$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/5717c9fc-bf14-3da4-9371-4fc98a870156.roa File: 5717c9fc-bf14-3da4-9371-4fc98a870156.roa (raw, json) Hash identifier: 1AACfAetycg5IJG+hQwWK6W8Vh4Q8shmitOd8+RKbP4= Subject key identifier: 8E:16:EE:28:17:AD:77:05:80:40:6B:A1:78:5B:47:59:69:C0:0E:DD Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Certificate serial: 010D0C9F432858496A19AA1E11E9320654B4C780 Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/5717c9fc-bf14-3da4-9371-4fc98a870156.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 139648 IP address blocks: 66.118.0.0/22 maxlen: 22 66.118.0.0/24 maxlen: 24 66.118.1.0/24 maxlen: 24 66.118.2.0/24 maxlen: 24 66.118.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:aa:1e:11:e9:32:06:54:b4:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=e2733208-a0b5-49de-abdd-dd954be0b039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9f:d9:7d:00:1f:4e:3c:07:24:10:0f:fa:82: 44:4c:75:71:bf:fb:c9:83:6c:b6:5a:9c:f4:49:3a: ab:d1:66:4f:20:92:e9:57:f1:d7:55:54:1f:a8:5f: ec:9b:99:b1:8f:b6:95:a9:b0:0d:95:80:7d:3d:f8: 4f:82:ba:27:41:72:0f:ef:24:59:83:6f:8c:e1:75: 6b:a6:32:28:6f:5f:b7:52:4e:90:fa:66:16:5a:ec: f5:b9:31:7a:0b:f7:ab:eb:a3:9a:1b:16:5e:c4:fe: 44:0e:29:a2:6a:24:f6:1c:e0:6f:d0:e9:c6:53:5e: 85:8f:5c:8a:de:68:b0:d0:18:bf:73:d7:5d:8d:c8: a5:08:97:a7:a8:15:06:d1:b8:29:4b:9b:1a:9a:9a: 82:f0:33:b8:e5:f4:4f:4f:ab:a2:91:bf:86:df:39: 32:48:fc:44:c8:76:6f:e1:ce:1c:f7:97:12:50:17: 60:bf:f6:99:40:81:b6:d1:3c:1c:03:cf:53:79:44: 4f:5f:7b:2c:56:5e:12:32:3e:5e:2c:0b:3d:77:30: e6:0f:c0:76:7d:a0:4d:4d:97:ba:85:1f:40:41:39: 35:83:cd:f8:f7:02:70:f6:39:14:72:9a:e3:12:a9: 76:ba:f9:c3:b5:20:23:04:d3:e4:93:2e:46:b8:57: 4b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:16:EE:28:17:AD:77:05:80:40:6B:A1:78:5B:47:59:69:C0:0E:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/5717c9fc-bf14-3da4-9371-4fc98a870156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl X509v3 Authority Key Identifier: keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer sbgp-ipAddrBlock: critical IPv4: 66.118.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:31:7c:2d:5a:3e:f3:26:4b:eb:38:b8:aa:c3:87:bc:ae:e2: f7:3f:97:57:61:31:ab:72:3f:14:f9:36:f4:44:9f:e8:77:b2: 17:57:de:36:7c:ac:16:d5:b0:0c:79:bd:93:d8:65:e4:19:6a: 9e:b7:98:d7:c3:db:4c:0f:dc:e4:55:e3:a2:2a:39:e5:dc:cf: a1:1a:c0:67:a1:8e:ba:d6:a2:e1:52:b0:e0:74:07:c8:1f:b7: 2d:46:db:04:ff:32:c2:48:08:c8:4c:cc:63:2e:e1:ef:64:4e: ab:b0:d1:a7:f2:fb:0c:14:b6:41:18:97:87:0c:42:5c:e5:26: 65:89:ad:b9:70:14:13:ae:cb:0a:d8:e2:28:5b:75:72:cf:d4: a2:5c:40:95:89:ae:50:42:0e:8e:e3:e3:08:0c:56:ca:86:86: f9:5d:f2:36:02:77:68:b3:89:ce:55:8f:a6:81:07:0c:29:d5: b9:fc:56:7c:75:9a:b6:46:c4:42:54:64:15:cb:75:af:8d:7d: a1:a5:0c:c7:ee:c1:00:42:8a:1e:53:02:ea:61:1e:40:ac:2e: fc:43:11:b5:21:59:56:13:ba:4a:a7:84:66:06:df:c4:ba:0e: d4:e5:bf:95:32:97:1f:ea:70:4e:a5:af:bd:62:39:d0:bc:74: 92:15:68:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGaoeEekyBlS0x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRkYTAxM2QtOGJhMy00YWY1LTgwYWQtNzY3NGJkMGNj NDAzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk ZTI3MzMyMDgtYTBiNS00OWRlLWFiZGQtZGQ5NTRiZTBiMDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp/ZfQAfTjwHJBAP+oJETHVxv/vJg2y2Wpz0 STqr0WZPIJLpV/HXVVQfqF/sm5mxj7aVqbANlYB9PfhPgronQXIP7yRZg2+M4XVr pjIob1+3Uk6Q+mYWWuz1uTF6C/er66OaGxZexP5EDimiaiT2HOBv0OnGU16Fj1yK 3miw0Bi/c9ddjcilCJenqBUG0bgpS5sampqC8DO45fRPT6uikb+G3zkySPxEyHZv 4c4c95cSUBdgv/aZQIG20TwcA89TeURPX3ssVl4SMj5eLAs9dzDmD8B2faBNTZe6 hR9AQTk1g8349wJw9jkUcprjEql2uvnDtSAjBNPkky5GuFdLaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4W7igXrXcFgEBroXhbR1lpwA7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGRh MDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQwY2M0MDMvNTcxN2M5ZmMtYmYxNC0z ZGE0LTkzNzEtNGZjOThhODcwMTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRkYTAxM2QtOGJhMy00YWY1LTgw YWQtNzY3NGJkMGNjNDAzLzY0ZGEwMTNkLThiYTMtNGFmNS04MGFkLTc2NzRiZDBj YzQwMy5jcmwwHwYDVR0jBBgwFoAULdEBwduz9WxXjIPl1BW4QAapnzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0 YmQwY2M0MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsxfC1aPvMmS+s4uKrDh7yu4vc/l1dhMatyPxT5NvREn+h3shdX3jZ8 rBbVsAx5vZPYZeQZap63mNfD20wP3ORV46IqOeXcz6EawGehjrrWouFSsOB0B8gf ty1G2wT/MsJICMhMzGMu4e9kTquw0afy+wwUtkEYl4cMQlzlJmWJrblwFBOuywrY 4ihbdXLP1KJcQJWJrlBCDo7j4wgMVsqGhvld8jYCd2izic5Vj6aBBwwp1bn8Vnx1 mrZGxEJUZBXLda+NfaGlDMfuwQBCih5TAuphHkCsLvxDEbUhWVYTukqnhGYG38S6 DtTlv5Uylx/qcE6lr71iOdC8dJIVaME= -----END CERTIFICATE-----Generated at Sun Apr 6 11:59:50 2025 by rpki-client