$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa File: 5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa (raw, json) Hash identifier: WRCdG0t0KUmE/wArbXL+OoZ1Up1xvYEvJUtJtX21ZT4= Subject key identifier: 45:53:14:17:D2:C3:FB:18:EF:EA:85:F2:69:1E:54:96:D9:79:81:44 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F43285849A61F3E087AA963E0A25F63C0 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 32035 IP address blocks: 66.43.92.0/24 maxlen: 24 66.43.96.0/23 maxlen: 24 66.43.98.0/24 maxlen: 24 66.43.101.0/24 maxlen: 24 66.43.105.0/24 maxlen: 24 66.43.106.0/24 maxlen: 24 66.43.108.0/24 maxlen: 24 66.43.110.0/24 maxlen: 24 66.43.112.0/21 maxlen: 24 69.28.96.0/19 maxlen: 24 69.168.192.0/19 maxlen: 24 69.170.160.0/19 maxlen: 24 74.85.0.0/19 maxlen: 24 207.232.80.0/20 maxlen: 24 209.141.64.0/19 maxlen: 24 209.141.96.0/20 maxlen: 24 2607:f778::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3e:08:7a:a9:63:e0:a2:5f:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=fb9a4b7e-b4f2-4e69-9928-61224027e9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f3:27:e9:3a:69:18:9d:cd:cb:ad:c9:5f:69: 23:f5:6f:fa:e3:08:3b:6b:f2:5a:ae:81:20:a0:37: 66:8a:fd:ae:fb:62:f4:66:a3:f4:68:60:a4:04:b2: 83:45:f4:7e:3f:fd:67:e5:ce:2e:5c:bc:60:5b:c7: bf:97:25:b0:6c:4b:e9:b3:39:f4:36:06:19:24:ac: 79:e1:72:95:6d:89:c6:39:11:a5:d6:cc:57:d8:ca: 7e:67:61:93:0b:90:09:bf:d6:8b:5c:1b:eb:0c:4e: e2:59:7d:51:3d:bf:10:d1:2c:cd:29:ac:9e:4c:64: 2e:e5:35:8d:76:3a:dc:1c:09:83:9f:86:32:07:03: ec:9b:fa:66:36:5d:b2:c5:7f:ba:30:45:87:37:0a: c7:59:36:ac:55:a9:67:8c:79:97:fb:06:47:0c:43: 52:2e:d4:44:f4:e2:57:5a:d4:44:86:a4:0e:7d:4c: 0e:49:61:b7:fe:f8:cd:5e:4d:e6:d7:2c:ca:69:9b: d3:b9:61:5e:99:b1:76:d4:41:f0:0c:51:93:40:53: f9:74:c4:d4:f6:d5:a3:d9:73:49:44:3d:55:5d:93: 9a:26:84:62:87:e6:6f:0a:35:01:d8:20:9f:e3:2a: 24:0d:41:b9:f5:eb:aa:a2:57:ab:47:92:d9:ff:13: 1e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:53:14:17:D2:C3:FB:18:EF:EA:85:F2:69:1E:54:96:D9:79:81:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5b036da1-7aaf-32b5-ad5c-5caff71c8950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 66.43.92.0/24 66.43.96.0-66.43.98.255 66.43.101.0/24 66.43.105.0-66.43.106.255 66.43.108.0/24 66.43.110.0/24 66.43.112.0/21 69.28.96.0/19 69.168.192.0/19 69.170.160.0/19 74.85.0.0/19 207.232.80.0/20 209.141.64.0-209.141.111.255 IPv6: 2607:f778::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:af:d5:3d:9e:af:b6:63:d1:bb:80:56:8b:66:8c:5a:17:db: 98:42:ea:d3:97:68:2e:14:0f:c1:f6:b7:db:6c:79:e8:34:ce: 24:9b:8b:c0:ba:3a:70:52:a4:87:b7:81:19:a5:d4:69:74:ce: 2c:81:bb:49:8d:f7:0e:e2:64:b0:74:c2:35:98:61:4e:2a:d7: 70:24:7b:5e:95:6f:26:4e:21:6a:c9:75:42:35:cf:0f:47:17: aa:71:9c:b1:1e:6e:2f:0c:4c:41:9c:75:68:b1:32:a4:88:9d: e2:c7:90:5b:95:e2:85:2f:f3:27:8f:63:22:d1:4b:55:cb:fb: a5:b2:5a:85:64:fe:45:26:28:bf:8b:f9:c6:54:97:b2:05:28: 79:d5:d1:f5:c6:4b:ac:c2:94:37:1c:b3:e9:a9:ad:b4:b8:84: 37:8b:2d:59:a9:ee:0c:7b:89:1b:f8:2f:0c:08:39:cc:3b:76: 7e:41:ab:e8:5c:ae:45:86:cf:9e:b3:94:62:43:47:0f:11:bf: 83:0d:8d:a2:35:31:a7:d3:e5:4a:04:a4:ec:6f:7b:05:a6:d9: 29:1e:69:6a:73:de:ee:39:d3:21:08:bd:65:1c:a3:e8:3d:5e: 6b:22:ab:59:63:ce:56:a7:41:32:8a:87:9b:0d:5f:91:79:76: c7:33:36:6a -----BEGIN CERTIFICATE----- MIIGszCCBZugAwIBAgIUAQ0Mn0MoWEmmHz4Ieqlj4KJfY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk ZmI5YTRiN2UtYjRmMi00ZTY5LTk5MjgtNjEyMjQwMjdlOWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofMn6TppGJ3Ny63JX2kj9W/64wg7a/JaroEg oDdmiv2u+2L0ZqP0aGCkBLKDRfR+P/1n5c4uXLxgW8e/lyWwbEvpszn0NgYZJKx5 4XKVbYnGORGl1sxX2Mp+Z2GTC5AJv9aLXBvrDE7iWX1RPb8Q0SzNKayeTGQu5TWN djrcHAmDn4YyBwPsm/pmNl2yxX+6MEWHNwrHWTasValnjHmX+wZHDENSLtRE9OJX WtREhqQOfUwOSWG3/vjNXk3m1yzKaZvTuWFembF21EHwDFGTQFP5dMTU9tWj2XNJ RD1VXZOaJoRih+ZvCjUB2CCf4yokDUG59euqolerR5LZ/xMeyQIDAQABo4IDxTCC A8EwHQYDVR0OBBYEFEVTFBfSw/sY7+qF8mkeVJbZeYFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvNWIwMzZkYTEtN2FhZi0z MmI1LWFkNWMtNWNhZmY3MWM4OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEAEIrXDAM AwQFQitgAwQAQitiAwQAQitlMAwDBABCK2kDBABCK2oDBABCK2wDBABCK24DBANC K3ADBAVFHGADBAVFqMADBAVFqqADBAVKVQADBATP6FAwDAMEBtGNQAMEBNGNYDAN BAIAAjAHAwUAJgf3eDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3r9U9nq+2Y9G7gFaLZoxaF9uYQurTl2gu FA/B9rfbbHnoNM4km4vAujpwUqSHt4EZpdRpdM4sgbtJjfcO4mSwdMI1mGFOKtdw JHtelW8mTiFqyXVCNc8PRxeqcZyxHm4vDExBnHVosTKkiJ3ix5BbleKFL/Mnj2Mi 0UtVy/ulslqFZP5FJii/i/nGVJeyBSh51dH1xkuswpQ3HLPpqa20uIQ3iy1Zqe4M e4kb+C8MCDnMO3Z+QavoXK5Fhs+es5RiQ0cPEb+DDY2iNTGn0+VKBKTsb3sFptkp Hmlqc97uOdMhCL1lHKPoPV5rIqtZY85Wp0EyioebDV+ReXbHMzZq -----END CERTIFICATE-----Generated at Sat May 10 04:47:12 2025 by rpki-client