$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/bc9c41e8-1663-357b-8245-e5f5e8b41114.roa File: bc9c41e8-1663-357b-8245-e5f5e8b41114.roa (raw, json) Hash identifier: Gh2FJMNyJtlJFqU6Ky0VNFA+GqqCDQr0g22duDBRHx0= Subject key identifier: B6:04:4B:49:52:A4:33:CD:76:4B:25:8D:A3:45:AB:B9:90:40:1F:0E Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F432858492E13BB9D2A7C2429BC7D6A80 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/bc9c41e8-1663-357b-8245-e5f5e8b41114.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 21743 IP address blocks: 66.248.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:bb:9d:2a:7c:24:29:bc:7d:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=282bc9db-06b5-4898-8468-b81219729109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f5:0d:f4:28:e7:d9:91:ed:59:19:b4:37:5b: f8:b0:60:aa:83:79:a7:cc:d2:3a:91:65:4f:26:88: 06:85:25:72:0c:50:dd:3a:cb:df:2c:b1:3f:7b:9d: cd:d0:cf:d0:51:cd:6b:fa:0d:42:11:7a:34:a6:5a: a1:c0:0c:d8:3f:f8:34:30:32:a8:99:98:ca:79:ac: 98:28:90:0e:b0:8e:e4:7f:50:28:0e:f5:12:18:ee: 01:ef:da:84:78:12:5c:e0:2a:45:d9:64:40:de:97: de:d3:4a:99:29:6b:bc:5a:2f:d9:c9:dc:cd:b5:5d: 25:a0:ed:b9:10:03:f4:ea:db:44:5a:e8:78:a2:49: 5b:b9:5f:9b:85:07:c3:23:19:91:36:0f:46:86:48: 46:29:c8:2a:9e:cc:25:e7:b0:d5:30:b5:b6:b8:72: 4c:a8:48:0c:6f:ee:82:ae:05:88:29:07:66:bc:06: d2:d6:bf:dd:e2:66:fc:cf:2e:3a:48:cb:45:67:74: 41:a0:6e:51:2d:2a:75:1f:50:13:4b:80:7d:2f:b0: d8:01:a4:2d:10:4c:d5:75:a1:21:23:88:6a:f6:29: 3f:b8:dc:da:a7:0b:51:ab:ba:df:a6:41:66:81:1b: 0b:c1:62:22:04:05:64:f5:19:73:2e:52:a9:5b:cc: 39:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:04:4B:49:52:A4:33:CD:76:4B:25:8D:A3:45:AB:B9:90:40:1F:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/bc9c41e8-1663-357b-8245-e5f5e8b41114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 66.248.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:96:79:1f:d3:a9:fc:6c:b2:35:61:95:b6:43:7b:65:2d:39: 96:10:e0:da:71:13:29:83:82:7b:33:d1:45:c8:2c:91:3a:4b: ca:2a:b6:84:e7:f5:aa:e3:d0:32:3e:1e:bf:90:6a:3a:ba:10: ac:92:fe:df:27:4b:47:ff:30:e5:0a:f9:83:31:b1:7f:bb:5e: 5d:34:df:1a:1e:1c:14:64:89:3a:96:68:7d:2f:d8:a1:cb:9f: b3:57:41:61:92:d2:03:6b:65:20:3f:53:13:cd:ce:47:1d:8d: e6:57:d0:3f:8e:2b:98:f0:89:c7:0c:04:31:46:47:56:df:93: 28:09:62:22:42:f5:dd:23:fd:33:b2:f0:58:5d:88:09:41:81: b7:8c:d2:cd:69:54:48:25:85:f3:f9:45:c7:bd:34:da:36:ca: 7a:fa:f2:a5:a6:b3:32:45:38:3c:0d:37:3f:4e:c5:78:12:9b: 6d:62:4c:d9:d4:d6:b8:a3:51:62:5c:30:67:68:e5:37:9d:e1: 5c:89:94:90:d9:b2:56:52:3d:1b:d0:5a:a6:8e:8d:9a:c9:d9: bf:ca:bb:a6:cc:dc:8b:58:cd:2e:03:e4:f9:b7:00:02:ca:10: 76:a3:3f:7a:a0:9b:3b:6a:9b:32:88:67:6e:69:64:ab:a9:3c: 6d:ed:ad:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE7udKnwkKbx9aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk MjgyYmM5ZGItMDZiNS00ODk4LTg0NjgtYjgxMjE5NzI5MTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovUN9Cjn2ZHtWRm0N1v4sGCqg3mnzNI6kWVP JogGhSVyDFDdOsvfLLE/e53N0M/QUc1r+g1CEXo0plqhwAzYP/g0MDKomZjKeayY KJAOsI7kf1AoDvUSGO4B79qEeBJc4CpF2WRA3pfe00qZKWu8Wi/ZydzNtV0loO25 EAP06ttEWuh4oklbuV+bhQfDIxmRNg9GhkhGKcgqnswl57DVMLW2uHJMqEgMb+6C rgWIKQdmvAbS1r/d4mb8zy46SMtFZ3RBoG5RLSp1H1ATS4B9L7DYAaQtEEzVdaEh I4hq9ik/uNzapwtRq7rfpkFmgRsLwWIiBAVk9RlzLlKpW8w5+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYES0lSpDPNdksljaNFq7mQQB8OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvYmM5YzQxZTgtMTY2My0z NTdiLTgyNDUtZTVmNWU4YjQxMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+WeR/TqfxssjVhlbZDe2UtOZYQ4NpxEymDgnsz0UXILJE6S8oqtoTn 9arj0DI+Hr+Qajq6EKyS/t8nS0f/MOUK+YMxsX+7Xl003xoeHBRkiTqWaH0v2KHL n7NXQWGS0gNrZSA/UxPNzkcdjeZX0D+OK5jwiccMBDFGR1bfkygJYiJC9d0j/TOy 8FhdiAlBgbeM0s1pVEglhfP5Rce9NNo2ynr68qWmszJFODwNNz9OxXgSm21iTNnU 1rijUWJcMGdo5Ted4VyJlJDZslZSPRvQWqaOjZrJ2b/Ku6bM3ItYzS4D5Pm3AALK EHajP3qgmztqmzKIZ25pZKupPG3trc4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:16 2025 by rpki-client