$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/d2e9a628-bb73-378c-9508-2db3fb689656.roa File: d2e9a628-bb73-378c-9508-2db3fb689656.roa (raw, json) Hash identifier: hfrEWj0GTJSQOG6+Bp7suyL5A9owY/H08IdV4q6hIRg= Subject key identifier: 27:C8:A4:D0:3B:E1:60:48:E5:BA:82:DF:61:C5:B8:85:F2:84:CA:F4 Certificate issuer: /CN=66cf51f2-af3c-4c05-a781-3b923f753475 Certificate serial: 010D0C9F432858492CB211A25CEE4E31E701AF84 Authority key identifier: 2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/d2e9a628-bb73-378c-9508-2db3fb689656.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 21976 IP address blocks: 192.100.64.0/24 maxlen: 24 192.154.128.0/24 maxlen: 24 192.154.129.0/24 maxlen: 24 192.154.130.0/24 maxlen: 24 204.152.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:11:a2:5c:ee:4e:31:e7:01:af:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cf51f2-af3c-4c05-a781-3b923f753475 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=9662116b-d866-4e13-9f4a-1af983f1b50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:34:62:49:ff:06:e1:c8:0a:0a:87:61:2a:39: 9c:e5:3b:10:41:c1:14:fc:70:a8:6e:6c:93:a1:37: 57:c4:a3:8f:d8:51:c5:e2:8c:c9:7d:fb:ae:c9:9f: be:19:78:7a:86:51:57:a5:6e:d6:f4:6e:24:59:b4: 25:2d:bd:bf:f8:6a:b0:44:2a:17:a7:6f:5c:fe:93: 1a:fb:fc:44:52:a2:db:a2:0d:5e:ab:dd:ab:a4:ba: cc:e4:f1:5e:de:01:49:25:13:3a:0e:5b:5e:26:c0: 1c:ee:37:6d:6a:14:49:3b:15:07:2f:82:26:8c:f5: 4b:0d:06:af:3c:6d:c3:2b:de:12:c1:fa:77:21:51: ad:2c:c6:72:e8:11:a1:fa:57:33:39:87:6f:36:75: 4d:f5:5d:40:e3:ac:4a:a7:d2:61:72:9a:5f:99:bb: 90:6a:b2:1b:d6:93:6e:51:55:a0:01:93:da:6a:65: 4f:1c:74:bc:2a:4f:b7:75:8e:00:48:b7:24:9e:52: b1:6c:d7:a3:d3:15:c0:62:a6:1b:9d:dd:5c:ca:37: 58:be:e0:1d:2a:3e:2d:a3:af:34:ee:b3:c8:db:e8: 0f:17:b0:f8:4b:14:52:fb:bc:ec:3f:37:e1:0b:b0: 50:ef:86:c5:9d:76:89:e2:76:5b:4b:0b:76:f2:6b: e3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C8:A4:D0:3B:E1:60:48:E5:BA:82:DF:61:C5:B8:85:F2:84:CA:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/d2e9a628-bb73-378c-9508-2db3fb689656.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl X509v3 Authority Key Identifier: keyid:2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer sbgp-ipAddrBlock: critical IPv4: 192.100.64.0/24 192.154.128.0-192.154.130.255 204.152.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:fe:0b:89:a3:69:60:cb:08:8e:b4:03:ae:e9:62:bf:d9:55: 9e:fa:c4:9d:8b:5e:51:1f:55:ba:12:00:0b:4e:a0:39:33:78: 9a:43:ac:ba:21:24:63:b1:d0:ec:6b:46:bc:69:39:f7:21:d8: 4c:e5:dc:88:53:5e:51:0f:47:ce:77:77:cb:23:34:8e:ce:ee: 39:ef:19:51:32:0e:c5:4c:2f:15:1a:47:47:d7:95:ed:dd:d6: bc:47:c3:a6:6f:f6:65:13:b9:e7:35:3b:e1:d9:76:ff:90:81: 9f:73:9a:41:e5:2c:60:1f:56:f8:42:7b:8e:b6:b7:32:fb:94: eb:9f:d0:b7:20:96:d3:ee:28:50:25:1b:23:c7:78:37:ec:80: 52:de:a4:9c:f9:08:0d:31:25:ec:cd:77:32:96:05:95:86:69: 04:40:49:c1:1f:74:fc:bf:89:0c:4f:df:1e:e2:2d:51:d8:43: b1:5e:74:18:0a:b1:7f:ec:1b:a0:f1:d4:7a:ec:d0:74:38:af: 11:ff:23:47:f8:c5:9d:a2:dd:48:37:ea:39:46:9e:ca:dc:5b: 7d:50:3e:06:d3:19:0b:76:7b:d2:ea:f0:74:d2:fb:e8:ee:ff: 53:e4:0a:9e:0a:b1:8f:69:12:f4:be:4f:52:4b:5f:87:1e:40: 1d:65:b5:ea -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEksshGiXO5OMecBr4QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjZjUxZjItYWYzYy00YzA1LWE3ODEtM2I5MjNmNzUz NDc1MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OTY2MjExNmItZDg2Ni00ZTEzLTlmNGEtMWFmOTgzZjFiNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTRiSf8G4cgKCodhKjmc5TsQQcEU/HCobmyT oTdXxKOP2FHF4ozJffuuyZ++GXh6hlFXpW7W9G4kWbQlLb2/+GqwRCoXp29c/pMa +/xEUqLbog1eq92rpLrM5PFe3gFJJRM6DlteJsAc7jdtahRJOxUHL4ImjPVLDQav PG3DK94Swfp3IVGtLMZy6BGh+lczOYdvNnVN9V1A46xKp9JhcppfmbuQarIb1pNu UVWgAZPaamVPHHS8Kk+3dY4ASLcknlKxbNej0xXAYqYbnd1cyjdYvuAdKj4to680 7rPI2+gPF7D4SxRS+7zsPzfhC7BQ74bFnXaJ4nZbSwt28mvjswIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFCfIpNA74WBI5bqC32HFuIXyhMr0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNm NTFmMi1hZjNjLTRjMDUtYTc4MS0zYjkyM2Y3NTM0NzUvZDJlOWE2MjgtYmI3My0z NzhjLTk1MDgtMmRiM2ZiNjg5NjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZjUxZjItYWYzYy00YzA1LWE3 ODEtM2I5MjNmNzUzNDc1LzY2Y2Y1MWYyLWFmM2MtNGMwNS1hNzgxLTNiOTIzZjc1 MzQ3NS5jcmwwHwYDVR0jBBgwFoAULbG3J4L3E2MeTADAY5+rGShIsDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNmNTFmMi1hZjNjLTRjMDUtYTc4MS0zYjky M2Y3NTM0NzUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAwGRAMAwD BAfAmoADBADAmoIDBAHMmJQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbf4LiaNpYMsIjrQDruliv9lVnvrE nYteUR9VuhIAC06gOTN4mkOsuiEkY7HQ7GtGvGk59yHYTOXciFNeUQ9Hznd3yyM0 js7uOe8ZUTIOxUwvFRpHR9eV7d3WvEfDpm/2ZRO55zU74dl2/5CBn3OaQeUsYB9W +EJ7jra3MvuU65/QtyCW0+4oUCUbI8d4N+yAUt6knPkIDTEl7M13MpYFlYZpBEBJ wR90/L+JDE/fHuItUdhDsV50GAqxf+wboPHUeuzQdDivEf8jR/jFnaLdSDfqOUae ytxbfVA+BtMZC3Z70urwdNL76O7/U+QKngqxj2kS9L5PUktfhx5AHWW16g== -----END CERTIFICATE-----Generated at Sun Apr 6 07:41:26 2025 by rpki-client