$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa File: 2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa (raw, json) Hash identifier: ab+giVanqlJQtdHdaCd3je7uKpydIEkPvVEDbOJYFQg= Subject key identifier: CC:60:6D:14:92:74:B5:F8:C0:5D:2D:CC:B9:2F:2E:D5:A8:47:51:16 Certificate issuer: /CN=147f088f-ace0-45c8-9c73-f06e60d7debb Certificate serial: 010D0C9F43285848B8357B4D10BEF5D062464F80 Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa Signing time: Thu 30 Jan 2025 19:43:23 +0000 ROA not before: Thu 30 Jan 2025 19:43:23 +0000 ROA not after: Wed 30 Apr 2025 18:43:23 +0000 asID: 394321 IP address blocks: 66.97.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:35:7b:4d:10:be:f5:d0:62:46:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb Validity Not Before: Jan 30 19:43:23 2025 GMT Not After : Apr 30 18:43:23 2025 GMT Subject: CN=3db0c5f6-422a-4785-9adf-fdb5be79f035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:93:14:de:5a:75:d8:37:db:e4:aa:6c:c9: e7:d6:40:dd:ee:ef:11:72:83:76:a5:b5:e8:c4:3b: a6:c8:55:1e:de:15:d7:fd:e8:20:12:96:82:20:a4: 36:c2:c7:e0:74:af:1e:5d:cf:ad:19:8c:a5:38:fd: ba:53:3c:f3:48:8f:e0:dd:e4:37:c0:f7:7b:97:fd: f7:21:14:26:f2:e4:34:d0:a5:58:00:52:79:b4:56: 62:29:60:08:9f:0d:f4:31:0c:bf:91:dd:65:77:a3: 88:bd:62:b7:61:bc:b1:8a:25:63:32:f6:af:90:2a: 7d:7f:fe:50:e1:48:3b:87:f9:60:d8:84:13:a6:2f: 5d:45:a5:8a:65:e4:41:bd:6e:53:32:79:00:0c:9b: 5d:d0:7d:0f:6b:cc:85:88:80:f3:30:25:55:cc:60: da:f7:5d:d6:33:53:61:f4:42:bf:88:0c:2a:b0:45: 9f:ae:57:71:a0:e4:27:2c:48:84:5e:03:8b:72:ac: 0a:b9:20:1b:ab:53:c8:85:eb:ce:27:22:40:ff:40: 9b:f0:59:05:95:5b:51:91:22:0e:f9:1a:84:0d:ae: 23:8d:73:ea:47:3f:7f:86:89:75:99:ae:6b:23:d6: 08:73:6d:a8:4f:5f:eb:f7:9b:c3:f3:cb:28:d9:bf: 7f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:60:6D:14:92:74:B5:F8:C0:5D:2D:CC:B9:2F:2E:D5:A8:47:51:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl X509v3 Authority Key Identifier: keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer sbgp-ipAddrBlock: critical IPv4: 66.97.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:64:9a:5d:d7:8a:db:6e:a7:e2:ff:b5:64:68:39:47:a7:c2: 49:94:85:16:9c:c1:39:7a:56:af:5e:5e:75:d6:4e:57:27:ef: dd:52:63:18:f5:7b:f0:25:ac:93:15:00:81:0e:75:fa:e6:4c: 9a:84:19:ca:01:95:31:fc:6a:b5:9d:47:4e:23:83:d2:dc:2e: 4e:6b:ca:c4:66:60:ac:c7:50:a6:7c:1c:e2:89:a2:0b:14:97: 6f:83:f2:5a:e7:b8:b0:78:4e:c7:03:59:b2:34:32:cd:53:62: 07:54:0b:1f:9d:66:30:5b:80:f4:3d:23:f0:93:85:60:e2:f2: f5:e2:5d:7e:be:60:32:c0:ac:ec:72:a4:91:64:c5:68:63:ad: 5c:c8:73:36:5b:c0:2d:2a:a6:51:92:a0:75:65:5f:b3:32:77: 0d:13:a4:df:11:12:71:c6:a2:b7:39:be:55:94:ae:f3:3f:9c: 8c:43:cf:85:6e:80:e0:a9:6a:20:b9:43:7a:e4:91:34:3c:9e: 5b:af:70:6d:01:5b:a2:9c:e1:7a:ff:47:31:85:8b:ed:95:df: b5:73:bc:b1:fb:e9:97:0a:c9:02:81:e0:8e:d8:c7:f7:3f:85: 25:09:fb:94:2e:b2:2a:36:6d:06:19:4f:85:6e:40:bb:6b:40: 43:8f:33:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi4NXtNEL710GJGT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk ZWJiMB4XDTI1MDEzMDE5NDMyM1oXDTI1MDQzMDE4NDMyM1owLzEtMCsGA1UEAxMk M2RiMGM1ZjYtNDIyYS00Nzg1LTlhZGYtZmRiNWJlNzlmMDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx6TFN5addg32+SqbMnn1kDd7u8RcoN2pbXo xDumyFUe3hXX/eggEpaCIKQ2wsfgdK8eXc+tGYylOP26UzzzSI/g3eQ3wPd7l/33 IRQm8uQ00KVYAFJ5tFZiKWAInw30MQy/kd1ld6OIvWK3YbyxiiVjMvavkCp9f/5Q 4Ug7h/lg2IQTpi9dRaWKZeRBvW5TMnkADJtd0H0Pa8yFiIDzMCVVzGDa913WM1Nh 9EK/iAwqsEWfrldxoOQnLEiEXgOLcqwKuSAbq1PIhevOJyJA/0Cb8FkFlVtRkSIO +RqEDa4jjXPqRz9/hol1ma5rI9YIc22oT1/r95vD88so2b9/bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxgbRSSdLX4wF0tzLkvLtWoR1EWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvMjE2NGYyZDItZTE0Ny0z YmUyLWEzOGItOTdiYjdhNjhkZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3 ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmHtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdkml3Xittup+L/tWRoOUenwkmUhRacwTl6Vq9eXnXWTlcn791SYxj1 e/AlrJMVAIEOdfrmTJqEGcoBlTH8arWdR04jg9LcLk5rysRmYKzHUKZ8HOKJogsU l2+D8lrnuLB4TscDWbI0Ms1TYgdUCx+dZjBbgPQ9I/CThWDi8vXiXX6+YDLArOxy pJFkxWhjrVzIczZbwC0qplGSoHVlX7Mydw0TpN8REnHGorc5vlWUrvM/nIxDz4Vu gOCpaiC5Q3rkkTQ8nluvcG0BW6Kc4Xr/RzGFi+2V37VzvLH76ZcKyQKB4I7Yx/c/ hSUJ+5Qusio2bQYZT4VuQLtrQEOPM/I= -----END CERTIFICATE-----Generated at Sun Apr 6 17:47:45 2025 by rpki-client