$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8a46c52b-8413-34ff-a9a0-85514b7c1c9f.roa File: 8a46c52b-8413-34ff-a9a0-85514b7c1c9f.roa (raw, json) Hash identifier: iJyZEGOQQEsy84PUkI1Aa16AonyWkFSdr7h+2to2yEE= Subject key identifier: 67:84:AE:E5:70:C7:2A:D3:AC:47:CD:69:38:6A:7D:C2:45:15:58:DB Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285848A996326B2718F1DB06092440 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8a46c52b-8413-34ff-a9a0-85514b7c1c9f.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 13536 IP address blocks: 66.186.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:32:6b:27:18:f1:db:06:09:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=c16f04b9-78b1-415a-8d04-c2da18726c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:de:ed:20:eb:62:d1:2f:a4:c5:a8:f7:8b:33: 27:e2:f6:e2:d3:92:0d:5c:49:37:23:f2:63:3e:07: e2:e6:45:b3:ef:c2:ca:92:01:ba:c0:c9:30:d1:4b: 43:91:9c:2b:08:13:cb:d9:e9:b3:d6:b6:ca:1f:30: a2:95:cf:b7:06:78:71:36:65:73:a4:67:21:e2:35: 40:54:f6:c0:43:66:42:e4:82:a1:ba:fc:d0:e0:26: f2:36:34:a4:98:6c:e7:12:f7:9f:af:0d:6a:ef:5c: 3c:42:2f:72:16:59:59:f4:ce:0d:9e:81:9f:ea:7a: ff:f2:ab:92:23:24:a3:52:ee:b1:94:c6:fa:f8:ce: 9c:a0:b8:12:bc:a0:38:1e:6b:d1:51:06:06:cf:6b: e3:95:6d:ae:af:6a:d0:6f:4f:e9:1a:2a:be:f6:e4: 5b:2d:54:3a:a5:b3:8c:ee:58:21:f8:9b:88:ce:39: b7:aa:3c:62:93:03:d3:1a:4d:e5:af:8f:72:71:16: c8:f7:bc:88:14:bc:23:37:d3:36:cf:c7:99:af:d8: f1:95:76:b1:1f:b7:ed:0d:eb:17:fe:ff:1e:30:8e: 92:9a:69:b7:23:4e:a3:29:a6:23:c5:d9:7b:c3:9b: 1b:ce:54:35:72:05:9e:81:9c:7e:12:07:62:28:ed: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:84:AE:E5:70:C7:2A:D3:AC:47:CD:69:38:6A:7D:C2:45:15:58:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8a46c52b-8413-34ff-a9a0-85514b7c1c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.186.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:38:3b:2c:c9:ac:f7:01:47:47:e9:e9:f1:c0:dc:b4:08:ff: 0e:6a:2f:07:4b:e2:79:cd:d2:fc:3d:b0:ca:7b:67:76:80:1f: 49:83:01:23:a1:dc:1f:6b:00:fd:95:0d:3c:59:d9:3a:b6:48: f1:bf:4b:85:4f:dd:89:83:fb:32:68:08:a4:f8:ba:aa:67:28: f8:5d:f5:a1:a0:b4:46:bc:e4:77:d2:1e:08:88:d0:31:06:ba: 7d:ab:df:55:f7:6e:32:68:43:d6:84:64:ba:12:a3:9d:4b:8b: b5:0e:2e:5f:e7:bb:bc:52:15:1a:1a:f7:66:33:23:da:b2:d2: 41:7d:e4:75:c3:f5:38:8d:7a:67:a4:bd:55:e2:c5:3a:99:03: dd:d0:6a:70:1d:20:e5:99:c8:f1:67:13:f7:40:5a:5f:02:8d: f6:bd:bb:94:0d:bc:b8:a9:90:4f:4d:b2:35:24:53:4d:0d:b6: 64:d2:72:2b:e5:e3:bd:3b:67:4d:59:20:7d:f0:27:80:97:79: c9:01:da:3f:45:bc:a6:bf:5c:46:3e:44:46:da:5d:1d:92:da: c2:5d:52:a2:4d:ed:e6:a1:25:18:46:ea:45:a2:aa:5f:18:ed: bb:f5:37:c4:1e:0a:38:93:42:c1:16:77:34:20:c7:cf:a0:c6: 4b:f1:3f:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljJrJxjx2wYJJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzE2ZjA0YjktNzhiMS00MTVhLThkMDQtYzJkYTE4NzI2YzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA797tIOti0S+kxaj3izMn4vbi05INXEk3I/Jj Pgfi5kWz78LKkgG6wMkw0UtDkZwrCBPL2emz1rbKHzCilc+3BnhxNmVzpGch4jVA VPbAQ2ZC5IKhuvzQ4CbyNjSkmGznEvefrw1q71w8Qi9yFllZ9M4NnoGf6nr/8quS IySjUu6xlMb6+M6coLgSvKA4HmvRUQYGz2vjlW2ur2rQb0/pGiq+9uRbLVQ6pbOM 7lgh+JuIzjm3qjxikwPTGk3lr49ycRbI97yIFLwjN9M2z8eZr9jxlXaxH7ftDesX /v8eMI6Smmm3I06jKaYjxdl7w5sbzlQ1cgWegZx+EgdiKO3FawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeEruVwxyrTrEfNaThqfcJFFVjbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvOGE0NmM1MmItODQxMy0z NGZmLWE5YTAtODU1MTRiN2MxYzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrqnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK84OyzJrPcBR0fp6fHA3LQI/w5qLwdL4nnN0vw9sMp7Z3aAH0mDASOh 3B9rAP2VDTxZ2Tq2SPG/S4VP3YmD+zJoCKT4uqpnKPhd9aGgtEa85HfSHgiI0DEG un2r31X3bjJoQ9aEZLoSo51Li7UOLl/nu7xSFRoa92YzI9qy0kF95HXD9TiNemek vVXixTqZA93QanAdIOWZyPFnE/dAWl8Cjfa9u5QNvLipkE9NsjUkU00NtmTScivl 4707Z01ZIH3wJ4CXeckB2j9FvKa/XEY+REbaXR2S2sJdUqJN7eahJRhG6kWiql8Y 7bv1N8QeCjiTQsEWdzQgx8+gxkvxP7Q= -----END CERTIFICATE-----Generated at Tue Apr 8 18:23:26 2025 by rpki-client