$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d3b1b45-bcb0-3647-a7e3-4bafc3224c20.roa File: 2d3b1b45-bcb0-3647-a7e3-4bafc3224c20.roa (raw, json) Hash identifier: vDQgQ0OHi7bezJGqW6vA4QmChd3cnwDFAh6oWtMyXg8= Subject key identifier: 51:0B:16:07:AA:41:63:39:A2:DA:0E:13:4E:BC:33:5F:5C:45:C0:84 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F43285849D625AB235D872CA133A4B400 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d3b1b45-bcb0-3647-a7e3-4bafc3224c20.roa Signing time: Tue 13 May 2025 05:52:43 +0000 ROA not before: Tue 13 May 2025 05:52:43 +0000 ROA not after: Mon 11 Aug 2025 05:52:43 +0000 asID: 174 IP address blocks: 66.227.119.0/24 maxlen: 24 209.250.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:25:ab:23:5d:87:2c:a1:33:a4:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 13 05:52:43 2025 GMT Not After : Aug 11 05:52:43 2025 GMT Subject: CN=b83e7389-b4ac-44f2-931d-50649c06a623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:49:44:f7:a1:e9:28:02:16:11:ba:f0:21: 7e:9b:60:54:f8:48:39:fe:f5:c6:88:b6:9b:5b:35: 7f:da:bf:8c:99:f6:39:5e:89:44:bf:13:48:7a:9c: 7d:c6:89:17:d9:b3:ca:88:6a:d6:70:a4:3e:ee:00: bd:50:09:28:0e:d8:d5:3b:ed:7f:2f:08:1e:d4:93: 6d:01:5e:e9:ce:98:25:46:64:0c:a3:3b:95:fd:df: 61:f7:80:ac:50:01:b4:c3:80:03:0c:35:af:14:e3: 85:49:5d:8a:61:6e:39:23:c4:b4:75:7c:a8:5c:6f: ac:cc:19:6d:c0:aa:fd:0a:f4:13:50:0f:03:13:d3: e4:3b:6f:74:40:00:9c:31:13:7a:e6:c9:97:99:fe: 9e:73:11:a3:0c:1e:62:5c:d0:c1:a5:a8:a0:2a:e7: 1b:c2:a6:ad:95:59:0e:4f:5d:4a:5b:0c:18:ff:ad: cf:b9:51:7c:37:4a:ed:b8:8d:e5:68:9e:df:6a:99: 6a:5a:bf:ce:92:0d:52:2d:29:7c:ff:6f:59:57:8a: 0c:2e:dc:03:3b:33:fc:0b:75:05:02:8a:d0:5a:2f: 52:f9:92:29:69:1d:12:0f:96:5b:d4:d0:76:00:13: 85:e2:2b:e8:9b:81:f5:77:72:69:f5:3b:31:88:38: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0B:16:07:AA:41:63:39:A2:DA:0E:13:4E:BC:33:5F:5C:45:C0:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d3b1b45-bcb0-3647-a7e3-4bafc3224c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.227.119.0/24 209.250.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3a:0a:ee:a8:f1:be:8d:16:da:af:3e:95:d9:15:54:e5:de: e3:de:e3:03:11:09:0d:19:64:43:a9:a4:3a:d9:67:19:ee:c3: b1:d3:db:36:bb:40:d3:f8:92:20:31:96:a8:7b:df:b7:11:42: be:b4:03:d4:f6:90:8a:29:2b:e1:ef:c9:ad:9e:11:cb:b2:2f: 3b:a1:fa:6d:7a:18:c3:5c:e7:b4:ab:1c:a9:4d:df:06:d4:25: 25:7f:01:5e:3d:79:0a:b5:b7:ee:86:7b:c4:6d:81:16:9a:cd: 9c:cc:6e:b5:b7:d6:0a:9e:d6:42:a0:47:bc:d3:49:97:57:b5: 91:e6:da:ee:6a:87:67:e3:e4:6e:7e:39:51:a3:30:49:1c:93: 8e:f0:a4:fb:31:b6:57:65:9a:ea:34:fa:92:3f:00:a7:92:24: e0:b9:75:84:75:04:4a:f7:70:fe:4a:27:5d:a8:fe:69:cd:47: e5:08:d5:7e:4b:df:65:bc:f2:e2:dc:cb:0e:65:15:f2:2b:b7: 1e:32:d0:f3:31:a2:af:65:63:b7:b3:ab:fe:ef:6b:ae:d1:48: c3:ec:77:d6:33:48:bb:63:92:07:47:8e:ef:4a:53:77:e1:e8: dd:af:22:ec:c0:1b:4d:61:48:56:e3:ba:da:66:00:5b:24:46: f5:d8:c1:67 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnWJasjXYcsoTOktAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDUxMzA1NTI0M1oXDTI1MDgxMTA1NTI0M1owLzEtMCsGA1UEAxMk YjgzZTczODktYjRhYy00NGYyLTkzMWQtNTA2NDljMDZhNjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPhJRPeh6SgCFhG68CF+m2BU+Eg5/vXGiLab WzV/2r+MmfY5XolEvxNIepx9xokX2bPKiGrWcKQ+7gC9UAkoDtjVO+1/Lwge1JNt AV7pzpglRmQMozuV/d9h94CsUAG0w4ADDDWvFOOFSV2KYW45I8S0dXyoXG+szBlt wKr9CvQTUA8DE9PkO290QACcMRN65smXmf6ecxGjDB5iXNDBpaigKucbwqatlVkO T11KWwwY/63PuVF8N0rtuI3laJ7faplqWr/Okg1SLSl8/29ZV4oMLtwDOzP8C3UF AorQWi9S+ZIpaR0SD5Zb1NB2ABOF4ivom4H1d3Jp9TsxiDhIowIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFELFgeqQWM5otoOE068M19cRcCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmQzYjFiNDUtYmNiMC0z NjQ3LWE3ZTMtNGJhZmMzMjI0YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQuN3AwQA 0fpwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADc6Cu6o8b6NFtqvPpXZFVTl3uPe4wMRCQ0ZZEOppDrZZxnu w7HT2za7QNP4kiAxlqh737cRQr60A9T2kIopK+Hvya2eEcuyLzuh+m16GMNc57Sr HKlN3wbUJSV/AV49eQq1t+6Ge8RtgRaazZzMbrW31gqe1kKgR7zTSZdXtZHm2u5q h2fj5G5+OVGjMEkck47wpPsxtldlmuo0+pI/AKeSJOC5dYR1BEr3cP5KJ12o/mnN R+UI1X5L32W88uLcyw5lFfIrtx4y0PMxoq9lY7ezq/7va67RSMPsd9YzSLtjkgdH ju9KU3fh6N2vIuzAG01hSFbjutpmAFskRvXYwWc= -----END CERTIFICATE-----Generated at Wed May 14 12:24:38 2025 by rpki-client