$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5be7638f-46a0-3028-92a6-de76ab750685.roa File: 5be7638f-46a0-3028-92a6-de76ab750685.roa (raw, json) Hash identifier: s5ufHZKp+vM0bIGkxu4vu+Wi3S2HeeDG+XK5A5T7PY8= Subject key identifier: 68:CD:FB:AD:3C:44:13:3F:60:87:3C:7D:58:B4:B4:03:92:31:0C:DD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F43285849C67CB1F016FFC370B6847A80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5be7638f-46a0-3028-92a6-de76ab750685.roa Signing time: Wed 07 May 2025 15:15:07 +0000 ROA not before: Wed 07 May 2025 15:15:07 +0000 ROA not after: Tue 05 Aug 2025 15:15:07 +0000 asID: 199527 IP address blocks: 66.227.4.0/22 maxlen: 24 66.227.8.0/23 maxlen: 24 66.227.11.0/24 maxlen: 24 66.227.12.0/22 maxlen: 24 66.227.16.0/24 maxlen: 24 66.227.19.0/24 maxlen: 24 66.227.20.0/22 maxlen: 24 66.227.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:7c:b1:f0:16:ff:c3:70:b6:84:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 15:15:07 2025 GMT Not After : Aug 5 15:15:07 2025 GMT Subject: CN=db7f6467-f5b1-496a-a79e-1b3b38d16882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:57:79:77:7f:35:c5:fc:fe:d5:bc:cb:a5:ce: 52:10:16:92:d3:1d:32:e2:61:8e:88:f2:a7:b8:0b: 23:72:67:4d:08:ae:56:19:30:22:1a:4a:5a:a6:fe: 94:92:0f:b7:61:e8:0d:63:a3:47:91:25:ea:d7:5c: ca:24:54:1c:5a:20:b5:b2:ce:41:de:b7:43:e0:f5: f2:d3:a2:35:39:da:3d:e9:68:78:4a:98:7a:dd:09: 0d:65:96:fb:24:c8:4b:61:38:1d:b9:4e:31:13:26: bb:ee:dd:23:00:20:4c:06:93:d8:39:e3:3a:5e:03: 40:bd:05:21:cf:9f:6d:0c:0e:7f:26:6a:89:ea:05: b3:6f:d3:15:a7:2b:ab:97:89:96:da:d9:61:e8:08: 02:8b:a1:0c:83:fa:b7:fe:19:2b:8a:64:0a:95:e0: 78:28:5e:e8:13:e6:f1:84:b9:ee:0b:de:28:39:29: 6d:01:f1:db:60:c1:59:b3:b5:88:4c:30:62:fd:77: 9c:cb:8b:26:0d:fa:75:91:16:46:47:5e:14:90:c3: 1d:a1:00:70:52:82:d3:7d:a4:dd:32:89:47:b9:d3: 92:13:43:7b:a9:57:96:da:05:bf:dc:b9:d2:8f:2a: 4b:46:0e:ff:29:3b:2c:e6:30:88:47:64:d6:d6:53: 96:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CD:FB:AD:3C:44:13:3F:60:87:3C:7D:58:B4:B4:03:92:31:0C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5be7638f-46a0-3028-92a6-de76ab750685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.227.4.0-66.227.9.255 66.227.11.0-66.227.16.255 66.227.19.0-66.227.24.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c0:fa:6b:eb:f1:9f:f8:08:c2:96:90:46:12:a4:ac:bc:f0: 1a:c2:26:7d:a1:06:09:54:f3:71:ea:38:d9:f9:57:a3:7d:0f: cb:e0:9d:23:94:c6:cb:08:63:fe:e5:7b:4e:65:26:01:38:62: 16:1f:1b:4f:e2:51:a8:e3:af:a1:56:28:2b:c6:d4:35:fb:4e: 23:6e:76:83:13:e5:5e:f5:15:a0:cd:97:63:85:04:08:4f:3b: 80:39:f0:28:b7:17:74:56:18:ae:75:73:ad:ac:d2:68:5b:e3: 2e:a5:9e:c6:78:ed:37:f5:5f:5f:e8:78:9f:94:a7:3c:9b:51: d4:56:e9:f0:cc:15:48:ed:72:a8:78:5a:b9:0b:ae:00:c2:8a: 8d:a2:ee:4d:b7:34:39:90:a7:64:2e:58:f6:27:b2:44:4d:e9: ba:05:67:2d:b9:10:8e:9e:70:fd:61:b5:40:09:6d:d0:ae:f9: 4e:a2:43:d4:e8:31:f7:d0:1b:95:5d:20:36:67:2d:20:5b:e9: 29:ce:b2:6a:89:8d:91:8c:0b:30:ed:eb:2b:14:0d:b6:69:92: b7:9d:35:4d:a1:7b:30:c8:62:68:95:2b:08:14:f8:7d:29:26: ef:fb:13:08:b1:d0:85:bd:cc:04:39:74:1e:1c:45:6f:e1:69: ab:be:d4:c5 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEnGfLHwFv/DcLaEeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDUwNzE1MTUwN1oXDTI1MDgwNTE1MTUwN1owLzEtMCsGA1UEAxMk ZGI3ZjY0NjctZjViMS00OTZhLWE3OWUtMWIzYjM4ZDE2ODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwld5d381xfz+1bzLpc5SEBaS0x0y4mGOiPKn uAsjcmdNCK5WGTAiGkpapv6Ukg+3YegNY6NHkSXq11zKJFQcWiC1ss5B3rdD4PXy 06I1Odo96Wh4Sph63QkNZZb7JMhLYTgduU4xEya77t0jACBMBpPYOeM6XgNAvQUh z59tDA5/JmqJ6gWzb9MVpyurl4mW2tlh6AgCi6EMg/q3/hkrimQKleB4KF7oE+bx hLnuC94oOSltAfHbYMFZs7WITDBi/Xecy4smDfp1kRZGR14UkMMdoQBwUoLTfaTd MolHudOSE0N7qVeW2gW/3LnSjypLRg7/KTss5jCIR2TW1lOWCQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFGjN+608RBM/YIc8fVi0tAOSMQzdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWJlNzYzOGYtNDZhMC0z MDI4LTkyYTYtZGU3NmFiNzUwNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBAJC4wQD BAFC4wgwDAMEAELjCwMEAELjEDAMAwQAQuMTAwQAQuMYMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIvA+mvr 8Z/4CMKWkEYSpKy88BrCJn2hBglU83HqONn5V6N9D8vgnSOUxssIY/7le05lJgE4 YhYfG0/iUajjr6FWKCvG1DX7TiNudoMT5V71FaDNl2OFBAhPO4A58Ci3F3RWGK51 c62s0mhb4y6lnsZ47Tf1X1/oeJ+UpzybUdRW6fDMFUjtcqh4WrkLrgDCio2i7k23 NDmQp2QuWPYnskRN6boFZy25EI6ecP1htUAJbdCu+U6iQ9ToMffQG5VdIDZnLSBb 6SnOsmqJjZGMCzDt6ysUDbZpkredNU2hezDIYmiVKwgU+H0pJu/7Ewix0IW9zAQ5 dB4cRW/haau+1MU= -----END CERTIFICATE-----Generated at Wed May 14 20:40:33 2025 by rpki-client