$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa File: f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa (raw, json) Hash identifier: 3jEilvU9SrHX57H4byKtIz6tHk4B8TXfHaiZAGZ6T14= Subject key identifier: 32:AC:BB:8B:7B:A7:A5:1F:17:1D:26:8F:55:32:54:84:55:3B:94:73 Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Certificate serial: 010D0C9F43285848FBA5513CCA9D89091C716B80 Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa Signing time: Sun 23 Feb 2025 23:27:53 +0000 ROA not before: Sun 23 Feb 2025 23:27:53 +0000 ROA not after: Sat 24 May 2025 22:27:53 +0000 asID: 54309 IP address blocks: 66.33.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fb:a5:51:3c:ca:9d:89:09:1c:71:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Validity Not Before: Feb 23 23:27:53 2025 GMT Not After : May 24 22:27:53 2025 GMT Subject: CN=05626b34-6d90-41bd-b324-b881c6ecdca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:04:28:5d:ed:5b:7e:56:64:9d:6f:43:f2:5e: 46:da:9a:c0:bc:b4:b6:84:bd:2a:04:26:cd:c7:e0: 00:9c:78:19:0c:01:bd:12:47:0a:45:65:e6:98:32: e6:59:52:47:bc:a9:89:b9:b8:ec:0a:10:28:61:f0: 0a:ab:f4:1f:84:52:6e:01:fb:2c:e9:6a:ea:b9:21: 96:15:6e:e3:62:5c:36:c1:0c:ae:78:99:fd:3c:76: f7:32:ad:0a:9f:bf:52:d2:05:b7:ef:30:f8:bf:57: e3:48:6f:bb:7a:1a:48:05:80:d1:84:64:9f:47:bb: 20:51:de:eb:2c:2c:39:9a:7b:af:09:04:3c:f2:7d: 53:4b:ef:05:99:e9:ca:b9:b4:f1:4d:aa:f0:09:ae: 57:22:bd:43:48:b2:f1:14:dc:c9:2b:30:08:6f:11: a4:79:ce:aa:4d:b9:a9:61:89:b8:af:4f:09:80:0a: 07:d6:b0:ef:46:9e:37:de:dd:a3:38:12:57:3b:37: c1:3b:0c:14:fd:14:05:91:39:ad:3c:ee:26:8a:40: 12:f4:96:a2:72:59:4d:e7:0c:3b:5e:3f:3c:f9:98: 8a:0a:32:5e:42:a7:e9:a6:8e:06:92:ce:b4:50:f3: 0c:7e:07:3b:00:7d:ea:09:5f:4d:a6:d6:dd:8e:77: 33:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AC:BB:8B:7B:A7:A5:1F:17:1D:26:8F:55:32:54:84:55:3B:94:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl X509v3 Authority Key Identifier: keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer sbgp-ipAddrBlock: critical IPv4: 66.33.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:39:9a:da:1b:74:13:1d:e2:6a:1f:dd:a8:7d:86:96:38:db: c1:c8:15:e3:66:0b:49:74:4d:7d:10:7c:0e:2e:0c:f6:da:23: d4:fb:c0:41:ae:0b:f9:05:8c:1e:b4:1d:f0:4e:a7:91:d4:30: a8:a8:f2:51:94:e3:d7:46:f8:bd:89:ff:0e:76:61:49:16:a3: f3:a9:86:c1:da:86:4a:75:b5:43:91:3f:fc:ed:c7:ee:d0:83: 87:60:bb:87:68:e5:e4:1d:fe:f9:9a:c2:dc:41:3e:e6:ee:98: 0e:bb:48:bf:f8:9c:da:1c:1f:b7:37:ec:dc:d0:0f:77:26:c6: eb:0e:3d:a4:32:05:4d:2b:14:18:53:04:89:6b:2f:94:bc:28: bf:56:b2:a6:4e:ad:ba:cb:5f:7f:74:74:b5:32:d6:d7:13:b4: ca:b7:b0:c7:07:16:f9:6f:c0:eb:50:e7:40:93:d4:c3:80:48: 48:66:64:23:e3:91:75:54:8e:1e:e0:5d:00:4a:32:b8:8a:68: 42:9e:91:0e:2d:9f:1f:0e:fc:19:e2:9d:62:dd:93:81:96:0d: 5c:5e:31:58:c4:d6:38:e4:7d:f5:21:b3:ad:a0:48:0e:c5:83: cc:65:05:a4:ae:61:77:29:61:50:3a:37:ad:08:8b:28:b9:70: ad:ac:63:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj7pVE8yp2JCRxxa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm MDkxMB4XDTI1MDIyMzIzMjc1M1oXDTI1MDUyNDIyMjc1M1owLzEtMCsGA1UEAxMk MDU2MjZiMzQtNmQ5MC00MWJkLWIzMjQtYjg4MWM2ZWNkY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgQoXe1bflZknW9D8l5G2prAvLS2hL0qBCbN x+AAnHgZDAG9EkcKRWXmmDLmWVJHvKmJubjsChAoYfAKq/QfhFJuAfss6WrquSGW FW7jYlw2wQyueJn9PHb3Mq0Kn79S0gW37zD4v1fjSG+7ehpIBYDRhGSfR7sgUd7r LCw5mnuvCQQ88n1TS+8FmenKubTxTarwCa5XIr1DSLLxFNzJKzAIbxGkec6qTbmp YYm4r08JgAoH1rDvRp433t2jOBJXOzfBOwwU/RQFkTmtPO4mikAS9JaicllN5ww7 Xj88+ZiKCjJeQqfppo4Gks60UPMMfgc7AH3qCV9Nptbdjncz9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKsu4t7p6UfFx0mj1UyVIRVO5RzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5 ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvZjVhOGZjYzMtYmM3Zi0z NjhmLWI1YTgtMDVjMWM5MjhhY2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5 ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk MTYyOWYwOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ5mtobdBMd4mof3ah9hpY428HIFeNmC0l0TX0QfA4uDPbaI9T7wEGu C/kFjB60HfBOp5HUMKio8lGU49dG+L2J/w52YUkWo/OphsHahkp1tUORP/ztx+7Q g4dgu4do5eQd/vmawtxBPubumA67SL/4nNocH7c37NzQD3cmxusOPaQyBU0rFBhT BIlrL5S8KL9WsqZOrbrLX390dLUy1tcTtMq3sMcHFvlvwOtQ50CT1MOASEhmZCPj kXVUjh7gXQBKMriKaEKekQ4tnx8O/BninWLdk4GWDVxeMVjE1jjkffUhs62gSA7F g8xlBaSuYXcpYVA6N60Iiyi5cK2sY8Q= -----END CERTIFICATE-----Generated at Sat Apr 12 10:08:27 2025 by rpki-client