$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/bdb594be-25b2-3939-93cb-470fe9e560e4.roa File: bdb594be-25b2-3939-93cb-470fe9e560e4.roa (raw, json) Hash identifier: 32njBspgbpuzwulZ9zC0/ldPDOTGHCn1h146fGBiG44= Subject key identifier: 84:64:7D:93:11:00:A2:2C:D5:D2:49:10:A6:6F:BF:21:37:B7:F0:35 Certificate issuer: /CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a Certificate serial: 010D0C9F4328584909E697ACE34382089DD8F6E0 Authority key identifier: 9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/bdb594be-25b2-3939-93cb-470fe9e560e4.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 23483 IP address blocks: 66.244.0.0/20 maxlen: 20 66.244.16.0/20 maxlen: 20 66.244.32.0/20 maxlen: 20 66.244.48.0/20 maxlen: 20 2602:fd01::/38 maxlen: 38 2602:fd01:400::/38 maxlen: 38 2602:fd01:800::/38 maxlen: 38 2602:fd01:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:97:ac:e3:43:82:08:9d:d8:f6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=cd5516e6-4648-4446-b906-8599090d512c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fa:62:6c:e1:a4:c4:d6:09:68:4b:11:9e:f0: c6:1d:73:ab:1a:03:58:48:57:88:32:79:d0:2b:7c: 63:cc:06:cf:7d:7e:fe:b3:28:34:9a:2f:c8:b0:ec: 84:c6:31:b7:43:ff:d1:b7:83:e6:75:cd:67:c8:74: 7f:20:91:f4:a3:98:67:80:36:e3:63:4e:96:a1:01: e1:0a:d2:7e:dd:12:fa:58:70:c5:11:f8:7c:cb:f1: 77:03:42:d2:dd:5a:59:a4:d1:ec:26:12:e5:01:8d: 07:d6:ff:74:54:ac:71:61:67:ea:58:e2:ae:89:ea: 3f:59:0e:c5:f4:79:0f:2a:08:2f:87:11:cf:80:b4: ee:cf:7b:27:de:78:9a:54:95:e8:27:59:dd:66:cc: f2:44:8b:61:62:a8:f6:63:93:68:55:c6:83:2c:22: ae:4f:e2:44:e7:0f:59:91:66:d4:f2:47:52:cf:42: d1:25:95:39:be:21:cd:dd:8e:a4:7d:6b:5a:02:71: c7:f4:f2:12:6f:5f:23:15:c4:af:06:fd:36:a8:a9: b6:f0:f3:99:1a:d7:92:98:a0:d4:bd:2f:c6:57:2b: 84:9d:a2:82:a7:42:0c:77:b1:0b:dd:de:28:0c:42: 37:c1:f2:39:4b:63:83:f5:4d:61:d9:a9:3b:b3:86: e8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:64:7D:93:11:00:A2:2C:D5:D2:49:10:A6:6F:BF:21:37:B7:F0:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/bdb594be-25b2-3939-93cb-470fe9e560e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl X509v3 Authority Key Identifier: keyid:9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer sbgp-ipAddrBlock: critical IPv4: 66.244.0.0/18 IPv6: 2602:fd01::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a6:f3:dd:c6:75:d2:e3:ca:14:2f:76:e2:a2:ac:8d:af:da: c3:50:2f:6f:48:ab:a6:62:0f:32:a9:2a:57:09:66:de:a3:e2: 71:00:d1:f9:c0:6d:7e:36:1a:a1:14:cb:3e:d4:32:64:ac:80: 20:02:da:fa:79:d2:0f:90:5e:f7:7f:54:66:72:56:7a:94:1f: 6b:58:d4:9d:78:77:f7:4d:84:dc:25:7b:86:98:95:86:5f:1a: 6c:c8:e0:5a:a8:c5:ca:67:4b:2b:f1:da:d0:af:85:ed:34:7b: 7c:8f:10:69:2d:e5:16:43:8f:53:a2:d1:a6:03:3a:05:d7:e5: 48:fa:21:a7:3e:76:63:3c:8a:b8:32:e2:96:c3:e1:bf:2c:c2: 2e:a4:24:dc:e5:1b:38:30:0c:39:f4:ad:03:a5:be:b6:32:f1: 90:e0:e0:89:7b:22:59:3c:83:6b:79:af:1f:f8:e4:39:15:92: e7:6c:b0:3a:97:cc:2f:4a:96:62:3d:c8:2f:a8:60:95:96:2d: 5e:cc:bf:6e:cb:34:67:70:b1:12:84:45:b0:e0:5d:89:6b:e4: 74:26:5a:d4:34:15:89:ea:7f:d2:a9:21:73:89:4e:56:e0:cb: b7:4c:2b:0d:94:77:ef:9b:9b:a3:5f:1b:64:24:0e:d9:87:05: 8c:4a:ed:44 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkJ5pes40OCCJ3Y9uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNjMmJlODgtMjQwZi00MThhLWFlYTktM2M2YTA3NzZj ZTdhMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk Y2Q1NTE2ZTYtNDY0OC00NDQ2LWI5MDYtODU5OTA5MGQ1MTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vpibOGkxNYJaEsRnvDGHXOrGgNYSFeIMnnQ K3xjzAbPfX7+syg0mi/IsOyExjG3Q//Rt4Pmdc1nyHR/IJH0o5hngDbjY06WoQHh CtJ+3RL6WHDFEfh8y/F3A0LS3VpZpNHsJhLlAY0H1v90VKxxYWfqWOKuieo/WQ7F 9HkPKggvhxHPgLTuz3sn3niaVJXoJ1ndZszyRIthYqj2Y5NoVcaDLCKuT+JE5w9Z kWbU8kdSz0LRJZU5viHN3Y6kfWtaAnHH9PISb18jFcSvBv02qKm28POZGteSmKDU vS/GVyuEnaKCp0IMd7EL3d4oDEI3wfI5S2OD9U1h2ak7s4bo2QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIRkfZMRAKIs1dJJEKZvvyE3t/A1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yY2My YmU4OC0yNDBmLTQxOGEtYWVhOS0zYzZhMDc3NmNlN2EvYmRiNTk0YmUtMjViMi0z OTM5LTkzY2ItNDcwZmU5ZTU2MGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmNjMmJlODgtMjQwZi00MThhLWFl YTktM2M2YTA3NzZjZTdhLzJjYzJiZTg4LTI0MGYtNDE4YS1hZWE5LTNjNmEwNzc2 Y2U3YS5jcmwwHwYDVR0jBBgwFoAUnYa59kbeA/nTncD+EI1WiroUn9AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yY2MyYmU4OC0yNDBmLTQxOGEtYWVhOS0zYzZh MDc3NmNlN2EuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQGQvQAMA4E AgACMAgDBgQmAv0BADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjpvPdxnXS48oUL3bioqyNr9rDUC9vSKum Yg8yqSpXCWbeo+JxANH5wG1+NhqhFMs+1DJkrIAgAtr6edIPkF73f1RmclZ6lB9r WNSdeHf3TYTcJXuGmJWGXxpsyOBaqMXKZ0sr8drQr4XtNHt8jxBpLeUWQ49TotGm AzoF1+VI+iGnPnZjPIq4MuKWw+G/LMIupCTc5Rs4MAw59K0Dpb62MvGQ4OCJeyJZ PINrea8f+OQ5FZLnbLA6l8wvSpZiPcgvqGCVli1ezL9uyzRncLEShEWw4F2Ja+R0 JlrUNBWJ6n/SqSFziU5W4Mu3TCsNlHfvm5ujXxtkJA7ZhwWMSu1E -----END CERTIFICATE-----Generated at Sat May 10 19:44:28 2025 by rpki-client