$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a3437fe2-461a-3f03-a654-2a95ee698536.roa File: a3437fe2-461a-3f03-a654-2a95ee698536.roa (raw, json) Hash identifier: AkU2ctfHrh7y47qxn9SYR4kyt7NYuF95S73TLUuwSBw= Subject key identifier: 39:A8:1D:99:00:F6:62:42:13:E0:A4:BA:3C:84:1D:B0:31:59:D6:80 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858498CFF1CE287147E30DC262E80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a3437fe2-461a-3f03-a654-2a95ee698536.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 401415 IP address blocks: 66.115.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:1c:e2:87:14:7e:30:dc:26:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=9bd44c52-2433-4ef4-9efd-5fbeec0e51c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:87:1f:00:f0:26:3c:5c:32:dc:82:f5:df:28: 55:f1:73:47:e1:8a:ad:41:9b:c7:e3:44:66:32:57: ff:dc:5a:02:49:44:01:b1:c3:86:41:25:95:ff:a6: 34:94:97:b8:ba:28:93:36:1c:13:71:ff:05:3d:99: 54:15:79:f8:d5:b2:56:e5:25:e5:a5:c1:a3:bd:63: 47:f5:06:49:d2:00:35:53:08:d3:f3:5e:67:d5:e8: c4:3b:30:d7:c7:9b:e0:17:74:54:41:24:4a:f9:c0: 73:cd:91:d7:30:cd:bb:91:f5:86:a0:3c:f5:cb:6a: 4d:33:7e:1d:80:c0:55:cc:73:db:1d:aa:12:5f:41: b4:43:c6:4d:6d:7a:dc:f3:29:b4:30:76:3f:09:03: da:e3:6b:37:f9:3d:ea:5b:7f:95:00:a9:81:e5:29: 16:0d:26:d7:ab:82:cd:4d:4b:ae:fd:31:e7:a2:8f: 09:2a:8d:ed:e3:d7:f3:f1:2f:9d:d2:8d:66:c0:c9: 33:f8:d6:ee:39:e1:b0:3f:d6:16:b5:95:68:35:30: df:3b:e7:1e:33:23:62:fc:f6:5f:ef:27:d7:a5:78: 6c:c3:e5:26:28:fd:aa:fc:7a:92:bc:1d:4e:58:7b: b4:20:59:28:72:d8:1c:cb:8f:b3:ec:51:a4:d9:a9: b2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A8:1D:99:00:F6:62:42:13:E0:A4:BA:3C:84:1D:B0:31:59:D6:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a3437fe2-461a-3f03-a654-2a95ee698536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:7c:e2:c0:33:e1:8b:3c:c9:c1:a5:35:b4:f6:a9:e3:e6:23: af:9d:c0:16:8d:81:c4:fe:0b:62:b9:ba:4f:3e:68:b3:a2:6c: 77:eb:97:c9:57:70:8e:5c:f2:b4:37:42:5f:4b:7b:7c:97:bd: ab:8e:fb:66:75:99:4f:f6:db:55:88:43:75:94:49:ee:0b:6c: 45:dc:e6:59:c8:c8:1c:bd:29:aa:8a:d4:3e:a5:25:3b:80:70: 86:72:76:67:03:a8:20:df:90:b8:b4:2b:0e:c1:66:34:4f:a0: 10:3a:04:e9:56:7f:92:07:30:47:46:79:fd:61:c6:88:36:ba: ce:a0:f4:43:06:c2:b2:b9:84:34:57:f3:7b:66:c3:3d:4f:ff: d9:9c:f3:d0:46:19:bb:4d:3a:80:4a:e3:2b:94:8b:11:0b:ef: e4:21:87:a4:b4:5d:e9:ff:42:5e:9f:46:05:a7:22:d1:18:55: 2e:75:e2:f9:e1:ee:0a:63:08:49:83:93:16:56:5c:d5:82:62: b9:a5:2d:00:2b:77:f3:55:77:49:76:92:5d:e3:10:f6:35:96: c3:f9:cc:f7:b4:4b:88:9d:e4:55:2f:4b:7b:a2:9b:8a:b0:a4: f5:7b:f3:d8:6d:53:03:3f:a0:24:7e:a3:0e:ce:c4:44:e1:d3: cd:59:03:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xzihxR+MNwmLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk OWJkNDRjNTItMjQzMy00ZWY0LTllZmQtNWZiZWVjMGU1MWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4cfAPAmPFwy3IL13yhV8XNH4YqtQZvH40Rm Mlf/3FoCSUQBscOGQSWV/6Y0lJe4uiiTNhwTcf8FPZlUFXn41bJW5SXlpcGjvWNH 9QZJ0gA1UwjT815n1ejEOzDXx5vgF3RUQSRK+cBzzZHXMM27kfWGoDz1y2pNM34d gMBVzHPbHaoSX0G0Q8ZNbXrc8ym0MHY/CQPa42s3+T3qW3+VAKmB5SkWDSbXq4LN TUuu/THnoo8JKo3t49fz8S+d0o1mwMkz+NbuOeGwP9YWtZVoNTDfO+ceMyNi/PZf 7yfXpXhsw+UmKP2q/HqSvB1OWHu0IFkoctgcy4+z7FGk2amy8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmoHZkA9mJCE+CkujyEHbAxWdaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYTM0MzdmZTItNDYxYS0z ZjAzLWE2NTQtMmE5NWVlNjk4NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB84sAz4Ys8ycGlNbT2qePmI6+dwBaNgcT+C2K5uk8+aLOibHfrl8lX cI5c8rQ3Ql9Le3yXvauO+2Z1mU/221WIQ3WUSe4LbEXc5lnIyBy9KaqK1D6lJTuA cIZydmcDqCDfkLi0Kw7BZjRPoBA6BOlWf5IHMEdGef1hxog2us6g9EMGwrK5hDRX 83tmwz1P/9mc89BGGbtNOoBK4yuUixEL7+Qhh6S0Xen/Ql6fRgWnItEYVS514vnh 7gpjCEmDkxZWXNWCYrmlLQArd/NVd0l2kl3jEPY1lsP5zPe0S4id5FUvS3uim4qw pPV789htUwM/oCR+ow7OxETh081ZA+Q= -----END CERTIFICATE-----Generated at Thu Apr 17 08:26:50 2025 by rpki-client