$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/c65244fb-f6ce-346e-a025-f4e04ace1e2e.roa File: c65244fb-f6ce-346e-a025-f4e04ace1e2e.roa (raw, json) Hash identifier: 9mTXy+CaEuDW4GhegLhcOVmkIbXpSEcKkhvZmpiZ7GI= Subject key identifier: 72:25:BD:A5:A8:74:AF:F2:E8:98:04:92:28:7E:BD:24:A9:A3:88:82 Certificate issuer: /CN=61078829-6930-46b0-9ac8-91898d36b056 Certificate serial: 010D0C9F4328584951650E7353694544E4BD94C0 Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/c65244fb-f6ce-346e-a025-f4e04ace1e2e.roa Signing time: Wed 26 Mar 2025 16:37:55 +0000 ROA not before: Wed 26 Mar 2025 16:37:55 +0000 ROA not after: Tue 24 Jun 2025 16:37:55 +0000 asID: 33548 IP address blocks: 66.235.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:51:65:0e:73:53:69:45:44:e4:bd:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056 Validity Not Before: Mar 26 16:37:55 2025 GMT Not After : Jun 24 16:37:55 2025 GMT Subject: CN=6e34cdf5-ae4f-4e9c-82f4-2c61f2b01743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:44:1e:98:dd:be:60:85:d6:02:f3:70:a4: ec:2d:d6:81:1e:4d:00:77:cb:cd:fb:93:f0:75:de: 3a:77:96:ad:df:b1:7c:82:a0:55:7e:b6:0c:62:c1: 6f:2f:aa:58:e0:b9:e7:71:bc:2e:61:6a:6f:e8:04: ad:90:ca:b3:d1:4a:de:98:db:de:d6:2e:fe:a7:7d: 91:5b:4e:e8:fb:d7:0c:5e:40:60:d3:6d:e6:9a:2a: 84:09:7f:a1:42:1a:a7:ce:b4:6c:48:1c:1e:aa:9e: 0f:88:18:b2:0b:d0:24:c1:76:02:bb:00:b0:99:5e: 0f:f2:9a:35:78:78:c1:7b:1c:2a:68:b0:e8:66:d7: ca:62:5d:0e:1e:6f:07:24:cd:f3:ed:89:24:e7:84: a2:5f:f4:20:e7:c9:46:84:ac:6b:cc:3e:6e:9b:15: b0:7d:37:4d:b0:4e:7e:1e:ff:0f:10:b6:7b:53:d2: 1e:69:93:ca:4f:6f:b3:bc:34:80:31:1d:5b:f6:30: 1b:a3:ef:21:56:99:3b:85:d0:8a:3c:37:cd:e9:3b: 80:da:ab:2e:22:0b:92:f9:10:da:18:73:27:1f:90: b5:d4:7e:d1:23:50:34:8d:8f:44:36:f7:cd:6d:a7: 53:d4:48:07:0b:f8:a4:1d:c3:da:2d:ab:c0:e9:f0: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:25:BD:A5:A8:74:AF:F2:E8:98:04:92:28:7E:BD:24:A9:A3:88:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/c65244fb-f6ce-346e-a025-f4e04ace1e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl X509v3 Authority Key Identifier: keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer sbgp-ipAddrBlock: critical IPv4: 66.235.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e5:e3:47:f0:be:ad:a8:a3:8c:00:73:f0:98:62:93:8c:6b: d8:cc:01:ce:af:e6:12:57:37:2f:67:f9:16:8a:d5:22:e2:83: 39:92:d1:02:69:07:fe:e6:48:49:81:14:6f:6b:e6:2a:21:6c: 18:65:42:86:cb:36:a1:dc:35:cc:08:01:fe:26:94:34:c4:94: 2c:24:77:1f:2a:2f:f3:fe:db:37:4f:ae:8f:b2:8d:c9:f8:c2: dd:cd:37:87:1b:95:ae:b8:d2:e6:0d:5a:e8:68:8f:a5:44:34: e3:6d:40:23:6f:4c:fd:20:66:34:f6:64:60:a4:df:01:4d:1e: bf:33:f4:75:28:4d:3c:8d:23:e3:bc:e6:84:8f:82:8d:6d:93: 0d:ba:83:0b:5d:56:a0:36:72:28:6c:2d:d5:c1:14:9f:f8:1a: 94:3b:ad:da:ba:30:fc:7c:57:3e:9c:be:38:85:c3:99:eb:1e: 7c:51:4c:5f:af:a7:10:fd:c2:7d:94:7a:1a:b0:6e:44:d9:4e: 77:51:b2:2d:30:dc:76:ea:63:ae:22:36:68:ef:38:d5:39:32: 8e:14:ff:e5:78:16:64:e1:bc:0f:10:6b:27:79:6f:44:4e:3b: 11:0b:78:55:76:3a:ff:89:c6:1e:7e:25:e6:00:c2:60:4b:6e: a7:68:af:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElRZQ5zU2lFROS9lMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZi MDU2MB4XDTI1MDMyNjE2Mzc1NVoXDTI1MDYyNDE2Mzc1NVowLzEtMCsGA1UEAxMk NmUzNGNkZjUtYWU0Zi00ZTljLTgyZjQtMmM2MWYyYjAxNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpREHpjdvmCF1gLzcKTsLdaBHk0Ad8vN+5Pw dd46d5at37F8gqBVfrYMYsFvL6pY4LnncbwuYWpv6AStkMqz0UremNve1i7+p32R W07o+9cMXkBg023mmiqECX+hQhqnzrRsSBweqp4PiBiyC9AkwXYCuwCwmV4P8po1 eHjBexwqaLDoZtfKYl0OHm8HJM3z7Ykk54SiX/Qg58lGhKxrzD5umxWwfTdNsE5+ Hv8PELZ7U9IeaZPKT2+zvDSAMR1b9jAbo+8hVpk7hdCKPDfN6TuA2qsuIguS+RDa GHMnH5C11H7RI1A0jY9ENvfNbadT1EgHC/ikHcPaLavA6fAkGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIlvaWodK/y6JgEkih+vSSpo4iCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MTA3 ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvYzY1MjQ0ZmItZjZjZS0z NDZlLWEwMjUtZjRlMDRhY2UxZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjEwNzg4MjktNjkzMC00NmIwLTlh YzgtOTE4OThkMzZiMDU2LzYxMDc4ODI5LTY5MzAtNDZiMC05YWM4LTkxODk4ZDM2 YjA1Ni5jcmwwHwYDVR0jBBgwFoAUIEXV2ie7S4lN1IK5ZqALwLa2VKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5 OGQzNmIwNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQut0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbl40fwvq2oo4wAc/CYYpOMa9jMAc6v5hJXNy9n+RaK1SLigzmS0QJp B/7mSEmBFG9r5iohbBhlQobLNqHcNcwIAf4mlDTElCwkdx8qL/P+2zdPro+yjcn4 wt3NN4cbla640uYNWuhoj6VENONtQCNvTP0gZjT2ZGCk3wFNHr8z9HUoTTyNI+O8 5oSPgo1tkw26gwtdVqA2cihsLdXBFJ/4GpQ7rdq6MPx8Vz6cvjiFw5nrHnxRTF+v pxD9wn2UehqwbkTZTndRsi0w3HbqY64iNmjvONU5Mo4U/+V4FmThvA8Qayd5b0RO OxELeFV2Ov+Jxh5+JeYAwmBLbqdor3k= -----END CERTIFICATE-----Generated at Fri Apr 4 19:05:47 2025 by rpki-client