$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/14949f9b-6dc4-3f59-ac26-e099378e8cef.roa File: 14949f9b-6dc4-3f59-ac26-e099378e8cef.roa (raw, json) Hash identifier: sF76Jzo2FqyDUBJp0lDNlJ/a8K7taPz/R95wXX73INc= Subject key identifier: FC:2E:F5:4B:1C:4B:3A:65:5F:93:A5:EB:7B:14:77:6C:42:F6:93:C8 Certificate issuer: /CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a Certificate serial: 010D0C9F43285849287E5FA01679E46783538180 Authority key identifier: 36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/14949f9b-6dc4-3f59-ac26-e099378e8cef.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 66.187.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:5f:a0:16:79:e4:67:83:53:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=94110998-4328-4808-9534-76955326a8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:18:f3:e3:da:af:9a:40:66:4e:46:7b:e8:2f: 05:14:ad:17:78:29:2d:02:ae:fa:cf:08:12:82:9f: 30:62:48:e2:29:2e:4c:1a:bf:b9:31:7e:d3:a5:c7: 60:ca:a0:2a:f0:54:2f:62:61:11:a3:8e:46:35:b3: 9f:1d:59:7a:86:9c:06:5c:df:5e:18:c2:4d:ac:de: e9:8f:cc:8e:06:df:aa:60:19:e4:97:10:29:e7:08: 91:38:f9:fe:de:c6:0c:ae:52:31:2a:40:12:8d:72: 2d:5f:8e:f8:d5:3a:b7:0e:b9:8d:9c:45:52:94:04: b3:2b:cb:ae:c6:27:f5:e2:8a:f1:5e:e2:2c:14:ac: b6:85:0a:9f:65:46:3a:b3:a1:7f:f9:4d:8b:9a:32: 1a:4f:55:8b:d7:f8:2f:d1:db:d5:70:5e:48:51:23: 8e:10:a0:8c:f8:ba:0d:b8:f1:c3:23:a2:5e:f0:fe: a5:aa:79:55:84:1f:82:da:3d:60:85:07:ef:9b:3b: d3:55:36:7f:d1:54:ba:25:d7:1b:c9:36:a8:90:ab: 92:ae:f9:3e:62:e1:91:ad:b7:d4:a4:10:34:90:3d: 2b:be:5c:8d:0a:83:d6:53:4d:6d:41:cb:43:af:e3: 97:8c:80:83:09:c3:bb:b6:8e:05:d7:ee:8b:5f:7b: 8c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2E:F5:4B:1C:4B:3A:65:5F:93:A5:EB:7B:14:77:6C:42:F6:93:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/14949f9b-6dc4-3f59-ac26-e099378e8cef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl X509v3 Authority Key Identifier: keyid:36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer sbgp-ipAddrBlock: critical IPv4: 66.187.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c2:f5:81:f3:3a:dd:3e:59:14:b7:56:4f:92:f3:e8:77:c6: 4e:ac:10:c1:49:3d:da:8c:6d:de:5a:05:62:d3:3f:2a:9e:40: d7:f6:81:aa:2f:3a:70:46:b7:7d:a5:b7:07:6e:1b:8c:36:b6: 4f:04:0f:4b:45:8c:72:b4:11:52:98:ba:c6:9d:f3:17:9a:8d: 0c:5a:0a:7e:15:62:3e:21:af:73:3c:59:b3:0d:c2:07:3d:80: 69:23:48:c4:5e:39:12:50:f1:9c:e6:e1:39:9f:c2:ef:8f:66: 10:73:f3:72:39:3a:10:ae:e9:b2:4d:32:a1:9e:16:18:eb:70: 49:1e:4d:1a:1a:bf:43:02:98:cc:11:eb:8f:52:34:3c:ac:18: 9a:be:d6:1f:d3:d1:3c:34:89:f5:4b:91:cf:52:49:4f:01:ad: 42:ad:8d:83:0b:2e:0d:27:c4:da:b7:ea:b4:0c:4b:90:c0:68: f4:32:0e:e2:a9:07:67:8b:f6:83:3e:e1:d4:89:3a:28:f9:24: c9:dd:24:ec:e5:e3:06:4c:36:f2:49:bb:e3:a2:5e:b9:b2:51: df:e2:bd:25:2a:6f:d6:8e:57:49:da:63:ec:e9:ab:89:ce:34: 10:e8:18:28:76:f4:33:0c:bd:d8:47:d8:92:b0:7f:df:dc:6f: bd:bf:4b:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofl+gFnnkZ4NTgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGQ3OGEtMDJjYi00NmVlLWFjZDEtNDY0ZjAzZjNl MTJhMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk OTQxMTA5OTgtNDMyOC00ODA4LTk1MzQtNzY5NTUzMjZhOGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBjz49qvmkBmTkZ76C8FFK0XeCktAq76zwgS gp8wYkjiKS5MGr+5MX7TpcdgyqAq8FQvYmERo45GNbOfHVl6hpwGXN9eGMJNrN7p j8yOBt+qYBnklxAp5wiROPn+3sYMrlIxKkASjXItX4741Tq3DrmNnEVSlASzK8uu xif14orxXuIsFKy2hQqfZUY6s6F/+U2LmjIaT1WL1/gv0dvVcF5IUSOOEKCM+LoN uPHDI6Je8P6lqnlVhB+C2j1ghQfvmzvTVTZ/0VS6JdcbyTaokKuSrvk+YuGRrbfU pBA0kD0rvlyNCoPWU01tQctDr+OXjICDCcO7to4F1+6LX3uMiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwu9UscSzplX5Ol63sUd2xC9pPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZGQ4 ZDc4YS0wMmNiLTQ2ZWUtYWNkMS00NjRmMDNmM2UxMmEvMTQ5NDlmOWItNmRjNC0z ZjU5LWFjMjYtZTA5OTM3OGU4Y2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWRkOGQ3OGEtMDJjYi00NmVlLWFj ZDEtNDY0ZjAzZjNlMTJhLzFkZDhkNzhhLTAyY2ItNDZlZS1hY2QxLTQ2NGYwM2Yz ZTEyYS5jcmwwHwYDVR0jBBgwFoAUNkhexZprzYeaeNoLWq65iRuYFGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZGQ4ZDc4YS0wMmNiLTQ2ZWUtYWNkMS00NjRm MDNmM2UxMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrvNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfC9YHzOt0+WRS3Vk+S8+h3xk6sEMFJPdqMbd5aBWLTPyqeQNf2gaov OnBGt32ltwduG4w2tk8ED0tFjHK0EVKYusad8xeajQxaCn4VYj4hr3M8WbMNwgc9 gGkjSMReORJQ8Zzm4Tmfwu+PZhBz83I5OhCu6bJNMqGeFhjrcEkeTRoav0MCmMwR 649SNDysGJq+1h/T0Tw0ifVLkc9SSU8BrUKtjYMLLg0nxNq36rQMS5DAaPQyDuKp B2eL9oM+4dSJOij5JMndJOzl4wZMNvJJu+OiXrmyUd/ivSUqb9aOV0naY+zpq4nO NBDoGCh29DMMvdhH2JKwf9/cb72/S5g= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:36 2025 by rpki-client