$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/35ac0cb4-1492-3672-87c8-e934c1ffc305.roa File: 35ac0cb4-1492-3672-87c8-e934c1ffc305.roa (raw, json) Hash identifier: Ieo3G/D1siABKeAWFCNTb2i168mX/IOa0oYzLOUrBfM= Subject key identifier: 54:71:27:2D:33:77:86:49:B8:38:EF:AF:1A:AC:09:67:6C:97:88:F3 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849ABB4AD8307F0341C41BB6460 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/35ac0cb4-1492-3672-87c8-e934c1ffc305.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 1299 IP address blocks: 198.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ad:83:07:f0:34:1c:41:bb:64:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=a843838c-a34b-4061-8dd6-50c145644add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0a:ce:dd:df:6e:45:5d:59:d0:f1:00:c6:1c: 77:a2:39:bb:c8:9e:a9:d3:7a:10:de:6b:0b:e9:83: a7:d3:5d:a7:21:b0:f8:fd:35:f6:0e:96:3f:88:e3: 3c:19:2c:9c:ea:6d:ed:1b:97:ab:e0:e2:0b:93:4d: f9:8f:1f:2e:ca:68:15:19:65:db:c8:28:d8:fc:37: 35:20:74:0a:ca:d1:4f:5e:1c:73:4e:dc:a3:24:74: d3:17:ef:61:0b:be:22:db:85:d0:46:cf:6c:02:2d: a5:d4:e6:d6:11:54:fe:a2:cc:39:f1:fe:42:5c:35: 50:78:f1:fa:31:22:8c:77:95:be:c3:68:f1:ae:e9: 4d:64:b1:4d:56:06:9b:b6:95:f4:a8:f4:ce:ca:56: 77:c2:02:65:a2:ec:16:4a:e8:ac:b9:e1:f4:c0:c8: cc:b7:ef:3d:dd:f1:f4:42:44:e4:9e:7d:c5:24:de: 59:ad:d9:7d:b2:49:3e:26:46:5e:8c:78:bf:6a:2b: d9:b2:4c:22:b2:cb:e4:2f:77:ca:4f:e2:2b:ae:ae: 61:61:16:6b:6c:af:ff:3c:20:8e:e2:80:c4:aa:24: d7:6e:30:6f:f4:02:b6:89:e9:7d:58:8d:51:67:c2: 74:1c:2e:7c:70:9b:75:20:b5:40:76:04:83:64:0d: 4d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:71:27:2D:33:77:86:49:B8:38:EF:AF:1A:AC:09:67:6C:97:88:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/35ac0cb4-1492-3672-87c8-e934c1ffc305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f5:91:1d:d9:54:5f:08:a5:ee:ae:65:f1:ba:f2:bf:e1:d2: db:ae:b7:e9:df:f3:1d:47:22:97:40:ab:2b:4a:90:9b:0c:58: 1d:f0:2a:6b:c4:cc:eb:f9:6d:79:19:cb:45:01:65:f2:7c:c4: 39:8c:94:6a:ed:ef:49:91:4d:25:bc:ac:c6:be:3d:c7:a1:b6: 64:79:90:6d:2b:79:23:ff:75:62:4e:2e:16:08:54:c1:76:a2: b4:ba:ef:7f:96:f7:7d:e4:fa:fe:49:18:0e:f3:07:78:b6:8a: 8f:22:24:8d:53:6d:df:87:63:fa:17:5a:82:be:89:47:0c:c1: cf:36:d9:d0:a0:07:45:66:bd:80:36:43:cf:1c:d2:75:38:ed: 5f:e5:f8:f5:bc:90:ae:d1:f0:7e:00:d2:d7:db:79:b8:e2:a3: f4:bf:70:60:d0:66:3c:8f:89:73:fb:2b:49:78:d6:8a:39:19: 8f:3f:7f:f9:e5:3c:a9:c2:c4:b5:89:40:88:35:97:ce:8f:37: 5a:f8:f6:1f:1d:8d:84:18:a4:77:6b:dc:0c:bf:bc:63:06:4d: 43:2d:af:ab:29:ed:9a:ab:f8:b5:7e:44:95:97:08:f1:41:40: 06:a8:3e:dd:9c:fc:2e:56:4f:7e:63:f1:2c:37:07:78:c8:dd: b2:5e:95:aa -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmrtK2DB/A0HEG7ZGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YTg0MzgzOGMtYTM0Yi00MDYxLThkZDYtNTBjMTQ1NjQ0YWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0grO3d9uRV1Z0PEAxhx3ojm7yJ6p03oQ3msL 6YOn012nIbD4/TX2DpY/iOM8GSyc6m3tG5er4OILk035jx8uymgVGWXbyCjY/Dc1 IHQKytFPXhxzTtyjJHTTF+9hC74i24XQRs9sAi2l1ObWEVT+osw58f5CXDVQePH6 MSKMd5W+w2jxrulNZLFNVgabtpX0qPTOylZ3wgJlouwWSuisueH0wMjMt+893fH0 QkTknn3FJN5Zrdl9skk+JkZejHi/aivZskwissvkL3fKT+Irrq5hYRZrbK//PCCO 4oDEqiTXbjBv9AK2iel9WI1RZ8J0HC58cJt1ILVAdgSDZA1NEQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFRxJy0zd4ZJuDjvrxqsCWdsl4jzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzVhYzBjYjQtMTQ5Mi0z NjcyLTg3YzgtZTkzNGMxZmZjMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAfWRHdlUXwil7q5l8bryv+HS26636d/zHUcil0CrK0qQmwxYHfAqa8TM 6/lteRnLRQFl8nzEOYyUau3vSZFNJbysxr49x6G2ZHmQbSt5I/91Yk4uFghUwXai tLrvf5b3feT6/kkYDvMHeLaKjyIkjVNt34dj+hdagr6JRwzBzzbZ0KAHRWa9gDZD zxzSdTjtX+X49byQrtHwfgDS19t5uOKj9L9wYNBmPI+Jc/srSXjWijkZjz9/+eU8 qcLEtYlAiDWXzo83Wvj2Hx2NhBikd2vcDL+8YwZNQy2vqyntmqv4tX5ElZcI8UFA Bqg+3Zz8LlZPfmPxLDcHeMjdsl6Vqg== -----END CERTIFICATE-----Generated at Sat May 10 13:44:13 2025 by rpki-client