$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0b9d9bbd-f3e3-345f-a51a-7ad229f4db9c.roa File: 0b9d9bbd-f3e3-345f-a51a-7ad229f4db9c.roa (raw, json) Hash identifier: 6X+vfGIoH2AJHfJoHSLjeZfbCofa6HJjdKh/ErYGVpE= Subject key identifier: 6B:4B:6B:8D:C6:AB:AD:DA:62:09:30:7B:F9:C7:A2:61:18:B9:F3:AF Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858494B6402774C64C9B72139CD80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0b9d9bbd-f3e3-345f-a51a-7ad229f4db9c.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 13576 IP address blocks: 66.115.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:02:77:4c:64:c9:b7:21:39:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=bb92ee3f-9fe7-4eb8-913a-21424c9d5b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:b7:47:93:bb:37:20:9d:ac:d4:29:ec:87: f7:f6:f2:cd:48:b1:0a:f9:3b:a0:16:74:68:5e:d8: ee:e3:a1:4e:0c:d4:84:58:bf:82:dd:7a:79:b1:6a: 7d:51:32:2e:5b:13:6e:ab:b4:e0:f1:62:d5:f5:7a: 18:25:7c:e4:54:d4:e3:35:50:87:4f:b7:25:22:da: df:ac:3e:09:78:6d:7d:9e:06:44:1e:56:21:75:a1: 01:49:84:29:4d:05:2e:34:7b:26:fe:e8:30:db:40: a5:86:93:62:49:e4:76:d4:d2:5a:80:e1:ea:11:7f: f5:a9:53:30:74:47:c0:20:7b:cb:2d:49:27:46:ae: 3b:69:95:38:13:e6:cb:78:79:08:4f:6a:5e:67:b2: 93:d8:22:2b:c3:ae:17:12:2e:d2:ad:2f:22:05:09: bf:4c:be:ef:f7:f2:79:c3:08:18:b2:84:3e:00:3e: c6:ba:7f:93:e8:0a:80:11:68:c1:bc:45:d1:13:99: ae:83:33:f5:01:a9:5d:49:6b:16:c3:bb:cc:ad:ae: 9f:48:1e:01:3c:37:c4:81:16:6c:ca:41:8f:a9:13: ac:72:8f:10:94:e4:3f:41:3d:35:84:09:f4:27:70: d8:10:82:bd:e8:ef:a8:a2:87:6f:dd:d0:42:2c:e2: e5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4B:6B:8D:C6:AB:AD:DA:62:09:30:7B:F9:C7:A2:61:18:B9:F3:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0b9d9bbd-f3e3-345f-a51a-7ad229f4db9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:d1:01:c6:07:af:65:43:46:91:e6:37:f6:fb:2a:3e:5e:f8: 7f:6b:af:09:9d:12:ee:8c:65:0f:cc:53:f9:a5:d9:35:33:49: a8:b0:d7:6f:68:8d:0c:fd:da:6e:d3:5e:de:e4:4b:4c:15:03: 9e:71:88:c4:0a:97:70:9b:89:f9:36:f9:82:47:96:6b:f3:3b: 0f:2e:0d:77:45:de:12:18:f3:b5:6e:78:10:94:c4:65:74:01: 39:24:e6:6a:36:4a:36:40:f0:ac:54:9c:95:f4:7f:4e:37:db: bd:77:11:8d:ea:cc:63:ec:bc:49:b7:3c:c7:b2:34:09:1e:a7: 7a:5b:8a:4b:15:67:76:7d:a5:3a:0e:71:48:82:be:f4:69:bf: 23:00:1e:5b:76:58:d9:d3:bd:22:50:b7:4e:61:eb:1b:da:f6: 49:16:56:43:66:4e:0a:b6:c5:d7:58:0d:f0:2a:33:31:87:0e: e9:17:78:71:7b:fb:7a:e1:39:0e:5e:bd:c3:ec:23:68:0d:f5: d1:1b:66:a1:21:0d:de:af:e7:f4:8e:5c:cb:70:fa:fb:37:7e: 33:c2:ed:22:ff:9b:c7:22:a9:b5:78:fb:01:e6:87:9f:a7:4d: 5c:ea:8d:2f:ef:c2:4c:84:db:55:26:2c:27:4e:70:47:d7:5b: e0:08:44:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAJ3TGTJtyE5zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YmI5MmVlM2YtOWZlNy00ZWI4LTkxM2EtMjE0MjRjOWQ1Yjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWi3R5O7NyCdrNQp7If39vLNSLEK+TugFnRo Xtju46FODNSEWL+C3Xp5sWp9UTIuWxNuq7Tg8WLV9XoYJXzkVNTjNVCHT7clItrf rD4JeG19ngZEHlYhdaEBSYQpTQUuNHsm/ugw20ClhpNiSeR21NJagOHqEX/1qVMw dEfAIHvLLUknRq47aZU4E+bLeHkIT2peZ7KT2CIrw64XEi7SrS8iBQm/TL7v9/J5 wwgYsoQ+AD7Gun+T6AqAEWjBvEXRE5mugzP1AaldSWsWw7vMra6fSB4BPDfEgRZs ykGPqROsco8QlOQ/QT01hAn0J3DYEIK96O+ooodv3dBCLOLl2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtLa43Gq63aYgkwe/nHomEYufOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMGI5ZDliYmQtZjNlMy0z NDVmLWE1MWEtN2FkMjI5ZjRkYjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMjRAcYHr2VDRpHmN/b7Kj5e+H9rrwmdEu6MZQ/MU/ml2TUzSaiw129o jQz92m7TXt7kS0wVA55xiMQKl3Cbifk2+YJHlmvzOw8uDXdF3hIY87VueBCUxGV0 ATkk5mo2SjZA8KxUnJX0f0432713EY3qzGPsvEm3PMeyNAkep3pbiksVZ3Z9pToO cUiCvvRpvyMAHlt2WNnTvSJQt05h6xva9kkWVkNmTgq2xddYDfAqMzGHDukXeHF7 +3rhOQ5evcPsI2gN9dEbZqEhDd6v5/SOXMtw+vs3fjPC7SL/m8ciqbV4+wHmh5+n TVzqjS/vwkyE21UmLCdOcEfXW+AIRJM= -----END CERTIFICATE-----Generated at Sun Apr 6 21:23:34 2025 by rpki-client