$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/0f3dff77-9a21-3b95-b001-9fff516c1f7f.roa File: 0f3dff77-9a21-3b95-b001-9fff516c1f7f.roa (raw, json) Hash identifier: jNqOXp4UpYstjaR09nA6TWaOPX8m0K08iHhcWL011HE= Subject key identifier: 38:99:55:E6:49:A0:76:1E:F1:F3:A2:C8:F9:56:E2:8B:52:EE:2B:0B Certificate issuer: /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907 Certificate serial: 010D0C9F432858486EF5BD2A8DBADF079AE03D80 Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/0f3dff77-9a21-3b95-b001-9fff516c1f7f.roa Signing time: Sat 04 Jan 2025 14:00:51 +0000 ROA not before: Sat 04 Jan 2025 14:00:51 +0000 ROA not after: Fri 04 Apr 2025 13:00:51 +0000 asID: 14233 IP address blocks: 66.43.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6e:f5:bd:2a:8d:ba:df:07:9a:e0:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907 Validity Not Before: Jan 4 14:00:51 2025 GMT Not After : Apr 4 13:00:51 2025 GMT Subject: CN=11cf43ba-687d-4e4f-8308-7c6714de59da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:eb:91:38:d4:53:b5:c1:d8:bb:f0:fc:c0:0a: 63:17:48:3a:63:4b:b8:68:d5:10:70:eb:09:b5:88: 7d:72:93:9a:bd:86:d8:c1:da:7c:fa:20:a0:62:9b: 5d:e4:f2:b9:73:ef:82:52:03:0d:4e:2e:2e:58:7b: 0d:72:da:48:12:43:bc:70:1d:ac:bd:4a:48:aa:5e: 2a:cf:3e:af:d2:d7:8a:ed:39:6d:31:31:21:89:8b: 93:a2:1a:eb:ee:98:5e:e3:8c:ea:3d:db:e5:36:f1: c2:60:8e:49:54:33:dc:b3:0d:33:27:e5:4f:9d:e1: 64:8f:38:7e:a8:b6:8f:b2:37:c3:33:c3:4b:75:cb: fa:a3:1a:3a:e0:0d:c6:ce:f9:a1:73:48:18:15:aa: d9:7a:51:15:7c:6e:9b:7c:66:b5:68:1a:16:a8:a9: e4:2f:46:7a:bf:65:7b:56:dd:82:1e:81:f7:2f:56: fd:74:62:31:c3:22:f7:a2:40:79:96:9c:59:4d:28: d3:90:26:20:02:b0:bf:a1:e1:b0:8e:11:a3:ee:5b: 80:ea:4e:21:e8:56:8b:1d:5e:0e:ba:2d:6b:59:bf: 48:91:76:5a:da:62:06:66:4b:6b:77:3f:1b:71:4b: 5f:77:fa:99:1e:d4:9e:97:ea:40:2a:f1:f9:2e:e1: 0e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:99:55:E6:49:A0:76:1E:F1:F3:A2:C8:F9:56:E2:8B:52:EE:2B:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/0f3dff77-9a21-3b95-b001-9fff516c1f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl X509v3 Authority Key Identifier: keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer sbgp-ipAddrBlock: critical IPv4: 66.43.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:73:4f:7b:d6:fd:e5:bc:39:9e:8b:2d:db:e6:52:79:c6:ac: be:ad:d6:42:51:c8:ea:f1:15:a9:b6:b1:75:c3:a5:f6:ea:96: 0f:2f:bd:b1:a8:c7:b8:18:9a:49:6c:4c:f8:cb:4e:23:a0:e9: a2:d0:c7:ca:29:dc:80:6a:12:bf:f1:ff:1a:d6:ac:57:f0:89: cc:32:8a:7c:68:71:78:d1:74:0e:5a:82:d7:9a:d2:02:6f:1c: cf:f0:54:88:20:74:b7:34:8d:e0:62:84:e3:20:d5:31:53:c0: 3a:50:59:c8:3c:43:ff:e0:67:27:93:fc:1e:50:e3:71:e4:0f: b6:a8:6c:14:21:5a:de:76:03:67:25:96:53:21:98:32:69:2f: b0:83:df:e3:62:b3:de:7d:d7:a4:03:c7:6f:08:11:df:b3:32: bf:c7:13:d1:80:50:cd:40:e0:50:17:3d:1f:09:60:43:2b:f0: 10:67:c1:6f:0e:f2:7a:db:4e:9d:34:e1:ca:40:a3:57:bd:0c: 59:1f:1c:b6:6e:e5:84:80:b0:a7:45:eb:d5:2f:93:1a:62:09: 4e:f7:f8:37:88:8d:3d:1a:10:55:49:65:02:50:7f:b0:f6:12: 15:7c:fd:12:7a:b4:7c:2d:58:24:25:af:08:c9:3c:5f:c7:ab: e8:14:d6:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhu9b0qjbrfB5rgPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU0ODNmMmYtY2JhYS00YzJiLWE5ZTQtOGFmM2MwZjg2 OTA3MB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk MTFjZjQzYmEtNjg3ZC00ZTRmLTgzMDgtN2M2NzE0ZGU1OWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeuRONRTtcHYu/D8wApjF0g6Y0u4aNUQcOsJ tYh9cpOavYbYwdp8+iCgYptd5PK5c++CUgMNTi4uWHsNctpIEkO8cB2svUpIql4q zz6v0teK7TltMTEhiYuTohrr7phe44zqPdvlNvHCYI5JVDPcsw0zJ+VPneFkjzh+ qLaPsjfDM8NLdcv6oxo64A3Gzvmhc0gYFarZelEVfG6bfGa1aBoWqKnkL0Z6v2V7 Vt2CHoH3L1b9dGIxwyL3okB5lpxZTSjTkCYgArC/oeGwjhGj7luA6k4h6FaLHV4O ui1rWb9IkXZa2mIGZktrdz8bcUtfd/qZHtSel+pAKvH5LuEOVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiZVeZJoHYe8fOiyPlW4otS7isLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTQ4 M2YyZi1jYmFhLTRjMmItYTllNC04YWYzYzBmODY5MDcvMGYzZGZmNzctOWEyMS0z Yjk1LWIwMDEtOWZmZjUxNmMxZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmU0ODNmMmYtY2JhYS00YzJiLWE5 ZTQtOGFmM2MwZjg2OTA3L2JlNDgzZjJmLWNiYWEtNGMyYi1hOWU0LThhZjNjMGY4 NjkwNy5jcmwwHwYDVR0jBBgwFoAUTmq1lDv9BWbGGz6WTJWAGkgd3sEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTQ4M2YyZi1jYmFhLTRjMmItYTllNC04YWYz YzBmODY5MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQisQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpzT3vW/eW8OZ6LLdvmUnnGrL6t1kJRyOrxFam2sXXDpfbqlg8vvbGo x7gYmklsTPjLTiOg6aLQx8op3IBqEr/x/xrWrFfwicwyinxocXjRdA5agtea0gJv HM/wVIggdLc0jeBihOMg1TFTwDpQWcg8Q//gZyeT/B5Q43HkD7aobBQhWt52A2cl llMhmDJpL7CD3+Nis95916QDx28IEd+zMr/HE9GAUM1A4FAXPR8JYEMr8BBnwW8O 8nrbTp004cpAo1e9DFkfHLZu5YSAsKdF69UvkxpiCU73+DeIjT0aEFVJZQJQf7D2 EhV8/RJ6tHwtWCQlrwjJPF/Hq+gU1pU= -----END CERTIFICATE-----Generated at Fri Mar 14 08:45:04 2025 by rpki-client