$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/208d4886-3b1b-3dba-9701-57545e0352ab.roa File: 208d4886-3b1b-3dba-9701-57545e0352ab.roa (raw, json) Hash identifier: /Ewgy7ZIl/OSdbEUv+rs/KWsFl2HIEp4mgOpGwkLJSM= Subject key identifier: 5A:30:44:D7:5F:FC:F2:1A:58:2F:3A:4E:F4:15:B1:4E:80:1C:02:AA Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F43285848B78B812172C306C19B7D8780 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/208d4886-3b1b-3dba-9701-57545e0352ab.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 40891 IP address blocks: 66.186.42.0/24 maxlen: 24 66.186.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:81:21:72:c3:06:c1:9b:7d:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=ac3c622b-3e77-48fd-897c-931f00b1776d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:84:e6:65:d5:d8:47:f4:9d:b2:d2:e5:8e:75: 16:61:28:a3:f3:db:0e:d4:0a:19:87:c4:3b:bd:77: 2b:0e:07:83:55:fe:83:3a:99:80:09:2d:74:a1:98: 22:4b:a2:99:57:02:1b:e2:b9:2f:43:0b:05:12:21: 83:fa:77:e8:1e:34:26:e2:35:df:93:74:55:8e:02: f0:d5:c0:19:03:f2:83:47:a5:d2:38:9c:70:1a:9d: 81:d5:ab:bc:b1:2f:18:5c:92:3c:43:78:bf:fd:4f: 2d:5e:c0:02:e6:35:e9:a5:a1:df:d9:2e:75:48:84: 34:3d:b4:e1:03:7a:05:e6:aa:63:bc:c0:7b:2e:3a: 81:21:a8:ad:65:8a:bc:48:d3:47:eb:a7:c8:b7:8f: e2:86:47:85:1e:76:ca:4c:12:15:e3:a6:92:8e:a4: 5d:e9:0b:9d:09:2c:32:2c:38:0f:5b:73:b7:4a:93: 35:00:52:b1:13:f4:08:d0:75:0f:b2:6a:3a:ea:10: c8:e9:15:7a:9c:cf:89:86:c6:48:2f:e4:88:23:1e: 96:45:b5:ba:53:96:2c:4d:c6:49:04:e9:77:1d:93: d3:0f:2e:fe:f8:e8:15:c2:1f:95:95:42:0d:72:91: fe:cf:33:7f:76:16:36:45:00:96:6d:4d:d2:54:a9: ad:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:30:44:D7:5F:FC:F2:1A:58:2F:3A:4E:F4:15:B1:4E:80:1C:02:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/208d4886-3b1b-3dba-9701-57545e0352ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 66.186.42.0/24 66.186.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:3d:66:f3:13:e6:23:92:9e:73:36:f2:18:4d:be:dd:1d:06: e3:c9:04:6b:8d:d9:49:15:98:de:0c:bf:80:ed:80:f2:49:af: 1c:7a:fc:4c:c2:e0:5c:07:be:b0:af:02:08:1a:78:bd:54:20: 08:e7:b5:b7:84:70:bd:10:d9:f7:38:23:c4:27:6c:2f:9c:87: d7:bf:40:5e:f7:8f:e5:2c:93:41:73:7e:15:0e:1e:6f:97:1a: 57:17:e0:c4:07:dc:65:8e:39:3a:2b:88:08:e5:73:12:ac:b1: e4:8a:b5:27:50:82:f2:3e:0e:24:d6:d1:4a:49:c7:35:5b:92: cb:8b:09:96:99:28:25:c6:42:1b:cf:b8:28:90:fa:09:28:51: a2:87:f1:88:16:82:cb:59:f2:bb:40:cf:d3:5e:d9:12:13:41: 45:72:ed:39:80:d9:10:46:16:11:a8:88:15:a6:46:ac:a0:d9: bb:e3:a1:19:38:98:a9:ac:5a:d0:48:7c:f4:e9:8e:0b:8d:9b: 3f:7f:4b:b0:9f:72:6a:7f:61:5f:10:f7:e8:bb:02:44:9d:74: 40:e1:db:00:77:c6:be:25:33:5a:36:25:22:28:30:a1:28:ec: e8:b6:6b:67:cb:47:b9:1a:db:37:1a:fa:44:21:5f:88:32:0c: c4:65:93:3b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEi3i4EhcsMGwZt9h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk YWMzYzYyMmItM2U3Ny00OGZkLTg5N2MtOTMxZjAwYjE3NzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYTmZdXYR/SdstLljnUWYSij89sO1AoZh8Q7 vXcrDgeDVf6DOpmACS10oZgiS6KZVwIb4rkvQwsFEiGD+nfoHjQm4jXfk3RVjgLw 1cAZA/KDR6XSOJxwGp2B1au8sS8YXJI8Q3i//U8tXsAC5jXppaHf2S51SIQ0PbTh A3oF5qpjvMB7LjqBIaitZYq8SNNH66fIt4/ihkeFHnbKTBIV46aSjqRd6QudCSwy LDgPW3O3SpM1AFKxE/QI0HUPsmo66hDI6RV6nM+JhsZIL+SIIx6WRbW6U5YsTcZJ BOl3HZPTDy7++OgVwh+VlUINcpH+zzN/dhY2RQCWbU3SVKmtIwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFowRNdf/PIaWC86TvQVsU6AHAKqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjA4ZDQ4ODYtM2IxYi0z ZGJhLTk3MDEtNTc1NDVlMDM1MmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQroqAwQA QrosMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAw9ZvMT5iOSnnM28hhNvt0dBuPJBGuN2UkVmN4Mv4DtgPJJ rxx6/EzC4FwHvrCvAggaeL1UIAjntbeEcL0Q2fc4I8QnbC+ch9e/QF73j+Usk0Fz fhUOHm+XGlcX4MQH3GWOOToriAjlcxKsseSKtSdQgvI+DiTW0UpJxzVbksuLCZaZ KCXGQhvPuCiQ+gkoUaKH8YgWgstZ8rtAz9Ne2RITQUVy7TmA2RBGFhGoiBWmRqyg 2bvjoRk4mKmsWtBIfPTpjguNmz9/S7Cfcmp/YV8Q9+i7AkSddEDh2wB3xr4lM1o2 JSIoMKEo7Oi2a2fLR7ka2zca+kQhX4gyDMRlkzs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:39 2025 by rpki-client