$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/9fd8dd06-2fd1-32c8-b4e9-3d3956e52e1e.roa File: 9fd8dd06-2fd1-32c8-b4e9-3d3956e52e1e.roa (raw, json) Hash identifier: zzu85luw/Lp0hhGxQmeGHDe4V+Q0wB8Y96w6KK0bOAE= Subject key identifier: AC:B4:AE:65:94:94:0A:01:2E:78:19:37:33:CF:0E:D0:0B:74:6F:3D Certificate issuer: /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Certificate serial: 010D0C9F43285848DD3BA8C97B31448199C89180 Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/9fd8dd06-2fd1-32c8-b4e9-3d3956e52e1e.roa Signing time: Thu 13 Feb 2025 02:00:40 +0000 ROA not before: Thu 13 Feb 2025 02:00:40 +0000 ROA not after: Wed 14 May 2025 01:00:40 +0000 asID: 400610 IP address blocks: 66.219.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dd:3b:a8:c9:7b:31:44:81:99:c8:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Validity Not Before: Feb 13 02:00:40 2025 GMT Not After : May 14 01:00:40 2025 GMT Subject: CN=83aa422f-b7ce-4098-b186-9717975bc4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:08:c2:f0:cc:8d:a7:07:2a:32:1f:72:62:83: ec:9a:cf:bc:52:7e:cd:0a:00:f1:b0:54:cb:ed:4c: e8:bb:aa:ef:d6:03:0b:ce:c9:52:46:ab:61:4e:d0: b6:d0:ad:c0:c4:da:da:1c:d8:e2:82:4e:4b:22:ef: 12:c2:86:ca:ec:54:43:6b:ad:c9:7e:29:ad:52:db: 20:da:59:23:ff:8c:15:92:fb:b4:48:36:c0:a0:7b: 09:65:e3:57:cd:11:e9:0d:2e:94:99:c7:47:e4:7a: aa:d2:ac:0e:f6:00:c4:9d:7f:9a:97:b5:ef:b4:36: e4:78:dd:fe:65:49:87:7d:ad:d9:d7:f5:17:57:cf: 82:73:a9:79:e5:c4:ba:c1:fb:3a:bb:25:3c:5b:70: fc:e7:fd:86:bb:bd:a4:5b:64:69:11:b2:82:27:64: 30:f3:ab:7d:19:a6:1b:38:87:61:ca:47:1c:90:8b: 64:cb:bf:ef:b9:58:a4:a8:3c:49:d3:7f:4f:1e:10: 29:40:16:e6:7e:32:80:a1:83:42:e6:a1:0a:67:80: d7:a9:e8:60:05:e1:87:d4:96:c5:1e:55:5d:11:8b: 80:bc:4a:48:8e:3a:67:65:ed:3d:55:5a:85:4f:b7: ff:c2:43:69:ac:0f:9a:ab:94:92:ec:1b:1e:52:06: 0d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B4:AE:65:94:94:0A:01:2E:78:19:37:33:CF:0E:D0:0B:74:6F:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/9fd8dd06-2fd1-32c8-b4e9-3d3956e52e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl X509v3 Authority Key Identifier: keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer sbgp-ipAddrBlock: critical IPv4: 66.219.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c2:0d:4a:d2:07:d0:09:40:68:40:39:16:d0:22:25:9a:5e: b6:05:19:67:6c:df:ca:d4:32:e6:00:69:11:9c:b0:c3:4a:37: 51:ef:fb:09:2a:86:59:7b:44:99:de:d0:fe:99:95:2f:09:e7: 04:27:88:68:00:4d:ca:47:f6:29:e5:85:24:3d:9e:c0:cd:ad: 03:05:5a:40:4f:86:8f:2a:3d:e9:9e:26:07:17:a6:62:31:8d: a6:70:e4:ab:e5:3b:37:67:9a:c6:8e:54:f9:74:31:54:d0:fc: 77:05:a7:a4:33:6a:de:3a:75:84:b2:fe:00:7b:bd:37:53:f3: fb:aa:2d:ed:02:22:0e:59:d3:fe:7f:16:c0:1f:e4:e0:87:0e: 4d:07:96:3e:fc:8f:36:c2:ae:2d:b7:5b:bb:65:35:8a:18:45: 68:c7:1b:45:c5:c7:7d:2a:6a:93:09:6b:8a:a7:be:a9:11:a3: f4:20:aa:42:27:a9:43:21:cb:01:27:c4:60:1d:38:96:32:5c: 98:a3:c1:ee:2d:c0:69:b4:6a:32:cb:44:67:28:8a:28:6f:61: b9:1c:a4:f2:d3:91:51:95:31:e0:9b:0a:4c:19:d3:fa:f9:76: 1f:9f:bf:66:fc:60:69:c6:5a:4a:43:90:77:ac:58:17:c0:38: 7b:14:e3:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjdO6jJezFEgZnIkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm MmUzMB4XDTI1MDIxMzAyMDA0MFoXDTI1MDUxNDAxMDA0MFowLzEtMCsGA1UEAxMk ODNhYTQyMmYtYjdjZS00MDk4LWIxODYtOTcxNzk3NWJjNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gjC8MyNpwcqMh9yYoPsms+8Un7NCgDxsFTL 7Uzou6rv1gMLzslSRqthTtC20K3AxNraHNjigk5LIu8SwobK7FRDa63JfimtUtsg 2lkj/4wVkvu0SDbAoHsJZeNXzRHpDS6UmcdH5Hqq0qwO9gDEnX+al7XvtDbkeN3+ ZUmHfa3Z1/UXV8+Cc6l55cS6wfs6uyU8W3D85/2Gu72kW2RpEbKCJ2Qw86t9GaYb OIdhykcckItky7/vuVikqDxJ039PHhApQBbmfjKAoYNC5qEKZ4DXqehgBeGH1JbF HlVdEYuAvEpIjjpnZe09VVqFT7f/wkNprA+aq5SS7BseUgYNmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKy0rmWUlAoBLngZNzPPDtALdG89MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1 NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvOWZkOGRkMDYtMmZkMS0z MmM4LWI0ZTktM2QzOTU2ZTUyZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5 YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4 ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQttwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbCDUrSB9AJQGhAORbQIiWaXrYFGWds38rUMuYAaRGcsMNKN1Hv+wkq hll7RJne0P6ZlS8J5wQniGgATcpH9inlhSQ9nsDNrQMFWkBPho8qPemeJgcXpmIx jaZw5KvlOzdnmsaOVPl0MVTQ/HcFp6Qzat46dYSy/gB7vTdT8/uqLe0CIg5Z0/5/ FsAf5OCHDk0Hlj78jzbCri23W7tlNYoYRWjHG0XFx30qapMJa4qnvqkRo/QgqkIn qUMhywEnxGAdOJYyXJijwe4twGm0ajLLRGcoiihvYbkcpPLTkVGVMeCbCkwZ0/r5 dh+fv2b8YGnGWkpDkHesWBfAOHsU41s= -----END CERTIFICATE-----Generated at Fri Apr 11 21:05:06 2025 by rpki-client