$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/53d2a0b6-9396-30a3-8761-e830aff1e75f.roa File: 53d2a0b6-9396-30a3-8761-e830aff1e75f.roa (raw, json) Hash identifier: NTbjeXTFjY3rSds+G+nKU2GNVNj8q1+tv+Z5+D175m8= Subject key identifier: C8:9B:A3:5F:8D:69:7D:FB:9A:56:3D:07:C5:FA:B0:79:94:CF:2F:E9 Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87 Certificate serial: 010D0C9F432858497DFA9192D226CD3C2EBE7380 Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/53d2a0b6-9396-30a3-8761-e830aff1e75f.roa Signing time: Fri 11 Apr 2025 15:54:44 +0000 ROA not before: Fri 11 Apr 2025 15:54:44 +0000 ROA not after: Thu 10 Jul 2025 15:54:44 +0000 asID: 199527 IP address blocks: 66.17.130.0/23 maxlen: 24 66.17.132.0/22 maxlen: 24 66.17.140.0/24 maxlen: 24 66.17.143.0/24 maxlen: 24 66.17.213.0/24 maxlen: 24 66.17.214.0/23 maxlen: 24 66.17.220.0/24 maxlen: 24 66.17.222.0/23 maxlen: 24 66.17.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:fa:91:92:d2:26:cd:3c:2e:be:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87 Validity Not Before: Apr 11 15:54:44 2025 GMT Not After : Jul 10 15:54:44 2025 GMT Subject: CN=04cc9fa7-1a68-44f7-9e66-d105a1306c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:f6:a7:34:22:56:57:1d:d7:f6:37:7b:49: 1c:f2:5e:83:d1:21:40:72:b0:6c:8a:d1:ff:27:e1: 95:ec:ae:f5:99:8b:89:c8:e5:22:4b:ef:b7:c8:1f: 95:76:f9:bb:36:f8:33:47:bf:5c:90:4a:62:08:60: f7:17:4c:32:dc:27:c3:5d:17:7c:98:eb:93:8f:00: 17:ce:af:87:77:97:4a:aa:01:54:df:20:4d:4c:2c: 5e:6a:d4:c6:29:58:19:4a:43:51:78:b1:e5:32:56: e8:7d:12:10:c4:a8:3a:6f:16:5f:ff:f5:58:00:5a: 20:b4:ab:de:be:15:c9:7d:7c:30:81:79:a1:4e:5b: 1f:d5:6e:d1:f7:ae:7d:a7:87:02:69:fd:1d:18:fe: 31:e8:0b:f5:49:2c:38:69:d0:1f:74:94:4e:00:3c: 9f:97:d3:e4:09:b1:61:97:f5:82:ae:3f:04:95:ef: c8:c5:e4:bc:7d:a1:23:49:56:d0:29:05:09:bd:38: 4f:3d:1b:94:82:05:7f:f3:47:ae:9d:29:a5:59:e3: d1:2c:8e:6f:60:f9:6d:34:4e:81:a0:55:21:28:f2: a0:57:5f:3d:d1:d3:9a:7a:07:f9:6a:58:16:e9:62: 34:41:14:3d:12:ee:79:a0:9c:5d:63:a1:df:28:27: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9B:A3:5F:8D:69:7D:FB:9A:56:3D:07:C5:FA:B0:79:94:CF:2F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/53d2a0b6-9396-30a3-8761-e830aff1e75f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl X509v3 Authority Key Identifier: keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer sbgp-ipAddrBlock: critical IPv4: 66.17.130.0-66.17.135.255 66.17.140.0/24 66.17.143.0/24 66.17.213.0-66.17.215.255 66.17.220.0/24 66.17.222.0/23 66.17.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:c2:74:1c:b9:a7:94:5b:73:15:b3:55:6a:5e:37:1c:ed:a0: c9:2d:1e:e0:19:58:4c:f0:b1:dd:df:ed:a1:0a:36:56:24:47: ad:a0:78:cc:f2:cc:eb:44:e0:c9:18:04:1b:0f:c7:78:38:ab: d9:4d:eb:4e:8a:d3:a5:4f:c1:00:cb:b8:72:e6:af:c1:19:4b: bb:3f:49:e0:2d:ed:9d:ff:ac:2e:81:be:de:24:66:cc:df:6e: ef:c9:25:45:ea:ba:b4:7c:a3:d6:26:7d:e5:5f:89:7a:ee:41: 3b:52:59:d2:72:53:63:bd:d1:cb:84:e5:42:eb:2d:80:3e:e6: 6b:f1:97:eb:f3:8d:3e:21:e7:cb:ba:71:48:f9:39:6c:19:02: 07:7a:27:11:07:fe:9f:46:df:5f:2d:ed:fb:31:1f:38:92:85: ad:01:56:19:f7:ee:b7:97:4b:c4:78:6f:49:03:ed:5a:e9:da: 9f:04:63:a3:dd:b4:2c:44:c1:3d:d5:84:62:31:fb:12:f3:3a: 1c:da:8c:65:fe:b8:0c:36:de:da:9e:59:7f:5c:4e:d0:43:67: df:0c:6a:4a:ea:55:cd:5c:55:a3:6c:30:72:14:7f:79:c5:f5: 2f:cf:2f:b4:49:8d:bc:2d:dd:1e:02:f8:a8:aa:a9:03:26:7e: ae:f3:f2:a2 -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWEl9+pGS0ibNPC6+c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiNTkwZTgtMzBjNS00OTk3LWJiZjMtZjJmZTEwYTI5 ZTg3MB4XDTI1MDQxMTE1NTQ0NFoXDTI1MDcxMDE1NTQ0NFowLzEtMCsGA1UEAxMk MDRjYzlmYTctMWE2OC00NGY3LTllNjYtZDEwNWExMzA2YzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnn2pzQiVlcd1/Y3e0kc8l6D0SFAcrBsitH/ J+GV7K71mYuJyOUiS++3yB+Vdvm7NvgzR79ckEpiCGD3F0wy3CfDXRd8mOuTjwAX zq+Hd5dKqgFU3yBNTCxeatTGKVgZSkNReLHlMlbofRIQxKg6bxZf//VYAFogtKve vhXJfXwwgXmhTlsf1W7R9659p4cCaf0dGP4x6Av1SSw4adAfdJROADyfl9PkCbFh l/WCrj8Ele/IxeS8faEjSVbQKQUJvThPPRuUggV/80eunSmlWePRLI5vYPltNE6B oFUhKPKgV1890dOaegf5algW6WI0QRQ9Eu55oJxdY6HfKCdW4QIDAQABo4IDiTCC A4UwHQYDVR0OBBYEFMibo1+NaX37mlY9B8X6sHmUzy/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1 OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZlMTBhMjllODcvNTNkMmEwYjYtOTM5Ni0z MGEzLTg3NjEtZTgzMGFmZjFlNzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNiNTkwZTgtMzBjNS00OTk3LWJi ZjMtZjJmZTEwYTI5ZTg3LzIzYjU5MGU4LTMwYzUtNDk5Ny1iYmYzLWYyZmUxMGEy OWU4Ny5jcmwwHwYDVR0jBBgwFoAUcy1hwgTHlLBjGpuuELFhCs6jUygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZl MTBhMjllODcuY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBAFCEYID BANCEYADBABCEYwDBABCEY8wDAMEAEIR1QMEA0IR0AMEAEIR3AMEAUIR3gMEAUIR /DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCewnQcuaeUW3MVs1VqXjcc7aDJLR7gGVhM8LHd3+2hCjZWJEet oHjM8szrRODJGAQbD8d4OKvZTetOitOlT8EAy7hy5q/BGUu7P0ngLe2d/6wugb7e JGbM327vySVF6rq0fKPWJn3lX4l67kE7UlnSclNjvdHLhOVC6y2APuZr8Zfr840+ IefLunFI+TlsGQIHeicRB/6fRt9fLe37MR84koWtAVYZ9+63l0vEeG9JA+1a6dqf BGOj3bQsRME91YRiMfsS8zoc2oxl/rgMNt7anll/XE7QQ2ffDGpK6lXNXFWjbDBy FH95xfUvzy+0SY28Ld0eAvioqqkDJn6u8/Ki -----END CERTIFICATE-----Generated at Mon Apr 14 09:41:49 2025 by rpki-client