$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfbf61e2-db52-3eca-b48f-cd9a6481dae7.roa File: bfbf61e2-db52-3eca-b48f-cd9a6481dae7.roa (raw, json) Hash identifier: fl41quYn76Q1d4/DJbVoJVi+rQizUjuuMSij6+vFzB0= Subject key identifier: 04:64:8A:8D:BA:21:87:B3:07:3B:90:4E:6A:A9:29:44:26:29:47:D6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D16526EDA5E1650EE2CC2E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfbf61e2-db52-3eca-b48f-cd9a6481dae7.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 13367 IP address blocks: 66.41.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:26:ed:a5:e1:65:0e:e2:cc:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=22064e7e-4794-46a3-8902-612fc8569e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:38:38:6a:b9:ce:4d:36:b5:fc:cf:a7:1f:33: 86:35:65:24:34:48:88:cb:2b:da:06:68:5d:66:e2: 63:e0:12:10:a4:6c:d8:5d:69:e2:e3:46:30:a0:dc: 1a:35:b0:6b:c2:2c:60:eb:df:b9:f8:2d:d6:45:7a: 08:f2:ed:d8:10:43:e7:f4:ea:2a:d1:70:23:f2:b4: d7:1d:c0:4a:41:55:ad:08:17:b0:96:86:3b:4d:67: dd:5d:a4:d0:d2:3b:b5:f2:3f:f1:95:f3:d0:4f:84: ca:95:d0:15:31:bf:07:da:81:5f:0d:15:94:bf:7d: 1c:16:a4:25:56:f5:f8:6c:1c:b6:7c:e5:6f:22:3f: 05:61:8d:d1:a1:57:a9:58:4f:df:fa:b4:00:74:93: 43:5a:49:36:a1:3a:f6:71:c6:ff:0c:aa:b5:af:b1: e0:e4:e7:90:9b:45:1d:ce:24:2e:67:b9:fb:9b:e6: 50:d4:62:73:97:0d:35:90:f5:74:78:c4:ec:5c:2d: 6f:34:a3:46:6d:a0:2c:3b:f0:24:4c:58:3d:87:b7: c8:62:f6:94:6d:70:2c:61:10:37:1f:71:82:15:bf: 8a:6a:34:75:d6:09:a6:b0:5c:2e:c9:00:a4:80:4a: 78:f8:a2:31:32:ff:ca:5f:2d:4f:9f:8d:8b:24:7f: c0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:64:8A:8D:BA:21:87:B3:07:3B:90:4E:6A:A9:29:44:26:29:47:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfbf61e2-db52-3eca-b48f-cd9a6481dae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.41.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a5:6e:58:49:6a:3d:d1:10:9b:48:95:ce:36:ae:45:70:c0: 1c:f6:af:18:9c:cb:3c:c4:90:74:f6:95:21:e0:cf:5a:dc:78: 31:9d:5e:9d:bb:2c:cb:38:5d:71:81:36:a0:d4:55:00:77:be: d3:94:80:dc:66:42:cb:b0:25:72:11:66:ec:95:6b:cc:f4:74: a9:d7:a4:52:96:1e:cf:c6:3c:23:b2:e5:7e:63:93:4a:bf:b0: e9:1d:ef:f7:27:35:d9:0c:ef:a0:60:cd:7d:e1:32:4c:39:9b: 15:52:76:5e:85:67:ce:e0:f2:38:d2:f9:ff:e4:96:37:f9:10: af:a8:91:3a:0f:f0:af:ff:12:15:96:3f:78:1e:a4:81:ea:61: 63:ee:44:e9:f9:7a:aa:c1:62:f5:07:64:3f:a2:58:8e:7f:07: 1c:67:aa:ea:d0:d4:f2:b6:d1:42:dd:42:df:81:ac:97:43:62: b6:38:05:22:b0:64:7a:71:af:57:dc:d5:79:a6:98:7d:a6:e6: ca:ef:eb:c4:41:8d:20:a4:49:d5:22:4b:78:34:74:7c:39:a2: 2a:a3:30:cf:5a:ff:1d:78:97:5e:b8:00:38:aa:b8:2f:6f:58: 12:49:c8:e7:e8:23:93:bb:86:e1:e0:33:39:ba:36:bd:f2:a5: 93:fa:21:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZSbtpeFlDuLMLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MjIwNjRlN2UtNDc5NC00NmEzLTg5MDItNjEyZmM4NTY5ZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjg4arnOTTa1/M+nHzOGNWUkNEiIyyvaBmhd ZuJj4BIQpGzYXWni40YwoNwaNbBrwixg69+5+C3WRXoI8u3YEEPn9Ooq0XAj8rTX HcBKQVWtCBewloY7TWfdXaTQ0ju18j/xlfPQT4TKldAVMb8H2oFfDRWUv30cFqQl VvX4bBy2fOVvIj8FYY3RoVepWE/f+rQAdJNDWkk2oTr2ccb/DKq1r7Hg5OeQm0Ud ziQuZ7n7m+ZQ1GJzlw01kPV0eMTsXC1vNKNGbaAsO/AkTFg9h7fIYvaUbXAsYRA3 H3GCFb+KajR11gmmsFwuyQCkgEp4+KIxMv/KXy1Pn42LJH/A3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARkio26IYezBzuQTmqpKUQmKUfWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZiZjYxZTItZGI1Mi0z ZWNhLWI0OGYtY2Q5YTY0ODFkYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQikYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOlblhJaj3REJtIlc42rkVwwBz2rxicyzzEkHT2lSHgz1rceDGdXp27 LMs4XXGBNqDUVQB3vtOUgNxmQsuwJXIRZuyVa8z0dKnXpFKWHs/GPCOy5X5jk0q/ sOkd7/cnNdkM76BgzX3hMkw5mxVSdl6FZ87g8jjS+f/kljf5EK+okToP8K//EhWW P3gepIHqYWPuROn5eqrBYvUHZD+iWI5/BxxnqurQ1PK20ULdQt+BrJdDYrY4BSKw ZHpxr1fc1XmmmH2m5srv68RBjSCkSdUiS3g0dHw5oiqjMM9a/x14l164ADiquC9v WBJJyOfoI5O7huHgMzm6Nr3ypZP6IYw= -----END CERTIFICATE-----Generated at Tue Jun 3 05:04:50 2025 by rpki-client