$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa File: bf2887aa-43e9-37de-b469-8642f6a243b3.roa (raw, json) Hash identifier: ixwyq0BQdAHk/eRdqq5FB2RjbZGc+tYaK/cAlWb/vYQ= Subject key identifier: 05:9F:17:B8:A9:D1:DC:67:99:95:85:DB:2D:A1:29:6E:5B:88:F4:CD Certificate issuer: /CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Certificate serial: 010D0C9F4328584964843958D40B5B1744FBB480 Authority key identifier: DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 63318 IP address blocks: 66.85.252.0/23 maxlen: 24 2602:ff39::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:39:58:d4:0b:5b:17:44:fb:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=e595242f-a51f-4d0b-a85a-3b2b24a7c5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:00:ba:26:1e:57:31:5b:c0:2f:ec:a1:13:9a: 99:d1:6f:58:7d:71:8b:df:ed:a1:60:04:9e:65:e7: ba:2a:ca:d4:03:82:8e:b5:88:91:33:13:db:59:24: 26:0d:d0:6a:c3:d3:68:f9:9d:df:6a:8e:5b:8f:6e: a4:a1:ad:cd:f1:3f:d0:19:8c:5d:55:e6:39:e9:e0: 03:17:48:67:42:16:d1:5c:95:56:03:97:ed:cb:df: 05:57:41:51:dd:c9:44:bc:10:73:a1:5e:bd:43:c9: 0f:8c:3b:67:a6:3d:3f:40:f9:48:f9:fc:5e:54:40: 5b:76:d5:42:c0:75:e2:06:66:fc:43:93:85:92:a0: ea:5c:a5:c4:6d:8b:71:8f:b4:a1:24:9f:41:98:e1: 06:e4:79:13:21:bb:28:f3:d8:da:77:4a:4f:4a:b2: c7:4f:02:6d:66:fc:31:da:51:ea:5b:2b:5e:7b:09: ce:96:5b:18:08:6b:55:fd:69:5b:68:0a:77:f3:65: 10:4a:5c:f4:e8:ef:7a:61:1f:12:7c:76:22:87:9f: 47:ba:88:5c:f6:79:41:a7:ef:c1:35:52:c2:93:81: 94:61:90:fa:73:82:82:7a:fb:8c:e3:5a:27:a9:b2: 07:93:63:35:68:5d:15:3c:c9:a3:02:5b:f3:83:10: ff:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9F:17:B8:A9:D1:DC:67:99:95:85:DB:2D:A1:29:6E:5B:88:F4:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl X509v3 Authority Key Identifier: keyid:DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer sbgp-ipAddrBlock: critical IPv4: 66.85.252.0/23 IPv6: 2602:ff39::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:1e:79:df:49:e6:12:b6:63:ab:49:db:d9:92:08:a7:f5:da: b5:43:dd:17:7d:20:43:bd:ec:60:f5:23:92:c6:7c:e4:6b:9b: 11:27:18:8d:a6:81:e6:37:b7:55:f9:02:ab:1a:8e:bc:b7:ee: ad:f5:99:b5:87:2f:ec:fa:af:19:16:31:b5:e4:53:59:aa:8d: e2:de:67:c5:a5:0c:ca:3f:cf:24:a2:70:55:ef:32:a0:53:61: f1:9f:55:a3:cd:5c:35:cd:ef:97:35:d2:f0:e8:6b:5f:23:0a: 87:d7:f0:bb:40:a9:74:66:78:f2:5a:74:47:c2:a8:92:96:43: d5:27:69:c9:99:85:4f:fe:7e:c0:76:d1:66:8b:ac:59:0c:6c: 9d:84:d8:a7:2d:a1:81:08:c6:fc:67:9e:22:3a:4c:9c:76:91: e5:38:02:23:7c:1b:75:52:e6:f5:99:2a:dd:17:3e:1b:3c:dd: fc:61:97:04:73:00:3b:f0:4a:ae:28:8f:50:86:fb:02:e7:8a: 37:82:c4:64:2f:12:43:e2:b3:ae:e9:d8:a4:3c:41:5d:db:35: 75:48:2f:2a:b2:66:cd:87:78:ec:ad:07:e1:6a:4f:04:ef:df: 9d:27:5b:0a:46:54:4d:44:dc:e4:9a:89:af:17:e2:d0:9d:2b: 7b:d3:bf:10 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElkhDlY1AtbF0T7tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdiMmNkOTEtNGM5Yi00Zjg3LTlhMjgtZjAxZGYwMjI0 NjExMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk ZTU5NTI0MmYtYTUxZi00ZDBiLWE4NWEtM2IyYjI0YTdjNWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQC6Jh5XMVvAL+yhE5qZ0W9YfXGL3+2hYASe Zee6KsrUA4KOtYiRMxPbWSQmDdBqw9No+Z3fao5bj26koa3N8T/QGYxdVeY56eAD F0hnQhbRXJVWA5fty98FV0FR3clEvBBzoV69Q8kPjDtnpj0/QPlI+fxeVEBbdtVC wHXiBmb8Q5OFkqDqXKXEbYtxj7ShJJ9BmOEG5HkTIbso89jad0pPSrLHTwJtZvwx 2lHqWyteewnOllsYCGtV/WlbaAp382UQSlz06O96YR8SfHYih59Huohc9nlBp+/B NVLCk4GUYZD6c4KCevuM41onqbIHk2M1aF0VPMmjAlvzgxD/rQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAWfF7ip0dxnmZWF2y2hKW5biPTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84N2Iy Y2Q5MS00YzliLTRmODctOWEyOC1mMDFkZjAyMjQ2MTEvYmYyODg3YWEtNDNlOS0z N2RlLWI0NjktODY0MmY2YTI0M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODdiMmNkOTEtNGM5Yi00Zjg3LTlh MjgtZjAxZGYwMjI0NjExLzg3YjJjZDkxLTRjOWItNGY4Ny05YTI4LWYwMWRmMDIy NDYxMS5jcmwwHwYDVR0jBBgwFoAU35M8PzIGbnuwqMYG/fbC4i4G2CwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84N2IyY2Q5MS00YzliLTRmODctOWEyOC1mMDFk ZjAyMjQ2MTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBQlX8MA4E AgACMAgDBgQmAv85ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC1HnnfSeYStmOrSdvZkgin9dq1Q90XfSBD vexg9SOSxnzka5sRJxiNpoHmN7dV+QKrGo68t+6t9Zm1hy/s+q8ZFjG15FNZqo3i 3mfFpQzKP88konBV7zKgU2Hxn1WjzVw1ze+XNdLw6GtfIwqH1/C7QKl0ZnjyWnRH wqiSlkPVJ2nJmYVP/n7AdtFmi6xZDGydhNinLaGBCMb8Z54iOkycdpHlOAIjfBt1 Uub1mSrdFz4bPN38YZcEcwA78EquKI9QhvsC54o3gsRkLxJD4rOu6dikPEFd2zV1 SC8qsmbNh3jsrQfhak8E79+dJ1sKRlRNRNzkmomvF+LQnSt7078Q -----END CERTIFICATE-----Generated at Sat Apr 5 11:43:13 2025 by rpki-client