$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4a7b93f7-eba4-31bc-9d93-a4db59ff0dac.roa File: 4a7b93f7-eba4-31bc-9d93-a4db59ff0dac.roa (raw, json) Hash identifier: 0L6/hUe4sVw2V77SH0HzPm+oo1B6oJQDM8N6MGIGOzc= Subject key identifier: 36:0D:99:B3:4A:08:9C:6B:C0:B1:91:96:EE:09:0E:D4:42:A4:CA:AB Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858493ED3D0A9686DBC7CE4047500 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4a7b93f7-eba4-31bc-9d93-a4db59ff0dac.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 30058 IP address blocks: 66.90.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d0:a9:68:6d:bc:7c:e4:04:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=12bcdb5d-9b45-4d62-9536-372532df25b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a7:bf:ed:13:9e:30:ed:a6:02:d0:7b:13:57: 6e:b9:e6:af:7c:77:0c:75:8b:c0:53:15:cc:df:e6: 70:7f:b2:bf:8c:39:e6:de:34:6e:2b:5f:b4:07:e2: 49:32:69:29:91:4f:52:fb:1f:1e:82:3c:84:e5:2a: d2:07:bd:ef:cd:ee:3d:fc:8f:9c:c2:c2:b3:8a:bb: cd:93:9d:7c:08:c2:bc:f9:41:01:4f:39:8b:78:f6: 65:49:9b:81:b9:9e:70:e9:92:60:12:8f:a2:11:93: 36:ca:85:ac:b4:16:52:16:cc:f7:cf:f3:b8:6b:81: 77:5d:70:91:b7:26:d2:96:b1:89:dd:05:c9:b9:8a: d2:5c:51:b2:83:be:05:ff:ca:0a:87:ff:03:76:3e: b1:f4:3d:f4:dc:e0:8f:29:d8:6f:d8:cf:ee:8a:44: 28:d3:79:aa:70:0a:1e:3d:aa:71:64:8c:5f:25:02: 79:c7:4d:65:94:51:be:22:7e:ab:03:f6:1a:34:01: 7a:19:a1:57:67:8e:97:59:0a:b0:4a:96:75:f8:eb: 92:9c:e2:91:d7:fc:ff:17:a8:b4:60:71:f9:b5:6e: 62:51:d7:ff:a7:20:9f:01:94:6b:15:03:ec:46:27: 2e:b6:d0:f5:20:38:1e:84:57:46:bd:9a:42:56:ac: 53:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0D:99:B3:4A:08:9C:6B:C0:B1:91:96:EE:09:0E:D4:42:A4:CA:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4a7b93f7-eba4-31bc-9d93-a4db59ff0dac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 66.90.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:e1:66:5a:20:89:f0:32:b3:8b:38:ac:4e:a3:e3:70:aa:9c: fb:49:03:98:12:ed:31:5c:5b:ee:1c:c4:37:b2:8e:b1:09:2b: f4:b4:88:70:4f:85:a0:fd:70:0a:da:06:6b:55:4b:27:f9:f4: 12:83:1e:93:b6:ae:35:5f:9f:d3:23:b7:db:59:50:4b:d4:ee: de:82:51:d8:ad:de:19:ea:7e:11:00:90:ae:b2:9e:b4:da:48: d3:2e:72:37:83:34:c5:c1:f6:1b:54:00:79:48:4e:33:42:b1: f1:88:c6:54:04:7e:b1:20:81:73:d6:c1:e3:19:27:d4:09:7e: 20:36:16:c7:20:95:a5:fb:d8:94:b2:b0:e4:da:8a:89:a8:dd: 47:d4:13:32:86:cd:16:b9:81:34:de:6a:c4:e6:f7:de:be:a8: 98:95:98:bc:b0:46:22:a5:4d:0d:0c:1d:46:3e:1e:c0:bb:c8: e0:4c:a7:07:5d:e2:8c:15:37:dd:c7:65:2b:8b:e5:af:36:18: 76:3d:8e:5b:6f:d5:87:31:4c:24:39:05:08:23:ab:35:65:af: c9:2e:37:68:59:76:db:aa:ef:32:2d:6f:1c:be:bd:19:1f:0e: 51:ec:e4:f8:d5:59:53:95:e2:ed:30:e8:ac:91:60:48:64:57: 49:3d:2d:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09CpaG28fOQEdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MTJiY2RiNWQtOWI0NS00ZDYyLTk1MzYtMzcyNTMyZGYyNWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6e/7ROeMO2mAtB7E1duueavfHcMdYvAUxXM 3+Zwf7K/jDnm3jRuK1+0B+JJMmkpkU9S+x8egjyE5SrSB73vze49/I+cwsKzirvN k518CMK8+UEBTzmLePZlSZuBuZ5w6ZJgEo+iEZM2yoWstBZSFsz3z/O4a4F3XXCR tybSlrGJ3QXJuYrSXFGyg74F/8oKh/8Ddj6x9D303OCPKdhv2M/uikQo03mqcAoe PapxZIxfJQJ5x01llFG+In6rA/YaNAF6GaFXZ46XWQqwSpZ1+OuSnOKR1/z/F6i0 YHH5tW5iUdf/pyCfAZRrFQPsRicuttD1IDgehFdGvZpCVqxT1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYNmbNKCJxrwLGRlu4JDtRCpMqrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNGE3YjkzZjctZWJhNC0z MWJjLTlkOTMtYTRkYjU5ZmYwZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3hZlogifAys4s4rE6j43CqnPtJA5gS7TFcW+4cxDeyjrEJK/S0iHBP haD9cAraBmtVSyf59BKDHpO2rjVfn9Mjt9tZUEvU7t6CUdit3hnqfhEAkK6ynrTa SNMucjeDNMXB9htUAHlITjNCsfGIxlQEfrEggXPWweMZJ9QJfiA2FscglaX72JSy sOTaiomo3UfUEzKGzRa5gTTeasTm996+qJiVmLywRiKlTQ0MHUY+HsC7yOBMpwdd 4owVN93HZSuL5a82GHY9jltv1YcxTCQ5BQgjqzVlr8kuN2hZdtuq7zItbxy+vRkf DlHs5PjVWVOV4u0w6KyRYEhkV0k9LbI= -----END CERTIFICATE-----Generated at Sat Apr 5 19:10:35 2025 by rpki-client