$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fcf5e4c4-8a09-3f91-9459-aeef6b8308f6.roa File: fcf5e4c4-8a09-3f91-9459-aeef6b8308f6.roa (raw, json) Hash identifier: OAVncxcVdpaOmgvc+OFnhQvNIJx8LxaIZzNodkWPV7c= Subject key identifier: 03:2F:30:A4:AE:E8:68:8A:1C:91:95:5E:0B:44:07:71:0A:31:CD:84 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285848BD20E404AC5FB36F3D74EB80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fcf5e4c4-8a09-3f91-9459-aeef6b8308f6.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 174 IP address blocks: 66.90.81.0/24 maxlen: 24 198.16.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:e4:04:ac:5f:b3:6f:3d:74:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=1fb07f67-6b37-4d99-a806-cb52c6c4b067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d4:0b:42:99:3f:38:2a:84:4c:48:91:ec:7f: 84:f3:81:e2:1d:84:07:1a:a0:1f:e1:65:d5:60:42: c4:6a:00:e0:62:08:3b:7f:df:6d:0c:75:2c:67:b7: 1a:4e:29:15:b7:2a:bd:8f:20:bd:ed:00:77:88:6e: 2e:28:56:c0:bf:dc:3e:2b:5d:27:00:6c:47:86:79: a1:91:cf:14:ff:57:9c:66:94:c9:66:59:b2:46:5f: 53:e3:a0:0a:04:21:52:c0:72:ad:96:27:4c:94:f5: 81:fb:d8:20:a1:f6:ca:e5:9d:ac:71:f2:d7:97:84: a6:89:82:b9:9b:a6:80:53:cc:a3:e7:71:15:3f:82: 22:ab:44:f6:8c:59:a3:5e:54:8e:fc:6a:f9:75:72: 32:11:ca:ae:6b:7b:84:d9:5d:7d:7a:b2:5d:eb:9c: 24:02:69:4a:8c:08:d3:09:21:89:c1:d0:6f:d7:b4: d8:18:6c:2f:bc:65:cd:01:d8:73:d1:12:c2:bf:9d: b5:7e:47:9b:4e:1c:76:3d:96:1e:08:6e:86:a0:3f: f0:0e:a3:cf:e1:de:3d:44:ef:50:2b:44:d3:ab:d9: c2:0d:bd:40:97:39:43:77:de:e5:69:89:38:50:2b: 9f:77:8e:0d:f3:1b:aa:fe:b5:ee:75:00:c4:d7:3a: 5b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2F:30:A4:AE:E8:68:8A:1C:91:95:5E:0B:44:07:71:0A:31:CD:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fcf5e4c4-8a09-3f91-9459-aeef6b8308f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 66.90.81.0/24 198.16.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:85:bc:17:fb:38:de:7a:f8:23:f8:ee:fc:3c:40:a8:86:08: 0d:d5:66:32:84:1b:56:b7:9a:92:dd:ec:ea:8b:13:e3:b8:c0: d2:df:b2:f7:50:3e:8e:7d:58:4d:0e:7b:88:ef:a5:97:29:3d: 07:17:a6:50:b1:14:83:c0:52:19:41:69:b0:03:11:7b:9d:ae: 60:f3:a2:2e:71:e1:a6:93:a7:c6:df:9a:09:9a:6a:51:12:7a: 9d:3b:99:d1:ec:94:2c:7f:18:6c:71:f6:82:0d:ab:31:8f:0d: f0:35:12:d2:2e:84:08:d2:63:c1:e7:93:5f:06:d7:a1:b6:17: dd:8f:df:df:bf:72:5c:0a:86:2e:5a:a9:d8:7a:98:89:7f:1f: e7:c2:05:c6:fa:dc:54:62:9e:52:d6:90:16:8e:99:3d:12:40: 19:8d:2b:06:61:da:90:90:8e:38:2b:46:22:46:53:c4:11:be: 2e:92:bd:09:8c:fb:de:24:2f:b5:f3:fd:eb:5b:14:00:e1:d2: b7:31:df:3a:95:90:5d:36:89:a2:ef:9b:35:32:9f:9f:fc:4c: 56:27:4b:57:f8:62:dd:c3:1b:6f:3d:8c:48:22:7f:b5:2b:82: c2:48:db:ac:c5:60:6c:12:db:55:f9:b8:66:f6:a9:21:b6:50: 87:80:ef:fe -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEi9IOQErF+zbz1064AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk MWZiMDdmNjctNmIzNy00ZDk5LWE4MDYtY2I1MmM2YzRiMDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNQLQpk/OCqETEiR7H+E84HiHYQHGqAf4WXV YELEagDgYgg7f99tDHUsZ7caTikVtyq9jyC97QB3iG4uKFbAv9w+K10nAGxHhnmh kc8U/1ecZpTJZlmyRl9T46AKBCFSwHKtlidMlPWB+9ggofbK5Z2scfLXl4SmiYK5 m6aAU8yj53EVP4Iiq0T2jFmjXlSO/Gr5dXIyEcqua3uE2V19erJd65wkAmlKjAjT CSGJwdBv17TYGGwvvGXNAdhz0RLCv521fkebThx2PZYeCG6GoD/wDqPP4d49RO9Q K0TTq9nCDb1AlzlDd97laYk4UCufd44N8xuq/rXudQDE1zpbBQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAMvMKSu6GiKHJGVXgtEB3EKMc2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZmNmNWU0YzQtOGEwOS0z ZjkxLTk0NTktYWVlZjZiODMwOGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQlpRAwQB xhBuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADuFvBf7ON56+CP47vw8QKiGCA3VZjKEG1a3mpLd7OqLE+O4 wNLfsvdQPo59WE0Oe4jvpZcpPQcXplCxFIPAUhlBabADEXudrmDzoi5x4aaTp8bf mgmaalESep07mdHslCx/GGxx9oINqzGPDfA1EtIuhAjSY8Hnk18G16G2F92P39+/ clwKhi5aqdh6mIl/H+fCBcb63FRinlLWkBaOmT0SQBmNKwZh2pCQjjgrRiJGU8QR vi6SvQmM+94kL7Xz/etbFADh0rcx3zqVkF02iaLvmzUyn5/8TFYnS1f4Yt3DG289 jEgif7UrgsJI26zFYGwS21X5uGb2qSG2UIeA7/4= -----END CERTIFICATE-----Generated at Fri Apr 11 23:58:51 2025 by rpki-client