$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/20ee16b6-94f3-3d25-9d91-f2bbea700def.roa File: 20ee16b6-94f3-3d25-9d91-f2bbea700def.roa (raw, json) Hash identifier: D6dgzfzMP+qRE84zRvl/UhbDws+KXt1msmBqi+BrlDk= Subject key identifier: 9C:1F:B7:8D:39:28:52:E5:0C:CC:0F:B5:DE:9B:AA:01:80:9B:50:27 Certificate issuer: /CN=de84b539-8408-4f2c-8e81-05f7a1b73686 Certificate serial: 010D0C9F432858491D71807DB4EB999A26483480 Authority key identifier: E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/20ee16b6-94f3-3d25-9d91-f2bbea700def.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 18779 IP address blocks: 66.154.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:80:7d:b4:eb:99:9a:26:48:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de84b539-8408-4f2c-8e81-05f7a1b73686 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=443c0dd7-79c8-4b7b-bec4-621bf3f845f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ec:a4:59:5c:07:fe:27:52:d2:80:05:4b:f5: e4:e6:09:c7:33:fe:ab:93:0a:0b:93:86:9b:1c:f8: 66:23:df:e3:00:39:a3:7e:5d:64:57:28:30:38:d8: 0b:4b:a1:8e:25:4c:d9:de:41:03:8a:de:3d:b6:3c: 61:2e:b8:50:b9:c7:e9:3d:1f:d7:c1:0f:54:e8:ed: 20:44:30:86:2a:c8:4d:9e:92:e2:9e:bc:af:03:42: 72:81:76:ce:d0:81:f2:07:b7:d4:24:8d:2e:30:f3: 65:63:15:85:46:c0:72:3a:16:f8:25:f4:16:a3:24: 87:4a:aa:bc:c2:f3:df:4f:f1:1b:4a:9f:cf:23:f3: 88:5d:b5:84:ab:79:4f:44:c2:bc:d3:45:5d:10:d9: 6b:24:4d:7e:a0:51:22:4c:f1:69:ca:cb:15:50:78: f6:d2:65:9f:25:da:76:1d:2a:69:71:91:2e:4d:b1: 89:4a:43:7b:e2:87:c6:2f:b1:0e:95:e8:e5:d0:32: 0c:04:1c:51:38:f1:c6:41:f1:62:53:fa:86:cf:95: af:86:b8:f2:7f:fb:8f:a2:38:ff:6c:e7:be:9a:19: 77:44:0a:26:00:5d:c3:c1:80:4f:ea:81:b0:a9:69: 5b:51:2c:9b:13:02:e8:18:ff:da:9a:d2:78:30:6a: 89:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1F:B7:8D:39:28:52:E5:0C:CC:0F:B5:DE:9B:AA:01:80:9B:50:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/20ee16b6-94f3-3d25-9d91-f2bbea700def.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.crl X509v3 Authority Key Identifier: keyid:E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer sbgp-ipAddrBlock: critical IPv4: 66.154.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:f6:1a:94:e6:0d:dc:92:71:e3:ca:39:a9:98:e4:3d:b9:58: 23:2f:7b:14:52:3d:57:e1:f8:68:f7:af:92:fc:0d:20:f9:e6: 39:3c:8c:19:ca:8a:f3:81:1f:2d:93:88:49:85:7f:ae:20:8f: d2:8f:01:2a:ae:62:07:9c:20:5e:5e:7c:4e:e4:78:58:ac:a6: 37:8b:a7:8a:06:54:70:fa:cc:e0:17:f4:b6:a5:42:20:c4:50: 8a:1e:a7:98:95:1e:39:bb:98:46:50:b8:bf:ba:f9:a5:ae:56: 4a:cf:6b:aa:75:4f:49:7f:6f:d9:94:2f:24:22:e1:7a:57:eb: 24:ed:d0:41:ad:40:8d:ee:f3:3f:db:dd:bf:5c:a6:42:0f:6a: 25:f9:9c:46:6d:7f:66:ef:9e:2f:f1:d5:ed:ce:1f:74:56:b3: 1d:a7:20:b8:79:b4:e6:ea:cc:36:22:c3:d2:a5:a4:03:9e:06: f4:d6:94:0e:5a:dc:f7:05:b6:2f:6e:5d:a9:00:a0:02:56:b1: d9:25:34:6e:12:f2:66:88:1a:fa:e1:5f:1e:58:ad:55:0d:d5: 01:83:64:e4:1e:ee:3f:0d:62:3f:78:6e:26:90:64:e5:c9:39: 13:f7:ba:a8:13:bc:9a:84:94:a7:6c:36:36:00:52:a3:03:48: 7d:6c:69:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYB9tOuZmiZINIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4NGI1MzktODQwOC00ZjJjLThlODEtMDVmN2ExYjcz Njg2MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NDQzYzBkZDctNzljOC00YjdiLWJlYzQtNjIxYmYzZjg0NWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+ykWVwH/idS0oAFS/Xk5gnHM/6rkwoLk4ab HPhmI9/jADmjfl1kVygwONgLS6GOJUzZ3kEDit49tjxhLrhQucfpPR/XwQ9U6O0g RDCGKshNnpLinryvA0JygXbO0IHyB7fUJI0uMPNlYxWFRsByOhb4JfQWoySHSqq8 wvPfT/EbSp/PI/OIXbWEq3lPRMK800VdENlrJE1+oFEiTPFpyssVUHj20mWfJdp2 HSppcZEuTbGJSkN74ofGL7EOlejl0DIMBBxROPHGQfFiU/qGz5Wvhrjyf/uPojj/ bOe+mhl3RAomAF3DwYBP6oGwqWlbUSybEwLoGP/amtJ4MGqJSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwft405KFLlDMwPtd6bqgGAm1AnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kZTg0 YjUzOS04NDA4LTRmMmMtOGU4MS0wNWY3YTFiNzM2ODYvMjBlZTE2YjYtOTRmMy0z ZDI1LTlkOTEtZjJiYmVhNzAwZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGU4NGI1MzktODQwOC00ZjJjLThl ODEtMDVmN2ExYjczNjg2L2RlODRiNTM5LTg0MDgtNGYyYy04ZTgxLTA1ZjdhMWI3 MzY4Ni5jcmwwHwYDVR0jBBgwFoAU4NkfWb9QMeGWd8J4jCCThQXrHxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kZTg0YjUzOS04NDA4LTRmMmMtOGU4MS0wNWY3 YTFiNzM2ODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQpp+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH2GpTmDdyScePKOamY5D25WCMvexRSPVfh+Gj3r5L8DSD55jk8jBnK ivOBHy2TiEmFf64gj9KPASquYgecIF5efE7keFispjeLp4oGVHD6zOAX9LalQiDE UIoep5iVHjm7mEZQuL+6+aWuVkrPa6p1T0l/b9mULyQi4XpX6yTt0EGtQI3u8z/b 3b9cpkIPaiX5nEZtf2bvni/x1e3OH3RWsx2nILh5tObqzDYiw9KlpAOeBvTWlA5a 3PcFti9uXakAoAJWsdklNG4S8maIGvrhXx5YrVUN1QGDZOQe7j8NYj94biaQZOXJ ORP3uqgTvJqElKdsNjYAUqMDSH1sadk= -----END CERTIFICATE-----Generated at Sat Apr 5 02:32:31 2025 by rpki-client