$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/6216f178-50d6-3dd1-9bf8-fed90d50752e.roa File: 6216f178-50d6-3dd1-9bf8-fed90d50752e.roa (raw, json) Hash identifier: pBvSlfeNqu8vCYnfDHOSOqEswQ/e9pP03PvlgU3sf4Y= Subject key identifier: A6:DE:6D:8F:B6:EF:F4:46:F3:4D:08:3A:42:9D:6C:68:BC:A9:7D:75 Certificate issuer: /CN=1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed Certificate serial: 010D0C9F432858497C3EEE92730BDA71B8CB1E30 Authority key identifier: 60:19:68:5C:12:1A:D8:CD:7C:C1:5E:BE:93:20:3C:47:4E:D0:EA:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/6216f178-50d6-3dd1-9bf8-fed90d50752e.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 18671 IP address blocks: 66.180.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:ee:92:73:0b:da:71:b8:cb:1e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=f51e53cf-3949-4a6e-ad06-87b04843c1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:70:a8:13:17:6b:0b:7b:fe:d4:cf:7e:c3:f5: 73:a4:6b:42:26:df:dd:ca:4b:d3:1d:4f:87:1d:39: 95:d6:35:5c:4c:68:f5:7b:b4:38:40:d1:ea:1c:bc: 9d:2e:96:6e:52:3c:83:74:64:d3:3e:3a:f8:ba:18: 2e:bf:8a:50:a1:14:7a:b5:33:60:61:01:0a:b7:7e: 9a:72:14:2a:f2:84:9b:b1:12:ec:d1:64:08:73:58: da:76:d0:88:4d:55:16:2f:78:bc:b1:21:bd:4a:a3: 83:4c:77:04:26:1b:00:cd:99:84:e2:6b:9d:70:52: 1a:a3:77:15:23:ed:fc:28:bb:16:2f:21:bb:93:e2: a0:8e:a1:55:81:22:67:a3:a4:ae:82:bf:45:d2:71: 55:4c:50:9d:36:10:93:7b:0c:fc:1e:c9:90:05:87: 8a:dd:c6:70:bc:56:3e:a8:fc:c8:c7:32:19:93:37: c5:95:6e:a3:52:92:01:5d:1e:ac:fc:a4:47:94:85: 5b:d2:6b:06:a2:9d:5f:cb:ac:ac:c6:ef:34:c6:cc: 07:62:2c:ac:de:79:1a:03:a0:f2:d5:de:f4:a7:aa: 53:62:69:04:f6:c7:7f:08:9a:49:ee:81:a4:56:f1: 63:73:16:39:81:40:ca:32:2d:0f:2b:e8:fc:fe:ad: a1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DE:6D:8F:B6:EF:F4:46:F3:4D:08:3A:42:9D:6C:68:BC:A9:7D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/6216f178-50d6-3dd1-9bf8-fed90d50752e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.crl X509v3 Authority Key Identifier: keyid:60:19:68:5C:12:1A:D8:CD:7C:C1:5E:BE:93:20:3C:47:4E:D0:EA:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer sbgp-ipAddrBlock: critical IPv4: 66.180.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:3e:b5:5b:66:50:c4:01:85:b5:13:1c:7f:76:e6:9c:14:1d: 44:88:5b:4a:da:ef:2a:6d:ed:b8:88:07:b2:20:bc:f0:f9:5e: a7:8b:a8:ed:68:a0:0c:15:cf:52:65:ce:e0:a0:62:92:f8:ba: ad:f4:7b:0a:6e:7e:2d:62:c9:85:07:95:58:b9:3f:87:46:a9: 7f:0e:7a:da:85:41:d0:87:82:a0:8c:52:33:bf:15:37:a1:74: e7:9c:df:ce:3b:f5:3f:14:da:9c:5a:0d:5c:84:4c:01:b0:5b: 55:83:d6:40:1e:fa:10:6c:80:a3:24:2f:67:ee:7e:14:fe:3c: 7b:47:d8:c0:4c:5b:22:12:f9:82:a1:97:92:4b:28:84:68:68: 34:da:33:bc:66:33:0c:7e:3c:ea:f6:09:9a:bc:43:49:8d:f1: 00:84:ed:b3:ec:e7:41:59:99:13:0b:72:80:90:c1:30:2c:e6: d5:5a:7d:0b:1a:b8:0c:35:b4:b1:70:c5:c8:b7:60:f5:29:14: e3:86:4a:d6:c6:45:a7:a0:fa:ea:e4:30:cf:6c:eb:e9:e3:ab: ab:06:b2:93:46:60:40:7b:2f:2f:8b:b5:42:6b:e2:db:dd:c7: e6:bc:40:e8:e3:ba:53:64:c8:3b:4d:ee:b9:57:7f:cc:00:bc: 63:ad:b9:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8Pu6ScwvacbjLHjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTAyNmYyZDUtYjFmZS00N2YyLTlkMmUtMGJiNzVhN2Ix OGVkMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk ZjUxZTUzY2YtMzk0OS00YTZlLWFkMDYtODdiMDQ4NDNjMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXCoExdrC3v+1M9+w/VzpGtCJt/dykvTHU+H HTmV1jVcTGj1e7Q4QNHqHLydLpZuUjyDdGTTPjr4uhguv4pQoRR6tTNgYQEKt36a chQq8oSbsRLs0WQIc1jadtCITVUWL3i8sSG9SqODTHcEJhsAzZmE4mudcFIao3cV I+38KLsWLyG7k+KgjqFVgSJno6Sugr9F0nFVTFCdNhCTewz8HsmQBYeK3cZwvFY+ qPzIxzIZkzfFlW6jUpIBXR6s/KRHlIVb0msGop1fy6ysxu80xswHYiys3nkaA6Dy 1d70p6pTYmkE9sd/CJpJ7oGkVvFjcxY5gUDKMi0PK+j8/q2hNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbebY+27/RG800IOkKdbGi8qX11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMDI2 ZjJkNS1iMWZlLTQ3ZjItOWQyZS0wYmI3NWE3YjE4ZWQvNjIxNmYxNzgtNTBkNi0z ZGQxLTliZjgtZmVkOTBkNTA3NTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTAyNmYyZDUtYjFmZS00N2YyLTlk MmUtMGJiNzVhN2IxOGVkLzEwMjZmMmQ1LWIxZmUtNDdmMi05ZDJlLTBiYjc1YTdi MThlZC5jcmwwHwYDVR0jBBgwFoAUYBloXBIa2M18wV6+kyA8R07Q6powDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMDI2ZjJkNS1iMWZlLTQ3ZjItOWQyZS0wYmI3 NWE3YjE4ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQrTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI+tVtmUMQBhbUTHH925pwUHUSIW0ra7ypt7biIB7IgvPD5XqeLqO1o oAwVz1JlzuCgYpL4uq30ewpufi1iyYUHlVi5P4dGqX8OetqFQdCHgqCMUjO/FTeh dOec38479T8U2pxaDVyETAGwW1WD1kAe+hBsgKMkL2fufhT+PHtH2MBMWyIS+YKh l5JLKIRoaDTaM7xmMwx+POr2CZq8Q0mN8QCE7bPs50FZmRMLcoCQwTAs5tVafQsa uAw1tLFwxci3YPUpFOOGStbGRaeg+urkMM9s6+njq6sGspNGYEB7Ly+LtUJr4tvd x+a8QOjjulNkyDtN7rlXf8wAvGOtuXM= -----END CERTIFICATE-----Generated at Sat Apr 12 12:32:52 2025 by rpki-client