$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb7248b1-f854-33ea-a9e0-b45553defd50.roa File: fb7248b1-f854-33ea-a9e0-b45553defd50.roa (raw, json) Hash identifier: BJNzUs0PTdBt9IlAuY56gbeJcwYiwaBie6IUITacSRk= Subject key identifier: C0:FA:CD:61:6A:2A:70:BA:68:2E:30:48:37:13:B8:92:E6:34:89:41 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F43285849D625E0E7D80B7A7FB1456B00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb7248b1-f854-33ea-a9e0-b45553defd50.roa Signing time: Tue 13 May 2025 05:53:08 +0000 ROA not before: Tue 13 May 2025 05:53:08 +0000 ROA not after: Mon 11 Aug 2025 05:53:08 +0000 asID: 395793 IP address blocks: 66.227.119.0/24 maxlen: 24 209.250.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:25:e0:e7:d8:0b:7a:7f:b1:45:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 13 05:53:08 2025 GMT Not After : Aug 11 05:53:08 2025 GMT Subject: CN=d5720134-e270-4af4-8f63-ef2bf4a2eff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:fe:7c:38:69:b5:2d:89:57:d1:fa:14:95: 1f:28:f3:f0:15:4a:22:7e:57:da:40:c3:62:62:b1: 45:e2:c5:29:49:d3:e7:54:79:04:68:e2:61:ac:4c: 33:82:fe:3c:e9:8d:62:6e:84:93:24:6a:84:d0:1b: cf:79:95:40:75:3b:71:8f:cc:34:51:0f:52:bc:86: 1b:03:ee:2a:7d:e8:4e:da:10:1b:2e:d1:1a:58:c5: 07:f2:4a:64:6d:a1:59:cf:f7:dd:e1:c5:d3:49:eb: 89:30:84:9c:ae:b3:70:91:7f:fb:c0:79:97:ac:ce: 4a:d1:2e:f1:5a:69:e7:dc:f8:0b:e6:97:49:c3:5f: db:3e:46:d6:b6:f5:3d:2d:33:e2:3c:db:4a:3c:9a: 2b:6f:27:4f:47:ca:bf:65:21:03:fc:24:82:80:10: f1:d7:6f:0b:60:7e:b8:ed:3f:97:83:80:b4:8f:ac: 28:6e:72:19:80:f0:63:b3:30:e1:79:43:be:ee:03: 6e:2d:b3:18:7b:57:9e:e1:bd:dd:a1:f8:53:55:e3: bd:a5:8a:ff:35:24:0a:ef:27:a8:e6:c2:fe:d5:76: 60:f3:03:6d:e4:88:ee:ef:88:56:88:0d:db:55:6a: 3d:4f:a7:21:4e:f8:0b:7e:ed:b3:a9:c5:80:51:9d: a1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FA:CD:61:6A:2A:70:BA:68:2E:30:48:37:13:B8:92:E6:34:89:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb7248b1-f854-33ea-a9e0-b45553defd50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.227.119.0/24 209.250.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:00:27:12:19:09:47:c1:36:d1:7a:e4:b7:3b:f1:1f:13:8e: 98:71:2c:84:d4:db:a3:be:64:67:5a:42:e5:49:13:18:a5:c2: 0c:ca:27:90:6f:42:ab:09:18:d2:b9:66:67:a9:31:8d:0a:60: ba:2a:31:3e:bd:c4:87:7f:6d:e4:77:79:44:18:8f:10:90:19: e7:6c:70:29:a4:a5:9a:6d:48:d9:c8:6e:b0:78:08:eb:0a:3f: 1d:1a:ea:28:5a:2c:37:6a:5f:98:f5:7f:f1:53:e6:5a:da:aa: 14:f0:18:95:19:52:ae:57:35:fb:bc:ce:6c:3a:dc:c3:7b:d9: 4c:4b:98:1a:0e:75:80:a4:ad:fb:a5:af:42:26:a3:20:4c:d2: 76:55:92:dc:68:48:3a:fb:04:4d:ba:e0:3e:83:16:12:9a:99: 6b:f9:8e:30:30:a8:8c:a5:f6:6e:12:6b:3d:f1:6f:9b:1c:17: eb:6d:3a:f8:e1:73:6e:8b:22:e7:e5:eb:ae:27:98:d2:f8:29: f4:bf:fa:88:88:d6:27:b6:04:f4:1f:43:f1:e8:91:0a:0b:ee: 02:44:6a:3d:88:08:39:90:96:8c:19:3c:e3:5b:25:e6:eb:54: c3:20:44:c7:b9:73:91:e7:ca:9a:17:b6:2f:e2:0b:d6:71:fe: f2:df:a9:27 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnWJeDn2At6f7FFawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDUxMzA1NTMwOFoXDTI1MDgxMTA1NTMwOFowLzEtMCsGA1UEAxMk ZDU3MjAxMzQtZTI3MC00YWY0LThmNjMtZWYyYmY0YTJlZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfP+fDhptS2JV9H6FJUfKPPwFUoiflfaQMNi YrFF4sUpSdPnVHkEaOJhrEwzgv486Y1iboSTJGqE0BvPeZVAdTtxj8w0UQ9SvIYb A+4qfehO2hAbLtEaWMUH8kpkbaFZz/fd4cXTSeuJMIScrrNwkX/7wHmXrM5K0S7x Wmnn3PgL5pdJw1/bPkbWtvU9LTPiPNtKPJorbydPR8q/ZSED/CSCgBDx128LYH64 7T+Xg4C0j6wobnIZgPBjszDheUO+7gNuLbMYe1ee4b3dofhTVeO9pYr/NSQK7yeo 5sL+1XZg8wNt5Iju74hWiA3bVWo9T6chTvgLfu2zqcWAUZ2hpwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMD6zWFqKnC6aC4wSDcTuJLmNIlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmI3MjQ4YjEtZjg1NC0z M2VhLWE5ZTAtYjQ1NTUzZGVmZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQuN3AwQA 0fpwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHEAJxIZCUfBNtF65Lc78R8TjphxLITU26O+ZGdaQuVJExil wgzKJ5BvQqsJGNK5ZmepMY0KYLoqMT69xId/beR3eUQYjxCQGedscCmkpZptSNnI brB4COsKPx0a6ihaLDdqX5j1f/FT5lraqhTwGJUZUq5XNfu8zmw63MN72UxLmBoO dYCkrfulr0ImoyBM0nZVktxoSDr7BE264D6DFhKamWv5jjAwqIyl9m4Saz3xb5sc F+ttOvjhc26LIufl664nmNL4KfS/+oiI1ie2BPQfQ/HokQoL7gJEaj2ICDmQlowZ PONbJebrVMMgRMe5c5HnypoXti/iC9Zx/vLfqSc= -----END CERTIFICATE-----Generated at Wed May 14 19:56:37 2025 by rpki-client