$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/4806b71e-5307-387a-be85-92d47e1d4728.roa File: 4806b71e-5307-387a-be85-92d47e1d4728.roa (raw, json) Hash identifier: 1MWNG2Li6pI8Vq0yks8xxnCk0VHK/IhwvPv0rBVhj60= Subject key identifier: 2B:F7:1F:20:16:AA:BE:FF:7C:90:45:52:4F:AC:F4:D8:5A:B9:BE:28 Certificate issuer: /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Certificate serial: 010D0C9F4328584961B9A2CE9DADAC5B82A1B480 Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/4806b71e-5307-387a-be85-92d47e1d4728.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 26703 IP address blocks: 66.102.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a2:ce:9d:ad:ac:5b:82:a1:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=cf4b44aa-ed00-4d13-a32b-eef960b318af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:51:be:f0:94:89:29:00:95:97:ae:b2:c1:35: c6:d0:65:eb:a7:07:47:8e:c7:14:ba:41:d3:ab:3b: ec:34:79:cf:0c:ba:5b:9b:fc:56:99:4c:5b:b0:72: 0b:73:63:b2:47:b4:e6:5f:0f:fd:21:70:66:cc:5e: 77:ba:41:52:15:ae:31:b0:f6:60:74:09:32:96:d2: 2b:78:b2:33:b8:fa:92:fe:ef:4d:98:e6:cd:ae:75: ad:95:d4:18:19:33:59:14:dd:57:f2:de:45:89:92: 79:55:93:c8:24:cf:3a:3b:bf:35:ed:6f:72:d7:48: af:a7:c8:2e:10:68:7e:44:fa:b9:73:33:65:71:94: 1c:4f:be:89:71:b6:0e:1f:24:e5:27:14:4a:17:9f: 29:33:01:c4:93:91:0d:c9:8a:a0:74:be:4f:45:5b: c1:10:a4:42:dc:ec:7b:0b:d8:72:30:07:a2:36:db: 4a:4d:c9:49:ac:69:aa:93:4d:29:e9:15:2e:97:94: 85:35:58:84:8e:8c:ea:19:d0:ff:41:7d:61:50:e5: 2e:7a:78:d2:10:f2:0d:a8:88:2e:6e:8f:fe:bd:a1: c1:4b:f7:c3:39:80:f5:44:48:29:73:49:b5:8a:f8: 38:f7:87:e4:f9:11:77:35:8e:33:92:89:a9:bc:c3: b8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F7:1F:20:16:AA:BE:FF:7C:90:45:52:4F:AC:F4:D8:5A:B9:BE:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/4806b71e-5307-387a-be85-92d47e1d4728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl X509v3 Authority Key Identifier: keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer sbgp-ipAddrBlock: critical IPv4: 66.102.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:26:1f:11:4a:73:97:47:3e:9a:dd:6a:3f:bb:a1:c7:e6:c6: 33:e4:a8:4c:1a:59:20:69:4c:c2:44:63:1e:05:b6:a5:65:2d: cb:ba:f1:be:24:a3:87:82:80:1a:45:38:f3:cb:52:6d:b0:77: 5f:63:49:ea:eb:9e:1e:56:64:32:03:e3:9c:8c:1f:a2:27:21: 61:be:a0:cb:b7:11:c3:cc:f4:bf:2f:9e:19:2b:0e:f0:c3:88: 3a:58:16:d3:43:79:a3:a3:58:69:9c:3d:b2:fa:d1:85:2e:95: 25:98:06:f2:44:e8:0e:04:75:ee:94:18:99:f3:8a:5d:4e:db: 0c:51:bf:a9:6c:aa:8b:d8:fe:2e:c4:01:be:71:01:64:41:f1: 77:22:82:8d:2f:51:ae:b4:38:3e:4f:b6:d7:c2:09:37:be:6d: 90:a7:4b:08:a0:48:1c:db:8b:1c:4c:08:36:a1:41:1f:d2:b4: 7d:4b:77:b4:e1:f1:37:00:0f:01:58:79:89:1c:e3:a5:7a:29: d6:d6:74:a9:5a:d5:dd:fb:8d:60:44:03:01:2a:64:26:5b:b4: 71:0a:2f:8f:2d:3c:c3:73:d1:1a:7e:8f:a4:09:c0:84:53:ad: ee:eb:10:cb:b4:b8:e3:23:d0:ed:ab:2d:fb:93:1d:ec:6e:41: 20:c2:fa:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuaLOna2sW4KhtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ2ODNhNTQtZjhhNS00ZDRiLTg4NzgtOGE5ZWU3OGVj ZTA4MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk Y2Y0YjQ0YWEtZWQwMC00ZDEzLWEzMmItZWVmOTYwYjMxOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFG+8JSJKQCVl66ywTXG0GXrpwdHjscUukHT qzvsNHnPDLpbm/xWmUxbsHILc2OyR7TmXw/9IXBmzF53ukFSFa4xsPZgdAkyltIr eLIzuPqS/u9NmObNrnWtldQYGTNZFN1X8t5FiZJ5VZPIJM86O7817W9y10ivp8gu EGh+RPq5czNlcZQcT76JcbYOHyTlJxRKF58pMwHEk5ENyYqgdL5PRVvBEKRC3Ox7 C9hyMAeiNttKTclJrGmqk00p6RUul5SFNViEjozqGdD/QX1hUOUuenjSEPINqIgu bo/+vaHBS/fDOYD1REgpc0m1ivg494fk+RF3NY4zkompvMO4aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCv3HyAWqr7/fJBFUk+s9Nhaub4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4 M2E1NC1mOGE1LTRkNGItODg3OC04YTllZTc4ZWNlMDgvNDgwNmI3MWUtNTMwNy0z ODdhLWJlODUtOTJkNDdlMWQ0NzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGQ2ODNhNTQtZjhhNS00ZDRiLTg4 NzgtOGE5ZWU3OGVjZTA4LzBkNjgzYTU0LWY4YTUtNGQ0Yi04ODc4LThhOWVlNzhl Y2UwOC5jcmwwHwYDVR0jBBgwFoAUYhQJZeW4q2q2o5sGcBnKdCWTjqswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4M2E1NC1mOGE1LTRkNGItODg3OC04YTll ZTc4ZWNlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQmbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABomHxFKc5dHPprdaj+7ocfmxjPkqEwaWSBpTMJEYx4FtqVlLcu68b4k o4eCgBpFOPPLUm2wd19jSerrnh5WZDID45yMH6InIWG+oMu3EcPM9L8vnhkrDvDD iDpYFtNDeaOjWGmcPbL60YUulSWYBvJE6A4Ede6UGJnzil1O2wxRv6lsqovY/i7E Ab5xAWRB8Xcigo0vUa60OD5PttfCCTe+bZCnSwigSBzbixxMCDahQR/StH1Ld7Th 8TcADwFYeYkc46V6KdbWdKla1d37jWBEAwEqZCZbtHEKL48tPMNz0Rp+j6QJwIRT re7rEMu0uOMj0O2rLfuTHexuQSDC+h4= -----END CERTIFICATE-----Generated at Tue Apr 8 14:57:05 2025 by rpki-client