$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/34665fc4-950b-3047-8a49-3e67438a47ba.roa File: 34665fc4-950b-3047-8a49-3e67438a47ba.roa (raw, json) Hash identifier: UCgo+5jfFnqLcipT8dv4h/0NbZ7+bbWLSeTpYaQp2yw= Subject key identifier: 0B:CD:F2:E9:2E:03:21:BF:10:77:61:CE:60:28:87:80:37:44:A4:56 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584955295172506ED9EF01E99180 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/34665fc4-950b-3047-8a49-3e67438a47ba.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 4540 IP address blocks: 66.187.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:51:72:50:6e:d9:ef:01:e9:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=7b9e9dac-88dc-4de6-ac83-c401f8c4bf00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0d:0e:75:f2:1a:60:7a:ae:e3:0a:ee:e5:98: 0b:1e:53:b4:d3:04:44:f4:7d:4f:d6:c1:f5:24:23: dc:e1:d2:e4:67:b3:9c:8a:1b:1c:7d:8f:8d:fd:4e: b4:f1:e0:2e:4a:e5:13:cd:84:ec:d0:8f:6a:79:66: 55:61:ae:00:31:d2:9a:cd:c7:74:f1:4c:1b:86:fa: 46:e0:e1:c2:b7:dd:65:03:fd:8d:0f:82:a5:2f:a2: ed:3c:d5:25:b1:41:d3:88:a3:16:90:8b:62:8c:26: 64:01:51:97:98:41:fe:93:b4:97:0c:b3:23:cb:3a: 24:84:4d:21:c7:25:e5:de:49:8d:9e:74:29:a4:4c: 7a:c7:a3:65:01:07:db:6f:2e:8d:ef:77:07:0a:9c: 3f:75:bb:13:5a:61:4c:40:e3:c6:dc:19:3f:50:60: ab:c2:82:4b:10:cc:46:7d:8d:8c:3a:10:1a:69:f8: c3:00:d5:d0:53:ce:19:5b:c4:a5:8d:ff:62:4b:c2: f4:4b:70:3d:5e:4e:cf:c3:42:7f:ec:d2:f4:cc:a8: 32:84:bc:70:3e:25:e8:f6:60:16:a4:8d:2b:b1:7d: 91:53:97:a0:e0:63:76:da:42:b0:1b:c1:4e:05:67: 8e:d8:06:39:89:4d:93:c0:8f:24:e2:ec:62:57:6d: 6c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CD:F2:E9:2E:03:21:BF:10:77:61:CE:60:28:87:80:37:44:A4:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/34665fc4-950b-3047-8a49-3e67438a47ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 66.187.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:66:26:dc:7b:be:aa:fc:68:d0:85:28:68:b7:d0:e9:82:d9: 6f:93:be:48:17:f7:e6:3d:f1:fb:a6:de:d9:3b:e3:ae:c2:c2: 9e:f5:9f:6c:0f:11:4a:17:fc:04:36:05:3b:fb:2a:53:64:a1: d1:c8:bf:12:34:83:8f:1d:b1:41:d9:44:23:9c:3c:07:37:62: 90:53:b5:d6:b0:42:30:7d:f6:34:4f:cc:53:2b:66:a9:5f:b9: 51:d6:a2:64:9b:21:cd:a3:89:23:d0:c3:83:02:54:05:ad:9e: 16:5b:72:9d:82:62:9f:23:a4:b7:58:78:cb:a4:7a:21:d4:16: 13:9c:ee:49:e2:de:fa:78:b8:f8:2e:74:e2:4a:0d:a3:b4:ad: 8f:07:6e:76:e1:4d:85:df:15:89:8e:96:b7:33:09:8f:ec:5b: d0:99:8a:31:7c:6e:e1:fb:0c:5e:05:c2:e5:13:9d:39:20:d0: ca:4a:be:7f:c5:66:f7:c3:fc:e7:3b:ab:7b:27:4b:4e:4b:49: 0d:73:49:cd:7d:54:79:fd:7b:d7:b7:05:c2:30:5e:7c:f9:fa: 9e:ef:6a:9b:49:ca:b1:0d:cf:5e:1f:dc:f0:d3:ea:1a:0c:1e: 76:a7:01:34:52:ba:33:81:3f:5b:4b:04:c8:d7:f0:b9:ec:89: bb:61:b8:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVFyUG7Z7wHpkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk N2I5ZTlkYWMtODhkYy00ZGU2LWFjODMtYzQwMWY4YzRiZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA0OdfIaYHqu4wru5ZgLHlO00wRE9H1P1sH1 JCPc4dLkZ7OcihscfY+N/U608eAuSuUTzYTs0I9qeWZVYa4AMdKazcd08UwbhvpG 4OHCt91lA/2ND4KlL6LtPNUlsUHTiKMWkItijCZkAVGXmEH+k7SXDLMjyzokhE0h xyXl3kmNnnQppEx6x6NlAQfbby6N73cHCpw/dbsTWmFMQOPG3Bk/UGCrwoJLEMxG fY2MOhAaafjDANXQU84ZW8Sljf9iS8L0S3A9Xk7Pw0J/7NL0zKgyhLxwPiXo9mAW pI0rsX2RU5eg4GN22kKwG8FOBWeO2AY5iU2TwI8k4uxiV21sqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvN8ukuAyG/EHdhzmAoh4A3RKRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMzQ2NjVmYzQtOTUwYi0z MDQ3LThhNDktM2U2NzQzOGE0N2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQrt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1mJtx7vqr8aNCFKGi30OmC2W+TvkgX9+Y98fum3tk7467Cwp71n2wP EUoX/AQ2BTv7KlNkodHIvxI0g48dsUHZRCOcPAc3YpBTtdawQjB99jRPzFMrZqlf uVHWomSbIc2jiSPQw4MCVAWtnhZbcp2CYp8jpLdYeMukeiHUFhOc7kni3vp4uPgu dOJKDaO0rY8HbnbhTYXfFYmOlrczCY/sW9CZijF8buH7DF4FwuUTnTkg0MpKvn/F ZvfD/Oc7q3snS05LSQ1zSc19VHn9e9e3BcIwXnz5+p7vaptJyrENz14f3PDT6hoM HnanATRSujOBP1tLBMjX8LnsibthuMo= -----END CERTIFICATE-----Generated at Fri Apr 11 21:21:16 2025 by rpki-client