$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/645ea1a4-621d-3847-9490-c2db7670fa6f.roa File: 645ea1a4-621d-3847-9490-c2db7670fa6f.roa (raw, json) Hash identifier: jFY4w5HkQgsyamd25+IXz929N1VawF52Zi5d5hH2/k4= Subject key identifier: 71:2E:0A:91:3A:CE:07:CE:F5:FF:1B:E6:7E:0E:25:31:3A:30:3B:37 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F432858491AA6B93562AD549092131600 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/645ea1a4-621d-3847-9490-c2db7670fa6f.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 394708 IP address blocks: 66.209.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b9:35:62:ad:54:90:92:13:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=ed8e321c-122a-4bac-a3e5-e49b107616ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:68:5c:e6:74:4c:d0:d7:b7:37:61:41:30:41: ee:9c:2e:07:d1:0c:11:06:e5:cc:35:10:1a:2c:f1: ff:b5:56:37:53:18:44:bc:b9:03:03:73:cf:45:ef: 7c:15:dc:c1:be:30:90:45:4c:7e:15:8e:c0:56:75: 3d:b1:83:e3:97:ec:68:dd:22:3b:84:66:dd:d4:e1: 96:5e:30:70:cf:32:f6:f2:07:8c:1f:c4:2c:80:2a: 5d:11:99:ca:d0:70:f6:90:14:85:b5:14:0f:0f:8e: 30:45:4e:40:13:c3:aa:0a:eb:a2:ca:55:86:59:e0: 66:4a:17:74:53:47:c7:0f:12:5a:bc:92:5f:cc:d9: 1f:3e:1b:a4:6f:27:8c:ed:fd:cf:3a:db:aa:11:fb: d6:4e:a9:82:f1:f8:3b:a2:d0:62:62:cd:e0:f0:67: b9:37:9d:b6:27:1f:f7:37:3e:a7:bc:54:21:b8:d1: 20:54:55:ac:3e:1d:14:11:e5:d7:2b:15:c3:7d:24: 85:ea:65:98:8e:f1:f7:a3:ea:a1:d1:22:15:94:a0: 37:25:36:53:29:0f:3e:ac:6f:f8:65:2e:97:55:d5: fb:b0:28:14:fe:fb:f6:b3:e4:75:1f:e2:f6:33:85: 8b:92:21:1d:6d:7d:46:1f:26:17:6c:ca:88:60:b8: 04:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2E:0A:91:3A:CE:07:CE:F5:FF:1B:E6:7E:0E:25:31:3A:30:3B:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/645ea1a4-621d-3847-9490-c2db7670fa6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 66.209.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:0c:c1:17:28:dc:50:47:e5:8c:2c:36:2d:77:ac:2a:e9:c5: 79:9c:a6:9e:b2:6c:7e:fc:24:25:2c:2b:f3:f0:b8:55:a1:a6: a4:9c:51:19:1a:03:8e:1c:2c:11:23:c7:fd:74:54:75:43:e3: 58:07:9a:55:da:4b:b7:79:bb:03:89:09:ed:e9:e0:22:76:7b: ce:81:b5:05:2d:1a:5e:28:d5:6c:b4:12:27:1d:5b:e5:a4:04: 42:9d:a0:8c:fe:97:f5:f0:15:47:b8:08:9e:f9:3e:7b:b0:62: 59:0f:82:91:52:61:8e:5a:3d:bd:15:8c:40:04:d6:cb:00:4a: f7:db:d2:0d:20:1a:ac:7c:25:e7:2f:c9:b8:ea:6f:b5:49:d2: bf:85:76:74:1f:c7:f8:05:ff:95:f6:14:35:f8:61:a3:1f:1f: fc:05:19:db:52:1f:79:b3:10:1f:82:0b:68:ca:97:66:b4:8b: de:c3:3d:3d:32:ae:96:7c:a8:ff:5a:ef:81:60:42:9f:29:dd: dc:f1:34:84:80:a5:23:69:67:83:76:eb:df:3f:6c:b3:48:95: 3a:28:8a:07:30:54:50:bb:3e:b0:3f:01:69:08:62:64:d3:a3: 80:de:28:5b:e2:37:8f:e7:72:02:a5:6d:b5:f7:1c:e6:0a:67: 6b:29:aa:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprk1Yq1UkJITFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk ZWQ4ZTMyMWMtMTIyYS00YmFjLWEzZTUtZTQ5YjEwNzYxNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mhc5nRM0Ne3N2FBMEHunC4H0QwRBuXMNRAa LPH/tVY3UxhEvLkDA3PPRe98FdzBvjCQRUx+FY7AVnU9sYPjl+xo3SI7hGbd1OGW XjBwzzL28geMH8QsgCpdEZnK0HD2kBSFtRQPD44wRU5AE8OqCuuiylWGWeBmShd0 U0fHDxJavJJfzNkfPhukbyeM7f3POtuqEfvWTqmC8fg7otBiYs3g8Ge5N522Jx/3 Nz6nvFQhuNEgVFWsPh0UEeXXKxXDfSSF6mWYjvH3o+qh0SIVlKA3JTZTKQ8+rG/4 ZS6XVdX7sCgU/vv2s+R1H+L2M4WLkiEdbX1GHyYXbMqIYLgETQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEuCpE6zgfO9f8b5n4OJTE6MDs3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNjQ1ZWExYTQtNjIxZC0z ODQ3LTk0OTAtYzJkYjc2NzBmYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtGGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkMwRco3FBH5YwsNi13rCrpxXmcpp6ybH78JCUsK/PwuFWhpqScURka A44cLBEjx/10VHVD41gHmlXaS7d5uwOJCe3p4CJ2e86BtQUtGl4o1Wy0EicdW+Wk BEKdoIz+l/XwFUe4CJ75PnuwYlkPgpFSYY5aPb0VjEAE1ssASvfb0g0gGqx8Jecv ybjqb7VJ0r+FdnQfx/gF/5X2FDX4YaMfH/wFGdtSH3mzEB+CC2jKl2a0i97DPT0y rpZ8qP9a74FgQp8p3dzxNISApSNpZ4N2698/bLNIlTooigcwVFC7PrA/AWkIYmTT o4DeKFviN4/ncgKlbbX3HOYKZ2spqjo= -----END CERTIFICATE-----Generated at Thu Apr 10 04:03:44 2025 by rpki-client