdiU59MjaRzlg0Va6f GT/RrzuMDLRsrJzS2XIA59ZqJ8tMnJjaH9ozL99VR0Bpj7pxSBNYKVfwUJHpvNFj vi+wmXhJojbiA31woaCWYHAk1IvHKxY= -----END CERTIFICATE-----Generated at Tue Apr 8 11:13:39 2025 by rpki-client