$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa File: 9dc53f79-5229-395e-abe4-ac308a1251e7.roa (raw, json) Hash identifier: dztns5NmNktSm+j4cQh1aqlR4nosZ810QLUGS/Cc6fE= Subject key identifier: 0B:8F:E0:E0:75:CC:4F:11:A9:89:13:85:DC:DF:66:52:51:BC:5D:C2 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F432858494CC94FB8E5842D5DACD58640 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 40065 IP address blocks: 67.220.90.0/23 maxlen: 24 67.220.92.0/23 maxlen: 24 68.168.16.0/23 maxlen: 24 68.168.22.0/24 maxlen: 24 68.168.24.0/22 maxlen: 24 68.168.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4f:b8:e5:84:2d:5d:ac:d5:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=e498a2d1-fcc6-485c-9410-aa70de104158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1f:ac:2d:6f:4c:4c:bb:83:2a:fe:b9:cd:41: f1:77:b6:64:ea:2c:6a:9f:51:6e:56:21:96:1e:59: 33:a8:7b:43:11:4c:f7:c9:ff:0c:4a:a3:70:bd:ea: f5:a9:0d:85:e5:42:00:73:5c:46:01:e8:62:19:41: 6c:a0:6c:2b:80:3d:dd:9a:28:5e:f5:9e:93:5c:95: a3:61:9c:41:90:95:2a:53:65:81:f5:78:96:4e:29: af:4c:da:e0:91:d9:c1:24:b6:64:73:11:81:05:fb: 1a:78:1a:f2:9a:c7:ab:9c:6f:69:85:5d:65:13:06: 07:20:0b:93:98:6f:d8:54:a2:79:be:8b:80:3e:0a: f0:d8:d3:a1:24:41:12:3d:21:6b:0f:9c:11:f7:d6: 6c:16:e1:e0:bb:2c:fd:9c:63:d8:7b:ce:de:80:32: d6:e5:08:7e:56:c6:19:db:a0:b2:b5:15:cf:b8:3f: e1:77:6a:a7:77:8e:23:ef:c3:51:f0:81:61:45:07: 76:df:4a:fa:39:8f:d4:d8:e8:2b:7d:50:f1:0b:04: 5f:19:93:80:5e:bf:6b:1a:84:da:73:96:6e:c4:5a: ad:ff:42:b7:11:de:2e:03:38:f7:a9:84:76:50:3b: a5:40:55:c8:24:51:8f:a3:35:98:60:26:ff:ee:fe: e7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8F:E0:E0:75:CC:4F:11:A9:89:13:85:DC:DF:66:52:51:BC:5D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.90.0-67.220.93.255 68.168.16.0/23 68.168.22.0/24 68.168.24.0-68.168.28.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:54:d7:7c:2b:e1:e7:0d:65:a3:5d:56:f0:8a:2f:b8:46:5a: c4:c1:67:12:c6:a0:53:b3:d0:d8:62:02:1a:df:fc:46:ca:58: f5:cd:b3:30:b3:3d:99:42:a3:79:32:80:b9:8f:fc:e6:fe:39: ca:24:66:90:60:e1:54:0a:d1:71:be:37:16:51:c3:d1:7f:4c: 5f:dc:14:da:33:96:b4:e0:b0:52:fa:9e:fa:da:50:a1:d4:b8: 8e:d8:97:dd:fb:56:16:38:a1:35:b7:41:4d:b0:fc:ac:c8:1e: 9d:c5:f1:7c:0c:09:1b:99:5a:4f:97:91:7b:e1:7d:ec:0a:87: d9:f9:19:c2:d1:b7:40:ac:e3:05:fc:b8:51:3f:77:10:bb:fa: 10:54:41:ce:00:b6:1d:b4:5c:1d:6a:b5:b4:22:be:ea:5d:86: 34:3c:d7:47:96:fe:33:ae:6c:e3:f0:59:c5:12:fd:32:ed:f3: 07:8d:e9:2d:70:b0:55:97:78:34:b2:3b:3b:9f:70:df:59:be: 41:ff:8d:70:06:c0:72:e3:ea:d8:73:6c:a6:58:e7:9c:7c:1f: 5d:aa:62:d6:89:1f:76:88:44:c7:6b:af:3f:ba:5c:c2:9d:21: 73:f2:98:23:50:20:64:56:d5:be:4c:cc:98:ce:19:70:e4:43: 46:e1:03:9e -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWElMyU+45YQtXazVhkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZTQ5OGEyZDEtZmNjNi00ODVjLTk0MTAtYWE3MGRlMTA0MTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh+sLW9MTLuDKv65zUHxd7Zk6ixqn1FuViGW HlkzqHtDEUz3yf8MSqNwver1qQ2F5UIAc1xGAehiGUFsoGwrgD3dmihe9Z6TXJWj YZxBkJUqU2WB9XiWTimvTNrgkdnBJLZkcxGBBfsaeBrymsernG9phV1lEwYHIAuT mG/YVKJ5vouAPgrw2NOhJEESPSFrD5wR99ZsFuHguyz9nGPYe87egDLW5Qh+VsYZ 26CytRXPuD/hd2qnd44j78NR8IFhRQd230r6OY/U2OgrfVDxCwRfGZOAXr9rGoTa c5ZuxFqt/0K3Ed4uAzj3qYR2UDulQFXIJFGPozWYYCb/7v7nqwIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFAuP4OB1zE8RqYkThdzfZlJRvF3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvOWRjNTNmNzktNTIyOS0z OTVlLWFiZTQtYWMzMDhhMTI1MWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAFD3FoD BAFD3FwDBAFEqBADBABEqBYwDAMEA0SoGAMEAESoHDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdVNd8K+Hn DWWjXVbwii+4RlrEwWcSxqBTs9DYYgIa3/xGylj1zbMwsz2ZQqN5MoC5j/zm/jnK JGaQYOFUCtFxvjcWUcPRf0xf3BTaM5a04LBS+p762lCh1LiO2Jfd+1YWOKE1t0FN sPysyB6dxfF8DAkbmVpPl5F74X3sCofZ+RnC0bdArOMF/LhRP3cQu/oQVEHOALYd tFwdarW0Ir7qXYY0PNdHlv4zrmzj8FnFEv0y7fMHjektcLBVl3g0sjs7n3DfWb5B /41wBsBy4+rYc2ymWOecfB9dqmLWiR92iETHa68/ulzCnSFz8pgjUCBkVtW+TMyY zhlw5ENG4QOe -----END CERTIFICATE-----Generated at Fri Apr 11 23:33:26 2025 by rpki-client