$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa File: 04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa (raw, json) Hash identifier: yRFIJOShEUhtEVtpzn5QYd7VWmV+liznGvNHrdso//A= Subject key identifier: 6C:E8:2C:84:8C:2C:16:F8:43:E6:53:E3:87:9B:98:E0:E1:7C:BA:DC Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Certificate serial: 010D0C9F43285849DB2A28461CFCBEE220896212 Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa Signing time: Thu 15 May 2025 01:00:47 +0000 ROA not before: Thu 15 May 2025 01:00:47 +0000 ROA not after: Wed 13 Aug 2025 01:00:47 +0000 asID: 54309 IP address blocks: 66.33.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:db:2a:28:46:1c:fc:be:e2:20:89:62:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Validity Not Before: May 15 01:00:47 2025 GMT Not After : Aug 13 01:00:47 2025 GMT Subject: CN=2de7ee51-41f2-466e-b5f6-4fea7dd16f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d7:d8:fd:63:c9:47:39:ce:d6:1d:33:7b:d4: 65:27:fb:9b:e5:3c:3d:59:ea:96:71:b3:5a:ba:a9: e6:af:de:94:d7:2f:65:c2:03:95:8b:d2:ad:3c:81: 64:60:7e:0a:b6:fa:b2:61:25:79:c9:bc:7e:6a:b9: 59:1d:70:c7:34:37:56:bc:46:b6:06:be:75:be:50: 9f:fa:cb:44:06:de:32:35:11:4c:0d:b8:36:d1:59: d0:43:0c:d0:7e:27:28:bf:9a:5f:ec:34:0f:1d:4f: a1:74:10:70:74:55:3c:b0:fc:54:1d:12:4c:29:95: 19:61:67:11:22:d0:16:fb:91:56:1b:5c:54:13:eb: 5a:df:77:78:b0:47:de:57:d6:ee:8c:fa:5f:a0:c3: 1a:a1:e2:b8:37:09:62:06:83:3b:a3:b1:9a:c4:8b: 14:a5:8d:ef:c4:65:26:ac:ff:aa:f3:bf:42:17:d3: 0d:ff:0f:51:61:b3:1d:09:8f:29:fb:aa:6d:da:d7: 2c:9c:32:a4:f6:5a:47:e8:7c:85:e6:9f:cb:22:12: 64:b6:8f:05:0b:d9:ec:d1:7b:7c:de:b8:2d:78:b9: f0:5b:d4:05:52:42:56:54:c5:f4:af:01:9a:71:db: 2f:31:7c:b2:d4:5e:c2:ae:60:9e:4e:82:c7:db:0d: 81:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E8:2C:84:8C:2C:16:F8:43:E6:53:E3:87:9B:98:E0:E1:7C:BA:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl X509v3 Authority Key Identifier: keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer sbgp-ipAddrBlock: critical IPv4: 66.33.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:c4:dc:aa:4e:4e:7f:3b:a4:4d:49:32:67:b3:af:17:4b:7e: 6c:82:63:bf:94:86:ca:03:e6:90:e9:3a:9f:f6:0a:ae:b9:4e: cc:88:5c:83:2f:16:8e:21:e9:6f:4e:ab:2c:56:f0:20:be:19: e1:17:ca:f9:fd:05:37:e0:92:76:d3:13:ae:43:67:ec:d9:d0: f2:96:54:25:42:b3:68:9d:9a:da:ff:24:9f:d2:74:77:8e:ea: 7c:fe:0b:38:62:60:25:6b:6f:2e:1d:d7:e6:97:77:e3:50:e1: 3f:1d:16:52:7c:1d:9c:93:32:57:0b:d7:22:08:2b:40:33:d5: 1c:4a:69:a5:8e:df:57:cb:ea:ec:41:8a:c9:a4:e5:c6:cb:42: 42:7c:7e:2e:3f:8d:be:02:58:93:6f:64:9b:02:b3:3e:7a:68: e7:be:35:6b:a9:73:1b:73:74:f1:d3:47:bb:9a:1a:e1:b0:71: 30:b3:d7:2e:a5:a9:ce:db:dc:32:ee:3c:6f:d9:10:77:67:41: cd:71:85:c0:53:82:10:c9:18:ce:8c:01:d7:f2:79:80:eb:58: 04:1f:ab:5a:51:86:a0:98:d1:12:f4:eb:59:4e:83:ff:28:8c: bb:20:c2:1c:18:3c:25:72:bc:e4:8e:a5:8d:02:e7:95:07:7c: 44:e7:5c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnbKihGHPy+4iCJYhIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm MDkxMB4XDTI1MDUxNTAxMDA0N1oXDTI1MDgxMzAxMDA0N1owLzEtMCsGA1UEAxMk MmRlN2VlNTEtNDFmMi00NjZlLWI1ZjYtNGZlYTdkZDE2Zjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdfY/WPJRznO1h0ze9RlJ/ub5Tw9WeqWcbNa uqnmr96U1y9lwgOVi9KtPIFkYH4KtvqyYSV5ybx+arlZHXDHNDdWvEa2Br51vlCf +stEBt4yNRFMDbg20VnQQwzQficov5pf7DQPHU+hdBBwdFU8sPxUHRJMKZUZYWcR ItAW+5FWG1xUE+ta33d4sEfeV9bujPpfoMMaoeK4NwliBoM7o7GaxIsUpY3vxGUm rP+q879CF9MN/w9RYbMdCY8p+6pt2tcsnDKk9lpH6HyF5p/LIhJkto8FC9ns0Xt8 3rgteLnwW9QFUkJWVMX0rwGacdsvMXyy1F7CrmCeToLH2w2BuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzoLISMLBb4Q+ZT44ebmODhfLrcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5 ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvMDRmNGEzZmItNDQyZS0z MzE0LTkwYjktYjExZDkzY2JjYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5 ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk MTYyOWYwOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHE3KpOTn87pE1JMmezrxdLfmyCY7+UhsoD5pDpOp/2Cq65TsyIXIMv Fo4h6W9OqyxW8CC+GeEXyvn9BTfgknbTE65DZ+zZ0PKWVCVCs2idmtr/JJ/SdHeO 6nz+CzhiYCVrby4d1+aXd+NQ4T8dFlJ8HZyTMlcL1yIIK0Az1RxKaaWO31fL6uxB ismk5cbLQkJ8fi4/jb4CWJNvZJsCsz56aOe+NWupcxtzdPHTR7uaGuGwcTCz1y6l qc7b3DLuPG/ZEHdnQc1xhcBTghDJGM6MAdfyeYDrWAQfq1pRhqCY0RL061lOg/8o jLsgwhwYPCVyvOSOpY0C55UHfETnXCw= -----END CERTIFICATE-----Generated at Mon Jun 30 00:29:59 2025 by rpki-client