$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa File: 3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa (raw, json) Hash identifier: EMoAvsYR64v3fW+m31iMQacQl0RibCLbesGSXpKCBgE= Subject key identifier: 1C:19:41:04:FA:A3:58:AC:78:FA:CF:FC:CF:18:B4:DF:67:90:2E:65 Certificate issuer: /CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Certificate serial: 010D0C9F432858493C09248F8075A8546D4FBC80 Authority key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 64236 IP address blocks: 66.181.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:24:8f:80:75:a8:54:6d:4f:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=81c77e58-66a9-473a-9551-99daae9efd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:44:77:36:e0:6c:a1:94:a7:ef:e6:91:4f:d0: 94:3d:b0:51:59:99:45:27:94:a5:cf:6d:14:c0:53: ee:d2:2c:a9:c1:ea:be:b5:b2:05:e8:60:ad:29:4e: 97:35:ef:40:9c:da:5c:88:e6:45:c6:a9:cf:93:db: 9a:49:69:8f:6b:38:13:71:3d:8e:23:cf:a1:b0:05: fc:6e:e8:e4:c6:6d:12:00:6e:fa:c1:a6:ed:c8:12: d7:f6:76:9e:87:21:82:65:11:0b:ba:fb:fb:19:44: 05:88:65:5e:1d:7c:d9:80:1e:ed:d3:5f:49:8c:ef: 9a:fb:5d:e9:89:47:15:71:8a:64:60:89:f4:b3:d9: 81:94:93:d7:cd:c8:39:0e:a3:a5:e2:7e:b2:25:46: 92:5a:dd:ed:ba:79:f5:97:cd:8c:52:af:1b:8e:ca: 5f:a4:6b:95:68:85:32:0b:fc:4f:d9:7c:e2:f1:8b: 04:8c:1c:9c:2c:94:35:86:92:dd:4e:91:b9:b4:16: 1f:1d:83:16:43:73:82:f2:32:6e:9b:2b:bd:e7:00: 6b:6c:9a:33:01:24:87:d1:a8:38:c6:e6:f6:36:b8: f6:57:24:19:a5:ac:f4:56:f1:a6:c8:f8:05:b9:ba: 76:8f:48:cc:48:60:6e:96:c5:6c:5a:38:4b:2e:87: 84:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:19:41:04:FA:A3:58:AC:78:FA:CF:FC:CF:18:B4:DF:67:90:2E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl X509v3 Authority Key Identifier: keyid:A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer sbgp-ipAddrBlock: critical IPv4: 66.181.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:3e:ea:de:68:2a:a5:4a:71:8a:d3:a1:af:9d:76:dc:e4:dd: fb:80:38:15:7b:b6:7e:61:5c:f2:50:55:8c:41:26:96:d3:a7: 60:4b:35:fb:95:9a:e9:5d:88:a1:7e:d7:00:e4:50:55:6f:43: 0f:ba:f7:19:9b:28:47:7f:ed:cf:a2:69:a1:a5:b0:80:95:30: e6:6f:e6:e9:a5:fe:1b:3e:d2:f0:df:32:82:a9:28:00:a1:19: 2b:83:86:1b:63:04:9d:5a:91:98:1d:67:a9:a6:d1:b6:d3:bf: 1c:ac:3c:70:1d:8e:6f:fb:63:56:58:e6:59:e5:89:42:76:71: 8d:b0:55:53:50:3b:b5:0c:ae:ec:d0:6e:18:4d:09:ba:00:4a: 33:3a:e6:18:2c:d1:7f:4a:d7:81:11:70:10:f5:74:ba:5d:84: e5:6f:25:ed:02:40:66:ad:b8:c3:6c:9a:c1:4f:1a:38:81:9b: 58:f3:b3:43:88:07:71:50:8e:45:e3:43:dd:2d:c0:ab:1d:2c: c7:62:85:3e:21:43:69:37:a5:c4:b2:f2:df:59:39:f1:3d:f8: 2d:b2:cf:e4:a1:35:ae:7f:fb:58:02:f6:10:7d:2f:a9:3f:aa: 52:ff:f7:64:41:ae:90:d5:a4:a9:91:11:c1:07:08:f2:25:74: cb:1c:d8:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSSPgHWoVG1PvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyODQ5NGYtMWQzZi00YTQ1LThhNzQtYmRlNDFjMjUw MmEyMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk ODFjNzdlNTgtNjZhOS00NzNhLTk1NTEtOTlkYWFlOWVmZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUR3NuBsoZSn7+aRT9CUPbBRWZlFJ5Slz20U wFPu0iypweq+tbIF6GCtKU6XNe9AnNpciOZFxqnPk9uaSWmPazgTcT2OI8+hsAX8 bujkxm0SAG76wabtyBLX9naehyGCZRELuvv7GUQFiGVeHXzZgB7t019JjO+a+13p iUcVcYpkYIn0s9mBlJPXzcg5DqOl4n6yJUaSWt3tunn1l82MUq8bjspfpGuVaIUy C/xP2Xzi8YsEjBycLJQ1hpLdTpG5tBYfHYMWQ3OC8jJumyu95wBrbJozASSH0ag4 xub2Nrj2VyQZpaz0VvGmyPgFubp2j0jMSGBulsVsWjhLLoeEVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwZQQT6o1isePrP/M8YtN9nkC5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4 NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0MWMyNTAyYTIvM2JkMjNhNjctNmI0YS0z ZDY4LTgyNTMtZmQ0ODVjOWY2ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGYyODQ5NGYtMWQzZi00YTQ1LThh NzQtYmRlNDFjMjUwMmEyL2RmMjg0OTRmLTFkM2YtNGE0NS04YTc0LWJkZTQxYzI1 MDJhMi5jcmwwHwYDVR0jBBgwFoAUqKBljbCvNzrfdrtQvaDMJLEVS5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0 MWMyNTAyYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQrUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALc+6t5oKqVKcYrToa+ddtzk3fuAOBV7tn5hXPJQVYxBJpbTp2BLNfuV muldiKF+1wDkUFVvQw+69xmbKEd/7c+iaaGlsICVMOZv5uml/hs+0vDfMoKpKACh GSuDhhtjBJ1akZgdZ6mm0bbTvxysPHAdjm/7Y1ZY5lnliUJ2cY2wVVNQO7UMruzQ bhhNCboASjM65hgs0X9K14ERcBD1dLpdhOVvJe0CQGatuMNsmsFPGjiBm1jzs0OI B3FQjkXjQ90twKsdLMdihT4hQ2k3pcSy8t9ZOfE9+C2yz+ShNa5/+1gC9hB9L6k/ qlL/92RBrpDVpKmREcEHCPIldMsc2EA= -----END CERTIFICATE-----Generated at Sat Apr 12 13:29:38 2025 by rpki-client