$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eec3889c-d66d-35b0-908e-27b95ad60786.roa File: eec3889c-d66d-35b0-908e-27b95ad60786.roa (raw, json) Hash identifier: hn/wPHVoI1BEcPBab4t8Ax4Wdr+He1Uv1onwRzWqpd8= Subject key identifier: 40:2E:B4:70:90:8C:74:01:57:06:FB:FA:45:CB:D9:AD:B9:35:0A:49 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849ABB4AD46E20765B133D59580 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eec3889c-d66d-35b0-908e-27b95ad60786.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7018 IP address blocks: 198.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ad:46:e2:07:65:b1:33:d5:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=10e84b3b-f8c0-4f22-bfc9-878f90d23eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c6:8b:ff:59:54:4b:bd:2b:8f:71:f6:cd:25: 22:8f:c9:24:ee:31:03:61:15:f0:c6:4f:57:bd:21: 35:78:ca:f4:e0:2d:8b:f0:c1:9a:4e:49:b9:46:a2: 82:f8:c0:ad:3c:e4:5b:24:84:de:8f:11:83:47:f9: 83:2a:22:75:64:83:fe:cb:88:76:83:a7:7e:3d:21: ed:88:4c:5f:cb:8b:96:1c:f4:94:e6:cd:41:cf:aa: ff:29:fb:13:3e:cb:5e:d7:30:6f:5c:41:cb:06:02: da:90:7f:1b:4f:ef:62:96:e2:f5:26:8f:91:0c:84: bb:e3:fb:c7:35:73:ae:25:08:b0:36:10:f2:f3:d9: 2b:f9:2e:41:62:9b:91:90:14:26:ed:26:6e:d5:05: 90:55:7f:4a:40:a6:99:b7:0c:3e:32:5e:b4:64:aa: 11:a6:1b:2c:3f:01:07:2a:f0:d4:2e:05:85:b5:b2: 29:c3:14:5b:28:6f:cd:23:1b:c9:9e:86:e7:34:34: 40:44:eb:d7:51:42:eb:5e:fd:e9:d3:8f:36:0a:d5: e3:11:2e:b7:e9:ed:bb:22:c8:6c:d5:b6:80:e0:99: 3b:21:fb:a8:62:58:79:a9:38:8e:5f:9b:9c:31:c9: f7:27:36:d5:60:b0:e4:71:f8:22:b4:49:3b:2a:df: 52:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2E:B4:70:90:8C:74:01:57:06:FB:FA:45:CB:D9:AD:B9:35:0A:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eec3889c-d66d-35b0-908e-27b95ad60786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:45:eb:a8:73:66:63:ed:05:49:b8:a2:e2:14:13:87:24:ea: 40:c1:02:a9:fd:d9:98:cf:18:fb:67:93:4f:8c:13:52:f7:5b: 12:e5:ca:c5:e5:2f:9b:c8:53:ed:21:c6:56:22:97:6c:ce:7d: c6:c8:a3:05:57:28:02:e5:09:5f:17:3c:76:b3:35:06:6c:a7: 1f:12:d3:d6:ee:93:d6:a9:63:67:c8:f2:65:b2:62:5f:d8:05: 13:c1:19:66:65:4b:67:45:52:90:99:c5:3b:7d:f5:5b:e7:dd: d7:17:f1:91:48:7e:2d:9e:d1:43:c4:b5:47:05:6f:16:d9:d7: 0d:63:a6:a1:c5:40:24:86:bf:4d:99:fd:a2:68:4c:72:55:f8: 53:82:a1:af:60:77:23:95:47:8b:7a:ec:51:fc:64:be:8e:5e: ce:61:89:dd:51:aa:ff:85:a8:f9:0d:06:a3:41:5c:a3:dc:b0: fb:d7:26:af:0e:06:28:19:0d:c2:5b:08:72:b7:1d:a0:0d:e0: a2:f5:b5:12:cb:fa:bd:bd:c9:b2:72:b1:f3:81:14:2e:f5:81: fe:5a:2f:41:dd:41:a9:b2:e5:9e:08:ed:07:9e:bb:0a:42:1f: 8a:c2:9b:f5:47:af:5c:f7:0c:6c:7b:10:42:38:78:fa:f1:c9: de:40:a0:06 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmrtK1G4gdlsTPVlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MTBlODRiM2ItZjhjMC00ZjIyLWJmYzktODc4ZjkwZDIzZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsaL/1lUS70rj3H2zSUij8kk7jEDYRXwxk9X vSE1eMr04C2L8MGaTkm5RqKC+MCtPORbJITejxGDR/mDKiJ1ZIP+y4h2g6d+PSHt iExfy4uWHPSU5s1Bz6r/KfsTPste1zBvXEHLBgLakH8bT+9iluL1Jo+RDIS74/vH NXOuJQiwNhDy89kr+S5BYpuRkBQm7SZu1QWQVX9KQKaZtww+Ml60ZKoRphssPwEH KvDULgWFtbIpwxRbKG/NIxvJnobnNDRAROvXUULrXv3p0482CtXjES636e27Ishs 1baA4Jk7IfuoYlh5qTiOX5ucMcn3JzbVYLDkcfgitEk7Kt9S7QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEAutHCQjHQBVwb7+kXL2a25NQpJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZWVjMzg4OWMtZDY2ZC0z NWIwLTkwOGUtMjdiOTVhZDYwNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAnEXrqHNmY+0FSbii4hQThyTqQMECqf3ZmM8Y+2eTT4wTUvdbEuXKxeUv m8hT7SHGViKXbM59xsijBVcoAuUJXxc8drM1BmynHxLT1u6T1qljZ8jyZbJiX9gF E8EZZmVLZ0VSkJnFO331W+fd1xfxkUh+LZ7RQ8S1RwVvFtnXDWOmocVAJIa/TZn9 omhMclX4U4Khr2B3I5VHi3rsUfxkvo5ezmGJ3VGq/4Wo+Q0Go0Fco9yw+9cmrw4G KBkNwlsIcrcdoA3govW1Esv6vb3JsnKx84EULvWB/lovQd1BqbLlngjtB567CkIf isKb9UevXPcMbHsQQjh4+vHJ3kCgBg== -----END CERTIFICATE-----Generated at Thu May 8 07:45:32 2025 by rpki-client