$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15e0fbe6-f2b4-30ea-9a7b-118e1c13e8b0.roa File: 15e0fbe6-f2b4-30ea-9a7b-118e1c13e8b0.roa (raw, json) Hash identifier: D5iSTiSLtff1msv6J7CVXzDv8R0dKbGuC4QXOhwf5z0= Subject key identifier: 1E:4E:E4:AC:AB:88:44:A0:3D:C1:11:AC:70:31:E5:27:4C:8F:55:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489E6B62C796E6A1AAD3246D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15e0fbe6-f2b4-30ea-9a7b-118e1c13e8b0.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 63949 IP address blocks: 66.228.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:62:c7:96:e6:a1:aa:d3:24:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=a81c7be0-e036-4b70-a110-abaaf817ae82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0e:63:c0:86:18:7f:a8:0a:da:4c:07:7c:ca: 3c:b4:f6:d6:23:40:45:c9:80:b8:82:4f:35:17:3f: 92:16:1a:d5:64:8d:79:a8:40:e3:ab:a1:26:cd:fd: 9b:cc:00:d1:42:8a:b9:d6:23:45:8d:18:78:fc:71: 5b:05:db:e8:24:86:96:27:1e:5b:19:7e:86:29:f3: 94:a2:87:55:ae:41:bd:83:cd:ba:d2:e8:fe:8a:ee: fd:8b:bf:06:84:56:57:b2:17:87:06:42:cd:78:ca: 64:f3:f7:b2:c3:91:10:80:a2:89:b0:21:d7:47:d2: ab:3e:95:83:fc:d5:7a:e4:ec:09:99:64:4f:12:3c: 11:e0:48:19:80:e7:d6:11:82:01:fd:12:bf:d1:d2: 49:5f:6a:4b:d7:80:ad:aa:25:a5:e4:e9:90:7a:69: 49:fb:34:c1:04:50:86:56:c4:88:6c:6d:38:0a:1a: 48:64:40:fe:e0:99:98:3a:b6:5d:df:e4:74:b4:af: e0:76:68:0d:73:9c:9f:09:31:e7:9d:cd:13:43:32: 7e:0a:e4:35:cd:01:33:d8:5c:4b:94:ce:80:b8:8a: c1:18:8f:cd:c8:2c:51:6b:a9:e9:5e:34:09:ca:4b: 0e:42:e2:fe:5b:29:9f:0b:4f:69:37:2e:eb:2b:3f: ec:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4E:E4:AC:AB:88:44:A0:3D:C1:11:AC:70:31:E5:27:4C:8F:55:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15e0fbe6-f2b4-30ea-9a7b-118e1c13e8b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 66.228.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:2b:a0:64:31:a0:11:15:2b:4b:f2:26:39:e9:db:74:31:40: cb:c3:4b:6a:bf:9e:7a:da:88:99:cb:1c:cc:ea:a3:be:82:95: a4:f0:ee:2d:9d:48:44:ad:01:f5:c0:4d:b8:71:45:69:d0:87: be:6b:4c:4a:a3:42:c2:b7:33:4f:47:03:d3:3d:f9:74:28:dd: 83:fc:6e:8a:a3:e6:89:78:5f:4d:65:c6:64:4a:7f:c1:3d:21: 83:52:5e:69:70:79:de:94:fc:3b:79:9c:5a:f0:2c:0c:88:2b: df:1d:4f:6b:4e:f7:54:c0:85:95:5a:8a:b4:19:66:12:7c:01: 46:51:63:2a:0e:ef:5f:a5:db:90:5c:03:73:d8:58:18:e3:82: a0:ee:44:30:92:fc:bb:57:34:5c:36:37:6c:8e:08:a5:5b:5d: 48:95:ae:30:ef:56:f6:be:ef:c6:6c:43:0e:b2:5e:54:37:9e: 4a:26:53:7f:e1:a3:b0:4c:3c:72:86:86:c8:80:7b:36:31:a1: 45:78:78:24:e7:90:9d:04:25:a4:1b:06:ab:bf:18:d7:4f:1c: 72:07:4d:e6:2f:9a:05:b5:82:52:0d:36:48:dd:62:a1:a5:ae: 68:6c:c4:f9:ea:1b:00:15:31:f1:6e:52:d1:16:dc:c4:4f:25: 09:f5:5f:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2LHluahqtMkbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YTgxYzdiZTAtZTAzNi00YjcwLWExMTAtYWJhYWY4MTdhZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog5jwIYYf6gK2kwHfMo8tPbWI0BFyYC4gk81 Fz+SFhrVZI15qEDjq6Emzf2bzADRQoq51iNFjRh4/HFbBdvoJIaWJx5bGX6GKfOU oodVrkG9g8260uj+iu79i78GhFZXsheHBkLNeMpk8/eyw5EQgKKJsCHXR9KrPpWD /NV65OwJmWRPEjwR4EgZgOfWEYIB/RK/0dJJX2pL14CtqiWl5OmQemlJ+zTBBFCG VsSIbG04ChpIZED+4JmYOrZd3+R0tK/gdmgNc5yfCTHnnc0TQzJ+CuQ1zQEz2FxL lM6AuIrBGI/NyCxRa6npXjQJyksOQuL+WymfC09pNy7rKz/s3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5O5KyriESgPcERrHAx5SdMj1UnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTVlMGZiZTYtZjJiNC0z MGVhLTlhN2ItMTE4ZTFjMTNlOGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQuQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkroGQxoBEVK0vyJjnp23QxQMvDS2q/nnraiJnLHMzqo76ClaTw7i2d SEStAfXATbhxRWnQh75rTEqjQsK3M09HA9M9+XQo3YP8boqj5ol4X01lxmRKf8E9 IYNSXmlwed6U/Dt5nFrwLAyIK98dT2tO91TAhZVairQZZhJ8AUZRYyoO71+l25Bc A3PYWBjjgqDuRDCS/LtXNFw2N2yOCKVbXUiVrjDvVva+78ZsQw6yXlQ3nkomU3/h o7BMPHKGhsiAezYxoUV4eCTnkJ0EJaQbBqu/GNdPHHIHTeYvmgW1glINNkjdYqGl rmhsxPnqGwAVMfFuUtEW3MRPJQn1X/c= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:02 2025 by rpki-client