$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/0708b39d-1d52-36df-8431-01f06fe04df4.roa File: 0708b39d-1d52-36df-8431-01f06fe04df4.roa (raw, json) Hash identifier: YCgXLuFzNDEvHqdMpCEtzhB9V410lDkG7CcsJ69Gz5I= Subject key identifier: E9:76:31:CB:54:74:E3:4C:8D:C4:66:F2:BE:C5:84:7F:BE:8A:90:F1 Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F43285849350E922B255453175B86E020 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/0708b39d-1d52-36df-8431-01f06fe04df4.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 396905 IP address blocks: 66.187.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:92:2b:25:54:53:17:5b:86:e0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=01e2bb1c-2d9f-4d6c-8e14-6877665b8412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:11:3f:de:76:2e:ef:4f:a6:eb:11:2e:99: 2f:3a:30:72:96:f4:35:0c:2d:c9:1a:91:62:f8:03: 3f:7e:e6:90:56:0b:84:d1:45:ae:1f:36:a7:c0:ba: da:e8:7d:62:12:10:e3:d1:5d:4e:00:82:53:15:6b: 03:51:bc:52:66:c8:42:10:ce:45:54:bb:8e:e8:bc: d7:64:52:81:0d:e5:63:b2:7d:07:1b:00:7b:23:a3: 30:ec:56:6d:39:2c:65:2c:b9:ba:05:24:aa:0d:9d: ad:ba:3a:49:ca:b7:70:8e:8c:66:b0:00:ef:8e:ae: 9c:00:24:20:85:89:10:01:20:96:d8:a8:5b:60:5e: f6:37:cc:d3:6c:12:d6:f7:33:d2:97:e3:45:ce:33: b5:95:64:61:d6:c7:2f:2f:ac:ed:41:3c:f4:2a:b0: 03:a2:2e:a9:77:84:0f:eb:b4:c5:5e:24:ec:84:ab: f3:d3:49:4d:55:59:dd:cb:ab:73:b4:c6:10:ca:de: 5d:47:2d:53:03:30:a9:9e:bc:27:03:32:21:1b:7c: 7f:f4:90:be:7a:74:f4:59:88:23:b9:81:ae:74:9c: ac:64:c4:a9:a7:bb:a4:1e:be:57:8f:b4:45:27:a3: 1e:a5:b6:24:c1:5f:f4:94:99:bf:f6:2a:b7:ec:b0: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:76:31:CB:54:74:E3:4C:8D:C4:66:F2:BE:C5:84:7F:BE:8A:90:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/0708b39d-1d52-36df-8431-01f06fe04df4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 66.187.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:61:54:04:e0:b6:4f:5b:18:8e:ce:6f:57:1d:24:6a:9e:38: 60:8f:78:7d:9e:17:9d:04:05:73:9d:7f:d4:ce:6d:2d:e3:60: a1:7b:08:de:bb:51:e4:ff:bf:bd:04:62:89:34:ab:35:db:ed: b2:5e:06:02:d3:cf:d2:95:9f:e7:d1:25:2c:56:c0:a1:5a:33: 40:3f:bb:b8:c3:79:39:d0:df:0c:37:e6:89:bd:cf:ec:fd:3f: cc:b0:23:dd:8d:34:6c:1f:38:85:e4:42:51:2d:dc:ee:0b:e6: 18:17:74:5d:0a:3f:38:08:8e:34:12:98:c6:94:84:b1:3a:45: d6:44:94:77:f2:10:37:c3:77:5f:85:b9:d1:fb:b5:71:1a:6a: c5:cb:17:b4:bb:d1:aa:3a:4c:f5:0b:b8:3b:d8:b4:91:80:fb: 9c:03:40:be:28:e4:ac:84:b0:55:39:48:06:6b:43:14:fc:bd: 27:14:f6:d3:90:98:81:99:d9:8a:11:1f:27:b8:3b:bb:65:88: 26:07:90:a2:e6:ea:59:fb:c0:8e:f9:76:4d:c6:4d:39:a4:51: 29:88:5b:e6:02:ee:da:91:e6:32:53:8a:f2:ed:75:9b:02:12: 03:af:07:38:7b:38:f4:f8:6b:6f:3c:c8:43:26:31:c7:da:fd: e7:88:5c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpIrJVRTF1uG4CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk MDFlMmJiMWMtMmQ5Zi00ZDZjLThlMTQtNjg3NzY2NWI4NDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8cRP952Lu9PpusRLpkvOjBylvQ1DC3JGpFi +AM/fuaQVguE0UWuHzanwLra6H1iEhDj0V1OAIJTFWsDUbxSZshCEM5FVLuO6LzX ZFKBDeVjsn0HGwB7I6Mw7FZtOSxlLLm6BSSqDZ2tujpJyrdwjoxmsADvjq6cACQg hYkQASCW2KhbYF72N8zTbBLW9zPSl+NFzjO1lWRh1scvL6ztQTz0KrADoi6pd4QP 67TFXiTshKvz00lNVVndy6tztMYQyt5dRy1TAzCpnrwnAzIhG3x/9JC+enT0WYgj uYGudJysZMSpp7ukHr5Xj7RFJ6MepbYkwV/0lJm/9iq37LC6mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOl2MctUdONMjcRm8r7FhH++ipDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvMDcwOGIzOWQtMWQ1Mi0z NmRmLTg0MzEtMDFmMDZmZTA0ZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQrtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVhVATgtk9bGI7Ob1cdJGqeOGCPeH2eF50EBXOdf9TObS3jYKF7CN67 UeT/v70EYok0qzXb7bJeBgLTz9KVn+fRJSxWwKFaM0A/u7jDeTnQ3ww35om9z+z9 P8ywI92NNGwfOIXkQlEt3O4L5hgXdF0KPzgIjjQSmMaUhLE6RdZElHfyEDfDd1+F udH7tXEaasXLF7S70ao6TPULuDvYtJGA+5wDQL4o5KyEsFU5SAZrQxT8vScU9tOQ mIGZ2YoRHye4O7tliCYHkKLm6ln7wI75dk3GTTmkUSmIW+YC7tqR5jJTivLtdZsC EgOvBzh7OPT4a288yEMmMcfa/eeIXBE= -----END CERTIFICATE-----Generated at Wed Apr 9 20:27:40 2025 by rpki-client