$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa File: aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa (raw, json) Hash identifier: bD4aAkuIKS8nx4MFp73/uIl3svtrIm2Y3nesVNzfIPc= Subject key identifier: 5E:6F:56:EA:7E:1A:20:07:49:5F:0D:66:A4:3A:55:04:9B:CA:DF:8E Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F432858491246AAABB769C66565821680 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 20150 IP address blocks: 66.187.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:aa:ab:b7:69:c6:65:65:82:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=05da35a6-9bc2-4217-bd36-afb8e0da7376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:11:df:1b:e2:11:57:56:cf:ab:fa:e1:53:c1: f0:b8:90:c5:c8:48:b5:3e:16:d5:0b:2d:0c:6f:16: 66:eb:b6:70:5e:23:7c:96:b6:ad:7b:32:02:dd:1d: 7a:98:23:80:6d:b0:b0:4e:44:ca:28:13:52:0e:95: 57:59:f4:73:b4:10:cf:e2:b1:39:bc:74:f5:0a:1b: 7d:fe:de:85:02:c4:16:dc:25:07:45:db:e1:43:6c: e3:00:c6:03:2a:6c:c8:96:12:0c:fd:1b:f8:e7:53: 64:d2:95:37:33:46:73:2f:26:a0:28:36:50:29:88: c2:ee:54:fc:e7:7b:eb:60:72:27:a8:97:22:d3:bb: 2e:e6:57:66:6d:51:cc:9d:fc:aa:99:de:2b:be:52: c8:c0:63:8f:47:5b:0d:0f:35:91:8b:75:75:29:57: 74:1f:dd:6d:53:b3:b7:1a:fd:93:08:59:6b:02:2d: 04:9b:62:d9:f6:40:3e:ea:65:63:9c:43:ab:69:cc: e6:a6:d2:b8:f6:ae:c2:37:1f:73:1a:90:4f:59:24: 95:5e:82:92:0c:66:a1:66:21:81:a2:9d:f1:28:ba: dc:55:7e:c7:c1:bd:68:22:b8:45:c0:6b:f9:b7:3d: e2:99:45:ac:e6:c7:33:2b:d4:a8:91:65:29:83:df: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6F:56:EA:7E:1A:20:07:49:5F:0D:66:A4:3A:55:04:9B:CA:DF:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv4: 66.187.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c7:0a:70:01:b5:28:da:06:66:75:87:de:d4:53:62:73:00: 3a:47:f7:12:45:cf:b2:7d:8f:21:36:24:20:0c:85:da:4c:80: ae:8f:95:bb:da:dd:8a:08:ef:6b:4a:8d:4c:a2:35:28:e9:17: 59:34:eb:d2:3d:bd:66:22:c6:cc:8b:68:3e:e5:2a:48:dc:a1: d4:51:d0:6e:7d:fe:ad:72:0f:9b:ea:44:9c:d9:2c:93:c1:d0: 85:39:25:28:87:bb:f4:7d:1b:56:de:2b:60:7c:69:a0:d5:a1: f3:01:53:25:2b:92:ce:94:2b:33:aa:08:8d:b2:5e:3c:c5:83: 74:79:bb:b9:9d:d2:12:c1:b4:ee:64:8e:df:1f:14:47:8c:24: 38:71:76:00:77:3f:71:5c:be:04:30:e9:03:00:a1:76:24:a9: 31:d4:1a:96:6b:b9:10:03:b3:fa:1d:57:3f:56:d2:3a:a7:15: f1:c9:32:1f:e6:01:dc:83:8e:73:ed:1a:83:35:67:46:24:f2: 55:a4:b2:4e:b4:bd:22:56:9e:29:17:8d:b2:21:47:08:55:43: f4:b5:fa:6b:29:f7:e2:ab:43:84:9e:ea:15:ba:3e:03:14:2e: 46:71:7d:81:b6:50:27:f5:d1:bc:db:f4:72:e3:dd:eb:9b:01: 46:93:f7:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqqrt2nGZWWCFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MDVkYTM1YTYtOWJjMi00MjE3LWJkMzYtYWZiOGUwZGE3Mzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBHfG+IRV1bPq/rhU8HwuJDFyEi1PhbVCy0M bxZm67ZwXiN8lratezIC3R16mCOAbbCwTkTKKBNSDpVXWfRztBDP4rE5vHT1Cht9 /t6FAsQW3CUHRdvhQ2zjAMYDKmzIlhIM/Rv451Nk0pU3M0ZzLyagKDZQKYjC7lT8 53vrYHInqJci07su5ldmbVHMnfyqmd4rvlLIwGOPR1sNDzWRi3V1KVd0H91tU7O3 Gv2TCFlrAi0Em2LZ9kA+6mVjnEOraczmptK49q7CNx9zGpBPWSSVXoKSDGahZiGB op3xKLrcVX7Hwb1oIrhFwGv5tz3imUWs5sczK9SokWUpg99E6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5vVup+GiAHSV8NZqQ6VQSbyt+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvYWEzYWFlNGItZWY4My0z ZDE0LWI5YWQtZWVjZmVhZGYxMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHHCnABtSjaBmZ1h97UU2JzADpH9xJFz7J9jyE2JCAMhdpMgK6Plbva 3YoI72tKjUyiNSjpF1k069I9vWYixsyLaD7lKkjcodRR0G59/q1yD5vqRJzZLJPB 0IU5JSiHu/R9G1beK2B8aaDVofMBUyUrks6UKzOqCI2yXjzFg3R5u7md0hLBtO5k jt8fFEeMJDhxdgB3P3FcvgQw6QMAoXYkqTHUGpZruRADs/odVz9W0jqnFfHJMh/m AdyDjnPtGoM1Z0Yk8lWksk60vSJWnikXjbIhRwhVQ/S1+msp9+KrQ4Se6hW6PgMU LkZxfYG2UCf10bzb9HLj3eubAUaT93w= -----END CERTIFICATE-----Generated at Fri Apr 11 23:38:45 2025 by rpki-client