$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/c6e6b201-872c-3a94-87a1-dd20073fe2cd.roa File: c6e6b201-872c-3a94-87a1-dd20073fe2cd.roa (raw, json) Hash identifier: rJmarTb7hk91Us9g465vCdZ6kTllOUrz8uSHhcw+vec= Subject key identifier: 87:29:86:66:82:C7:95:1E:EF:08:D4:A7:A9:E5:FF:BB:91:F9:8E:38 Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Certificate serial: 010D0C9F432858494733EE19D0B8D8554EF11C20 Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/c6e6b201-872c-3a94-87a1-dd20073fe2cd.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 394056 IP address blocks: 66.33.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:ee:19:d0:b8:d8:55:4e:f1:1c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=8b4b8257-5ee0-41f0-a574-e1073f4de93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:32:f5:e1:99:ae:48:cc:d2:ee:ba:91:6c:a4: 37:83:10:54:99:3d:7d:3a:63:6c:d7:ce:a8:4f:de: f1:aa:f2:74:46:a5:bf:cf:ea:32:56:9b:62:df:f8: 6f:f1:5a:ac:b6:37:3f:e1:81:65:37:3f:4a:38:c4: 84:43:5b:bd:57:75:c4:6d:22:aa:e7:e4:85:56:26: cc:bd:51:dc:51:4a:76:65:60:05:6c:92:f7:cc:41: ce:52:58:fb:0c:c7:e4:d4:47:72:ac:26:b1:85:db: 15:93:93:62:bf:8b:dd:4d:fa:93:46:cf:66:a1:d2: 7b:78:28:df:12:b3:59:80:43:c1:7d:87:0f:9a:38: 74:49:f5:a6:41:ce:81:06:5e:b0:47:e3:61:34:69: e8:3a:0f:19:24:90:e8:02:93:c9:b0:2a:6d:e0:b1: 6c:7a:b1:ba:4a:e1:f1:a0:18:5b:72:79:1c:16:12: 5f:02:45:5b:aa:3f:59:4f:b0:bf:e4:92:bc:89:7c: e1:a2:46:3d:b3:a6:df:f2:3a:ac:77:44:f2:6c:84: 04:94:6b:b7:cd:36:e3:b5:0f:ff:9c:a0:82:f1:2f: 87:c9:5e:83:cf:70:3e:f8:c9:ce:87:65:d5:6f:48: 6f:fc:39:00:59:fa:96:20:34:3e:34:6d:03:41:8a: 89:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:29:86:66:82:C7:95:1E:EF:08:D4:A7:A9:E5:FF:BB:91:F9:8E:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/c6e6b201-872c-3a94-87a1-dd20073fe2cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl X509v3 Authority Key Identifier: keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer sbgp-ipAddrBlock: critical IPv4: 66.33.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:bf:a9:84:54:d9:5b:f7:45:ec:58:1b:0a:77:63:e0:97:d5: f8:7d:7a:9d:94:05:d8:a7:ee:b9:32:d3:19:8b:93:a1:67:b6: 8d:80:e4:75:2b:1e:c1:6f:62:60:af:90:1a:fc:12:b3:39:a8: 44:c5:1a:af:3e:b5:c8:0b:da:76:07:06:c8:dc:23:37:54:3c: 25:8a:6a:c4:2a:14:4b:59:a6:cd:7c:65:36:a4:4e:de:4d:e5: 33:eb:ba:2a:8e:f1:7f:53:df:70:83:8b:3f:95:ef:d9:56:ff: 70:80:05:25:df:17:f6:c4:07:0d:71:ab:b0:a2:9c:09:67:a0: 45:a5:c8:1b:e8:0d:7e:a6:cc:14:11:99:ae:b6:87:2e:11:30: d8:1b:91:c0:fa:60:dc:54:6d:98:b4:ed:0f:c2:a9:1f:89:4f: 46:89:e0:11:ed:b5:c6:0d:1a:19:43:e6:0d:97:ae:71:07:87: 4f:2a:b9:02:96:32:ac:2e:6c:a0:a0:67:25:00:a9:51:0d:90: dc:92:83:2a:e8:76:8c:36:3d:6d:47:a2:47:c1:e4:1c:bf:4e: 9d:93:68:e2:58:15:6c:1a:c0:1e:71:fb:14:ff:e9:d4:db:44: d0:fc:25:e8:a3:e2:37:c8:1d:ca:e9:43:f6:f5:7a:82:25:fa: 2c:93:28:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+4Z0LjYVU7xHCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5Y2U4YmUtN2JiZS00MThiLWI3OGUtNDJkZTg5NDEz M2E1MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk OGI0YjgyNTctNWVlMC00MWYwLWE1NzQtZTEwNzNmNGRlOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjL14ZmuSMzS7rqRbKQ3gxBUmT19OmNs186o T97xqvJ0RqW/z+oyVpti3/hv8Vqstjc/4YFlNz9KOMSEQ1u9V3XEbSKq5+SFVibM vVHcUUp2ZWAFbJL3zEHOUlj7DMfk1EdyrCaxhdsVk5Niv4vdTfqTRs9modJ7eCjf ErNZgEPBfYcPmjh0SfWmQc6BBl6wR+NhNGnoOg8ZJJDoApPJsCpt4LFserG6SuHx oBhbcnkcFhJfAkVbqj9ZT7C/5JK8iXzhokY9s6bf8jqsd0TybIQElGu3zTbjtQ// nKCC8S+HyV6Dz3A++MnOh2XVb0hv/DkAWfqWIDQ+NG0DQYqJtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcphmaCx5Ue7wjUp6nl/7uR+Y44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjlj ZThiZS03YmJlLTQxOGItYjc4ZS00MmRlODk0MTMzYTUvYzZlNmIyMDEtODcyYy0z YTk0LTg3YTEtZGQyMDA3M2ZlMmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGY5Y2U4YmUtN2JiZS00MThiLWI3 OGUtNDJkZTg5NDEzM2E1LzBmOWNlOGJlLTdiYmUtNDE4Yi1iNzhlLTQyZGU4OTQx MzNhNS5jcmwwHwYDVR0jBBgwFoAUyou/QT84PnG2tRXF0Ztn1tRgssYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjljZThiZS03YmJlLTQxOGItYjc4ZS00MmRl ODk0MTMzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu/qYRU2Vv3RexYGwp3Y+CX1fh9ep2UBdin7rky0xmLk6Fnto2A5HUr HsFvYmCvkBr8ErM5qETFGq8+tcgL2nYHBsjcIzdUPCWKasQqFEtZps18ZTakTt5N 5TPruiqO8X9T33CDiz+V79lW/3CABSXfF/bEBw1xq7CinAlnoEWlyBvoDX6mzBQR ma62hy4RMNgbkcD6YNxUbZi07Q/CqR+JT0aJ4BHttcYNGhlD5g2XrnEHh08quQKW MqwubKCgZyUAqVENkNySgyrodow2PW1HokfB5By/Tp2TaOJYFWwawB5x+xT/6dTb RND8Jeij4jfIHcrpQ/b1eoIl+iyTKEc= -----END CERTIFICATE-----Generated at Fri Apr 4 19:16:21 2025 by rpki-client