$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/9750c184-7f20-36fe-a595-1a4dd6eeef6d.roa File: 9750c184-7f20-36fe-a595-1a4dd6eeef6d.roa (raw, json) Hash identifier: O8QBf2QN4VC5CvxcOZ3mxKNCxITNDID6aRP9Y/kH8bU= Subject key identifier: 1E:F7:31:C1:35:71:DA:A2:8F:79:DE:D3:46:63:55:5C:C9:5A:B2:41 Certificate issuer: /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Certificate serial: 010D0C9F43285849BC74AC5451F0D3E0CD497480 Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/9750c184-7f20-36fe-a595-1a4dd6eeef6d.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 400610 IP address blocks: 66.219.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:ac:54:51:f0:d3:e0:cd:49:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3 Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=008d4f27-3cd2-4bbc-b7ca-9c12189205f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2c:af:28:df:b9:6d:36:14:de:ea:16:0f:6a: 9d:9f:9d:67:a0:0a:09:fd:91:29:f8:b0:de:25:8f: 91:1f:82:cd:d9:71:9c:86:9b:75:26:8a:e2:88:62: 96:7e:fa:12:48:86:43:93:1e:74:f0:b9:c8:bc:97: b5:da:fb:7d:3e:ce:df:35:c0:99:8c:21:20:be:94: a9:07:06:ca:8d:13:1f:0e:c7:66:af:04:73:5a:93: 1d:b5:b8:58:d5:28:1a:da:b4:86:41:67:e8:16:b1: 12:9e:2c:71:03:a4:25:56:52:66:0d:30:40:5b:68: 10:98:a1:34:b1:63:d1:c2:60:a1:32:91:2c:92:96: cd:6e:33:8c:f4:c9:34:ac:46:bb:ce:c3:be:ed:45: 7a:c1:7d:e3:2c:4e:54:b6:3b:81:c1:1a:97:80:cf: aa:2b:d8:59:82:31:b4:4a:ad:0a:f2:60:fc:dd:e7: 10:de:ef:5e:aa:2e:03:77:2a:f7:fb:7f:23:d7:52: 03:d5:52:00:83:6e:6b:6b:96:b4:f8:98:8a:07:c3: 96:19:9d:f1:42:a2:ea:b4:52:93:e4:9a:d2:40:04: e9:ed:7a:7f:b3:08:e0:0d:7c:75:1f:ce:a1:17:1c: d3:47:f8:cc:a0:28:49:3b:97:a5:18:f8:55:43:99: 7c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F7:31:C1:35:71:DA:A2:8F:79:DE:D3:46:63:55:5C:C9:5A:B2:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/9750c184-7f20-36fe-a595-1a4dd6eeef6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl X509v3 Authority Key Identifier: keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer sbgp-ipAddrBlock: critical IPv4: 66.219.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9c:07:01:b2:ca:41:fb:af:5c:52:21:17:c2:f6:a9:00:1c: 90:32:fe:8a:cc:9d:6a:74:2d:37:60:0f:fe:b2:59:0f:fe:2b: aa:a4:90:a1:99:8f:ac:46:a2:ab:64:5d:4d:bc:13:24:cf:cc: a0:87:96:9c:00:c1:63:27:19:24:db:a2:00:49:2b:d2:23:6e: 23:b1:c5:5b:01:78:fa:08:36:52:06:bb:00:c2:ff:92:b3:eb: 39:6a:9c:f0:00:41:bc:9d:73:3b:6b:93:e8:a0:52:75:ac:6b: 84:30:9a:ee:02:82:93:46:82:44:96:9e:0f:da:af:e5:02:f1: 8c:5a:1f:79:cd:d2:09:26:3c:34:a7:f5:71:31:00:f9:32:94: a3:1a:46:ca:d4:f1:6d:01:f8:e6:30:d9:6c:d7:7d:d0:63:51: 45:db:9d:87:79:f6:10:95:3a:61:1e:c3:a3:c5:af:37:9a:c7: bb:24:1f:1d:2f:c8:26:3d:ab:4e:58:38:45:75:5f:8a:dd:28: 78:86:15:81:3b:7a:d0:ac:47:4c:9d:29:44:c2:02:ab:12:f7: 1e:88:81:b1:f4:36:eb:27:7f:58:14:90:79:32:c4:d6:39:f5: 7f:cf:35:b8:cb:b1:46:93:56:30:f9:69:fa:46:12:cd:e0:e0: 69:ad:57:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dKxUUfDT4M1JdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm MmUzMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk MDA4ZDRmMjctM2NkMi00YmJjLWI3Y2EtOWMxMjE4OTIwNWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCyvKN+5bTYU3uoWD2qdn51noAoJ/ZEp+LDe JY+RH4LN2XGchpt1JoriiGKWfvoSSIZDkx508LnIvJe12vt9Ps7fNcCZjCEgvpSp BwbKjRMfDsdmrwRzWpMdtbhY1Sga2rSGQWfoFrESnixxA6QlVlJmDTBAW2gQmKE0 sWPRwmChMpEskpbNbjOM9Mk0rEa7zsO+7UV6wX3jLE5UtjuBwRqXgM+qK9hZgjG0 Sq0K8mD83ecQ3u9eqi4Ddyr3+38j11ID1VIAg25ra5a0+JiKB8OWGZ3xQqLqtFKT 5JrSQATp7Xp/swjgDXx1H86hFxzTR/jMoChJO5elGPhVQ5l8OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB73McE1cdqij3ne00ZjVVzJWrJBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1 NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvOTc1MGMxODQtN2YyMC0z NmZlLWE1OTUtMWE0ZGQ2ZWVlZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5 YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4 ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQttyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADScBwGyykH7r1xSIRfC9qkAHJAy/orMnWp0LTdgD/6yWQ/+K6qkkKGZ j6xGoqtkXU28EyTPzKCHlpwAwWMnGSTbogBJK9IjbiOxxVsBePoINlIGuwDC/5Kz 6zlqnPAAQbydcztrk+igUnWsa4Qwmu4CgpNGgkSWng/ar+UC8YxaH3nN0gkmPDSn 9XExAPkylKMaRsrU8W0B+OYw2WzXfdBjUUXbnYd59hCVOmEew6PFrzeax7skHx0v yCY9q05YOEV1X4rdKHiGFYE7etCsR0ydKUTCAqsS9x6IgbH0Nusnf1gUkHkyxNY5 9X/PNbjLsUaTVjD5afpGEs3g4GmtV2w= -----END CERTIFICATE-----Generated at Fri May 9 08:40:27 2025 by rpki-client