$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa File: ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa (raw, json) Hash identifier: IvEgFRldckaeQwOvpO9jz4b2PinPFsO91H+J9C9Akqk= Subject key identifier: EE:A2:12:C6:89:80:AF:54:58:97:5F:13:27:F5:6B:14:00:FA:5C:CD Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Certificate serial: 010D0C9F432858496A19AA2E555CBC6B57AB12E0 Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 399916 IP address blocks: 66.118.0.0/22 maxlen: 22 66.118.0.0/24 maxlen: 24 66.118.1.0/24 maxlen: 24 66.118.2.0/24 maxlen: 24 66.118.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:aa:2e:55:5c:bc:6b:57:ab:12:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=6679de71-6e93-4571-a9e8-98faf5d7ac05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:4a:ad:87:f2:15:27:d4:d5:5d:2c:48:51: e8:a7:e0:3d:81:c9:68:c9:6c:26:5c:a0:86:e9:16: 7a:8c:43:f7:aa:54:c4:3f:88:84:7a:76:24:fb:06: 55:c3:27:cb:39:51:7f:f5:39:1e:e3:fc:68:35:ff: 07:5b:77:db:53:f8:1d:11:b3:2a:1a:6a:a1:13:46: 4c:59:5b:10:db:59:17:a1:2a:e4:e7:87:79:28:30: 66:37:03:0b:3d:1b:df:c2:93:e0:48:28:58:90:bf: 97:09:05:f6:4c:4a:43:ee:a1:72:86:2d:fb:0a:7f: 61:ca:3c:db:bb:6c:9f:26:56:37:cb:d6:7d:c3:3f: a9:f7:1f:45:9e:4b:91:e8:b9:f7:e5:92:81:52:2e: 8a:99:1d:9a:98:d9:af:ed:a4:04:a9:f5:d2:0d:77: cd:c9:8d:04:fb:78:f6:48:45:56:c6:f0:85:2b:5c: 5f:07:86:4d:fe:12:5d:ba:0e:cd:f7:42:e2:67:76: fd:a0:8a:75:f0:74:20:df:00:f3:dd:ed:82:9d:0d: 1a:a9:22:dc:de:e1:71:04:aa:c0:70:60:24:0f:68: 7a:ef:12:f6:da:7e:79:6c:8d:3a:be:43:23:a0:01: 79:53:ab:4f:c2:e6:f2:c4:7d:a6:7c:8e:87:e4:25: fa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A2:12:C6:89:80:AF:54:58:97:5F:13:27:F5:6B:14:00:FA:5C:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl X509v3 Authority Key Identifier: keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer sbgp-ipAddrBlock: critical IPv4: 66.118.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:5c:ff:ed:8e:be:67:b9:fb:49:81:2f:a8:c3:16:36:77:57: 92:e4:dc:21:6e:b4:e5:83:d7:5a:b0:b7:a0:30:0d:35:88:d4: ee:bc:b1:8a:1b:94:b3:02:7c:87:6a:a5:e6:41:cb:09:87:f5: 5f:21:bd:fb:67:69:18:be:ae:48:f8:49:5c:55:15:43:e4:5e: aa:f8:0d:86:df:f2:d5:27:a7:e1:84:28:bd:64:9f:2e:63:8b: 3b:f2:15:20:52:f6:88:4f:20:06:2d:22:9a:cc:b7:7d:62:94: 54:60:8b:51:63:7e:b1:24:5b:ac:92:1d:45:60:e3:ff:50:b3: 84:9b:7f:e3:b5:3c:59:55:ba:bd:d0:a7:a5:c3:0d:cf:70:5d: fd:58:42:36:68:5a:d5:c8:cf:f2:f3:2f:c1:5f:d2:94:32:74: d0:2d:c0:3b:7b:c1:d3:31:e2:4a:14:99:6e:2a:b6:af:e9:bd: 5c:eb:ac:47:98:bf:5a:cf:e7:e5:33:17:b9:6f:a0:fe:db:06: cf:ca:9c:78:f6:22:18:87:c5:b8:b1:93:0b:e4:5e:14:c1:c5: c6:a8:53:d7:8c:c3:05:6c:f0:d3:cb:af:36:5f:0d:fb:b3:1f: 07:ca:25:8a:10:df:15:1f:a5:8c:70:26:1d:8f:b0:ed:ec:c4: 42:c2:85:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGaouVVy8a1erEuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRkYTAxM2QtOGJhMy00YWY1LTgwYWQtNzY3NGJkMGNj NDAzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk NjY3OWRlNzEtNmU5My00NTcxLWE5ZTgtOThmYWY1ZDdhYzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgFKrYfyFSfU1V0sSFHop+A9gcloyWwmXKCG 6RZ6jEP3qlTEP4iEenYk+wZVwyfLOVF/9Tke4/xoNf8HW3fbU/gdEbMqGmqhE0ZM WVsQ21kXoSrk54d5KDBmNwMLPRvfwpPgSChYkL+XCQX2TEpD7qFyhi37Cn9hyjzb u2yfJlY3y9Z9wz+p9x9FnkuR6Ln35ZKBUi6KmR2amNmv7aQEqfXSDXfNyY0E+3j2 SEVWxvCFK1xfB4ZN/hJdug7N90LiZ3b9oIp18HQg3wDz3e2CnQ0aqSLc3uFxBKrA cGAkD2h67xL22n55bI06vkMjoAF5U6tPwubyxH2mfI6H5CX6NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6iEsaJgK9UWJdfEyf1axQA+lzNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGRh MDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQwY2M0MDMvYmE5YWY3YzktNDE4OC0z YWVjLTgzY2EtMGU2MDI5OGE5OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRkYTAxM2QtOGJhMy00YWY1LTgw YWQtNzY3NGJkMGNjNDAzLzY0ZGEwMTNkLThiYTMtNGFmNS04MGFkLTc2NzRiZDBj YzQwMy5jcmwwHwYDVR0jBBgwFoAULdEBwduz9WxXjIPl1BW4QAapnzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0 YmQwY2M0MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxc/+2Ovme5+0mBL6jDFjZ3V5Lk3CFutOWD11qwt6AwDTWI1O68sYob lLMCfIdqpeZBywmH9V8hvftnaRi+rkj4SVxVFUPkXqr4DYbf8tUnp+GEKL1kny5j izvyFSBS9ohPIAYtIprMt31ilFRgi1FjfrEkW6ySHUVg4/9Qs4Sbf+O1PFlVur3Q p6XDDc9wXf1YQjZoWtXIz/LzL8Ff0pQydNAtwDt7wdMx4koUmW4qtq/pvVzrrEeY v1rP5+UzF7lvoP7bBs/KnHj2IhiHxbixkwvkXhTBxcaoU9eMwwVs8NPLrzZfDfuz HwfKJYoQ3xUfpYxwJh2PsO3sxELChZA= -----END CERTIFICATE-----Generated at Sat Apr 5 13:22:25 2025 by rpki-client