$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0ae72534-773a-31bc-9c0e-c86bef08458a.roa File: 0ae72534-773a-31bc-9c0e-c86bef08458a.roa (raw, json) Hash identifier: pqRQ7yIISKCtX2SklKfxqMnvhGmvnDbeA0EtNdYC5y0= Subject key identifier: 8A:8F:25:FC:3A:8B:81:23:71:66:BF:EA:9A:8E:0D:58:05:F6:5C:13 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858496E49872F1E2A7CA608F89340 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0ae72534-773a-31bc-9c0e-c86bef08458a.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 18785 IP address blocks: 66.128.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:87:2f:1e:2a:7c:a6:08:f8:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=9dc61254-fb5d-42ee-af04-fd7aec1494cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:48:ea:01:a9:87:21:7c:c4:3b:24:14:ae: 06:c7:17:ac:92:45:18:7b:62:c1:09:0c:af:4c:ee: 1b:27:d3:99:38:25:ec:93:84:2c:a8:f8:ba:5f:c2: ee:7d:22:51:65:91:a8:4e:dd:5c:41:7b:6e:58:8d: 21:a9:79:1b:fe:c3:62:8a:45:73:f5:f8:12:2b:0e: c8:0f:39:6c:85:ad:63:b0:33:9b:e2:52:0a:97:7f: c8:31:4c:1e:c5:cb:23:b1:84:d4:42:ca:fc:c1:c8: f0:b6:ad:e2:65:42:3c:6e:66:5e:da:e2:0b:e9:aa: 96:ed:ac:0d:4f:e6:45:80:a7:97:96:78:85:fb:8f: 4f:4f:fb:54:68:54:26:b3:2f:71:5c:9d:88:c0:99: 4c:4a:18:97:bb:8b:98:d8:21:df:2e:95:99:0a:7d: 8f:50:38:c6:2b:36:a3:dd:ec:78:07:47:df:df:bf: 3c:e0:e4:e2:10:f0:6c:dd:8e:d4:93:55:2a:1c:c8: d8:e5:d1:f4:a9:87:d0:5b:f6:f8:77:3c:95:4a:56: b5:57:48:3b:c3:e3:67:3e:21:77:b1:8e:99:14:ce: a6:4d:20:53:f0:25:3d:22:85:ff:f4:0a:45:96:a0: f8:fe:d9:ca:cd:78:cf:79:26:10:2b:b0:4f:8e:ef: 79:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8F:25:FC:3A:8B:81:23:71:66:BF:EA:9A:8E:0D:58:05:F6:5C:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0ae72534-773a-31bc-9c0e-c86bef08458a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:9f:3b:fc:28:7b:c8:47:18:48:46:b5:fc:2a:d7:c3:f2:84: cf:b2:d3:7c:8b:33:76:9e:9f:2d:7e:71:fb:d2:62:e5:e6:e6: 88:1b:e0:a9:67:5a:63:d2:e2:e7:39:f0:fd:65:57:e0:1b:14: ab:cc:64:78:da:f3:c5:bf:f1:4d:86:c1:19:6b:96:ee:d6:e8: ea:08:8c:23:55:78:51:c9:ce:c4:ab:64:df:4c:77:df:8d:49: 10:5a:88:b5:6d:e7:ee:28:78:a4:b1:63:cb:c4:27:7d:b1:7e: a8:d3:f2:80:f3:e0:4b:90:4f:c2:7e:c1:b2:1a:e7:1e:21:49: e9:4b:02:65:d6:33:86:40:02:1e:91:41:b9:71:b6:a6:d7:02: df:41:f6:16:b6:65:ec:e7:44:19:80:89:b1:ad:9a:9f:e3:d2: 6d:49:bc:da:65:31:16:04:b5:f1:64:85:21:a4:ad:6f:b7:01: 32:fb:49:9d:e5:4f:c8:3c:a1:03:38:a6:30:d8:54:ee:46:29: 5e:ea:8f:73:36:81:66:ad:91:08:8e:a2:c4:82:3a:58:62:49: 03:1e:2a:f6:18:da:1b:70:82:75:33:a9:0e:1a:60:14:9d:47: 90:71:55:a6:69:0b:72:db:3a:de:b4:3a:d8:14:4d:d1:da:a2: 0b:8a:8a:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYcvHip8pgj4k0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk OWRjNjEyNTQtZmI1ZC00MmVlLWFmMDQtZmQ3YWVjMTQ5NGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteRI6gGphyF8xDskFK4GxxeskkUYe2LBCQyv TO4bJ9OZOCXsk4QsqPi6X8LufSJRZZGoTt1cQXtuWI0hqXkb/sNiikVz9fgSKw7I Dzlsha1jsDOb4lIKl3/IMUwexcsjsYTUQsr8wcjwtq3iZUI8bmZe2uIL6aqW7awN T+ZFgKeXlniF+49PT/tUaFQmsy9xXJ2IwJlMShiXu4uY2CHfLpWZCn2PUDjGKzaj 3ex4B0ff37884OTiEPBs3Y7Uk1UqHMjY5dH0qYfQW/b4dzyVSla1V0g7w+NnPiF3 sY6ZFM6mTSBT8CU9IoX/9ApFlqD4/tnKzXjPeSYQK7BPju95cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqPJfw6i4EjcWa/6pqODVgF9lwTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMGFlNzI1MzQtNzczYS0z MWJjLTljMGUtYzg2YmVmMDg0NThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCfO/woe8hHGEhGtfwq18PyhM+y03yLM3aeny1+cfvSYuXm5ogb4Kln WmPS4uc58P1lV+AbFKvMZHja88W/8U2GwRlrlu7W6OoIjCNVeFHJzsSrZN9Md9+N SRBaiLVt5+4oeKSxY8vEJ32xfqjT8oDz4EuQT8J+wbIa5x4hSelLAmXWM4ZAAh6R QblxtqbXAt9B9ha2ZeznRBmAibGtmp/j0m1JvNplMRYEtfFkhSGkrW+3ATL7SZ3l T8g8oQM4pjDYVO5GKV7qj3M2gWatkQiOosSCOlhiSQMeKvYY2htwgnUzqQ4aYBSd R5BxVaZpC3LbOt60OtgUTdHaoguKij8= -----END CERTIFICATE-----Generated at Sat Apr 12 10:21:32 2025 by rpki-client