$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/c5be28a1-2d7a-39e2-8043-9972f8916840.roa File: c5be28a1-2d7a-39e2-8043-9972f8916840.roa (raw, json) Hash identifier: Llj52sue66CpFjyr1xX0JwqgcSjZtj2J4RFEFIOl7p8= Subject key identifier: 5B:E9:F4:1B:43:F0:56:BE:37:75:90:A7:2D:3E:9F:88:87:06:B7:77 Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F432858495C2446696EA82594760FBEC0 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/c5be28a1-2d7a-39e2-8043-9972f8916840.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 14511 IP address blocks: 66.231.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:46:69:6e:a8:25:94:76:0f:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=5fc11499-98f9-4d07-8514-75cd4efad86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:4e:3b:69:f3:9f:08:6c:21:cf:33:1a:25: 65:f5:e4:1d:81:43:4a:71:93:ed:5d:01:c6:56:9c: 27:25:da:ab:3d:5f:e1:75:2c:f4:13:0e:5a:43:64: 1b:5c:04:b4:f0:e9:00:67:6e:0b:2d:ca:27:20:73: f8:de:7b:7b:de:1f:c0:ad:bc:d5:3b:32:53:b5:f6: 62:e2:36:9d:2d:70:68:7e:a8:1c:15:67:8d:9a:1c: 71:ce:07:1f:73:35:b0:80:22:e0:33:07:66:e7:a9: 93:89:23:27:c7:3d:94:b6:bd:20:cd:5c:2a:7d:10: 1e:3c:aa:a1:0e:79:2b:d7:64:64:4b:0c:2e:8d:b7: ef:6e:9a:54:25:20:62:fc:c5:88:ca:18:41:e0:bc: e2:e4:14:d3:55:8d:c4:55:fa:29:2d:9c:5c:0d:f1: 86:b8:be:55:d6:e2:9e:49:88:a9:19:0f:49:1d:7d: 3e:58:d8:fa:71:76:f4:7b:92:f9:32:28:3e:f5:67: ea:8d:16:4f:b5:70:63:54:d9:58:6b:a7:10:d6:32: ce:68:e0:0d:fb:5d:37:9b:41:7d:68:fd:c3:e4:4d: a2:81:a0:3c:fd:0d:ce:b4:0f:f3:7d:a5:9f:a7:77: 36:56:61:24:87:a9:69:7a:bd:ed:20:e5:79:d2:02: c7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E9:F4:1B:43:F0:56:BE:37:75:90:A7:2D:3E:9F:88:87:06:B7:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/c5be28a1-2d7a-39e2-8043-9972f8916840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 66.231.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d1:c8:b5:61:4d:93:97:3c:ab:ef:80:b7:fc:e1:6e:06:3a: 55:94:34:27:64:33:f9:34:d7:d9:58:40:ba:d7:87:de:cc:d5: 97:de:87:bb:8d:5b:99:bb:45:23:bd:53:83:4c:1f:b8:bd:27: 8a:c7:e3:65:f1:23:ad:ee:78:17:2f:ce:46:f9:79:eb:df:17: c1:e8:17:30:8c:04:da:66:63:99:ac:e8:c3:ec:21:bc:13:df: 34:e5:64:66:a4:e7:7b:68:cd:d0:18:25:a5:89:eb:8a:81:ee: 7a:54:0f:7f:f3:6b:19:72:33:ea:b6:be:83:7d:ab:00:8e:ba: aa:b4:a3:5e:24:9c:20:e3:54:bf:52:28:94:d2:df:0c:07:5f: be:9f:f3:41:6b:87:7b:68:de:04:b7:52:9c:1c:b0:13:dc:cf: 8e:e8:71:31:ef:37:73:d3:e1:ee:1e:0c:4b:29:76:8e:9d:fd: 98:02:61:99:b9:35:f7:7d:00:da:f4:f0:b1:1c:e8:df:c8:ac: 9f:c7:20:78:ed:e0:17:70:66:77:64:dc:9a:c7:2d:2a:fb:0b: 71:17:f7:9d:ab:e8:0c:ee:7d:f7:3d:8e:a4:73:5b:69:19:59: 76:e6:af:41:a3:61:8c:6b:7d:14:76:46:82:37:c4:56:aa:14: 1c:70:71:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEZpbqgllHYPvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NWZjMTE0OTktOThmOS00ZDA3LTg1MTQtNzVjZDRlZmFkODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1VOO2nznwhsIc8zGiVl9eQdgUNKcZPtXQHG VpwnJdqrPV/hdSz0Ew5aQ2QbXAS08OkAZ24LLconIHP43nt73h/ArbzVOzJTtfZi 4jadLXBofqgcFWeNmhxxzgcfczWwgCLgMwdm56mTiSMnxz2Utr0gzVwqfRAePKqh Dnkr12RkSwwujbfvbppUJSBi/MWIyhhB4Lzi5BTTVY3EVfopLZxcDfGGuL5V1uKe SYipGQ9JHX0+WNj6cXb0e5L5Mig+9WfqjRZPtXBjVNlYa6cQ1jLOaOAN+103m0F9 aP3D5E2igaA8/Q3OtA/zfaWfp3c2VmEkh6lper3tIOV50gLH9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvp9BtD8Fa+N3WQpy0+n4iHBrd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvYzViZTI4YTEtMmQ3YS0z OWUyLTgwNDMtOTk3MmY4OTE2ODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQudwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHRyLVhTZOXPKvvgLf84W4GOlWUNCdkM/k019lYQLrXh97M1Zfeh7uN W5m7RSO9U4NMH7i9J4rH42XxI63ueBcvzkb5eevfF8HoFzCMBNpmY5ms6MPsIbwT 3zTlZGak53tozdAYJaWJ64qB7npUD3/zaxlyM+q2voN9qwCOuqq0o14knCDjVL9S KJTS3wwHX76f80Frh3to3gS3UpwcsBPcz47ocTHvN3PT4e4eDEspdo6d/ZgCYZm5 Nfd9ANr08LEc6N/IrJ/HIHjt4BdwZndk3JrHLSr7C3EX952r6Azuffc9jqRzW2kZ WXbmr0GjYYxrfRR2RoI3xFaqFBxwcdM= -----END CERTIFICATE-----Generated at Sat May 10 15:14:31 2025 by rpki-client