$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d3399dbd-f8d4-3bb7-9791-4c88b3c97b6e.roa File: d3399dbd-f8d4-3bb7-9791-4c88b3c97b6e.roa (raw, json) Hash identifier: /G65UTPa80S2Q6VbQu+VJ4AqyQkByouQVpfPfSvuXjg= Subject key identifier: 40:B4:C3:C3:20:CB:D9:B4:5D:CC:4F:EE:63:4F:73:2D:70:A6:28:13 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F43285848F22C610EF3C20AAFD46AAF80 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d3399dbd-f8d4-3bb7-9791-4c88b3c97b6e.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 10796 IP address blocks: 66.198.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:61:0e:f3:c2:0a:af:d4:6a:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=b23d95e8-5b99-4335-bc47-85e214f797e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:9c:a9:41:d7:a1:e6:5a:01:6e:f4:da:13: 5e:66:18:f5:7e:77:c9:29:76:8c:b1:66:71:05:fe: ce:69:8c:0f:20:bb:2a:d5:1b:0b:12:74:25:3d:18: d8:a1:60:56:74:2d:da:03:2f:5f:5d:56:8e:68:50: 16:ba:d6:f5:69:68:cc:00:77:22:9d:ba:ba:fa:d7: 21:35:db:34:12:5f:3a:7f:13:6a:c8:de:74:7a:cf: 6a:1e:60:db:26:b8:39:b5:49:84:7c:94:9a:51:0b: ae:9f:89:ca:65:ea:ac:45:a3:5d:a5:86:8f:5a:59: 26:df:09:b5:f9:a7:c2:b5:98:56:df:9f:91:85:45: 56:f6:1f:8b:23:01:ef:d5:b3:be:29:cb:6c:bd:63: fc:f5:6e:ab:ed:3a:18:bd:be:cd:7b:60:57:76:cd: ef:e2:eb:8a:9d:b7:78:c6:83:5e:7c:4b:55:04:63: e5:ad:eb:36:c8:ef:5e:16:29:27:34:b3:ec:c4:52: 46:a4:8e:24:e7:17:14:f5:a0:20:52:04:26:31:e2: 70:48:db:08:17:9b:d4:d4:15:56:b3:68:15:8e:8e: f5:4e:74:ce:2c:04:ba:46:34:27:18:eb:38:ed:33: 39:b4:e1:cb:bb:1a:4d:bd:22:89:a5:55:c7:95:29: 4f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B4:C3:C3:20:CB:D9:B4:5D:CC:4F:EE:63:4F:73:2D:70:A6:28:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d3399dbd-f8d4-3bb7-9791-4c88b3c97b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 66.198.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:fc:f0:ae:56:94:66:be:1d:7a:a7:26:bd:3c:68:a1:f7:07: 53:7a:27:16:b4:7a:54:8c:70:46:c9:7f:b4:6a:60:5b:24:5f: f0:84:d3:86:40:7c:60:78:48:19:ea:3f:88:5c:17:72:1d:ef: b1:43:9b:b8:26:18:0c:7e:b9:d2:3a:74:8d:c6:87:3d:55:72: 21:46:5b:a2:12:49:90:fe:b1:3b:8a:17:05:71:db:20:eb:fa: 79:bf:a6:45:23:28:03:80:8f:da:5a:7c:11:bd:ba:ba:1a:13: 0c:04:4f:ec:60:a7:2b:f1:85:68:c4:23:94:d3:4c:01:90:7a: 57:22:6a:60:c3:76:b6:c0:a0:8a:bc:3c:f3:20:a4:1e:d4:3d: 8c:61:18:c4:37:22:7b:ca:3e:bf:90:00:74:0f:2c:f6:44:21: e5:f8:a1:61:a7:f2:b2:da:94:a4:de:ee:94:44:ae:57:5f:22: b6:48:14:0b:46:37:3c:eb:4d:af:5e:c8:96:a7:80:02:e9:34: d5:87:36:ae:b9:c7:46:57:09:65:c0:0f:8b:09:58:e5:17:52: 6d:c3:73:1f:d6:ee:00:8e:1a:09:33:62:2e:6a:30:cf:ed:b5: 57:33:19:3e:8c:cf:2e:d4:69:33:08:da:23:0c:59:84:93:17: 22:4b:88:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGEO88IKr9Rqr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk YjIzZDk1ZTgtNWI5OS00MzM1LWJjNDctODVlMjE0Zjc5N2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc6cqUHXoeZaAW702hNeZhj1fnfJKXaMsWZx Bf7OaYwPILsq1RsLEnQlPRjYoWBWdC3aAy9fXVaOaFAWutb1aWjMAHcinbq6+tch Nds0El86fxNqyN50es9qHmDbJrg5tUmEfJSaUQuun4nKZeqsRaNdpYaPWlkm3wm1 +afCtZhW35+RhUVW9h+LIwHv1bO+KctsvWP89W6r7ToYvb7Ne2BXds3v4uuKnbd4 xoNefEtVBGPlres2yO9eFiknNLPsxFJGpI4k5xcU9aAgUgQmMeJwSNsIF5vU1BVW s2gVjo71TnTOLAS6RjQnGOs47TM5tOHLuxpNvSKJpVXHlSlPKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEC0w8Mgy9m0XcxP7mNPcy1wpigTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvZDMzOTlkYmQtZjhkNC0z YmI3LTk3OTEtNGM4OGIzYzk3YjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQsYOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD788K5WlGa+HXqnJr08aKH3B1N6Jxa0elSMcEbJf7RqYFskX/CE04ZA fGB4SBnqP4hcF3Id77FDm7gmGAx+udI6dI3Ghz1VciFGW6ISSZD+sTuKFwVx2yDr +nm/pkUjKAOAj9pafBG9uroaEwwET+xgpyvxhWjEI5TTTAGQelciamDDdrbAoIq8 PPMgpB7UPYxhGMQ3InvKPr+QAHQPLPZEIeX4oWGn8rLalKTe7pRErldfIrZIFAtG NzzrTa9eyJangALpNNWHNq65x0ZXCWXAD4sJWOUXUm3Dcx/W7gCOGgkzYi5qMM/t tVczGT6Mzy7UaTMI2iMMWYSTFyJLiFI= -----END CERTIFICATE-----Generated at Mon May 5 14:47:45 2025 by rpki-client