$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf63350e-58a3-37fa-b946-5bfd45a67c05.roa File: cf63350e-58a3-37fa-b946-5bfd45a67c05.roa (raw, json) Hash identifier: op/wPpa0MbR1r0jy808l+T5oMos5uH+1a27CDhxUQc4= Subject key identifier: 27:4F:7C:5B:79:82:22:D8:A0:A2:25:13:A1:58:CF:BF:36:55:22:B1 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858498CFF1D1D9E05177EDAD3B480 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf63350e-58a3-37fa-b946-5bfd45a67c05.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 401415 IP address blocks: 66.231.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:1d:1d:9e:05:17:7e:da:d3:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=ce953b90-6241-4898-9646-afaf1d3a6203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e7:28:d2:4c:5b:4b:c9:d8:d1:eb:87:f6:3d: 36:ab:3a:af:d7:28:38:0e:68:b7:e6:72:32:fc:64: 53:c7:0b:51:0e:c5:62:28:d0:89:12:56:f7:02:35: 2e:b7:b6:de:a0:fd:f3:96:a4:e9:03:c4:59:5b:6c: ee:e7:d0:60:d0:12:ae:f9:cf:f8:07:1e:b7:3d:dc: 75:a6:d8:92:00:5f:6c:77:31:ca:3a:26:c8:58:9f: bc:03:d2:e9:da:71:2b:61:c1:7b:36:78:9a:cc:86: 03:16:53:a5:a8:09:76:66:5c:62:97:78:4b:e2:a4: 01:fe:41:da:bd:7f:9e:65:98:68:41:47:54:b0:48: dc:e2:a5:64:94:a3:30:d5:87:6b:c1:eb:a7:0f:9a: 2e:f1:a7:f7:e7:ce:5b:11:4d:b6:17:c1:68:57:dc: 62:7a:5a:89:1d:1f:68:b2:7f:e7:eb:f3:7a:96:60: 9c:2c:1b:fb:38:11:eb:f3:12:d0:27:90:45:55:a3: f9:3a:d8:3a:8e:9b:91:d7:6e:5f:3b:39:bd:59:e0: 60:54:13:ef:85:b6:00:77:51:6b:20:3d:ef:61:92: e8:2b:bd:45:89:44:8a:29:46:fe:95:a8:86:c3:ea: 5a:6c:27:51:7b:fc:83:43:ee:c4:b3:5e:9c:b8:95: 5e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4F:7C:5B:79:82:22:D8:A0:A2:25:13:A1:58:CF:BF:36:55:22:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf63350e-58a3-37fa-b946-5bfd45a67c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:7f:9b:30:a6:6b:51:83:70:9e:11:68:67:bd:0c:d7:77:62: 54:ff:c3:72:ce:ce:91:cd:23:64:94:30:ff:9a:87:99:d9:02: 96:e6:d8:cb:4e:45:bc:f0:cf:78:f4:84:c3:4b:3c:3e:ad:b9: 01:4e:5f:8c:ce:a1:13:1a:e6:a8:11:56:87:57:d8:b4:96:8b: 0d:51:a8:3b:e3:05:9b:54:9f:15:cc:44:f4:fd:cb:69:4e:2c: ef:bb:7b:07:0b:40:b8:02:12:06:79:f1:c9:fb:8d:52:2f:c1: a0:bb:c1:98:f0:ae:c9:0b:a0:d7:51:58:13:9c:c4:ff:c0:ed: 4d:06:40:96:a8:74:0b:17:36:31:02:55:d4:43:35:e4:f0:a1: aa:46:d3:47:fb:2f:d1:bd:2c:c6:98:cd:7b:48:7f:ae:68:3b: f2:31:bb:9b:72:1c:dc:1d:91:0f:45:3b:e7:d5:47:2f:36:ba: 29:3f:18:2b:ab:cf:cc:ab:1b:5a:58:65:85:17:ce:f3:d4:1d: d8:d1:50:cd:c2:4a:1f:69:3a:c7:77:8c:90:8c:78:56:dd:2d: 10:60:50:0e:a1:99:b7:39:8d:e4:8c:64:3c:95:cf:a2:23:45: cf:6a:32:e9:5e:e1:06:d9:fa:89:c0:b6:2b:09:1f:56:64:20: 00:a0:f1:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/x0dngUXftrTtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk Y2U5NTNiOTAtNjI0MS00ODk4LTk2NDYtYWZhZjFkM2E2MjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieco0kxbS8nY0euH9j02qzqv1yg4Dmi35nIy /GRTxwtRDsViKNCJElb3AjUut7beoP3zlqTpA8RZW2zu59Bg0BKu+c/4Bx63Pdx1 ptiSAF9sdzHKOibIWJ+8A9Lp2nErYcF7NniazIYDFlOlqAl2Zlxil3hL4qQB/kHa vX+eZZhoQUdUsEjc4qVklKMw1YdrweunD5ou8af3585bEU22F8FoV9xielqJHR9o sn/n6/N6lmCcLBv7OBHr8xLQJ5BFVaP5Otg6jpuR125fOzm9WeBgVBPvhbYAd1Fr ID3vYZLoK71FiUSKKUb+laiGw+pabCdRe/yDQ+7Es16cuJVeRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdPfFt5giLYoKIlE6FYz782VSKxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2Y2MzM1MGUtNThhMy0z N2ZhLWI5NDYtNWJmZDQ1YTY3YzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQucCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9/mzCma1GDcJ4RaGe9DNd3YlT/w3LOzpHNI2SUMP+ah5nZApbm2MtO Rbzwz3j0hMNLPD6tuQFOX4zOoRMa5qgRVodX2LSWiw1RqDvjBZtUnxXMRPT9y2lO LO+7ewcLQLgCEgZ58cn7jVIvwaC7wZjwrskLoNdRWBOcxP/A7U0GQJaodAsXNjEC VdRDNeTwoapG00f7L9G9LMaYzXtIf65oO/Ixu5tyHNwdkQ9FO+fVRy82uik/GCur z8yrG1pYZYUXzvPUHdjRUM3CSh9pOsd3jJCMeFbdLRBgUA6hmbc5jeSMZDyVz6Ij Rc9qMule4QbZ+onAtisJH1ZkIACg8VI= -----END CERTIFICATE-----Generated at Thu Apr 17 23:25:03 2025 by rpki-client