$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b36c07de-4508-3f35-92ce-3846f60dd765.roa File: b36c07de-4508-3f35-92ce-3846f60dd765.roa (raw, json) Hash identifier: aE0q4JBACzGsUONtR2bYJWsT7l3pH7HBl5jClQeZkAI= Subject key identifier: 91:A4:6A:2C:2F:9E:FF:DE:8D:BC:57:70:D0:0A:38:54:07:86:FA:FD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926DAA9FB3083150D3B9680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b36c07de-4508-3f35-92ce-3846f60dd765.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 54466 IP address blocks: 66.160.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:da:a9:fb:30:83:15:0d:3b:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=1f13de1d-7d9a-45e7-866f-77237d31dc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2e:37:e9:80:eb:47:a2:4c:ab:32:67:b8:48: eb:0a:69:54:95:ef:64:72:c5:d7:3c:ef:38:06:a4: 04:8d:66:89:ea:a4:6d:2d:35:27:45:dc:4b:86:2a: 13:2a:98:28:6d:25:04:15:cc:52:6f:91:ef:d4:b4: 1f:f8:05:91:12:30:73:ff:7e:c6:95:c8:92:1a:83: 8f:6e:dd:a1:98:b4:4e:e6:e8:8d:de:c1:4d:33:f8: 9b:ee:a4:18:44:bf:81:56:30:07:a8:ac:e2:eb:3c: 4a:84:d1:af:f1:8f:03:d3:d3:52:0a:aa:52:03:69: 9c:44:1c:d4:cb:72:9a:db:c2:6b:e4:93:06:fc:fb: 93:c7:d0:f9:17:d5:36:8e:eb:42:b5:fc:b6:c7:96: ca:c2:7b:a1:9c:b6:dd:e2:16:4b:cb:ea:1c:aa:a7: 00:20:3c:9d:06:d3:1a:49:b4:b2:70:e7:e6:9c:00: b1:e2:38:ad:cb:6f:b1:36:be:24:a7:4f:86:b1:4e: 1e:d0:d6:33:55:12:78:5c:ea:10:f5:6c:7a:82:62: f3:88:ab:f5:e1:7e:e9:b1:00:31:f4:07:78:e4:f5: bc:95:e4:a2:05:23:ce:6b:5e:c4:91:a6:50:be:b9: af:eb:9a:ee:09:3c:16:0a:36:0e:63:9d:29:64:1a: 3f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A4:6A:2C:2F:9E:FF:DE:8D:BC:57:70:D0:0A:38:54:07:86:FA:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b36c07de-4508-3f35-92ce-3846f60dd765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 66.160.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:4e:6c:bd:82:cf:58:6e:d2:a0:2f:98:21:7f:6f:ca:16:b5: ee:6e:67:be:3a:d9:4c:a0:9d:40:f3:5a:46:95:0c:9b:2c:39: ce:fe:06:e6:4d:e0:af:ff:3a:a3:1e:ff:99:07:0a:cb:91:54: 98:b6:12:9a:dd:71:48:e1:af:2c:7e:10:6f:9e:3d:ae:cc:52: 01:3b:d2:db:28:5f:88:c2:90:f1:41:48:64:0a:bb:12:03:50: 73:a0:61:0b:c6:8d:40:9d:7c:e2:f2:f1:3d:62:67:93:8b:08: ab:18:55:85:58:c6:c8:35:93:f8:bf:88:dd:a8:2f:c9:ca:59: f9:2f:cd:d5:f1:52:89:2e:c5:c3:18:28:91:31:bd:df:4e:af: 7e:2f:ff:2c:8f:35:76:12:58:90:69:81:ba:9b:fc:52:b3:c4: 2a:62:ba:cf:fa:7b:bd:6d:00:8d:86:c1:f3:bf:95:a5:90:59: 01:65:57:27:a0:2e:5c:18:51:41:76:37:b0:aa:fb:e9:3a:26: 4d:cc:f8:da:3f:45:f2:af:89:40:f4:27:37:10:0b:c7:c1:ea: 91:f3:ca:9f:d4:be:9b:63:7f:67:94:8d:1e:bc:f2:a6:4b:02: 21:c0:3c:bd:0b:7f:b7:51:f4:76:ef:94:12:b8:24:ca:aa:dd: e5:f8:37:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jtqp+zCDFQ07loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MWYxM2RlMWQtN2Q5YS00NWU3LTg2NmYtNzcyMzdkMzFkYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi436YDrR6JMqzJnuEjrCmlUle9kcsXXPO84 BqQEjWaJ6qRtLTUnRdxLhioTKpgobSUEFcxSb5Hv1LQf+AWREjBz/37GlciSGoOP bt2hmLRO5uiN3sFNM/ib7qQYRL+BVjAHqKzi6zxKhNGv8Y8D09NSCqpSA2mcRBzU y3Ka28Jr5JMG/PuTx9D5F9U2jutCtfy2x5bKwnuhnLbd4hZLy+ocqqcAIDydBtMa SbSycOfmnACx4jity2+xNr4kp0+GsU4e0NYzVRJ4XOoQ9Wx6gmLziKv14X7psQAx 9Ad45PW8leSiBSPOa17EkaZQvrmv65ruCTwWCjYOY50pZBo/xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGkaiwvnv/ejbxXcNAKOFQHhvr9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjM2YzA3ZGUtNDUwOC0z ZjM1LTkyY2UtMzg0NmY2MGRkNzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFObL2Cz1hu0qAvmCF/b8oWte5uZ7462UygnUDzWkaVDJssOc7+BuZN 4K//OqMe/5kHCsuRVJi2EprdcUjhryx+EG+ePa7MUgE70tsoX4jCkPFBSGQKuxID UHOgYQvGjUCdfOLy8T1iZ5OLCKsYVYVYxsg1k/i/iN2oL8nKWfkvzdXxUokuxcMY KJExvd9Or34v/yyPNXYSWJBpgbqb/FKzxCpius/6e71tAI2GwfO/laWQWQFlVyeg LlwYUUF2N7Cq++k6Jk3M+No/RfKviUD0JzcQC8fB6pHzyp/Uvptjf2eUjR688qZL AiHAPL0Lf7dR9HbvlBK4JMqq3eX4N4c= -----END CERTIFICATE-----Generated at Fri Apr 4 17:56:48 2025 by rpki-client