$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843/b5c2e085-831f-30f6-ba63-565900ece494.roa File: b5c2e085-831f-30f6-ba63-565900ece494.roa (raw, json) Hash identifier: 1CrVPs8UPcGapHcQLJpine+6V9a2K7rOkiQF48DrcxI= Subject key identifier: 1A:AB:9B:79:EC:49:3E:36:3B:23:37:38:E8:52:F1:EA:95:87:67:A9 Certificate issuer: /CN=3530bd3c-c3c2-4bd2-bf7b-255fc4a87843 Certificate serial: 010D0C9F43285849071BE99E9FBC48399BA164D8 Authority key identifier: AE:74:F2:90:0E:6C:4F:2A:8D:4B:44:04:B9:20:A9:8F:5E:C7:61:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843/b5c2e085-831f-30f6-ba63-565900ece494.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 31919 IP address blocks: 66.223.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:e9:9e:9f:bc:48:39:9b:a1:64:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3530bd3c-c3c2-4bd2-bf7b-255fc4a87843 Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=8d07796e-01d3-41d7-9cfe-cd5bc4d21b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:68:13:da:8e:ba:2c:0b:26:93:21:08:3c:e8: 0a:81:ee:16:3c:fc:e4:e7:1f:f7:36:88:91:9c:42: 50:47:0d:6d:94:ed:1b:57:fa:7c:f9:8e:94:5c:c2: 23:ab:bb:6f:11:ff:8a:23:c6:06:9d:14:5f:4a:b8: 11:27:9a:f8:1c:0e:34:e9:a7:c0:3d:89:2f:66:3f: 59:78:cb:58:8d:0d:56:27:b3:96:90:c7:d0:c7:13: b3:30:52:8f:75:39:1e:1e:c5:29:5f:97:1a:91:2a: 5d:13:a1:42:21:69:0c:8a:8f:c8:e4:fc:fc:9d:9f: d3:1a:b3:82:09:46:c4:d1:ee:4e:0c:eb:d5:54:1a: fd:99:0c:b3:ca:bc:0a:64:65:67:4d:4e:01:79:57: b9:6f:ff:e5:e6:9b:4f:0a:a7:8e:33:fa:2b:77:a9: 1d:22:42:b5:15:9b:fc:6c:94:80:39:a5:93:b2:ac: 64:e0:e5:1b:32:93:8e:12:a0:c4:1b:17:27:fe:d3: f6:24:47:b6:c4:77:9b:6a:6e:e2:8b:a9:81:39:25: e5:20:e9:6d:52:c8:86:2d:c8:a6:96:f6:5c:bb:a2: 70:b2:22:f4:4b:ab:a1:fc:80:4c:11:b2:5c:5c:fc: 5f:a1:b1:3c:80:dc:d7:39:92:d8:b2:e8:d8:37:8b: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AB:9B:79:EC:49:3E:36:3B:23:37:38:E8:52:F1:EA:95:87:67:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843/b5c2e085-831f-30f6-ba63-565900ece494.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843.crl X509v3 Authority Key Identifier: keyid:AE:74:F2:90:0E:6C:4F:2A:8D:4B:44:04:B9:20:A9:8F:5E:C7:61:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3530bd3c-c3c2-4bd2-bf7b-255fc4a87843.cer sbgp-ipAddrBlock: critical IPv4: 66.223.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:bc:d1:52:93:4a:38:98:ea:8c:0f:81:32:09:0f:22:59:79: a9:d6:cb:a9:f9:d5:28:35:13:fe:77:41:3a:ef:09:c7:c2:2d: 98:2b:c5:14:ac:9b:9d:f7:27:6a:fc:d1:fa:ef:f0:24:b1:54: 22:7f:ff:3c:01:60:7f:50:3d:f4:0c:29:ad:35:21:f2:e3:28: 83:11:37:ed:3e:5e:09:9e:38:9f:7a:14:db:fe:f1:2e:45:e7: 14:16:8a:b4:8c:16:5c:4d:69:36:06:57:ac:9f:f2:d2:e5:4f: 2a:3b:f4:cd:8f:b8:de:0c:ef:68:2e:57:30:6b:9d:03:ab:95: 50:e4:5a:be:a0:2d:8e:e8:ce:1e:c2:44:16:bc:1c:10:00:12: ff:fe:48:8d:33:4f:10:ff:42:26:66:16:27:ce:33:4a:d9:61: df:6b:fa:66:c3:4e:8e:cc:e8:d4:eb:c8:c3:fe:48:60:83:7f: 5b:d2:83:ab:0c:c0:41:c2:50:b5:3e:51:88:17:ca:aa:f4:47: cd:67:57:6a:d6:9b:e5:4f:29:d9:80:04:3b:90:f8:74:83:97: 7b:89:1a:10:ff:de:ed:a7:42:64:dc:f0:a5:9f:a6:6e:10:85: 3b:e2:a8:64:9d:74:eb:9b:77:fd:fc:ba:fc:de:39:f0:dd:bd: f2:3b:55:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG+men7xIOZuhZNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzUzMGJkM2MtYzNjMi00YmQyLWJmN2ItMjU1ZmM0YTg3 ODQzMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk OGQwNzc5NmUtMDFkMy00MWQ3LTljZmUtY2Q1YmM0ZDIxYjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2gT2o66LAsmkyEIPOgKge4WPPzk5x/3NoiR nEJQRw1tlO0bV/p8+Y6UXMIjq7tvEf+KI8YGnRRfSrgRJ5r4HA406afAPYkvZj9Z eMtYjQ1WJ7OWkMfQxxOzMFKPdTkeHsUpX5cakSpdE6FCIWkMio/I5Pz8nZ/TGrOC CUbE0e5ODOvVVBr9mQyzyrwKZGVnTU4BeVe5b//l5ptPCqeOM/ord6kdIkK1FZv8 bJSAOaWTsqxk4OUbMpOOEqDEGxcn/tP2JEe2xHebam7ii6mBOSXlIOltUsiGLcim lvZcu6JwsiL0S6uh/IBMEbJcXPxfobE8gNzXOZLYsujYN4sAdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqrm3nsST42OyM3OOhS8eqVh2epMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNTMw YmQzYy1jM2MyLTRiZDItYmY3Yi0yNTVmYzRhODc4NDMvYjVjMmUwODUtODMxZi0z MGY2LWJhNjMtNTY1OTAwZWNlNDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzUzMGJkM2MtYzNjMi00YmQyLWJm N2ItMjU1ZmM0YTg3ODQzLzM1MzBiZDNjLWMzYzItNGJkMi1iZjdiLTI1NWZjNGE4 Nzg0My5jcmwwHwYDVR0jBBgwFoAUrnTykA5sTyqNS0QEuSCpj17HYQAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNTMwYmQzYy1jM2MyLTRiZDItYmY3Yi0yNTVm YzRhODc4NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQt8/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+80VKTSjiY6owPgTIJDyJZeanWy6n51Sg1E/53QTrvCcfCLZgrxRSs m533J2r80frv8CSxVCJ//zwBYH9QPfQMKa01IfLjKIMRN+0+XgmeOJ96FNv+8S5F 5xQWirSMFlxNaTYGV6yf8tLlTyo79M2PuN4M72guVzBrnQOrlVDkWr6gLY7ozh7C RBa8HBAAEv/+SI0zTxD/QiZmFifOM0rZYd9r+mbDTo7M6NTryMP+SGCDf1vSg6sM wEHCULU+UYgXyqr0R81nV2rWm+VPKdmABDuQ+HSDl3uJGhD/3u2nQmTc8KWfpm4Q hTviqGSddOubd/38uvzeOfDdvfI7VRs= -----END CERTIFICATE-----Generated at Fri Apr 4 19:59:42 2025 by rpki-client