$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/66c487a4-5908-3ed4-bdfd-82dbeed62c2a.roa File: 66c487a4-5908-3ed4-bdfd-82dbeed62c2a.roa (raw, json) Hash identifier: 9m4QAWo8i+djpXn4SY+pbjH0cAKV5E6cv9rbU2XLEEs= Subject key identifier: 89:87:C0:97:DB:A5:62:83:60:28:8A:91:72:26:04:A1:68:18:EF:CF Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F43285849CE9A60DD96C32DBADCF2B300 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/66c487a4-5908-3ed4-bdfd-82dbeed62c2a.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 2734 IP address blocks: 192.34.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:60:dd:96:c3:2d:ba:dc:f2:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=6949d497-f975-43a9-b951-ea71dea974c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b1:a2:50:30:c0:b1:65:27:23:9a:53:03:dc: 04:a7:da:27:49:e4:73:fa:94:52:8e:5e:01:e3:c0: d8:48:cb:98:9b:44:aa:4d:08:36:dc:f6:e2:b5:3a: 7e:d3:59:17:81:cc:dd:1c:94:58:a4:44:2f:ce:18: 74:42:6c:81:32:0c:07:46:c1:76:75:77:84:90:0a: 49:07:99:7b:00:02:8e:cb:fa:c0:cd:39:1c:b5:6b: 23:30:dc:6d:bc:38:19:16:55:4e:99:60:94:ba:4b: b9:fe:12:40:c4:91:52:38:6f:9a:9c:cd:90:f3:d8: 8c:6b:51:fa:80:ae:5b:96:97:60:e4:30:ed:79:65: 7a:fa:be:5e:7d:00:de:0b:93:1d:64:9e:4a:e7:be: 0a:10:8b:ab:71:64:fa:8c:31:db:64:76:49:f3:99: c3:99:ea:fa:0c:9c:b2:dc:3d:db:30:6b:1d:87:3a: 3a:c5:20:ed:9c:c9:42:d4:fa:e4:0a:6e:9e:30:b9: 5f:06:f3:f0:8c:da:74:8e:c8:53:19:c7:ce:41:10: 2e:62:aa:86:45:12:d2:cf:17:43:57:81:81:05:89: f1:35:38:c8:6e:e9:94:06:32:2f:fb:76:f9:10:a1: 38:7d:80:65:85:0e:25:02:e3:db:68:77:85:f1:de: e1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:87:C0:97:DB:A5:62:83:60:28:8A:91:72:26:04:A1:68:18:EF:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/66c487a4-5908-3ed4-bdfd-82dbeed62c2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 192.34.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d1:5a:6b:5c:11:a3:ef:40:84:2f:89:07:35:ee:d0:86:49: 0a:96:a7:8c:b3:22:94:90:e4:4e:8f:f2:97:63:9c:72:76:df: d3:86:bf:b5:e8:f0:a5:40:f0:c0:3e:ee:e9:05:c5:fd:6a:f0: 5d:b2:ac:8e:d3:38:29:52:d3:b4:8b:0e:ae:98:7e:47:dd:24: ff:b1:a7:0a:3c:a9:bd:51:d1:e4:9f:4c:c7:02:98:00:95:69: ab:a2:14:43:00:9c:fd:d1:05:25:d5:3f:58:d9:4e:ac:f5:8c: d5:ca:ce:1b:d3:97:c6:52:47:e9:74:15:81:1a:9b:71:ad:31: 55:3f:f0:88:a5:87:72:0a:95:0b:e5:2f:d8:ca:db:51:f7:4b: 59:39:39:d7:a6:1e:55:be:c6:b1:51:40:53:b4:c5:55:99:4b: 8f:b0:4d:58:99:69:e5:49:ea:46:9e:25:ea:88:a2:d1:ec:5b: 73:8f:68:4c:c8:a5:c5:02:39:da:53:86:d5:10:06:c0:c0:00: 43:5f:2b:24:87:fa:94:ab:e2:50:83:e8:c3:34:92:c9:10:ea: 07:c2:8e:9b:7a:65:46:4c:91:5c:c1:a0:2d:67:86:63:39:3b: 6a:ea:70:20:0a:7d:3c:69:5e:86:64:3f:f1:ba:d3:e1:80:67: 99:8f:ab:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmDdlsMtutzyswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk Njk0OWQ0OTctZjk3NS00M2E5LWI5NTEtZWE3MWRlYTk3NGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7GiUDDAsWUnI5pTA9wEp9onSeRz+pRSjl4B 48DYSMuYm0SqTQg23PbitTp+01kXgczdHJRYpEQvzhh0QmyBMgwHRsF2dXeEkApJ B5l7AAKOy/rAzTkctWsjMNxtvDgZFlVOmWCUuku5/hJAxJFSOG+anM2Q89iMa1H6 gK5blpdg5DDteWV6+r5efQDeC5MdZJ5K574KEIurcWT6jDHbZHZJ85nDmer6DJyy 3D3bMGsdhzo6xSDtnMlC1PrkCm6eMLlfBvPwjNp0jshTGcfOQRAuYqqGRRLSzxdD V4GBBYnxNTjIbumUBjIv+3b5EKE4fYBlhQ4lAuPbaHeF8d7hrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImHwJfbpWKDYCiKkXImBKFoGO/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvNjZjNDg3YTQtNTkwOC0z ZWQ0LWJkZmQtODJkYmVlZDYyYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwCIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjRWmtcEaPvQIQviQc17tCGSQqWp4yzIpSQ5E6P8pdjnHJ239OGv7Xo 8KVA8MA+7ukFxf1q8F2yrI7TOClS07SLDq6YfkfdJP+xpwo8qb1R0eSfTMcCmACV aauiFEMAnP3RBSXVP1jZTqz1jNXKzhvTl8ZSR+l0FYEam3GtMVU/8Iilh3IKlQvl L9jK21H3S1k5OdemHlW+xrFRQFO0xVWZS4+wTViZaeVJ6kaeJeqIotHsW3OPaEzI pcUCOdpThtUQBsDAAENfKySH+pSr4lCD6MM0kskQ6gfCjpt6ZUZMkVzBoC1nhmM5 O2rqcCAKfTxpXoZkP/G60+GAZ5mPqzg= -----END CERTIFICATE-----Generated at Sun May 11 09:09:54 2025 by rpki-client