$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/63617ee2-53df-32dc-a979-573d75fea872.roa File: 63617ee2-53df-32dc-a979-573d75fea872.roa (raw, json) Hash identifier: oaskxA2NV1YhaAYm/8AHz68I/8hnjEGP4yMYF9ouxiw= Subject key identifier: B2:BC:3B:0C:7B:75:B3:BD:F0:A1:95:DB:31:85:55:C2:AA:9A:F0:3C Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F43285848B4C0D001178B873AD0628189 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/63617ee2-53df-32dc-a979-573d75fea872.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 4213 IP address blocks: 66.180.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:d0:01:17:8b:87:3a:d0:62:81:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=ea4289de-2198-4a63-bdaa-346948074789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:34:98:16:92:7e:ce:d8:bc:4e:c5:c9:d7: db:cf:6c:fc:f8:54:bf:a9:09:c3:40:ef:d0:c7:84: 88:e5:fb:3f:5e:2a:7e:62:38:b5:78:f1:98:1e:65: b5:45:de:30:7b:eb:1f:1b:43:cf:83:66:66:e5:c4: 94:1d:71:43:47:d1:84:9c:bf:af:58:04:26:48:73: e0:c2:cc:af:e8:ed:b0:09:7b:53:43:8d:f2:ee:0e: b6:04:e3:39:26:95:d6:c9:47:f6:03:b9:32:de:53: 18:3b:38:2d:ba:a7:26:3a:30:fe:1a:52:69:8b:78: 23:f1:42:72:3b:3a:6f:1c:9f:09:6f:48:a7:5e:1b: d5:f1:a2:7f:6e:01:a3:36:e9:8f:7e:68:48:5d:19: 1f:8a:dd:85:d8:68:6b:4a:0b:b1:46:24:2f:c3:d1: b1:10:76:38:7b:24:bb:20:db:ef:84:22:0c:34:45: 98:eb:0c:73:fc:2d:b1:14:43:02:ae:39:2b:d0:a7: 10:4e:20:df:d5:1a:36:56:b2:3a:b8:bb:b5:4f:ff: 3c:d3:40:33:87:e7:c6:5d:73:c1:b9:94:c8:50:f5: 83:ff:b4:f3:0d:11:0a:9f:b8:91:7a:e7:72:35:e6: dc:f3:61:26:11:94:fe:85:51:ac:78:76:dd:35:20: a8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BC:3B:0C:7B:75:B3:BD:F0:A1:95:DB:31:85:55:C2:AA:9A:F0:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/63617ee2-53df-32dc-a979-573d75fea872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 66.180.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ca:bf:9b:4e:56:27:d1:1a:6a:2f:42:7a:11:6c:ee:c1:7a: f5:4f:54:29:85:e7:7f:c5:98:a9:ca:ff:f5:4a:03:31:95:b0: ee:03:14:e2:69:8d:6e:d2:b0:b0:3e:18:4b:c2:cf:35:d5:68: 21:5c:b4:72:78:f4:ba:9f:8c:c0:6b:d2:a0:36:5a:4d:ef:ad: 7e:f4:f1:85:84:13:65:ca:a5:5f:d7:45:95:21:a2:9c:4b:be: a7:e1:14:e8:2c:02:34:42:7a:48:59:93:14:f6:fc:76:3d:8c: 8e:1f:1e:02:07:d9:9e:b6:d8:5e:48:ca:52:10:f9:c9:f5:38: 60:3e:a2:e8:4c:4d:6c:22:b7:a5:09:76:9f:1c:f7:10:b6:d9: b1:32:65:d7:a7:3e:1e:2c:c9:a5:12:f0:88:2c:59:20:fd:e7: f0:3c:07:a5:21:1d:01:26:2a:77:fc:83:46:90:c5:b2:83:c4: d3:21:d8:1c:77:1a:ce:e0:35:8a:0f:d2:9d:1c:2b:9d:d5:cd: 80:51:83:bf:6e:2b:76:dc:16:ab:d5:fe:2d:e3:09:e0:74:40: ae:2f:de:58:0e:34:b8:9c:a9:7a:68:13:24:9c:c0:2a:58:c7: e1:d5:3c:1d:55:c0:fa:2b:b1:d3:53:12:7d:2e:1b:42:24:98: 32:40:1e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wNABF4uHOtBigYkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk ZWE0Mjg5ZGUtMjE5OC00YTYzLWJkYWEtMzQ2OTQ4MDc0Nzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtw0mBaSfs7YvE7Fydfbz2z8+FS/qQnDQO/Q x4SI5fs/Xip+Yji1ePGYHmW1Rd4we+sfG0PPg2Zm5cSUHXFDR9GEnL+vWAQmSHPg wsyv6O2wCXtTQ43y7g62BOM5JpXWyUf2A7ky3lMYOzgtuqcmOjD+GlJpi3gj8UJy OzpvHJ8Jb0inXhvV8aJ/bgGjNumPfmhIXRkfit2F2GhrSguxRiQvw9GxEHY4eyS7 INvvhCIMNEWY6wxz/C2xFEMCrjkr0KcQTiDf1Ro2VrI6uLu1T/8800Azh+fGXXPB uZTIUPWD/7TzDREKn7iReudyNebc82EmEZT+hVGseHbdNSCoPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLK8Owx7dbO98KGV2zGFVcKqmvA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvNjM2MTdlZTItNTNkZi0z MmRjLWE5NzktNTczZDc1ZmVhODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQrTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHKv5tOVifRGmovQnoRbO7BevVPVCmF53/FmKnK//VKAzGVsO4DFOJp jW7SsLA+GEvCzzXVaCFctHJ49LqfjMBr0qA2Wk3vrX708YWEE2XKpV/XRZUhopxL vqfhFOgsAjRCekhZkxT2/HY9jI4fHgIH2Z622F5IylIQ+cn1OGA+ouhMTWwit6UJ dp8c9xC22bEyZdenPh4syaUS8IgsWSD95/A8B6UhHQEmKnf8g0aQxbKDxNMh2Bx3 Gs7gNYoP0p0cK53VzYBRg79uK3bcFqvV/i3jCeB0QK4v3lgONLicqXpoEyScwCpY x+HVPB1VwPorsdNTEn0uG0IkmDJAHk0= -----END CERTIFICATE-----Generated at Sat Apr 5 04:38:22 2025 by rpki-client