$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa File: b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa (raw, json) Hash identifier: cS3qBbexTAAEYBxkXMGnzpHAnWe8oSJn7nBHNZ1dxKE= Subject key identifier: DD:9A:0F:60:9F:67:75:9B:FE:D1:E7:C0:69:90:7E:53:9C:FE:79:FB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F43285849C67CAF5B3D6C11E7A2D22D60 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa Signing time: Wed 07 May 2025 15:15:06 +0000 ROA not before: Wed 07 May 2025 15:15:06 +0000 ROA not after: Tue 05 Aug 2025 15:15:06 +0000 asID: 5065 IP address blocks: 216.132.198.0/24 maxlen: 24 216.132.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:7c:af:5b:3d:6c:11:e7:a2:d2:2d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 15:15:06 2025 GMT Not After : Aug 5 15:15:06 2025 GMT Subject: CN=a3f85b1f-0270-4e48-b51b-8717393bb387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fe:d4:54:33:e6:2b:d7:dd:7f:53:fb:77:07: cc:67:0c:49:5b:ee:e9:0f:7c:95:c6:df:4d:11:ef: 8e:b6:61:74:a4:c8:5d:da:d4:c9:43:a3:8d:f9:80: 4e:d2:f5:e1:1c:a6:01:01:b0:b0:73:5e:c1:91:37: 31:1e:db:bf:2b:c3:8a:4b:c1:59:8a:7d:ad:47:7e: 19:68:1a:dc:d2:33:8a:45:29:40:50:dc:70:06:f6: 82:bc:bb:6d:6a:8c:39:62:83:f0:e3:58:2a:b3:17: 68:d4:63:63:11:c5:ee:f6:ab:9f:2f:e1:8e:6b:68: 22:37:54:96:4b:4c:f6:9e:e6:73:48:34:b7:5c:59: d8:6e:d8:09:3d:18:d8:c5:7d:65:43:ed:8f:d4:c7: 45:17:fc:f9:73:39:26:af:c5:f6:71:d9:22:50:ee: 8f:c2:a0:ec:31:ab:b2:c1:76:53:57:ff:9e:b1:15: f3:e3:16:90:63:5e:eb:4f:fc:0b:65:4f:0f:a0:d1: 9c:23:55:bb:a4:34:0e:f4:95:d3:ea:37:b3:4c:e0: e9:d9:7b:02:08:b2:dd:a9:be:ec:59:5c:41:f8:61: ea:25:d4:2e:9e:df:4a:98:2e:db:a0:2a:aa:b7:63: 78:ed:4e:27:37:9d:9f:c0:5c:ad:6b:18:af:3f:00: 6c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9A:0F:60:9F:67:75:9B:FE:D1:E7:C0:69:90:7E:53:9C:FE:79:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.198.0/24 216.132.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:3f:aa:02:58:2f:e5:f4:b8:a3:0e:9b:e4:a8:7b:e4:28:a7: 0d:55:ee:66:3b:4c:38:19:2f:48:4b:3c:0b:2b:88:e7:c8:b0: 26:e9:cc:cf:99:e4:2e:25:3a:09:42:4a:2c:5c:d1:09:8a:a6: 27:16:e6:70:f7:90:f4:68:2c:33:47:a4:75:57:7c:53:f0:a5: ee:72:9f:58:3b:5d:bb:36:59:50:3a:64:d8:5a:f6:5f:07:ab: c1:b6:82:94:6f:ab:da:65:e1:6e:db:a7:16:3e:f9:42:1f:08: 4c:50:78:69:86:e6:19:4a:74:ff:3a:da:68:7e:47:1f:82:ec: 39:cc:8c:75:35:df:07:dc:08:81:7d:bd:73:e3:ef:53:6c:39: b2:cf:ec:74:b3:af:b4:17:f4:30:28:19:e4:03:22:8a:ce:a7: 81:38:68:7a:db:b1:de:e3:30:68:21:c6:57:bd:6b:01:7b:6e: 6b:2b:b1:0a:40:d6:f7:55:ab:ed:c0:b2:cd:54:71:c8:28:90: 59:d1:53:a3:f5:b1:e5:f3:0e:93:c0:63:22:92:db:df:4c:5d: 55:8e:df:00:3a:28:c4:3b:29:48:21:3a:83:45:ed:f3:45:1d: 07:3c:b5:91:dc:71:44:68:28:cf:87:4f:0f:c1:4f:ac:2f:d6: dd:bb:61:b2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnGfK9bPWwR56LSLWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDUwNzE1MTUwNloXDTI1MDgwNTE1MTUwNlowLzEtMCsGA1UEAxMk YTNmODViMWYtMDI3MC00ZTQ4LWI1MWItODcxNzM5M2JiMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv7UVDPmK9fdf1P7dwfMZwxJW+7pD3yVxt9N Ee+OtmF0pMhd2tTJQ6ON+YBO0vXhHKYBAbCwc17BkTcxHtu/K8OKS8FZin2tR34Z aBrc0jOKRSlAUNxwBvaCvLttaow5YoPw41gqsxdo1GNjEcXu9qufL+GOa2giN1SW S0z2nuZzSDS3XFnYbtgJPRjYxX1lQ+2P1MdFF/z5czkmr8X2cdkiUO6PwqDsMauy wXZTV/+esRXz4xaQY17rT/wLZU8PoNGcI1W7pDQO9JXT6jezTODp2XsCCLLdqb7s WVxB+GHqJdQunt9KmC7boCqqt2N47U4nN52fwFytaxivPwBsfQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFN2aD2CfZ3Wb/tHnwGmQflOc/nn7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjY2ZmZlMmYtZTY1My0z N2JmLTk0OTMtMTkxOGNjMjNlM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2ITGAwQA 2ITkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD4/qgJYL+X0uKMOm+Soe+Qopw1V7mY7TDgZL0hLPAsriOfI sCbpzM+Z5C4lOglCSixc0QmKpicW5nD3kPRoLDNHpHVXfFPwpe5yn1g7Xbs2WVA6 ZNha9l8Hq8G2gpRvq9pl4W7bpxY++UIfCExQeGmG5hlKdP862mh+Rx+C7DnMjHU1 3wfcCIF9vXPj71NsObLP7HSzr7QX9DAoGeQDIorOp4E4aHrbsd7jMGghxle9awF7 bmsrsQpA1vdVq+3Ass1UccgokFnRU6P1seXzDpPAYyKS299MXVWO3wA6KMQ7KUgh OoNF7fNFHQc8tZHccURoKM+HTw/BT6wv1t27YbI= -----END CERTIFICATE-----Generated at Wed May 14 12:44:00 2025 by rpki-client