$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d3766780-da13-374d-97af-ab9e3203de65.roa File: d3766780-da13-374d-97af-ab9e3203de65.roa (raw, json) Hash identifier: cbrn0hl0IT92IaeytjI1DpCC8KzQGKImqqJf38iMiRc= Subject key identifier: 73:69:47:5B:6B:F3:EB:CD:BC:BF:6B:41:71:51:71:B9:88:81:DF:44 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584930DE6EE552EB3D66E678D880 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d3766780-da13-374d-97af-ab9e3203de65.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 36352 IP address blocks: 66.248.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6e:e5:52:eb:3d:66:e6:78:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=a433e8f9-85e0-4828-bc47-0743a4aee714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d6:fa:de:8f:09:d5:e8:48:07:52:59:b7:14: a5:14:ed:01:d2:fd:b9:e7:ae:0c:32:b4:bb:c9:3b: 5a:1e:a8:49:1f:77:25:fe:15:47:34:09:6b:06:82: f2:e7:48:a5:c0:c8:51:8f:7c:3c:2a:33:0a:ae:01: 23:c3:6c:8b:53:72:4f:9f:c4:ff:8b:29:d8:44:ab: c2:57:57:bd:11:41:95:5a:fb:79:be:bf:13:a9:3d: 05:df:f0:28:cb:94:e4:96:43:13:04:23:e3:f8:84: 81:46:88:dc:d7:dc:e4:67:34:6c:ec:5f:db:9d:48: a7:ee:0f:76:ec:a4:7f:39:e1:f0:7f:0a:ea:bc:d4: 20:0d:4b:01:93:fb:56:84:36:36:7e:36:3d:ea:1d: 07:1a:10:e6:7a:9a:7b:f3:08:c3:57:fc:3a:90:c2: 29:cd:e6:ac:75:db:cd:1e:c4:7b:c5:40:6f:e2:09: 51:98:6d:0c:52:7d:9a:e3:df:32:71:e9:12:8f:ee: 68:3d:6b:4d:24:4e:7a:fd:9a:71:de:4d:80:11:4e: a5:73:7c:0c:c1:c0:fc:c8:82:49:4b:02:71:c8:45: 8c:9e:f7:1d:6b:cf:73:e3:d9:f4:18:af:66:18:ab: 9f:de:a3:b9:c2:b7:43:eb:e3:08:cf:41:51:92:34: 9a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:69:47:5B:6B:F3:EB:CD:BC:BF:6B:41:71:51:71:B9:88:81:DF:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d3766780-da13-374d-97af-ab9e3203de65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 66.248.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:db:c2:29:08:67:5a:1f:40:62:12:07:a1:67:71:66:9a:fb: cb:ee:10:60:ec:49:56:f9:8a:c2:74:99:1a:3c:07:ba:3f:9a: b2:f7:05:da:83:5a:7a:88:c7:1a:ea:60:54:3a:66:30:23:42: ba:fb:b2:4d:09:82:15:9a:4d:5c:05:e1:40:df:9b:5e:03:33: 19:0e:b5:bc:3e:9f:2b:9a:68:00:5f:b2:a8:e3:44:a9:8f:80: 2a:93:c0:65:db:ad:ad:e7:e4:ff:b5:2b:91:3a:cf:09:ec:9d: 0d:30:f3:96:cf:84:fc:09:c6:49:80:d2:62:32:ae:74:d7:f6: 4d:b1:bd:9e:81:1c:f8:83:3d:dd:e7:72:05:e4:ab:73:73:9d: 8b:16:d1:2d:7c:a6:21:b7:90:75:8b:71:a4:51:c0:be:85:59: 0b:bc:7a:4a:a7:a3:66:69:7c:d0:60:da:10:0a:b8:5a:8c:c5: 60:e2:0f:b7:ad:c1:c4:5b:2a:79:b0:e1:aa:8c:14:1b:78:0b: 3b:5f:18:bc:69:65:4e:3e:d7:b1:7d:15:ad:8e:a6:16:d6:5e: 36:f0:f4:4a:75:ed:eb:15:3d:39:b6:e3:a8:be:97:04:cc:79: 72:47:78:91:21:84:63:de:98:90:a0:ba:f7:78:85:66:58:f1: 31:e6:f7:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3m7lUus9ZuZ42IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk YTQzM2U4ZjktODVlMC00ODI4LWJjNDctMDc0M2E0YWVlNzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9b63o8J1ehIB1JZtxSlFO0B0v25564MMrS7 yTtaHqhJH3cl/hVHNAlrBoLy50ilwMhRj3w8KjMKrgEjw2yLU3JPn8T/iynYRKvC V1e9EUGVWvt5vr8TqT0F3/Aoy5TklkMTBCPj+ISBRojc19zkZzRs7F/bnUin7g92 7KR/OeHwfwrqvNQgDUsBk/tWhDY2fjY96h0HGhDmepp78wjDV/w6kMIpzeasddvN HsR7xUBv4glRmG0MUn2a498ycekSj+5oPWtNJE56/Zpx3k2AEU6lc3wMwcD8yIJJ SwJxyEWMnvcda89z49n0GK9mGKuf3qO5wrdD6+MIz0FRkjSazwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNpR1tr8+vNvL9rQXFRcbmIgd9EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZDM3NjY3ODAtZGExMy0z NzRkLTk3YWYtYWI5ZTMyMDNkZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTbwikIZ1ofQGISB6FncWaa+8vuEGDsSVb5isJ0mRo8B7o/mrL3BdqD WnqIxxrqYFQ6ZjAjQrr7sk0JghWaTVwF4UDfm14DMxkOtbw+nyuaaABfsqjjRKmP gCqTwGXbra3n5P+1K5E6zwnsnQ0w85bPhPwJxkmA0mIyrnTX9k2xvZ6BHPiDPd3n cgXkq3NznYsW0S18piG3kHWLcaRRwL6FWQu8ekqno2ZpfNBg2hAKuFqMxWDiD7et wcRbKnmw4aqMFBt4CztfGLxpZU4+17F9Fa2OphbWXjbw9Ep17esVPTm246i+lwTM eXJHeJEhhGPemJCguvd4hWZY8THm93k= -----END CERTIFICATE-----Generated at Sat Apr 5 10:25:33 2025 by rpki-client