$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa File: 4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa (raw, json) Hash identifier: DpANf636S+eMwjEMANUkA7w0sVlqKUBpNc2gKr0Ax5I= Subject key identifier: 0A:78:E3:16:CC:28:FD:80:2E:52:2F:A2:AA:9C:09:80:FD:28:8B:97 Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Certificate serial: 010D0C9F43285848E59BCCD4B9B80F10BD7F0B00 Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 35847 IP address blocks: 66.33.120.0/21 maxlen: 24 66.132.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:cc:d4:b9:b8:0f:10:bd:7f:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=3d4da124-2f94-42b1-a97a-caee31ba664c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:08:1b:f1:76:29:ef:01:40:8c:2d:22:65:9e: 34:38:e0:1e:2b:41:17:16:cd:14:d6:ff:72:ef:ca: 81:dc:e6:5c:f8:3f:85:09:4e:75:4a:f5:44:bb:4d: 0b:88:4d:d7:0b:8e:48:33:96:cf:a9:78:7d:c3:f3: 6f:80:01:b2:c9:13:6b:8f:41:92:04:06:b5:c2:4b: a3:6a:0d:e6:ed:87:8e:74:7c:ef:ad:33:ac:98:a9: 13:16:4e:a0:0c:27:8f:58:bf:2e:13:a5:bc:60:fc: af:74:49:ac:e9:f0:f0:ec:cb:04:d5:4a:0f:53:2a: 10:a7:fd:ad:cf:55:03:eb:e6:19:d0:97:43:86:43: 36:8f:4f:46:e2:06:62:1b:14:b6:72:db:b0:62:49: 42:a5:a1:bc:8e:21:5c:6d:a2:09:48:74:59:37:b1: 5f:51:3a:33:e4:e7:5e:7c:83:2f:ca:48:15:1a:6e: ed:fa:78:0a:aa:72:79:d8:97:1a:d9:0d:d3:99:03: 22:b9:20:29:86:06:48:83:b3:dc:4e:bd:94:6f:14: 39:b6:7b:f3:6a:3e:49:7e:a7:e0:79:c2:8c:fe:06: e9:63:b1:c8:eb:40:95:95:84:a8:d0:b9:f1:5b:f9: d1:79:d8:84:d0:52:14:ad:45:b2:8e:f7:64:87:4b: 17:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:78:E3:16:CC:28:FD:80:2E:52:2F:A2:AA:9C:09:80:FD:28:8B:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl X509v3 Authority Key Identifier: keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer sbgp-ipAddrBlock: critical IPv4: 66.33.120.0/21 66.132.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:0f:65:4d:eb:f4:17:21:d8:18:36:7d:d0:e5:f0:81:87:8b: 54:14:45:fb:a1:ae:cd:d0:3b:ef:aa:c9:40:63:fc:cd:7b:ae: 40:5f:7b:69:e1:d3:46:68:f0:39:d7:8e:27:2e:7b:56:0b:0d: 68:be:6c:61:cd:34:85:c6:c7:8b:a9:69:0f:09:9c:03:13:1c: 09:25:bb:f5:70:c4:13:21:b2:ab:46:bb:fd:49:e7:77:ea:01: c7:4c:76:60:4c:6b:f5:d6:82:d1:a4:d7:d3:79:d0:24:33:67: c0:3a:db:6a:0a:52:68:d3:82:15:a4:1d:a5:81:41:47:69:2b: ff:8f:9d:5f:76:f3:1e:3b:1d:9b:89:c4:29:6f:70:14:93:eb: f3:c6:b2:9a:7e:9f:aa:e6:2b:26:14:78:ab:c4:af:21:0d:bc: 9d:39:82:96:87:20:47:63:b9:61:40:d7:7e:af:91:77:8f:2f: 4d:fa:7f:5a:8e:06:f6:b0:10:81:7c:c0:bb:1a:ff:86:e9:60: 08:32:b9:c2:f3:2c:fa:1c:c6:24:5d:83:aa:ac:96:ba:5a:06: 85:b0:a2:3e:50:c8:ce:81:f9:e7:50:54:de:1c:a6:4a:68:2a: f0:8c:7b:d2:30:eb:cc:24:c3:90:ff:fe:fd:72:32:a1:32:a3: 65:14:2a:e1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjlm8zUubgPEL1/CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz ZjExMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk M2Q0ZGExMjQtMmY5NC00MmIxLWE5N2EtY2FlZTMxYmE2NjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwgb8XYp7wFAjC0iZZ40OOAeK0EXFs0U1v9y 78qB3OZc+D+FCU51SvVEu00LiE3XC45IM5bPqXh9w/NvgAGyyRNrj0GSBAa1wkuj ag3m7YeOdHzvrTOsmKkTFk6gDCePWL8uE6W8YPyvdEms6fDw7MsE1UoPUyoQp/2t z1UD6+YZ0JdDhkM2j09G4gZiGxS2ctuwYklCpaG8jiFcbaIJSHRZN7FfUToz5Ode fIMvykgVGm7t+ngKqnJ52Jca2Q3TmQMiuSAphgZIg7PcTr2UbxQ5tnvzaj5Jfqfg ecKM/gbpY7HI60CVlYSo0LnxW/nRediE0FIUrUWyjvdkh0sXAwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAp44xbMKP2ALlIvoqqcCYD9KIuXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvNGQ4ZTkwZDUtMGVkNS0z NzJhLWEzNDAtZmQxODJiNmUzZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw YTJjZjNmMTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQiF4AwQD QoSgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGEPZU3r9Bch2Bg2fdDl8IGHi1QURfuhrs3QO++qyUBj/M17 rkBfe2nh00Zo8DnXjicue1YLDWi+bGHNNIXGx4upaQ8JnAMTHAklu/VwxBMhsqtG u/1J53fqAcdMdmBMa/XWgtGk19N50CQzZ8A622oKUmjTghWkHaWBQUdpK/+PnV92 8x47HZuJxClvcBST6/PGspp+n6rmKyYUeKvEryENvJ05gpaHIEdjuWFA136vkXeP L036f1qOBvawEIF8wLsa/4bpYAgyucLzLPocxiRdg6qslrpaBoWwoj5QyM6B+edQ VN4cpkpoKvCMe9Iw68wkw5D//v1yMqEyo2UUKuE= -----END CERTIFICATE-----Generated at Fri Apr 4 15:56:41 2025 by rpki-client