$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea5b8a17-465e-3806-935e-87cb1d092488.roa File: ea5b8a17-465e-3806-935e-87cb1d092488.roa (raw, json) Hash identifier: CpQhtlxKkSQTvArQb0QVGzR8AWJ81rN7Qpmhju7b7Gw= Subject key identifier: CA:6E:0D:EE:E3:77:0D:6B:B2:CC:8B:4E:01:0A:CC:48:E9:A7:F6:92 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285848A99628C89E10212F5D22BDC0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea5b8a17-465e-3806-935e-87cb1d092488.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 13536 IP address blocks: 66.152.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:28:c8:9e:10:21:2f:5d:22:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=c7f4a74f-e619-4584-b4e0-d6d6da644dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8d:92:c6:b5:f7:ca:5e:f1:78:af:64:e1:2f: 18:7f:e0:c9:34:9c:e0:cb:18:d6:97:fc:bf:b8:3f: 42:f4:5c:c6:e7:75:00:09:01:f2:a7:df:fc:cf:99: ad:22:62:b9:bf:99:9a:03:64:ae:d7:1d:c7:3a:a2: db:6b:e9:cf:5e:be:36:2a:9c:09:af:ee:e8:65:46: d6:f7:bb:90:44:61:5c:62:1d:9e:6f:6d:81:aa:9f: b6:bf:09:b7:c8:b7:ac:aa:55:e1:69:0e:6d:30:3e: 2f:54:a2:17:b0:bd:67:21:7c:c3:c6:01:1e:30:ce: 4a:12:35:75:52:1a:a8:b5:09:8e:7d:65:1c:d4:53: 77:21:a3:4c:ab:8e:24:75:7b:3f:96:53:24:c8:15: 73:2a:d4:5e:d2:ea:16:9a:d4:5c:55:91:d2:f6:d6: 5d:26:1c:1b:19:fb:02:60:6f:66:0c:d4:89:12:fe: cf:0e:f5:85:2a:c9:2b:7f:c2:95:db:95:f4:80:d8: f4:4a:45:d2:42:16:21:fd:69:9b:7f:3f:12:85:9a: 2b:dc:ae:c8:68:e5:72:4f:ae:35:57:78:c1:86:38: 60:6d:9e:50:b3:32:5a:b2:85:03:49:a6:b7:ef:4d: 97:44:87:ff:04:f2:5c:41:c6:d9:d3:7e:cb:3f:ed: f0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6E:0D:EE:E3:77:0D:6B:B2:CC:8B:4E:01:0A:CC:48:E9:A7:F6:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea5b8a17-465e-3806-935e-87cb1d092488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.152.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:47:08:80:e3:85:93:6a:62:ba:9e:69:ee:ec:b0:87:9c:cf: dd:42:49:3a:79:c2:4c:7c:a2:ea:48:5d:9a:2d:df:79:83:c4: aa:26:3b:0f:12:43:53:0d:8e:36:08:e3:49:ad:67:41:14:89: 43:e8:03:d3:a5:11:69:d0:00:e0:20:a0:7f:23:a7:cb:1e:34: c4:57:6e:2f:7b:18:d7:b3:02:ed:45:60:33:2c:52:d3:78:14: e6:78:fa:42:4a:35:13:c8:cc:b3:01:41:fd:9e:9f:d6:be:60: 70:81:c3:da:08:11:dd:4b:13:56:3f:7c:10:ef:92:29:1f:96: ad:f5:1b:83:d6:64:0c:04:3e:fd:b6:13:28:46:8b:e5:ec:f3: 5d:49:fb:5b:59:ec:2b:d9:e8:04:3c:85:a8:15:0b:ea:2f:1b: bc:bb:f0:e5:4b:34:1e:ed:60:db:2b:c7:00:23:e8:60:df:c1: b0:4c:a3:30:57:e4:88:d2:6a:a7:e4:db:29:3e:68:c0:9a:49: da:89:31:aa:f4:ed:82:35:7b:fa:bc:0d:69:5e:14:59:1a:ec: 67:42:3b:44:78:1e:b5:52:13:c3:06:cd:69:46:0b:0c:64:97: a1:5e:b5:dc:72:11:df:a8:e8:df:ba:fe:3d:22:d1:fe:34:e2: f7:db:5b:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplijInhAhL10ivcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzdmNGE3NGYtZTYxOS00NTg0LWI0ZTAtZDZkNmRhNjQ0ZGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI2SxrX3yl7xeK9k4S8Yf+DJNJzgyxjWl/y/ uD9C9FzG53UACQHyp9/8z5mtImK5v5maA2Su1x3HOqLba+nPXr42KpwJr+7oZUbW 97uQRGFcYh2eb22Bqp+2vwm3yLesqlXhaQ5tMD4vVKIXsL1nIXzDxgEeMM5KEjV1 UhqotQmOfWUc1FN3IaNMq44kdXs/llMkyBVzKtRe0uoWmtRcVZHS9tZdJhwbGfsC YG9mDNSJEv7PDvWFKskrf8KV25X0gNj0SkXSQhYh/Wmbfz8ShZor3K7IaOVyT641 V3jBhjhgbZ5QszJasoUDSaa3702XRIf/BPJcQcbZ037LP+3w8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpuDe7jdw1rssyLTgEKzEjpp/aSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZWE1YjhhMTctNDY1ZS0z ODA2LTkzNWUtODdjYjFkMDkyNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQph/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdHCIDjhZNqYrqeae7ssIecz91CSTp5wkx8oupIXZot33mDxKomOw8S Q1MNjjYI40mtZ0EUiUPoA9OlEWnQAOAgoH8jp8seNMRXbi97GNezAu1FYDMsUtN4 FOZ4+kJKNRPIzLMBQf2en9a+YHCBw9oIEd1LE1Y/fBDvkikflq31G4PWZAwEPv22 EyhGi+Xs811J+1tZ7CvZ6AQ8hagVC+ovG7y78OVLNB7tYNsrxwAj6GDfwbBMozBX 5IjSaqfk2yk+aMCaSdqJMar07YI1e/q8DWleFFka7GdCO0R4HrVSE8MGzWlGCwxk l6FetdxyEd+o6N+6/j0i0f404vfbW+c= -----END CERTIFICATE-----Generated at Tue Apr 8 18:24:32 2025 by rpki-client