$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa File: bf2887aa-43e9-37de-b469-8642f6a243b3.roa (raw, json) Hash identifier: W6HJoAkskdX4VafwvEtVXifnm+R9WiatnlFc/XDjhig= Subject key identifier: BF:54:8B:B0:F8:FC:3A:FB:F0:F3:FC:90:DD:F1:24:EB:68:6C:AB:51 Certificate issuer: /CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Certificate serial: 010D0C9F43285848854B41327948FEB222EDB630 Authority key identifier: DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 63318 IP address blocks: 66.85.252.0/23 maxlen: 24 2602:ff39::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:41:32:79:48:fe:b2:22:ed:b6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=5cd8e4db-1a88-4c1e-94f0-7ca9c6daf366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d0:41:73:09:7c:3c:78:c9:cb:69:ed:ef:ef: 48:6c:f6:8a:89:9b:f2:e0:7a:3a:c5:e1:3c:97:98: 44:b6:54:2c:b2:04:7a:46:3c:88:cd:28:9d:9b:3a: 14:3b:33:40:d8:d0:d7:cc:f8:3b:15:01:4f:ef:ee: 1e:14:0e:d6:4a:b6:bb:b1:ea:b8:7b:45:e2:12:b8: 4d:2d:83:00:11:df:98:54:90:a9:50:43:16:1f:67: 37:fa:b8:ed:06:d6:f9:75:b1:0b:18:ed:d7:63:86: 52:92:07:e6:61:83:83:19:e7:46:40:1b:2d:02:7b: e1:4d:cb:bb:32:0b:ae:10:35:a5:ed:75:3c:d3:4c: 64:37:74:14:08:ba:51:20:76:58:42:3d:ae:04:b5: 85:53:4b:69:28:f3:9d:3e:d6:8d:e1:d3:c3:18:17: 22:7e:46:81:63:d3:5a:c6:27:74:65:77:62:89:a0: 48:19:73:7c:1d:47:13:7c:8a:dd:02:be:17:2d:04: df:6c:ca:7b:f8:7e:43:5d:8a:ff:64:7c:09:92:f6: c5:ce:b5:9a:c7:30:d8:1d:ea:b5:e5:bb:49:20:c5: 34:19:1c:90:a0:70:36:79:10:69:bf:0c:81:89:97: 80:98:cf:0e:3c:76:e8:d0:ba:db:16:93:2e:17:2f: a7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:54:8B:B0:F8:FC:3A:FB:F0:F3:FC:90:DD:F1:24:EB:68:6C:AB:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl X509v3 Authority Key Identifier: keyid:DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer sbgp-ipAddrBlock: critical IPv4: 66.85.252.0/23 IPv6: 2602:ff39::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:fc:c6:18:f1:63:fa:4c:85:bf:5b:ef:2b:2c:e3:d0:24:eb: 8b:f9:91:67:63:70:bf:9c:9a:07:9e:72:41:ca:e0:22:c4:d8: ec:56:48:9d:52:9c:fe:e7:a9:c6:35:02:87:50:51:34:81:bf: f0:b8:53:7c:4d:5a:63:d3:7e:1e:c4:ea:5b:14:e2:37:d9:42: 42:33:a1:99:59:3c:ca:6c:07:67:84:de:33:1d:79:f5:a2:a7: f9:c7:2c:07:af:78:ec:d2:9d:55:f1:31:cc:31:ea:41:e4:37: fc:04:82:be:7e:6d:a9:5b:f8:5d:d6:16:7e:69:8b:ba:6b:4f: 6a:7b:e7:9b:4a:bd:55:5d:56:16:1f:5f:4a:11:bc:5a:c3:16: de:0c:28:0e:10:92:55:1c:77:1e:24:dc:8b:f0:00:74:8d:42: 37:d0:20:9c:13:4f:fe:b2:65:a7:62:5c:0c:6b:18:5e:88:cf: d2:43:f3:93:7c:74:e0:c0:52:07:67:94:d3:90:fd:1c:ff:ab: 7b:d9:f7:b2:1d:d3:a8:04:6f:91:a6:08:db:61:c8:96:4b:92: 95:df:a5:04:d9:6b:5c:24:85:44:db:ae:95:d9:7b:d9:5a:f2: 2e:c5:95:ac:fa:86:d9:e9:17:24:4d:ba:14:20:5c:fb:49:48: fb:a1:13:76 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEiFS0EyeUj+siLttjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdiMmNkOTEtNGM5Yi00Zjg3LTlhMjgtZjAxZGYwMjI0 NjExMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk NWNkOGU0ZGItMWE4OC00YzFlLTk0ZjAtN2NhOWM2ZGFmMzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tBBcwl8PHjJy2nt7+9IbPaKiZvy4Ho6xeE8 l5hEtlQssgR6RjyIzSidmzoUOzNA2NDXzPg7FQFP7+4eFA7WSra7seq4e0XiErhN LYMAEd+YVJCpUEMWH2c3+rjtBtb5dbELGO3XY4ZSkgfmYYODGedGQBstAnvhTcu7 MguuEDWl7XU800xkN3QUCLpRIHZYQj2uBLWFU0tpKPOdPtaN4dPDGBcifkaBY9Na xid0ZXdiiaBIGXN8HUcTfIrdAr4XLQTfbMp7+H5DXYr/ZHwJkvbFzrWaxzDYHeq1 5btJIMU0GRyQoHA2eRBpvwyBiZeAmM8OPHbo0LrbFpMuFy+n8QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFL9Ui7D4/Dr78PP8kN3xJOtobKtRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84N2Iy Y2Q5MS00YzliLTRmODctOWEyOC1mMDFkZjAyMjQ2MTEvYmYyODg3YWEtNDNlOS0z N2RlLWI0NjktODY0MmY2YTI0M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODdiMmNkOTEtNGM5Yi00Zjg3LTlh MjgtZjAxZGYwMjI0NjExLzg3YjJjZDkxLTRjOWItNGY4Ny05YTI4LWYwMWRmMDIy NDYxMS5jcmwwHwYDVR0jBBgwFoAU35M8PzIGbnuwqMYG/fbC4i4G2CwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84N2IyY2Q5MS00YzliLTRmODctOWEyOC1mMDFk ZjAyMjQ2MTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBQlX8MA4E AgACMAgDBgQmAv85ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDE/MYY8WP6TIW/W+8rLOPQJOuL+ZFnY3C/ nJoHnnJByuAixNjsVkidUpz+56nGNQKHUFE0gb/wuFN8TVpj034exOpbFOI32UJC M6GZWTzKbAdnhN4zHXn1oqf5xywHr3js0p1V8THMMepB5Df8BIK+fm2pW/hd1hZ+ aYu6a09qe+ebSr1VXVYWH19KEbxawxbeDCgOEJJVHHceJNyL8AB0jUI30CCcE0/+ smWnYlwMaxheiM/SQ/OTfHTgwFIHZ5TTkP0c/6t72feyHdOoBG+RpgjbYciWS5KV 36UE2WtcJIVE266V2XvZWvIuxZWs+obZ6RckTboUIFz7SUj7oRN2 -----END CERTIFICATE-----Generated at Fri Mar 14 09:44:30 2025 by rpki-client