$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/da9bcd43-b8c0-374b-8407-ca690f797318.roa File: da9bcd43-b8c0-374b-8407-ca690f797318.roa (raw, json) Hash identifier: +CRyCpgQYBKyBYroI4kw9hhQQz1pOL/sYf4YGghxR6w= Subject key identifier: 56:0A:AA:4B:75:3C:FC:FC:94:D7:52:F4:38:4F:92:F5:EF:6C:ED:33 Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87 Certificate serial: 010D0C9F432858497DF8B70BEC6E8D31D8531780 Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/da9bcd43-b8c0-374b-8407-ca690f797318.roa Signing time: Fri 11 Apr 2025 15:51:00 +0000 ROA not before: Fri 11 Apr 2025 15:51:00 +0000 ROA not after: Thu 10 Jul 2025 15:51:00 +0000 asID: 199527 IP address blocks: 66.227.4.0/22 maxlen: 24 66.227.8.0/23 maxlen: 24 66.227.11.0/24 maxlen: 24 66.227.12.0/22 maxlen: 24 66.227.16.0/24 maxlen: 24 66.227.19.0/24 maxlen: 24 66.227.20.0/22 maxlen: 24 66.227.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:f8:b7:0b:ec:6e:8d:31:d8:53:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87 Validity Not Before: Apr 11 15:51:00 2025 GMT Not After : Jul 10 15:51:00 2025 GMT Subject: CN=82d287fb-51fb-4b0a-89f0-ef66937f1043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f5:e9:1c:da:03:e7:f0:c6:56:3e:ba:7f:b5: 28:6d:43:27:97:be:c1:98:f9:11:b8:87:a3:33:ab: 3e:08:a8:e0:fe:3f:e0:de:99:c7:6c:33:e7:e2:00: 6d:b1:a8:97:c7:66:37:00:0f:bc:3e:22:5e:b5:a8: fa:85:35:b0:e8:e4:e5:11:f5:0d:85:47:e0:6a:9f: d4:f5:dc:68:02:1c:a2:78:39:10:6a:fd:d0:80:b7: 88:a4:49:cf:a5:cb:f3:14:64:3b:e0:26:fe:4f:48: 5f:8b:c0:ed:9f:01:29:30:d7:81:be:76:a4:06:3e: 98:bd:38:74:46:76:48:59:ee:a8:29:fc:4d:54:cc: ea:fa:3d:15:3e:98:f0:e3:b7:c2:dc:e5:da:d4:8d: 68:02:e4:05:a7:89:9b:5e:37:57:6b:41:01:54:82: f8:3b:e3:53:e4:e1:63:4a:78:5c:68:29:4b:aa:bf: 12:27:8c:02:a9:a5:83:7d:08:fa:67:bc:c7:70:3e: 8f:0a:b6:f5:5a:6a:1b:86:2e:6e:7f:81:6b:3c:17: 6d:ea:40:7c:be:42:5a:92:c0:cc:9a:5b:02:d0:e0: c1:f0:e1:23:1d:66:2d:34:09:b1:ba:37:26:e8:92: 10:b1:85:a4:a9:55:a1:5f:48:1c:d1:c6:98:ea:84: c9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0A:AA:4B:75:3C:FC:FC:94:D7:52:F4:38:4F:92:F5:EF:6C:ED:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/da9bcd43-b8c0-374b-8407-ca690f797318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl X509v3 Authority Key Identifier: keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer sbgp-ipAddrBlock: critical IPv4: 66.227.4.0-66.227.9.255 66.227.11.0-66.227.16.255 66.227.19.0-66.227.24.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:86:3a:43:6a:6d:06:5e:c6:fa:01:dc:d8:9d:b3:cc:e7:83: 78:3d:62:ee:df:ae:56:5c:c9:57:a3:27:76:25:7f:97:fc:f0: ce:e9:1c:b6:b2:c6:23:98:79:9e:e6:33:9b:1a:fe:99:45:b2: ca:d6:b3:8f:f3:78:a1:60:64:70:41:81:8c:c6:f3:97:bb:36: 3f:2a:26:c9:8d:7e:6d:69:d8:bf:a6:6d:ee:17:c6:48:32:24: 9b:3a:89:2a:56:2a:89:92:57:a3:51:bc:18:d4:fb:90:83:d9: 3d:33:e8:b4:1a:aa:3a:09:40:8b:db:3b:e4:86:c8:fe:13:94: 18:06:b8:18:66:c0:07:38:cc:66:bd:9c:04:95:70:58:c1:12: 69:ee:2e:29:21:6d:05:b1:bd:b7:88:70:7a:24:67:50:1f:60: a4:95:a4:43:f5:ce:23:19:cf:61:c6:20:65:09:51:31:3f:a7: 50:e4:e4:c7:dd:85:03:0e:13:1b:1a:ef:be:be:f2:d2:a8:87: 17:ca:86:a1:5e:8e:c3:3f:2d:3b:48:04:a9:92:af:8f:69:0c: 94:1c:76:c7:d9:8d:a3:39:65:f0:14:2c:4d:28:d7:81:e2:0f: 83:43:3c:67:e1:48:6a:c6:40:c8:e6:40:f5:56:73:b7:e1:0d: 19:88:77:ab -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEl9+LcL7G6NMdhTF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiNTkwZTgtMzBjNS00OTk3LWJiZjMtZjJmZTEwYTI5 ZTg3MB4XDTI1MDQxMTE1NTEwMFoXDTI1MDcxMDE1NTEwMFowLzEtMCsGA1UEAxMk ODJkMjg3ZmItNTFmYi00YjBhLTg5ZjAtZWY2NjkzN2YxMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPXpHNoD5/DGVj66f7UobUMnl77BmPkRuIej M6s+CKjg/j/g3pnHbDPn4gBtsaiXx2Y3AA+8PiJetaj6hTWw6OTlEfUNhUfgap/U 9dxoAhyieDkQav3QgLeIpEnPpcvzFGQ74Cb+T0hfi8DtnwEpMNeBvnakBj6YvTh0 RnZIWe6oKfxNVMzq+j0VPpjw47fC3OXa1I1oAuQFp4mbXjdXa0EBVIL4O+NT5OFj SnhcaClLqr8SJ4wCqaWDfQj6Z7zHcD6PCrb1Wmobhi5uf4FrPBdt6kB8vkJaksDM mlsC0ODB8OEjHWYtNAmxujcm6JIQsYWkqVWhX0gc0caY6oTJWwIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFFYKqkt1PPz8lNdS9DhPkvXvbO0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1 OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZlMTBhMjllODcvZGE5YmNkNDMtYjhjMC0z NzRiLTg0MDctY2E2OTBmNzk3MzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNiNTkwZTgtMzBjNS00OTk3LWJi ZjMtZjJmZTEwYTI5ZTg3LzIzYjU5MGU4LTMwYzUtNDk5Ny1iYmYzLWYyZmUxMGEy OWU4Ny5jcmwwHwYDVR0jBBgwFoAUcy1hwgTHlLBjGpuuELFhCs6jUygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZl MTBhMjllODcuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBAJC4wQD BAFC4wgwDAMEAELjCwMEAELjEDAMAwQAQuMTAwQAQuMYMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIWGOkNq bQZexvoB3Nids8zng3g9Yu7frlZcyVejJ3Ylf5f88M7pHLayxiOYeZ7mM5sa/plF ssrWs4/zeKFgZHBBgYzG85e7Nj8qJsmNfm1p2L+mbe4XxkgyJJs6iSpWKomSV6NR vBjU+5CD2T0z6LQaqjoJQIvbO+SGyP4TlBgGuBhmwAc4zGa9nASVcFjBEmnuLikh bQWxvbeIcHokZ1AfYKSVpEP1ziMZz2HGIGUJUTE/p1Dk5MfdhQMOExsa776+8tKo hxfKhqFejsM/LTtIBKmSr49pDJQcdsfZjaM5ZfAULE0o14HiD4NDPGfhSGrGQMjm QPVWc7fhDRmId6s= -----END CERTIFICATE-----Generated at Mon Apr 14 09:52:52 2025 by rpki-client