$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f0d9892a-66c2-38e2-8ddb-1eddbc1ac0d9.roa File: f0d9892a-66c2-38e2-8ddb-1eddbc1ac0d9.roa (raw, json) Hash identifier: ctZ1NlWW++7JylYhIJw9H93nSPjrs44fh3lLWGxZCWU= Subject key identifier: D4:35:9A:2D:47:D9:44:2E:3C:7B:21:24:7B:F3:E5:B1:75:9A:B3:05 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858496E49874189CA96F1077E6340 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f0d9892a-66c2-38e2-8ddb-1eddbc1ac0d9.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 18785 IP address blocks: 66.231.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:87:41:89:ca:96:f1:07:7e:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=1e0f8d08-4333-459e-9652-e3f90c8bfc04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:d0:01:0c:36:23:c5:6f:32:5d:4a:53:d8: 19:b2:85:81:1b:69:57:c1:f9:fe:9a:16:5d:42:77: 89:2b:b2:4f:99:71:fb:95:19:89:8d:29:87:7b:23: ba:d9:6f:c5:d9:ee:2c:a0:71:ec:b7:7c:3f:72:ad: 22:45:6a:6a:77:c2:bf:00:fb:19:b2:71:5a:e6:5e: c9:02:2e:d0:b9:7b:63:28:6f:2e:55:b2:60:0e:7b: a4:2e:f8:0f:e4:74:80:8f:cf:53:00:26:5c:46:52: a6:fd:2f:d1:2a:d2:35:46:99:30:26:82:1e:c4:eb: ea:96:c4:d2:7c:c9:9b:79:3b:fe:89:5b:26:25:4a: 7f:91:ca:36:15:97:ca:9f:fa:35:b0:a8:57:97:10: 09:61:6e:32:66:42:7c:ed:08:58:c8:35:00:c5:59: 0c:9e:c1:4b:97:04:09:5a:71:c8:83:d5:ed:58:b4: 00:9e:e2:26:1e:34:96:51:73:ea:d7:7a:92:b4:03: d2:c1:e7:31:73:e9:fc:07:b1:81:ce:64:dc:b9:b8: 79:60:b8:8d:d9:c8:b6:82:5f:c0:aa:fc:c0:34:a7: ce:b8:40:26:31:14:62:eb:ea:75:ba:c4:50:71:26: bd:b7:3c:df:2e:70:6c:88:62:ad:c9:5f:90:66:d7: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:35:9A:2D:47:D9:44:2E:3C:7B:21:24:7B:F3:E5:B1:75:9A:B3:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f0d9892a-66c2-38e2-8ddb-1eddbc1ac0d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:2c:d4:0e:c0:e3:1c:98:e9:08:68:31:a4:24:ae:ef:ba:07: af:dd:5d:0f:29:7b:63:74:4d:1a:eb:ee:6f:80:18:1d:0e:63: 96:e8:b5:34:1f:7d:28:48:3a:c6:7c:e2:b0:bb:e3:ab:80:94: 09:1a:98:21:31:c0:31:d1:51:53:fe:f5:10:07:1a:78:16:78: 4d:7f:5a:53:43:84:ca:f1:db:47:88:e6:9b:d3:5b:0e:77:44: 87:d4:e3:47:fd:e7:02:78:4e:69:28:71:11:4f:85:e6:b1:a4: 97:23:ff:7d:d1:a9:41:b1:17:fa:64:ce:9e:4c:d6:0c:a6:3e: 99:d7:c4:19:9c:6a:e2:a4:19:eb:f6:9a:88:86:f7:79:1c:bd: 61:b1:7a:39:6b:96:cf:13:37:ab:59:5b:44:a5:ef:79:00:1b: ec:fc:8b:6c:3c:cf:ad:cc:1d:8e:82:37:8a:2e:76:eb:fb:52: cf:1e:85:a5:30:60:40:4b:ab:b5:6d:1f:8f:70:be:ab:c4:17: 51:53:9e:fe:9e:a2:0c:78:87:e1:2a:18:73:5d:d4:e0:70:b3: f5:f3:dd:36:81:c6:8b:c4:38:6e:c0:04:53:29:4c:ae:c1:c9: e3:03:9c:58:32:70:92:2d:b4:63:53:21:fb:4d:63:52:04:c2: cf:b9:a0:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYdBicqW8Qd+Y0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk MWUwZjhkMDgtNDMzMy00NTllLTk2NTItZTNmOTBjOGJmYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF3QAQw2I8VvMl1KU9gZsoWBG2lXwfn+mhZd QneJK7JPmXH7lRmJjSmHeyO62W/F2e4soHHst3w/cq0iRWpqd8K/APsZsnFa5l7J Ai7QuXtjKG8uVbJgDnukLvgP5HSAj89TACZcRlKm/S/RKtI1RpkwJoIexOvqlsTS fMmbeTv+iVsmJUp/kco2FZfKn/o1sKhXlxAJYW4yZkJ87QhYyDUAxVkMnsFLlwQJ WnHIg9XtWLQAnuImHjSWUXPq13qStAPSwecxc+n8B7GBzmTcubh5YLiN2ci2gl/A qvzANKfOuEAmMRRi6+p1usRQcSa9tzzfLnBsiGKtyV+QZtfSSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQ1mi1H2UQuPHshJHvz5bF1mrMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZjBkOTg5MmEtNjZjMi0z OGUyLThkZGItMWVkZGJjMWFjMGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8s1A7A4xyY6QhoMaQkru+6B6/dXQ8pe2N0TRrr7m+AGB0OY5botTQf fShIOsZ84rC746uAlAkamCExwDHRUVP+9RAHGngWeE1/WlNDhMrx20eI5pvTWw53 RIfU40f95wJ4TmkocRFPheaxpJcj/33RqUGxF/pkzp5M1gymPpnXxBmcauKkGev2 moiG93kcvWGxejlrls8TN6tZW0Sl73kAG+z8i2w8z63MHY6CN4ouduv7Us8ehaUw YEBLq7VtH49wvqvEF1FTnv6eogx4h+EqGHNd1OBws/Xz3TaBxovEOG7ABFMpTK7B yeMDnFgycJIttGNTIftNY1IEws+5oMg= -----END CERTIFICATE-----Generated at Mon May 5 14:07:04 2025 by rpki-client