$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/8804544c-f9cd-38be-bc33-4778fc22dce7.roa File: 8804544c-f9cd-38be-bc33-4778fc22dce7.roa (raw, json) Hash identifier: ybBehZSOwVKmCLQEwQW3YXG5PZm+rToLNpjmhv5yPEs= Subject key identifier: BC:1F:CA:00:63:6D:AC:F9:05:72:59:4A:DB:E1:8C:08:8A:0B:BB:01 Certificate issuer: /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170 Certificate serial: 010D0C9F4328584967EC231A5A7588908C0BDA00 Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/8804544c-f9cd-38be-bc33-4778fc22dce7.roa Signing time: Thu 03 Apr 2025 18:17:52 +0000 ROA not before: Thu 03 Apr 2025 18:17:52 +0000 ROA not after: Wed 02 Jul 2025 18:17:52 +0000 asID: 14618 IP address blocks: 66.235.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:ec:23:1a:5a:75:88:90:8c:0b:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170 Validity Not Before: Apr 3 18:17:52 2025 GMT Not After : Jul 2 18:17:52 2025 GMT Subject: CN=8cf690c9-4758-4b47-9f1e-af8a51fabceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:91:b8:69:1e:89:11:2e:02:60:82:2d:9f: 77:2b:19:69:4f:01:d8:52:fe:2e:cc:9e:a2:cf:93: 50:82:6b:4c:e6:97:21:fe:fe:b2:b4:18:2d:3c:ce: 04:75:68:2f:8d:5c:f5:bd:6b:ea:fd:47:44:90:6d: 40:ab:01:2a:d4:8e:41:e9:fc:73:1f:6e:73:2f:e1: 69:0e:d5:b6:14:49:2e:0f:54:14:b0:8a:2b:7c:20: db:dd:73:8f:84:80:2b:ce:7c:c4:54:69:cd:b0:21: f2:7f:6c:0a:de:c5:74:ee:27:ba:42:b9:e6:b9:3b: 7c:02:fa:5f:37:0b:82:c2:e0:b6:2d:21:9f:58:08: f0:a0:de:51:84:ed:52:40:9f:44:8b:ee:6f:f9:2b: 24:91:04:8d:a5:3f:85:09:ab:91:cf:25:e6:4f:1a: cf:dd:6b:d6:0d:83:0d:88:4b:76:79:cc:6f:28:5d: 7b:d9:66:59:72:a8:b4:41:6a:70:99:fd:57:b7:ae: 94:c2:dc:9c:6f:83:03:e8:18:f1:0e:08:24:d7:c8: 72:ff:67:5e:11:ea:f0:2e:89:08:10:a1:33:41:75: 53:f8:b7:1e:8d:cf:d2:dd:6c:30:28:f0:bc:c2:d8: 78:15:f4:fb:94:8d:40:70:b1:07:45:51:df:ae:18: 16:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1F:CA:00:63:6D:AC:F9:05:72:59:4A:DB:E1:8C:08:8A:0B:BB:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/8804544c-f9cd-38be-bc33-4778fc22dce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl X509v3 Authority Key Identifier: keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer sbgp-ipAddrBlock: critical IPv4: 66.235.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:26:99:8b:d4:5c:60:a6:e6:7c:d5:45:d8:72:b2:01:35:5c: 4f:88:dc:39:64:76:86:42:57:b1:8e:7d:66:f8:b6:c0:1b:64: 2d:64:1c:7b:e8:69:58:9e:7e:65:83:bd:87:46:4f:7f:7b:96: 5e:28:34:5d:3e:ff:3b:f6:4d:49:34:b1:84:dd:5e:d8:5d:ff: 55:a6:10:94:61:1c:75:3d:e7:40:06:e3:8a:0f:4f:a0:90:bc: 94:0e:f2:a9:fb:82:85:20:8a:56:3e:f3:3c:ee:e8:77:76:1a: 7b:90:43:d2:7c:65:73:a5:0e:87:60:39:ee:f7:43:bc:50:4c: 2d:1b:74:b7:55:ca:ad:8f:e0:6d:3c:9d:a0:9f:a8:fa:2c:8f: ed:f8:bb:41:be:52:6b:c8:50:ba:93:f0:2b:dc:55:2a:04:d8: 04:20:a5:f8:31:bf:8c:50:e8:d0:d3:2b:09:6b:45:b2:ae:bb: c8:ad:ac:4b:2b:23:8e:ab:2f:37:8a:fc:05:a3:31:d0:56:59: 8c:ae:fc:35:bf:59:dc:f6:43:8d:38:a6:0d:e0:f5:a4:48:5b: f4:64:d5:01:db:33:23:77:e0:4e:10:c4:09:37:e3:e1:dd:d7: db:20:4c:53:d5:e4:e4:1a:f2:54:8f:0a:26:44:b6:46:04:77: a3:b8:92:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEln7CMaWnWIkIwL2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ3MjJiMjAtZjI4OC00YmQ4LWJmYzctNGViN2VhZDlk MTcwMB4XDTI1MDQwMzE4MTc1MloXDTI1MDcwMjE4MTc1MlowLzEtMCsGA1UEAxMk OGNmNjkwYzktNDc1OC00YjQ3LTlmMWUtYWY4YTUxZmFiY2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPSRuGkeiREuAmCCLZ93KxlpTwHYUv4uzJ6i z5NQgmtM5pch/v6ytBgtPM4EdWgvjVz1vWvq/UdEkG1AqwEq1I5B6fxzH25zL+Fp DtW2FEkuD1QUsIorfCDb3XOPhIArznzEVGnNsCHyf2wK3sV07ie6QrnmuTt8Avpf NwuCwuC2LSGfWAjwoN5RhO1SQJ9Ei+5v+SskkQSNpT+FCauRzyXmTxrP3WvWDYMN iEt2ecxvKF172WZZcqi0QWpwmf1Xt66Uwtycb4MD6BjxDggk18hy/2deEerwLokI EKEzQXVT+Lcejc/S3WwwKPC8wth4FfT7lI1AcLEHRVHfrhgWQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwfygBjbaz5BXJZStvhjAiKC7sBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDcy MmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3ZWFkOWQxNzAvODgwNDU0NGMtZjljZC0z OGJlLWJjMzMtNDc3OGZjMjJkY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ3MjJiMjAtZjI4OC00YmQ4LWJm YzctNGViN2VhZDlkMTcwL2ZkNzIyYjIwLWYyODgtNGJkOC1iZmM3LTRlYjdlYWQ5 ZDE3MC5jcmwwHwYDVR0jBBgwFoAUD6H2SRALtv19Wb/tcfGsC09Uy7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZDcyMmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3 ZWFkOWQxNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQutyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkmmYvUXGCm5nzVRdhysgE1XE+I3DlkdoZCV7GOfWb4tsAbZC1kHHvo aViefmWDvYdGT397ll4oNF0+/zv2TUk0sYTdXthd/1WmEJRhHHU950AG44oPT6CQ vJQO8qn7goUgilY+8zzu6Hd2GnuQQ9J8ZXOlDodgOe73Q7xQTC0bdLdVyq2P4G08 naCfqPosj+34u0G+UmvIULqT8CvcVSoE2AQgpfgxv4xQ6NDTKwlrRbKuu8itrEsr I46rLzeK/AWjMdBWWYyu/DW/Wdz2Q404pg3g9aRIW/Rk1QHbMyN34E4QxAk34+Hd 19sgTFPV5OQa8lSPCiZEtkYEd6O4kmM= -----END CERTIFICATE-----Generated at Fri Apr 4 23:35:52 2025 by rpki-client