$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/be06885a-4b98-309e-9449-a3394506a19d.roa File: be06885a-4b98-309e-9449-a3394506a19d.roa (raw, json) Hash identifier: bafDKV71naov+Jn8zMHwOHaSDtijUVyXXiPNwAy3L3k= Subject key identifier: C4:17:C1:82:66:42:AA:B2:D9:79:A8:C2:19:50:D0:BA:45:19:B2:D2 Certificate issuer: /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Certificate serial: 010D0C9F43285848DD3BA8B8AFF1EAACC356E180 Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/be06885a-4b98-309e-9449-a3394506a19d.roa Signing time: Thu 13 Feb 2025 02:00:40 +0000 ROA not before: Thu 13 Feb 2025 02:00:40 +0000 ROA not after: Wed 14 May 2025 01:00:40 +0000 asID: 400610 IP address blocks: 66.219.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dd:3b:a8:b8:af:f1:ea:ac:c3:56:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Validity Not Before: Feb 13 02:00:40 2025 GMT Not After : May 14 01:00:40 2025 GMT Subject: CN=4aae20cd-b84a-4d10-924d-74d50afe13ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:31:8a:46:4f:d2:24:f1:32:2c:ec:64:28: c5:ae:0f:2a:52:f2:67:6f:07:f0:e3:db:f3:c2:4e: d7:25:cd:ff:26:49:97:69:12:d8:67:56:3c:b8:d0: f0:f6:1c:ba:98:c4:8f:65:32:7a:69:dc:c5:18:3c: d0:09:56:f3:90:67:60:da:53:fe:60:e4:33:3c:96: 7e:18:b4:35:30:88:29:7b:0f:3c:c2:8b:dc:70:a8: e7:7a:5f:37:00:4f:a3:bb:23:6a:b4:1a:e5:af:18: 14:27:88:5a:08:9a:a5:7e:29:f5:a5:72:50:27:32: 69:5b:22:dc:59:22:fa:12:37:33:a2:e2:ca:a0:fa: 08:18:d2:9e:fe:a7:d4:55:19:81:f6:f3:c2:2e:db: 06:14:ca:1d:47:bc:c7:10:43:3e:9b:93:75:c7:5a: b0:be:82:fa:a7:59:32:f8:65:31:15:93:c0:e2:bd: 5c:16:1f:11:03:2c:1c:03:d1:a6:bc:cc:a4:00:8c: 53:85:5f:3b:60:c9:1a:0a:20:23:27:dd:79:e3:96: 81:b3:79:5f:40:8a:7d:63:84:dc:c3:a7:e9:a4:ee: 57:bb:7f:a7:ca:4f:de:1e:6f:16:dd:f6:6e:fc:66: 54:82:c8:98:4b:f1:b4:bd:ca:3f:81:e0:97:85:f8: 18:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:17:C1:82:66:42:AA:B2:D9:79:A8:C2:19:50:D0:BA:45:19:B2:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/be06885a-4b98-309e-9449-a3394506a19d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl X509v3 Authority Key Identifier: keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer sbgp-ipAddrBlock: critical IPv4: 66.219.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:80:f3:1a:f8:22:e0:7b:66:54:96:c5:73:4e:8d:fd:97:86: 88:a4:b3:a3:7d:66:44:d9:72:1f:39:7c:45:fa:d5:65:1f:b0: 21:6c:d7:6e:35:19:ac:16:53:b9:3c:13:15:5b:c6:66:27:1f: a6:b0:b3:5e:18:78:a9:b4:50:77:3d:2d:13:9a:e4:36:2c:88: 57:f3:a6:20:b2:b0:1a:76:8b:3d:c5:01:a1:ec:50:8a:bd:f5: 9c:7d:f5:89:c2:11:e5:91:5f:b9:36:4c:ca:da:34:a9:37:54: 41:04:ed:54:17:07:b4:e3:f4:9c:87:c1:00:ab:0d:03:73:86: 1b:cd:b4:a5:78:44:cc:a8:06:9b:9b:c8:18:da:77:90:e9:12: 49:12:69:20:bd:f6:99:5b:08:b0:a3:53:a9:da:8d:d6:79:ee: a5:fc:66:f8:d8:d9:ef:6c:7f:fd:74:8d:b7:bb:b0:35:6b:aa: bf:f5:c8:5b:a0:5a:b8:93:b2:5d:eb:6d:da:b4:67:9a:e0:7b: 7d:00:70:dd:fd:fd:bf:a3:ad:3c:dd:d0:43:2b:e5:6a:6b:f7: 0e:e2:bd:a8:6d:ad:fa:21:0e:01:61:74:e6:45:53:e6:56:da: 03:51:fe:76:93:c8:d3:cb:4c:3e:6e:25:7b:65:e0:17:1d:17: 67:d7:a4:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjdO6i4r/HqrMNW4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm MmUzMB4XDTI1MDIxMzAyMDA0MFoXDTI1MDUxNDAxMDA0MFowLzEtMCsGA1UEAxMk NGFhZTIwY2QtYjg0YS00ZDEwLTkyNGQtNzRkNTBhZmUxM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EMxikZP0iTxMizsZCjFrg8qUvJnbwfw49vz wk7XJc3/JkmXaRLYZ1Y8uNDw9hy6mMSPZTJ6adzFGDzQCVbzkGdg2lP+YOQzPJZ+ GLQ1MIgpew88wovccKjnel83AE+juyNqtBrlrxgUJ4haCJqlfin1pXJQJzJpWyLc WSL6EjczouLKoPoIGNKe/qfUVRmB9vPCLtsGFModR7zHEEM+m5N1x1qwvoL6p1ky +GUxFZPA4r1cFh8RAywcA9GmvMykAIxThV87YMkaCiAjJ91545aBs3lfQIp9Y4Tc w6fppO5Xu3+nyk/eHm8W3fZu/GZUgsiYS/G0vco/geCXhfgY+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQXwYJmQqqy2XmowhlQ0LpFGbLSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1 NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvYmUwNjg4NWEtNGI5OC0z MDllLTk0NDktYTMzOTQ1MDZhMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5 YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4 ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyA8xr4IuB7ZlSWxXNOjf2Xhoiks6N9ZkTZch85fEX61WUfsCFs1241 GawWU7k8ExVbxmYnH6aws14YeKm0UHc9LROa5DYsiFfzpiCysBp2iz3FAaHsUIq9 9Zx99YnCEeWRX7k2TMraNKk3VEEE7VQXB7Tj9JyHwQCrDQNzhhvNtKV4RMyoBpub yBjad5DpEkkSaSC99plbCLCjU6najdZ57qX8ZvjY2e9sf/10jbe7sDVrqr/1yFug WriTsl3rbdq0Z5rge30AcN39/b+jrTzd0EMr5Wpr9w7ivahtrfohDgFhdOZFU+ZW 2gNR/naTyNPLTD5uJXtl4BcdF2fXpEQ= -----END CERTIFICATE-----Generated at Fri Apr 11 21:18:50 2025 by rpki-client