$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa File: a71bf399-4b1b-3700-8996-65eac6cc402a.roa (raw, json) Hash identifier: gdUHk+IStLGhCMUdVWCbDW6vE7+chQCbU72zxaAmGzY= Subject key identifier: 2F:F2:44:07:7F:23:76:CE:8C:28:48:48:1B:87:74:10:4B:0D:D6:FC Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584905B6B107620BDE996384DC98 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13536 IP address blocks: 66.231.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b1:07:62:0b:de:99:63:84:dc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=ed54f29a-92e5-4151-bf52-c61d98dbc9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6d:8c:bc:73:33:87:c4:46:2e:8d:61:09:66: b8:e3:db:90:a6:8c:d1:60:26:2b:ef:85:6a:9b:17: b4:97:d2:b6:52:c6:b5:7f:86:41:f8:47:25:06:b6: 4d:20:91:c7:33:9d:7c:34:b7:b1:e8:7d:9f:29:bc: 5f:09:f7:54:cd:64:4b:d7:6a:7b:ac:e5:50:4b:9e: fc:fa:53:db:f7:f2:38:4b:5b:2d:6b:e8:98:b6:32: 1d:92:5f:ac:c2:a5:ea:ed:8a:2d:97:00:39:0b:36: 84:c1:7a:14:54:38:0a:de:94:19:76:31:af:00:c5: ff:ca:6e:c8:31:72:bc:42:3f:c7:7e:70:b3:6b:05: fd:ce:45:26:53:b9:97:46:5d:b0:cf:38:18:3b:6f: a5:35:66:d8:fd:56:23:30:5e:30:ea:65:27:89:c5: 23:e2:3b:ee:77:a9:8e:7f:2d:e4:bc:44:ba:31:ee: 72:e8:3c:7a:21:f9:ee:ff:0d:e5:ec:95:7b:58:76: a3:99:e8:2e:26:31:34:4b:f7:06:b7:70:e5:a5:1c: 07:a0:7b:e5:50:14:83:53:de:49:30:c3:2b:6e:c1: 06:1e:90:ce:51:23:3a:a9:06:04:fd:f0:8a:1c:bc: d5:9c:2f:ca:46:90:57:dc:1e:73:0f:46:00:c6:1e: a7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F2:44:07:7F:23:76:CE:8C:28:48:48:1B:87:74:10:4B:0D:D6:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.231.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:8b:a5:51:62:ed:6d:2b:4f:2a:dc:d3:10:45:16:8d:21:fc: 2c:ac:60:a0:4b:b0:00:f1:ab:9e:6f:53:d8:db:c7:aa:5a:7f: 49:6c:62:eb:26:03:ad:ae:b6:e5:86:bc:f1:03:04:46:d0:53: 1e:cc:17:0d:33:54:31:85:42:47:f6:d1:88:6f:89:91:25:25: 1d:7c:79:eb:61:62:df:8a:71:7f:83:8f:41:be:73:80:14:87: 21:54:eb:71:fa:61:8c:5c:bb:af:f8:64:4f:41:d6:05:42:69: 29:e7:ec:1b:37:d9:c8:8f:55:c8:58:1b:1c:d3:b6:81:ca:3e: 32:6b:42:bc:8b:fd:e4:2a:39:c3:d3:42:40:3f:0d:0c:af:15: 2a:60:58:62:2a:8b:5a:d4:bd:5e:d4:8e:3b:52:9d:e2:cd:1d: d9:69:f8:d9:6a:f0:54:09:ba:14:9b:26:89:a0:1f:0f:7c:2f: 5a:01:5f:26:14:e7:3d:e4:ef:47:db:1b:bb:86:b9:d3:37:74: d8:33:52:58:99:ee:95:93:59:b8:4b:20:6f:c2:cd:be:82:3e: b1:71:5c:f9:c7:22:33:e0:41:79:ae:b1:df:e8:a2:7f:bf:02: 24:4f:d2:e3:f3:e2:6d:19:d7:b6:6f:4d:3c:34:1c:ed:f3:4d: 6a:c5:23:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrEHYgvemWOE3JgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk ZWQ1NGYyOWEtOTJlNS00MTUxLWJmNTItYzYxZDk4ZGJjOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW2MvHMzh8RGLo1hCWa449uQpozRYCYr74Vq mxe0l9K2Usa1f4ZB+EclBrZNIJHHM518NLex6H2fKbxfCfdUzWRL12p7rOVQS578 +lPb9/I4S1sta+iYtjIdkl+swqXq7YotlwA5CzaEwXoUVDgK3pQZdjGvAMX/ym7I MXK8Qj/HfnCzawX9zkUmU7mXRl2wzzgYO2+lNWbY/VYjMF4w6mUnicUj4jvud6mO fy3kvES6Me5y6Dx6Ifnu/w3l7JV7WHajmeguJjE0S/cGt3DlpRwHoHvlUBSDU95J MMMrbsEGHpDOUSM6qQYE/fCKHLzVnC/KRpBX3B5zD0YAxh6ntwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/yRAd/I3bOjChISBuHdBBLDdb8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYTcxYmYzOTktNGIxYi0z NzAwLTg5OTYtNjVlYWM2Y2M0MDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQufYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyLpVFi7W0rTyrc0xBFFo0h/CysYKBLsADxq55vU9jbx6paf0lsYusm A62utuWGvPEDBEbQUx7MFw0zVDGFQkf20YhviZElJR18eethYt+KcX+Dj0G+c4AU hyFU63H6YYxcu6/4ZE9B1gVCaSnn7Bs32ciPVchYGxzTtoHKPjJrQryL/eQqOcPT QkA/DQyvFSpgWGIqi1rUvV7UjjtSneLNHdlp+Nlq8FQJuhSbJomgHw98L1oBXyYU 5z3k70fbG7uGudM3dNgzUliZ7pWTWbhLIG/Czb6CPrFxXPnHIjPgQXmusd/oon+/ AiRP0uPz4m0Z17ZvTTw0HO3zTWrFIyg= -----END CERTIFICATE-----Generated at Tue Apr 8 21:11:17 2025 by rpki-client