$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa File: b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa (raw, json) Hash identifier: w8vAQhbzfAHfYOaxglZrizUlC3Ot4MWCLnZfoGYZ1jM= Subject key identifier: B7:51:AB:4A:44:85:87:E0:D6:23:0C:EC:9B:71:2B:7E:5B:63:4A:D4 Certificate issuer: /CN=785749fa-091c-4978-a918-3238e45d2a1c Certificate serial: 010D0C9F43285849BDDA2B3DA634E1A627726400 Authority key identifier: 33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 400686 IP address blocks: 64.146.166.0/24 maxlen: 24 66.119.196.0/24 maxlen: 24 66.119.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2b:3d:a6:34:e1:a6:27:72:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=785749fa-091c-4978-a918-3238e45d2a1c Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=d430a08a-3ae8-4305-97a0-db04cdb9554b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ca:c3:db:8a:ba:c3:72:76:a3:15:8d:7f:34: d1:ea:6b:fe:29:7c:4d:af:0a:15:ef:50:bb:6c:b5: ae:03:85:62:97:0f:48:3d:fe:9e:31:a3:92:cd:bc: 82:f6:bf:3f:7c:06:a5:1a:53:2a:71:e7:5c:3a:d0: a9:5f:1c:23:de:58:fd:1b:50:26:13:b8:a0:7f:31: 66:f1:75:f6:e7:ef:f1:bb:b0:1f:ce:0a:43:ba:23: 27:8b:58:48:2a:36:a5:04:30:ea:71:44:83:a6:05: 10:37:da:77:6e:b8:89:7a:86:d4:25:53:8f:dd:88: 69:23:19:0c:84:3d:b2:41:cf:7a:28:80:66:7f:4e: 67:7c:f8:f9:df:d7:20:e1:9c:bd:f4:b1:33:a3:77: a5:cd:d3:07:f9:9e:30:d9:53:3d:3b:da:bd:e3:1a: 56:44:bd:c9:e7:44:a0:4a:e6:08:22:5a:1b:3a:64: 77:4d:8f:af:e9:47:02:fe:ef:56:bf:7c:18:bf:3c: 4b:75:88:b6:94:9e:b9:33:b1:0f:93:8c:5e:2b:b5: 01:c4:6d:a8:5d:49:ad:05:0b:b1:92:e7:56:66:6d: 5a:54:f6:2e:cb:e3:10:90:0e:b1:72:e2:9b:b0:e8: fc:47:d5:65:d3:28:b9:83:d4:49:00:23:76:97:fe: ff:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:51:AB:4A:44:85:87:E0:D6:23:0C:EC:9B:71:2B:7E:5B:63:4A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl X509v3 Authority Key Identifier: keyid:33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer sbgp-ipAddrBlock: critical IPv4: 64.146.166.0/24 66.119.196.0/24 66.119.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:a9:ee:ca:58:9e:01:1c:b5:b6:c3:d9:a5:3b:f8:06:a4:44: 81:84:63:9b:cb:00:f0:74:c0:58:30:f4:75:67:f0:f1:42:64: d1:5d:e2:70:d9:d7:12:5f:62:36:8b:f7:1e:44:22:f1:11:a9: 41:87:f3:5d:92:06:7c:4e:65:26:f8:06:03:65:58:59:8c:8d: 1a:55:0b:29:8b:d6:83:34:f7:1b:1c:37:db:90:9c:d6:99:23: 76:7f:cb:2f:fd:f8:0d:77:bf:7a:5a:61:60:2a:b8:21:27:ef: 47:0d:62:12:6d:69:db:0d:97:39:9c:ac:7d:75:c2:91:51:e8: dd:70:8f:73:a8:e3:fc:5f:3e:6d:ca:22:cf:ab:52:ef:c7:5e: e4:21:91:00:3d:d6:ca:f2:04:62:20:22:c3:9d:86:05:b1:c4: af:ca:21:83:1d:a3:d3:ef:31:04:7f:2f:29:a2:29:60:ea:b8: 28:07:f9:bb:21:c9:b6:2e:40:0e:24:dd:2c:ec:14:d8:57:f3: 94:5e:fe:8d:e9:96:98:55:93:46:c0:18:45:fd:11:5d:6c:d8: 21:36:0a:30:55:76:08:83:14:4c:91:48:ad:18:0e:0b:4b:39: 4d:60:38:6a:a5:a4:d3:d2:4e:a6:3a:4a:5a:a3:2c:69:fc:f3: 12:e6:4b:9a -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEm92is9pjThpidyZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg1NzQ5ZmEtMDkxYy00OTc4LWE5MTgtMzIzOGU0NWQy YTFjMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZDQzMGEwOGEtM2FlOC00MzA1LTk3YTAtZGIwNGNkYjk1NTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8rD24q6w3J2oxWNfzTR6mv+KXxNrwoV71C7 bLWuA4Vilw9IPf6eMaOSzbyC9r8/fAalGlMqcedcOtCpXxwj3lj9G1AmE7igfzFm 8XX25+/xu7AfzgpDuiMni1hIKjalBDDqcUSDpgUQN9p3briJeobUJVOP3YhpIxkM hD2yQc96KIBmf05nfPj539cg4Zy99LEzo3elzdMH+Z4w2VM9O9q94xpWRL3J50Sg SuYIIlobOmR3TY+v6UcC/u9Wv3wYvzxLdYi2lJ65M7EPk4xeK7UBxG2oXUmtBQux kudWZm1aVPYuy+MQkA6xcuKbsOj8R9Vl0yi5g9RJACN2l/7/3wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFLdRq0pEhYfg1iMM7JtxK35bY0rUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ODU3 NDlmYS0wOTFjLTQ5NzgtYTkxOC0zMjM4ZTQ1ZDJhMWMvYjY4NmNlOGMtMzJmNi0z Y2YzLWE3MjAtODhhODFlNWM5NTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzg1NzQ5ZmEtMDkxYy00OTc4LWE5 MTgtMzIzOGU0NWQyYTFjLzc4NTc0OWZhLTA5MWMtNDk3OC1hOTE4LTMyMzhlNDVk MmExYy5jcmwwHwYDVR0jBBgwFoAUM/CaLjnFL2kAyNtqqNf/Nh34MRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83ODU3NDlmYS0wOTFjLTQ5NzgtYTkxOC0zMjM4 ZTQ1ZDJhMWMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQJKmAwQA QnfEAwQCQnfQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKep7spYngEctbbD2aU7+AakRIGEY5vLAPB0wFgw 9HVn8PFCZNFd4nDZ1xJfYjaL9x5EIvERqUGH812SBnxOZSb4BgNlWFmMjRpVCymL 1oM09xscN9uQnNaZI3Z/yy/9+A13v3paYWAquCEn70cNYhJtadsNlzmcrH11wpFR 6N1wj3Oo4/xfPm3KIs+rUu/HXuQhkQA91sryBGIgIsOdhgWxxK/KIYMdo9PvMQR/ LymiKWDquCgH+bshybYuQA4k3SzsFNhX85Re/o3plphVk0bAGEX9EV1s2CE2CjBV dgiDFEyRSK0YDgtLOU1gOGqlpNPSTqY6SlqjLGn88xLmS5o= -----END CERTIFICATE-----Generated at Wed May 7 05:22:08 2025 by rpki-client