$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa96d1ed-bd98-3014-ada6-f33f9ba7bc61.roa File: aa96d1ed-bd98-3014-ada6-f33f9ba7bc61.roa (raw, json) Hash identifier: kfgxt6levzBFrHnXi7bL5rBIaWP7zauLeOGADG9VeCQ= Subject key identifier: 8C:0F:4E:46:78:06:55:6C:53:44:20:FF:6D:74:DD:37:E3:3A:D3:EB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848A6CB63E70D66D7F2EA3ACE00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa96d1ed-bd98-3014-ada6-f33f9ba7bc61.roa Signing time: Fri 24 Jan 2025 14:00:52 +0000 ROA not before: Fri 24 Jan 2025 14:00:52 +0000 ROA not after: Thu 24 Apr 2025 13:00:52 +0000 asID: 401256 IP address blocks: 216.66.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:cb:63:e7:0d:66:d7:f2:ea:3a:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 24 14:00:52 2025 GMT Not After : Apr 24 13:00:52 2025 GMT Subject: CN=5246b43d-a797-4c95-bc48-321e60e64ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9c:29:20:e8:7a:f0:e7:f5:ce:51:c7:48:88: 2d:e4:8f:cd:71:21:92:c0:69:83:19:68:27:b7:a5: 87:58:55:e0:68:c3:61:51:88:47:f9:3b:a5:ff:4c: f7:b4:a4:0a:cc:e4:dd:45:bc:f3:16:a8:d5:18:15: 01:47:30:a8:ee:eb:14:d8:15:e2:3f:ec:59:ce:52: c7:b5:13:2e:72:1c:28:5e:f8:28:6c:cc:22:4a:f0: e7:1e:55:f7:8f:b5:6d:1d:12:11:4c:49:14:5f:76: 5e:5e:d7:61:5d:87:d7:38:86:99:69:98:52:4f:92: f0:34:af:1a:5a:f1:de:91:79:b4:9d:5b:35:37:3d: 08:87:7b:b6:bc:5f:69:68:56:ec:38:4e:18:4a:cb: 8a:be:f2:ab:0a:31:7c:1b:c1:50:bc:45:77:1b:25: 60:5d:16:c2:1c:52:19:31:b9:40:10:38:0f:e7:b6: 1e:1d:b7:07:82:1a:2f:f5:80:bb:fe:a4:f7:63:ea: 01:6e:b7:50:0d:1f:e8:2b:11:1b:90:49:66:a5:80: 87:48:ba:60:0b:cc:0f:90:7d:61:a3:4c:d4:40:4f: 8f:4e:ea:48:26:44:10:9e:16:c7:d5:f8:47:67:3b: b7:78:86:48:4b:dd:13:00:c5:27:b8:63:f2:5d:e2: 1e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0F:4E:46:78:06:55:6C:53:44:20:FF:6D:74:DD:37:E3:3A:D3:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa96d1ed-bd98-3014-ada6-f33f9ba7bc61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:45:8b:60:67:9b:13:e9:3f:a9:9f:3d:5c:df:30:49:a6:d9: ef:b2:eb:9d:61:0e:29:61:1f:96:7c:cb:41:e6:4f:56:19:0d: 59:c6:be:dc:5e:6d:aa:a1:a8:bc:f3:a1:b6:54:b6:1e:0b:e5: 47:26:f3:08:f1:eb:eb:70:b8:70:1f:d4:a8:88:b5:a0:e1:61: 79:8a:41:06:47:0c:b9:46:33:79:ff:fe:6c:96:4d:4d:26:41: 5c:34:ba:e7:37:85:6d:12:f6:61:70:73:69:08:5c:67:8a:1f: b2:f8:55:74:62:e4:c4:19:25:c5:ba:36:7c:66:03:6c:16:0f: 91:62:5c:ab:64:b5:19:51:af:2d:6e:53:2f:fc:b0:35:5f:58: 90:bb:fd:90:68:d5:ea:7f:1b:5a:fe:22:9d:cd:61:82:a2:bb: 89:51:84:71:16:bb:4a:36:aa:d5:af:e2:c5:bf:dd:94:1c:7b: 9b:d0:b0:97:85:d7:a5:d6:35:c6:1c:1e:ca:aa:6e:91:89:38: 82:e6:5d:e4:0a:2b:73:d2:fb:30:26:45:e1:b1:28:4d:36:16: 30:78:1e:0d:89:3a:ba:38:75:63:eb:e1:35:68:5b:6c:32:9e: 83:e0:13:9e:0f:9f:56:a0:60:4c:e8:df:d7:96:9b:a8:9f:83: 7c:f1:29:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEimy2PnDWbX8uo6zgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk NTI0NmI0M2QtYTc5Ny00Yzk1LWJjNDgtMzIxZTYwZTY0ZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5wpIOh68Of1zlHHSIgt5I/NcSGSwGmDGWgn t6WHWFXgaMNhUYhH+Tul/0z3tKQKzOTdRbzzFqjVGBUBRzCo7usU2BXiP+xZzlLH tRMuchwoXvgobMwiSvDnHlX3j7VtHRIRTEkUX3ZeXtdhXYfXOIaZaZhST5LwNK8a WvHekXm0nVs1Nz0Ih3u2vF9paFbsOE4YSsuKvvKrCjF8G8FQvEV3GyVgXRbCHFIZ MblAEDgP57YeHbcHghov9YC7/qT3Y+oBbrdQDR/oKxEbkElmpYCHSLpgC8wPkH1h o0zUQE+PTupIJkQQnhbH1fhHZzu3eIZIS90TAMUnuGPyXeIenwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwPTkZ4BlVsU0Qg/2103TfjOtPrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWE5NmQxZWQtYmQ5OC0z MDE0LWFkYTYtZjMzZjliYTdiYzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EI+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5Fi2BnmxPpP6mfPVzfMEmm2e+y651hDilhH5Z8y0HmT1YZDVnGvtxe baqhqLzzobZUth4L5Ucm8wjx6+twuHAf1KiItaDhYXmKQQZHDLlGM3n//myWTU0m QVw0uuc3hW0S9mFwc2kIXGeKH7L4VXRi5MQZJcW6NnxmA2wWD5FiXKtktRlRry1u Uy/8sDVfWJC7/ZBo1ep/G1r+Ip3NYYKiu4lRhHEWu0o2qtWv4sW/3ZQce5vQsJeF 16XWNcYcHsqqbpGJOILmXeQKK3PS+zAmReGxKE02FjB4Hg2JOro4dWPr4TVoW2wy noPgE54Pn1agYEzo39eWm6ifg3zxKQU= -----END CERTIFICATE-----Generated at Fri Apr 4 17:45:11 2025 by rpki-client