$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa File: 4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa (raw, json) Hash identifier: iyPltGXiUbdByXWtZdkNWlKeGO/4UUdxGjIZ13DlTYk= Subject key identifier: AA:48:EF:C0:34:9A:12:48:44:54:D0:13:28:80:63:3B:CB:B0:DB:4B Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F432858492183B8704DB72BF1163C9EE0 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 6597 IP address blocks: 66.163.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:b8:70:4d:b7:2b:f1:16:3c:9e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=593c13fb-bc7f-41f8-9694-cb22305c7246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:47:d6:45:5e:bf:83:e0:ff:7c:85:b2:fa:bd: 10:8e:f9:6e:73:0e:13:21:6c:da:7a:18:84:da:ae: 77:7c:81:63:98:7e:24:80:41:09:60:65:49:fb:fb: 54:4e:a6:26:91:7b:3e:df:8a:c2:88:b1:45:3e:84: bc:4b:77:62:b1:16:8e:6a:e2:f4:16:ae:3e:09:06: 81:c9:9a:04:a2:b3:e8:b8:2b:25:36:f6:87:08:47: a4:43:65:d2:37:6b:4a:89:7a:1e:32:0d:45:54:f4: dc:19:ee:56:b5:21:bd:53:e2:e0:f3:1f:9a:dd:b9: d6:23:02:68:17:c9:bd:1f:30:51:1b:d5:10:0f:7d: f7:43:63:9d:a7:2c:72:d5:de:37:f1:90:ec:03:6f: 7f:f5:65:3b:90:ee:a3:12:92:eb:1b:15:8a:7b:3a: 3b:20:e9:c2:96:c3:fe:14:cc:5f:3c:3d:1a:43:20: fe:07:48:48:a4:d7:a4:a9:79:31:d6:e4:9a:65:89: a0:71:7f:07:c6:67:6a:ea:d6:6a:35:75:d6:12:77: 8f:86:3c:23:17:8b:d6:a4:34:96:81:e3:70:42:fd: 53:f2:4e:af:ef:f8:79:0f:e7:b8:75:cb:db:53:94: a0:24:47:a8:87:8e:28:ce:0d:78:89:70:c5:39:cc: 38:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:48:EF:C0:34:9A:12:48:44:54:D0:13:28:80:63:3B:CB:B0:DB:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/4e15f047-c0ae-3fe7-a24b-7a26116af1a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 66.163.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c1:ce:c6:6f:b4:90:a2:9f:56:71:b2:f2:f7:be:5c:f1:a5: a6:e8:75:aa:a2:eb:a8:74:dd:a3:cf:ff:8c:4f:cc:bd:90:af: 04:38:8e:9c:fb:69:8a:71:5a:9a:c5:d1:3f:11:6d:6d:d7:61: f4:e0:1d:f8:1e:89:0d:25:e5:24:b9:43:5b:2b:c2:82:2c:ac: 3f:7a:a6:a5:8b:92:14:14:dc:39:bb:3a:f2:b4:cf:ec:7f:cb: cb:e7:ff:e6:67:f3:be:24:ea:a1:1c:71:e3:55:e1:18:20:27: 1d:12:84:c3:c5:8d:e9:c7:27:af:33:cb:f6:c0:41:88:2c:a3: 25:a6:bf:36:c1:a0:05:59:65:e4:00:32:57:e1:88:b6:15:2e: 87:a2:c5:5b:75:4b:49:9d:cc:03:f0:f7:d7:67:6b:e1:b1:35: 10:81:17:09:91:c3:60:1b:97:5b:f0:a4:92:69:eb:fc:81:cd: 96:a0:b8:8b:64:d6:1e:81:8a:dc:78:a5:ba:26:de:fa:d6:66: 50:fa:3d:2f:f3:30:b6:1f:8c:f2:f3:e9:7e:10:f9:70:61:36: ad:63:c9:88:ea:e9:28:77:35:36:bb:e7:5d:66:27:17:be:b8: 30:f5:b5:27:e5:03:c9:59:82:90:bb:78:92:33:d0:2a:ba:ca: c0:6c:57:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhg7hwTbcr8RY8nuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NTkzYzEzZmItYmM3Zi00MWY4LTk2OTQtY2IyMjMwNWM3MjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUfWRV6/g+D/fIWy+r0Qjvlucw4TIWzaehiE 2q53fIFjmH4kgEEJYGVJ+/tUTqYmkXs+34rCiLFFPoS8S3disRaOauL0Fq4+CQaB yZoEorPouCslNvaHCEekQ2XSN2tKiXoeMg1FVPTcGe5WtSG9U+Lg8x+a3bnWIwJo F8m9HzBRG9UQD333Q2Odpyxy1d438ZDsA29/9WU7kO6jEpLrGxWKezo7IOnClsP+ FMxfPD0aQyD+B0hIpNekqXkx1uSaZYmgcX8Hxmdq6tZqNXXWEnePhjwjF4vWpDSW geNwQv1T8k6v7/h5D+e4dcvbU5SgJEeoh44ozg14iXDFOcw4RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpI78A0mhJIRFTQEyiAYzvLsNtLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvNGUxNWYwNDctYzBhZS0z ZmU3LWEyNGItN2EyNjExNmFmMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXBzsZvtJCin1ZxsvL3vlzxpabodaqi66h03aPP/4xPzL2QrwQ4jpz7 aYpxWprF0T8RbW3XYfTgHfgeiQ0l5SS5Q1srwoIsrD96pqWLkhQU3Dm7OvK0z+x/ y8vn/+Zn874k6qEcceNV4RggJx0ShMPFjenHJ68zy/bAQYgsoyWmvzbBoAVZZeQA MlfhiLYVLoeixVt1S0mdzAPw99dna+GxNRCBFwmRw2Abl1vwpJJp6/yBzZaguItk 1h6Bitx4pbom3vrWZlD6PS/zMLYfjPLz6X4Q+XBhNq1jyYjq6Sh3NTa7511mJxe+ uDD1tSflA8lZgpC7eJIz0Cq6ysBsVzg= -----END CERTIFICATE-----Generated at Sun Apr 6 11:54:31 2025 by rpki-client