$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/db2fc8d3-c5b1-3a53-81a6-96a6d50ddf44.roa File: db2fc8d3-c5b1-3a53-81a6-96a6d50ddf44.roa (raw, json) Hash identifier: S2sjyaJwdqOoP/GLVIjnwThUhsCt3Klu5RlB0GJalIc= Subject key identifier: 5C:94:45:AF:65:45:1D:D6:A0:58:68:B7:D2:A0:B8:FB:62:17:14:0F Certificate issuer: /CN=670a3755-a570-42cf-846d-b0190d7ff61a Certificate serial: 010D0C9F43285849CD7D2E09701E28D61C1E8580 Authority key identifier: E2:43:A4:1F:D0:08:46:21:E1:94:C4:17:1F:18:DE:3F:DB:4B:29:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/db2fc8d3-c5b1-3a53-81a6-96a6d50ddf44.roa Signing time: Sat 10 May 2025 03:26:45 +0000 ROA not before: Sat 10 May 2025 03:26:45 +0000 ROA not after: Fri 08 Aug 2025 03:26:45 +0000 asID: 393887 IP address blocks: 66.179.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/670a3755-a570-42cf-846d-b0190d7ff61a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/670a3755-a570-42cf-846d-b0190d7ff61a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:7d:2e:09:70:1e:28:d6:1c:1e:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670a3755-a570-42cf-846d-b0190d7ff61a Validity Not Before: May 10 03:26:45 2025 GMT Not After : Aug 8 03:26:45 2025 GMT Subject: CN=47e90703-024e-407d-86bd-de1a0e308c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:49:d7:50:c5:55:64:b7:92:fe:18:25:56:c9: f7:6e:ab:a4:e0:48:56:67:b7:3b:4e:ad:22:49:d2: 01:28:55:65:74:e8:e8:76:3b:90:1d:c6:72:ef:f0: 3a:b8:00:dd:a9:90:86:f0:3d:b6:84:78:6b:51:fd: 9c:cb:e1:2c:89:aa:c6:64:ba:e4:fe:fe:4a:a0:22: 23:6c:7f:c0:a7:e9:c4:cf:81:26:db:d5:b6:eb:d4: e5:1f:8a:b5:25:68:ef:c3:0e:7d:55:aa:bc:a1:01: 49:df:e4:21:0f:62:ed:f2:cc:de:6e:c4:82:b5:2f: be:b6:b0:84:94:e5:c8:3b:73:b3:0b:61:97:75:56: b0:75:d5:b6:0d:d7:d7:d1:6c:2a:e0:1d:d1:40:9d: e0:9c:65:80:ff:05:d4:f2:f7:4c:ba:65:eb:0f:11: 92:20:c0:e7:ab:27:64:2b:02:ce:23:f7:d3:38:9b: 81:f6:cd:72:1e:99:4d:d2:a0:d6:e1:d2:ec:cf:32: 9d:fd:63:39:ba:1a:21:83:92:e6:85:db:aa:70:ba: c8:33:53:d7:45:3b:3f:a6:92:db:97:3a:48:49:4f: 86:b0:07:8d:00:12:9a:71:e2:75:76:d0:4e:8c:59: d7:93:2c:0b:6d:8e:5e:36:63:ca:b7:95:77:b6:a9: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:94:45:AF:65:45:1D:D6:A0:58:68:B7:D2:A0:B8:FB:62:17:14:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/db2fc8d3-c5b1-3a53-81a6-96a6d50ddf44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/670a3755-a570-42cf-846d-b0190d7ff61a.crl X509v3 Authority Key Identifier: keyid:E2:43:A4:1F:D0:08:46:21:E1:94:C4:17:1F:18:DE:3F:DB:4B:29:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a.cer sbgp-ipAddrBlock: critical IPv4: 66.179.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:64:c3:55:2d:38:47:0b:87:86:5f:8b:d5:9a:3f:3d:35:3b: a8:85:7b:43:03:96:80:b0:c0:0f:b7:b2:12:b2:aa:77:e7:55: 9d:e1:1e:ba:a8:c4:d9:d7:0d:9e:ab:34:35:ed:c1:99:7b:e3: 5d:7f:65:48:34:e6:9e:61:40:28:6f:c9:94:b5:c7:a8:d0:fe: 77:33:3e:3a:02:51:cd:49:36:59:41:f1:0c:a9:fe:9d:34:5e: 70:55:bf:69:fe:0d:5a:af:3b:4c:54:04:da:d9:d4:37:13:3e: 34:99:d9:51:60:20:15:8b:cd:19:f3:0a:90:63:b2:22:97:32: 20:05:52:6a:9f:92:d2:e3:19:b4:02:51:09:0f:8f:f6:56:57: bc:d7:21:8d:4e:3f:3a:b9:5f:3c:b8:23:9d:1a:4e:93:13:14: d0:9e:7c:61:3b:00:74:07:3c:8e:76:a0:4f:a1:0f:77:32:f5: b0:35:d1:f7:dd:1f:5c:85:be:b1:ca:14:f7:31:a6:22:79:aa: c4:04:c6:b3:b6:e3:a0:64:26:7c:6b:7e:4a:81:b7:3d:52:60: 0a:b2:a8:0f:39:25:e4:1f:93:cc:11:55:0f:15:da:68:76:51: eb:df:00:2a:ff:53:41:fe:45:85:7d:a1:5f:57:1e:64:22:2f: 27:27:4f:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNfS4JcB4o1hwehYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjcwYTM3NTUtYTU3MC00MmNmLTg0NmQtYjAxOTBkN2Zm NjFhMB4XDTI1MDUxMDAzMjY0NVoXDTI1MDgwODAzMjY0NVowLzEtMCsGA1UEAxMk NDdlOTA3MDMtMDI0ZS00MDdkLTg2YmQtZGUxYTBlMzA4YzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0nXUMVVZLeS/hglVsn3bquk4EhWZ7c7Tq0i SdIBKFVldOjodjuQHcZy7/A6uADdqZCG8D22hHhrUf2cy+EsiarGZLrk/v5KoCIj bH/Ap+nEz4Em29W269TlH4q1JWjvww59Vaq8oQFJ3+QhD2Lt8szebsSCtS++trCE lOXIO3OzC2GXdVawddW2DdfX0Wwq4B3RQJ3gnGWA/wXU8vdMumXrDxGSIMDnqydk KwLOI/fTOJuB9s1yHplN0qDW4dLszzKd/WM5uhohg5LmhduqcLrIM1PXRTs/ppLb lzpISU+GsAeNABKaceJ1dtBOjFnXkywLbY5eNmPKt5V3tqm/VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyURa9lRR3WoFhot9KguPtiFxQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NzBh Mzc1NS1hNTcwLTQyY2YtODQ2ZC1iMDE5MGQ3ZmY2MWEvZGIyZmM4ZDMtYzViMS0z YTUzLTgxYTYtOTZhNmQ1MGRkZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjcwYTM3NTUtYTU3MC00MmNmLTg0 NmQtYjAxOTBkN2ZmNjFhLzY3MGEzNzU1LWE1NzAtNDJjZi04NDZkLWIwMTkwZDdm ZjYxYS5jcmwwHwYDVR0jBBgwFoAU4kOkH9AIRiHhlMQXHxjeP9tLKdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NzBhMzc1NS1hNTcwLTQyY2YtODQ2ZC1iMDE5 MGQ3ZmY2MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhkw1UtOEcLh4Zfi9WaPz01O6iFe0MDloCwwA+3shKyqnfnVZ3hHrqo xNnXDZ6rNDXtwZl7411/ZUg05p5hQChvyZS1x6jQ/nczPjoCUc1JNllB8Qyp/p00 XnBVv2n+DVqvO0xUBNrZ1DcTPjSZ2VFgIBWLzRnzCpBjsiKXMiAFUmqfktLjGbQC UQkPj/ZWV7zXIY1OPzq5Xzy4I50aTpMTFNCefGE7AHQHPI52oE+hD3cy9bA10ffd H1yFvrHKFPcxpiJ5qsQExrO246BkJnxrfkqBtz1SYAqyqA85JeQfk8wRVQ8V2mh2 UevfACr/U0H+RYV9oV9XHmQiLycnT74= -----END CERTIFICATE-----Generated at Tue May 13 06:38:34 2025 by rpki-client