$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa File: 34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa (raw, json) Hash identifier: 3msTSP2rr2Y5SxwJv1jHRjSXjcRq5MQHAfUHntipUao= Subject key identifier: C8:D2:75:8F:B4:1B:7A:68:85:26:BC:A4:D2:9E:6B:9B:14:70:04:1B Certificate issuer: /CN=43cfd68f-5452-437e-b80d-ac981dd1cf19 Certificate serial: 010D0C9F432858495EEEEFA8973F521D49832A40 Authority key identifier: 29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 63208 IP address blocks: 66.33.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:ef:a8:97:3f:52:1d:49:83:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43cfd68f-5452-437e-b80d-ac981dd1cf19 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=b317353b-f263-4658-8748-7b21721350fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f4:eb:37:9b:34:4d:90:f5:04:5e:62:69:21: 87:59:bf:b0:bb:91:14:e5:48:10:43:0e:e7:33:19: 64:bf:06:3e:5e:73:56:bc:3e:28:53:45:23:07:91: d6:35:47:92:da:5b:35:8b:b6:8f:c3:e3:83:df:89: 79:09:51:83:83:b2:69:98:e0:f3:77:1a:f3:17:86: a3:35:88:3b:54:fe:c8:93:36:40:8d:98:15:38:c8: 0f:b3:f9:3b:15:cd:a9:8a:69:7c:6e:e0:5b:92:30: 80:17:5b:e1:a7:c9:72:e8:dc:d2:34:e3:66:b9:28: 92:32:3d:b3:38:89:2a:92:93:7a:77:fa:bc:9b:1e: e1:03:63:4b:4c:6e:3e:8a:de:2b:7b:20:77:88:fc: 18:78:57:59:0c:bc:29:2e:bb:4d:7a:e6:49:35:d9: 79:94:d4:47:60:b9:9b:1d:32:0a:70:44:cc:f2:33: 45:05:f3:0d:55:5c:b8:f5:4a:a6:9a:65:46:42:49: 7d:03:b7:1f:25:3b:f4:88:04:44:8f:1d:e0:1b:89: 90:c8:69:e3:c2:fc:c9:28:fe:14:ee:e0:8a:3c:b7: 05:8e:08:79:b2:50:27:8a:3b:0a:fb:d2:c4:61:2f: 98:4d:bb:bd:61:8a:08:41:6f:1d:38:63:33:8e:32: 82:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D2:75:8F:B4:1B:7A:68:85:26:BC:A4:D2:9E:6B:9B:14:70:04:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl X509v3 Authority Key Identifier: keyid:29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer sbgp-ipAddrBlock: critical IPv4: 66.33.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:13:88:13:d7:ab:78:93:6f:bf:f9:1e:22:e2:8f:2a:1c:c6: 79:8d:ac:ea:46:2a:8d:38:2c:67:52:32:e4:d7:e8:9f:f3:28: 03:a8:ea:56:7c:fb:f1:b8:10:27:fe:9e:86:2b:ed:04:c1:7e: b0:01:15:fb:75:a5:e1:3b:91:91:16:36:0c:3d:87:3a:85:91: e9:fa:f5:0b:13:54:c6:86:9c:2b:34:9c:e9:dc:1a:88:0a:39: 18:eb:71:da:46:00:65:0d:61:6b:8c:91:5e:26:95:15:12:d0: 04:64:25:d7:31:eb:d9:85:8e:17:80:ac:01:c9:19:17:5c:c5: 4f:ec:3b:cd:1e:7f:6e:25:14:6c:57:b0:29:8a:22:dd:59:45: d0:b1:41:a0:12:59:7d:9f:f9:85:23:9e:db:23:24:72:af:fe: c1:50:08:23:95:55:16:4e:f1:de:55:01:92:8a:ab:a4:53:d4: b9:70:f7:d8:32:a4:8b:9c:1e:bb:64:89:2d:e7:79:91:02:41: 78:2e:ff:0a:16:11:24:74:be:8e:d8:8a:ff:82:69:e9:db:12: 83:c7:f3:c0:ec:6e:39:35:df:5e:b7:0f:bb:d5:f2:e5:3b:3b: 17:1a:82:af:a4:83:38:38:fb:a7:3f:27:87:73:11:ae:8f:76: 18:55:ca:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7u+olz9SHUmDKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNjZmQ2OGYtNTQ1Mi00MzdlLWI4MGQtYWM5ODFkZDFj ZjE5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk YjMxNzM1M2ItZjI2My00NjU4LTg3NDgtN2IyMTcyMTM1MGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfTrN5s0TZD1BF5iaSGHWb+wu5EU5UgQQw7n MxlkvwY+XnNWvD4oU0UjB5HWNUeS2ls1i7aPw+OD34l5CVGDg7JpmODzdxrzF4aj NYg7VP7IkzZAjZgVOMgPs/k7Fc2piml8buBbkjCAF1vhp8ly6NzSNONmuSiSMj2z OIkqkpN6d/q8mx7hA2NLTG4+it4reyB3iPwYeFdZDLwpLrtNeuZJNdl5lNRHYLmb HTIKcETM8jNFBfMNVVy49UqmmmVGQkl9A7cfJTv0iAREjx3gG4mQyGnjwvzJKP4U 7uCKPLcFjgh5slAnijsK+9LEYS+YTbu9YYoIQW8dOGMzjjKCSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjSdY+0G3pohSa8pNKea5sUcAQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80M2Nm ZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4MWRkMWNmMTkvMzRhNzJhMWUtMTI1Zi0z Nzc1LWE2YTItZDFiZDFhODAzYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDNjZmQ2OGYtNTQ1Mi00MzdlLWI4 MGQtYWM5ODFkZDFjZjE5LzQzY2ZkNjhmLTU0NTItNDM3ZS1iODBkLWFjOTgxZGQx Y2YxOS5jcmwwHwYDVR0jBBgwFoAUKaSHpSxAwfgn+pufIv5cz57tHB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80M2NmZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4 MWRkMWNmMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgTiBPXq3iTb7/5HiLijyocxnmNrOpGKo04LGdSMuTX6J/zKAOo6lZ8 +/G4ECf+noYr7QTBfrABFft1peE7kZEWNgw9hzqFken69QsTVMaGnCs0nOncGogK ORjrcdpGAGUNYWuMkV4mlRUS0ARkJdcx69mFjheArAHJGRdcxU/sO80ef24lFGxX sCmKIt1ZRdCxQaASWX2f+YUjntsjJHKv/sFQCCOVVRZO8d5VAZKKq6RT1Llw99gy pIucHrtkiS3neZECQXgu/woWESR0vo7Yiv+CaenbEoPH88Dsbjk13163D7vV8uU7 Oxcagq+kgzg4+6c/J4dzEa6PdhhVypU= -----END CERTIFICATE-----Generated at Fri Apr 11 21:06:45 2025 by rpki-client