$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa File: 3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa (raw, json) Hash identifier: p5JhDqeWC1RF0Zfjk1nquMF4V4Oh2t9kCIKZ149btxc= Subject key identifier: 84:2C:98:0E:7B:68:4E:FF:78:2C:12:2B:1E:B6:72:EE:1B:4C:7E:8B Certificate issuer: /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Certificate serial: 010D0C9F4328584981D45554A98FE7A9BD4B61C0 Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 26935 IP address blocks: 66.35.0.0/20 maxlen: 20 69.55.208.0/20 maxlen: 20 207.32.192.0/20 maxlen: 20 2607:f688::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:55:54:a9:8f:e7:a9:bd:4b:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=fae90f22-e2bc-4b38-8fd1-a2870a9f9edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9f:cc:e7:62:88:b4:ce:d1:91:98:98:59:9e: 33:97:06:7d:3a:d5:64:7e:de:d2:81:d3:41:0c:40: a7:53:c6:50:db:ea:19:aa:b3:19:58:cf:68:2e:ac: b7:e8:53:30:a3:56:12:a4:db:8a:69:3d:77:f3:63: 34:d3:84:b0:06:c0:d1:0a:30:00:ca:0e:9f:18:f3: cf:92:24:ff:10:9d:29:f1:ba:da:37:e9:81:76:5b: 33:2e:c0:b8:0a:8e:b0:d5:04:b2:56:9b:99:57:d2: 31:74:8d:16:fb:c6:43:18:c1:0f:fd:00:2f:ff:2d: 31:4b:b2:e3:4e:10:bd:a9:78:02:3f:b0:5f:56:a4: a0:bf:e0:67:1e:33:b8:4f:c8:05:c7:ed:aa:69:a9: 14:68:6b:bd:0b:5b:ea:b6:e0:a3:49:6a:ab:ee:13: cd:5c:84:5d:1e:6c:77:66:b3:aa:9f:86:55:38:6c: 35:0a:64:37:7a:ad:12:f5:b3:76:fe:f3:d1:a9:5c: c2:91:e2:f3:d5:25:6a:df:3a:f6:cd:55:9e:ec:4a: 12:f3:2d:5f:67:8e:67:1a:4c:cf:ee:75:9c:17:0f: 68:11:ab:37:40:f3:7d:5f:a5:39:69:f2:59:54:aa: 1f:91:a5:40:b8:1b:5a:68:53:cf:40:ce:bf:73:27: 16:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2C:98:0E:7B:68:4E:FF:78:2C:12:2B:1E:B6:72:EE:1B:4C:7E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl X509v3 Authority Key Identifier: keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer sbgp-ipAddrBlock: critical IPv4: 66.35.0.0/20 69.55.208.0/20 207.32.192.0/20 IPv6: 2607:f688::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e8:35:e5:59:16:9b:33:e8:61:ce:ab:90:42:c6:3e:7b:10: a3:7f:bc:61:7d:6b:4a:2d:36:98:04:cf:9c:15:b3:9d:a6:ce: 18:0d:2f:26:7d:89:a4:75:b3:37:34:5f:20:34:25:8a:42:a1: b8:4a:fd:71:83:ec:e5:ca:c9:df:e6:72:b0:0e:17:c8:eb:67: 55:12:e2:2a:e4:1e:05:3a:3d:e7:69:60:32:45:26:53:0f:a0: 51:48:90:51:18:b2:5e:57:58:a4:5d:26:df:d5:2b:c9:2b:1b: 98:c8:61:6c:96:4b:cb:4c:ce:80:f2:14:4d:24:78:1c:e7:c8: 24:78:65:c2:b2:51:32:a3:f7:17:b1:20:1f:84:69:71:06:d9: be:4c:45:e4:01:09:96:ee:61:14:61:01:10:a9:2b:79:27:4d: ed:64:78:9f:68:6f:7a:80:78:02:ad:4f:2e:b6:20:ed:53:f2: d8:da:2f:86:69:a3:82:c1:89:f4:5e:b7:53:b9:c8:39:c3:ac: 2f:60:59:da:e7:5f:e8:ff:ec:ad:02:6a:61:89:d6:9d:4b:88: ad:97:9b:25:ab:1e:7b:01:73:6f:1f:43:24:b6:c6:cf:97:12: 80:ce:c7:27:4e:06:aa:e2:80:01:c9:2f:41:b6:ed:4b:db:3b: ae:47:b4:02 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEmB1FVUqY/nqb1LYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJm M2M4MB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk ZmFlOTBmMjItZTJiYy00YjM4LThmZDEtYTI4NzBhOWY5ZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ/M52KItM7RkZiYWZ4zlwZ9OtVkft7SgdNB DECnU8ZQ2+oZqrMZWM9oLqy36FMwo1YSpNuKaT1382M004SwBsDRCjAAyg6fGPPP kiT/EJ0p8braN+mBdlszLsC4Co6w1QSyVpuZV9IxdI0W+8ZDGMEP/QAv/y0xS7Lj ThC9qXgCP7BfVqSgv+BnHjO4T8gFx+2qaakUaGu9C1vqtuCjSWqr7hPNXIRdHmx3 ZrOqn4ZVOGw1CmQ3eq0S9bN2/vPRqVzCkeLz1SVq3zr2zVWe7EoS8y1fZ45nGkzP 7nWcFw9oEas3QPN9X6U5afJZVKofkaVAuBtaaFPPQM6/cycWuQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFIQsmA57aE7/eCwSKx62cu4bTH6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm YmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvM2I4ZTg0MWYtMGExZS0z NTZiLTkzOTAtYmMyZDYxZjFjNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZmJkOGItNGVkOS00ZjVkLWE4 ZjAtNzU1OWQ5MWJmM2M4L2ZjMWZiZDhiLTRlZDktNGY1ZC1hOGYwLTc1NTlkOTFi ZjNjOC5jcmwwHwYDVR0jBBgwFoAUbKtKsvVYO/RVBP3F8Yue3m5JAT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5 ZDkxYmYzYzguY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEQiMAAwQE RTfQAwQEzyDAMA0EAgACMAcDBQAmB/aIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEboNeVZFpsz6GHOq5BC xj57EKN/vGF9a0otNpgEz5wVs52mzhgNLyZ9iaR1szc0XyA0JYpCobhK/XGD7OXK yd/mcrAOF8jrZ1US4irkHgU6PedpYDJFJlMPoFFIkFEYsl5XWKRdJt/VK8krG5jI YWyWS8tMzoDyFE0keBznyCR4ZcKyUTKj9xexIB+EaXEG2b5MReQBCZbuYRRhARCp K3knTe1keJ9ob3qAeAKtTy62IO1T8tjaL4Zpo4LBifRet1O5yDnDrC9gWdrnX+j/ 7K0CamGJ1p1LiK2XmyWrHnsBc28fQyS2xs+XEoDOxydOBqrigAHJL0G27UvbO65H tAI= -----END CERTIFICATE-----Generated at Sat Apr 19 15:50:14 2025 by rpki-client