$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa File: d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa (raw, json) Hash identifier: q/qhPUMyr3A+m3+y3PpMa2gV8aKtV6izVchl5GboBLw= Subject key identifier: B7:49:44:8F:0A:06:96:34:00:66:D8:84:5E:8F:E7:04:D1:AB:EE:E8 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F43285848EF6131386019682BCA73D0C0 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 7782 IP address blocks: 66.230.80.0/20 maxlen: 20 66.230.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:31:38:60:19:68:2b:ca:73:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=7f09e7f9-1800-48d1-92ec-32dc0c303be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c6:dc:b6:9a:c0:53:65:fb:c4:9a:6b:e2:30: 2e:e9:54:83:27:de:5e:0a:ab:3a:10:c3:1a:61:93: dc:4e:ac:41:59:71:94:32:0b:3a:be:68:06:2c:11: f6:a0:8d:5a:c8:1f:e1:62:ab:fb:92:b9:3e:82:77: 1f:2f:66:7b:4f:43:e2:db:ff:b1:ca:f5:46:6c:f2: 35:79:d6:e7:6b:da:27:7a:d3:70:e4:3a:5a:63:9a: 6a:40:1c:cc:56:be:3e:ff:ed:f8:a6:4b:e9:c9:c5: c6:03:c8:5f:d6:77:87:07:14:f4:5f:9b:81:bc:77: 44:b0:71:07:5c:24:c8:7b:20:03:98:fa:54:46:b6: 26:dc:e4:37:fc:c9:f6:b4:01:af:08:2e:53:99:ac: d1:2f:87:c8:bf:37:21:14:7c:d6:58:91:89:9e:07: 0f:48:f6:79:11:d2:45:2f:f6:d9:7b:6f:f1:6a:32: b0:95:4b:62:20:07:4b:ca:1c:ea:05:68:69:8a:ef: dc:fe:4e:b5:63:18:c4:d8:f1:19:9b:06:ba:d6:0e: 48:cf:62:52:6f:ca:e9:c0:90:f1:ac:af:6e:5c:3e: 4f:b1:3b:dc:48:e4:54:56:1f:eb:e6:af:d4:d2:3f: b0:42:14:f6:3e:20:ab:c8:d8:fa:e5:8a:ba:21:1a: 53:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:49:44:8F:0A:06:96:34:00:66:D8:84:5E:8F:E7:04:D1:AB:EE:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 66.230.80.0-66.230.127.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:74:02:34:c6:b9:86:de:5c:e6:ee:a9:df:3d:2a:dd:1e:8c: fa:33:d7:84:60:07:25:f1:c4:06:b3:54:23:ec:d8:48:1d:0d: 59:1d:76:44:25:ac:bd:7a:11:8f:3a:1b:ae:da:d3:48:dd:b6: e1:41:1d:a5:57:e4:81:78:fa:88:78:90:ad:1c:db:4d:fb:b5: 9b:c1:95:87:c2:27:4a:c9:33:28:a2:91:c8:dd:4c:01:87:43: b4:d0:d0:25:5d:47:3a:05:da:ab:8f:74:4f:75:74:f0:35:f7: 36:db:b4:b8:c7:81:92:c3:59:3b:f1:de:93:e8:aa:9a:e0:d9: c3:c4:a8:3e:6c:7f:7e:b2:ec:42:99:dd:19:43:d2:8c:37:31: 8f:e8:dd:61:b4:0f:43:60:e0:ab:b1:24:45:92:07:08:bb:aa: 15:91:e4:47:b4:54:ea:cf:59:88:e5:c6:ce:dd:d6:67:88:41: 4e:8f:6f:a2:bd:75:24:a2:65:fa:e0:da:3c:24:87:8e:1d:81: 42:e2:9f:c8:4f:53:40:1d:b2:43:57:33:96:72:3b:8e:41:08: e6:be:2c:2a:e5:41:7c:5e:a6:5f:2c:88:a4:1b:98:c3:86:23: a6:a3:f0:61:99:dc:8c:3b:60:3c:3a:3d:52:0a:30:af:46:d9: c8:17:70:ea -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEjvYTE4YBloK8pz0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk N2YwOWU3ZjktMTgwMC00OGQxLTkyZWMtMzJkYzBjMzAzYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8bctprAU2X7xJpr4jAu6VSDJ95eCqs6EMMa YZPcTqxBWXGUMgs6vmgGLBH2oI1ayB/hYqv7krk+gncfL2Z7T0Pi2/+xyvVGbPI1 edbna9onetNw5DpaY5pqQBzMVr4+/+34pkvpycXGA8hf1neHBxT0X5uBvHdEsHEH XCTIeyADmPpURrYm3OQ3/Mn2tAGvCC5TmazRL4fIvzchFHzWWJGJngcPSPZ5EdJF L/bZe2/xajKwlUtiIAdLyhzqBWhpiu/c/k61YxjE2PEZmwa61g5Iz2JSb8rpwJDx rK9uXD5PsTvcSORUVh/r5q/U0j+wQhT2PiCryNj65Yq6IRpTRQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLdJRI8KBpY0AGbYhF6P5wTRq+7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvZDVjZjc1MGQtYmI2YS0z NGViLWE0ZDgtNWQwOTQ4NTY3NTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARC5lAD BAdC5gAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAanQCNMa5ht5c5u6p3z0q3R6M+jPXhGAHJfHEBrNUI+zY SB0NWR12RCWsvXoRjzobrtrTSN224UEdpVfkgXj6iHiQrRzbTfu1m8GVh8InSskz KKKRyN1MAYdDtNDQJV1HOgXaq490T3V08DX3Ntu0uMeBksNZO/Hek+iqmuDZw8So Pmx/frLsQpndGUPSjDcxj+jdYbQPQ2Dgq7EkRZIHCLuqFZHkR7RU6s9ZiOXGzt3W Z4hBTo9vor11JKJl+uDaPCSHjh2BQuKfyE9TQB2yQ1czlnI7jkEI5r4sKuVBfF6m XyyIpBuYw4YjpqPwYZncjDtgPDo9Ugowr0bZyBdw6g== -----END CERTIFICATE-----Generated at Fri Mar 14 09:36:31 2025 by rpki-client