$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/0c043f59-c6a6-323f-accd-6fe59c46880d.roa File: 0c043f59-c6a6-323f-accd-6fe59c46880d.roa (raw, json) Hash identifier: zRv/aZpIZSVJs4obp/pN6khwaEIOwavgMV5fLqY7biI= Subject key identifier: 7B:3B:BF:B0:2F:9B:07:83:E9:40:14:4E:7C:4E:94:3B:F5:07:F1:90 Certificate issuer: /CN=6e10601c-e280-4510-9d84-b6d2b02b8446 Certificate serial: 010D0C9F43285849350E9606E2FAB2649C3B6800 Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/0c043f59-c6a6-323f-accd-6fe59c46880d.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 393397 IP address blocks: 66.150.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:96:06:e2:fa:b2:64:9c:3b:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=6e6639bb-55e2-4f2a-9e15-8fa32d99d6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1d:42:a4:71:74:35:0e:87:31:66:12:b7:f9: a3:6b:3b:15:ac:c7:64:12:07:0a:c1:c9:4d:c9:a3: 13:68:b5:a5:36:86:59:0a:89:cc:59:5d:15:56:4b: c2:09:d2:f9:9f:ef:53:16:c2:82:05:fb:14:6f:5f: e8:04:37:f0:da:c7:dc:17:61:40:44:fe:7c:1f:60: 69:e8:62:42:11:27:7d:9f:ff:c5:b5:99:37:46:91: 82:9c:f8:3e:a9:09:22:e9:66:c6:a4:aa:48:e5:f7: 9f:82:b8:ff:f4:3c:93:e3:e3:83:ab:ef:b7:66:bb: fc:f4:5a:e6:f6:37:f0:a2:6e:3f:61:16:37:76:e2: c3:58:2c:48:2e:8c:c2:06:f7:32:89:ef:10:3d:70: 77:be:b1:4e:9c:90:51:b2:57:67:ee:f2:13:d1:84: dd:2d:21:00:5c:38:38:c7:08:43:d1:1a:76:db:84: c0:b4:50:9a:bb:9e:0c:1b:66:e8:61:29:62:cc:a3: 7e:70:2c:df:05:17:9b:1f:86:80:39:a6:c8:93:3a: 03:f6:63:64:da:93:b9:4a:d0:69:32:c3:75:6c:d9: 38:8e:1b:90:b3:f8:7b:f5:ce:49:97:12:84:fd:56: fd:a7:80:9b:80:d5:2b:4a:c9:fc:07:e5:6a:4d:9e: cc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3B:BF:B0:2F:9B:07:83:E9:40:14:4E:7C:4E:94:3B:F5:07:F1:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/0c043f59-c6a6-323f-accd-6fe59c46880d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl X509v3 Authority Key Identifier: keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer sbgp-ipAddrBlock: critical IPv4: 66.150.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:5b:e8:0b:d2:15:c7:82:ba:03:55:1a:e4:06:07:a3:23:78: 61:af:06:71:cb:c7:84:bb:5a:bb:64:69:b6:11:bd:0d:bb:3a: ba:3d:02:8c:34:7f:77:c6:06:ee:87:57:b1:91:ed:5f:a8:bc: 0a:3b:5d:3d:64:4b:02:4b:15:86:24:d2:98:6f:17:9d:43:36: 7e:b5:99:3e:c0:ad:2d:71:7c:9d:fb:7e:73:ec:26:28:ce:fb: 01:35:df:87:b9:8e:86:7a:91:40:b4:37:fa:27:9d:e4:52:9f: a5:72:68:8c:6d:85:71:d9:c7:9f:d7:23:ac:df:a9:cc:57:56: b7:b4:14:69:71:e8:08:2e:d3:7b:d7:d0:64:86:cd:a4:7d:36: 37:be:37:7a:42:e7:62:2f:f8:61:82:e1:f8:b3:9b:59:24:27: ae:43:32:72:74:c4:f0:41:d8:02:b5:ef:9b:11:76:fb:5c:7b: 54:c7:90:38:28:2c:2e:47:05:25:c1:8f:8d:65:a7:28:17:ad: 65:a1:58:5f:c9:4f:35:ea:98:b7:f3:2e:b6:6d:b8:07:98:a5: 5a:93:c6:f8:16:78:27:35:c6:28:d7:ed:fb:05:cb:2d:94:85: 40:57:f3:0b:40:eb:e2:61:c4:be:aa:ee:82:dd:1e:e1:10:79: 97:65:1c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpYG4vqyZJw7aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmUxMDYwMWMtZTI4MC00NTEwLTlkODQtYjZkMmIwMmI4 NDQ2MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NmU2NjM5YmItNTVlMi00ZjJhLTllMTUtOGZhMzJkOTlkNmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9h1CpHF0NQ6HMWYSt/mjazsVrMdkEgcKwclN yaMTaLWlNoZZConMWV0VVkvCCdL5n+9TFsKCBfsUb1/oBDfw2sfcF2FARP58H2Bp 6GJCESd9n//FtZk3RpGCnPg+qQki6WbGpKpI5fefgrj/9DyT4+ODq++3Zrv89Frm 9jfwom4/YRY3duLDWCxILozCBvcyie8QPXB3vrFOnJBRsldn7vIT0YTdLSEAXDg4 xwhD0Rp224TAtFCau54MG2boYSlizKN+cCzfBRebH4aAOabIkzoD9mNk2pO5StBp MsN1bNk4jhuQs/h79c5JlxKE/Vb9p4CbgNUrSsn8B+VqTZ7MDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHs7v7AvmweD6UAUTnxOlDv1B/GQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZTEw NjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQyYjAyYjg0NDYvMGMwNDNmNTktYzZhNi0z MjNmLWFjY2QtNmZlNTljNDY4ODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmUxMDYwMWMtZTI4MC00NTEwLTlk ODQtYjZkMmIwMmI4NDQ2LzZlMTA2MDFjLWUyODAtNDUxMC05ZDg0LWI2ZDJiMDJi ODQ0Ni5jcmwwHwYDVR0jBBgwFoAUTu1El1iaHDmaM7ilgAeW14M6ikQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82ZTEwNjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQy YjAyYjg0NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQpZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdb6AvSFceCugNVGuQGB6MjeGGvBnHLx4S7WrtkabYRvQ27Oro9Aow0 f3fGBu6HV7GR7V+ovAo7XT1kSwJLFYYk0phvF51DNn61mT7ArS1xfJ37fnPsJijO +wE134e5joZ6kUC0N/onneRSn6VyaIxthXHZx5/XI6zfqcxXVre0FGlx6Agu03vX 0GSGzaR9Nje+N3pC52Iv+GGC4fizm1kkJ65DMnJ0xPBB2AK175sRdvtce1THkDgo LC5HBSXBj41lpygXrWWhWF/JTzXqmLfzLrZtuAeYpVqTxvgWeCc1xijX7fsFyy2U hUBX8wtA6+JhxL6q7oLdHuEQeZdlHBE= -----END CERTIFICATE-----Generated at Thu Apr 17 22:34:54 2025 by rpki-client