$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/a68ea5a3-4e54-3e21-b006-2030b235600f.roa File: a68ea5a3-4e54-3e21-b006-2030b235600f.roa (raw, json) Hash identifier: zpZ/EP45ohsMh6g+EtuFgHkiTdnmgrRRbjjyHdfso3c= Subject key identifier: CE:E4:9B:54:A2:0D:5F:FD:F7:E8:94:18:B7:E6:98:75:C2:EE:B0:E0 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858497DA45D74A13482FD8BD31E40 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/a68ea5a3-4e54-3e21-b006-2030b235600f.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 40509 IP address blocks: 137.66.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:5d:74:a1:34:82:fd:8b:d3:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=6e29a505-400a-49f4-ab32-c21f14b0cb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3c:2d:1b:89:0a:3b:f6:cb:83:e9:c9:6d:44: 21:5d:21:68:50:66:55:27:ed:bd:5d:82:c3:90:44: 16:7b:fb:12:4f:0d:99:0a:41:7d:18:f5:7e:89:f6: eb:22:f3:92:10:62:98:ae:1e:01:42:16:c2:d0:e2: d6:94:56:41:cc:78:c4:a9:cc:43:5b:7f:53:5d:da: 25:4d:65:0f:ba:4d:f5:7d:c2:e1:37:e3:6a:15:16: a0:7f:18:c2:70:3c:16:15:0f:49:24:ec:cc:2b:ae: 02:06:3a:15:19:d7:0b:a9:01:c7:56:b7:12:ce:36: 32:c8:57:ad:19:76:ea:61:b0:e6:7e:7a:d4:01:68: a9:5e:a7:cd:99:6b:c4:e7:89:74:ca:5d:63:72:09: 3f:42:05:9e:a0:c1:81:c3:f4:39:11:7e:84:a7:43: a9:24:fb:b5:58:34:67:e7:30:48:be:cb:aa:36:0c: 9b:f3:d5:2e:b2:b7:d9:64:42:2c:aa:c0:b0:a6:1a: 1f:a1:7d:ad:fd:5c:81:33:8c:37:90:94:3f:2d:be: 42:06:3d:63:c0:b1:1d:49:e3:30:5e:76:a8:4c:55: a1:71:cf:98:52:01:7d:b2:ff:dc:d8:29:4e:01:8f: ec:e8:ca:b3:ce:e6:f7:5c:f6:68:22:ea:9f:b0:fb: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E4:9B:54:A2:0D:5F:FD:F7:E8:94:18:B7:E6:98:75:C2:EE:B0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/a68ea5a3-4e54-3e21-b006-2030b235600f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 137.66.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:31:55:e0:e2:dc:38:e8:8e:33:25:cd:ee:47:9f:df:c9:ee: dc:e3:77:d0:ac:8a:1b:4d:e4:95:a1:d1:d2:5c:bd:be:eb:d0: 1b:1c:5c:ad:13:1c:9c:94:d2:2e:4e:84:64:6d:40:22:37:06: 95:ee:44:3c:62:c0:e8:5b:da:79:3e:eb:19:8e:24:86:d4:60: 09:ee:6c:fc:93:ff:9b:b5:2a:2f:35:af:14:7a:0b:5f:51:ef: e0:fd:05:73:33:ae:ba:49:37:48:53:e2:89:b3:7d:1a:64:4d: 54:a8:7e:eb:06:21:d4:51:f9:d4:35:6e:9a:6f:86:fc:7a:4e: ef:5c:5f:c5:2f:ad:8d:0b:18:77:1c:9d:d3:95:e4:d7:23:ce: af:12:2b:6f:95:a5:9c:fb:16:91:c7:c7:90:58:6e:75:60:5a: a3:b4:93:7f:c2:b3:8a:d2:89:6c:20:98:7b:03:fb:59:43:2a: f1:ba:bc:11:7c:45:0a:a7:7e:1b:32:20:73:8f:16:ed:c5:55: 22:6a:6e:ef:89:6e:93:32:fc:8e:ac:ab:0e:c2:59:49:aa:6d: 27:5c:e5:c1:bc:3b:51:df:0a:90:a0:e5:35:22:97:30:57:d2: aa:cf:e5:b2:84:84:8e:32:96:0d:6d:4a:ea:3a:a3:b4:b0:f5: 53:21:f1:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pF10oTSC/YvTHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NmUyOWE1MDUtNDAwYS00OWY0LWFiMzItYzIxZjE0YjBjYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TwtG4kKO/bLg+nJbUQhXSFoUGZVJ+29XYLD kEQWe/sSTw2ZCkF9GPV+ifbrIvOSEGKYrh4BQhbC0OLWlFZBzHjEqcxDW39TXdol TWUPuk31fcLhN+NqFRagfxjCcDwWFQ9JJOzMK64CBjoVGdcLqQHHVrcSzjYyyFet GXbqYbDmfnrUAWipXqfNmWvE54l0yl1jcgk/QgWeoMGBw/Q5EX6Ep0OpJPu1WDRn 5zBIvsuqNgyb89UusrfZZEIsqsCwphofoX2t/VyBM4w3kJQ/Lb5CBj1jwLEdSeMw XnaoTFWhcc+YUgF9sv/c2ClOAY/s6Mqzzub3XPZoIuqfsPsbVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7km1SiDV/99+iUGLfmmHXC7rDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvYTY4ZWE1YTMtNGU1NC0z ZTIxLWIwMDYtMjAzMGIyMzU2MDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiUIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQxVeDi3DjojjMlze5Hn9/J7tzjd9CsihtN5JWh0dJcvb7r0BscXK0T HJyU0i5OhGRtQCI3BpXuRDxiwOhb2nk+6xmOJIbUYAnubPyT/5u1Ki81rxR6C19R 7+D9BXMzrrpJN0hT4omzfRpkTVSofusGIdRR+dQ1bppvhvx6Tu9cX8UvrY0LGHcc ndOV5Ncjzq8SK2+VpZz7FpHHx5BYbnVgWqO0k3/Cs4rSiWwgmHsD+1lDKvG6vBF8 RQqnfhsyIHOPFu3FVSJqbu+JbpMy/I6sqw7CWUmqbSdc5cG8O1HfCpCg5TUilzBX 0qrP5bKEhI4ylg1tSuo6o7Sw9VMh8Uo= -----END CERTIFICATE-----Generated at Mon May 12 15:42:41 2025 by rpki-client