$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/20ee16b6-94f3-3d25-9d91-f2bbea700def.roa File: 20ee16b6-94f3-3d25-9d91-f2bbea700def.roa (raw, json) Hash identifier: 7OzA7h7nNwte2xjivTpjokvEAyZ3xJOgpvIVhXiaaN4= Subject key identifier: 36:ED:BF:9D:84:41:27:31:22:FF:15:30:82:8D:2C:F3:D4:F5:22:F3 Certificate issuer: /CN=de84b539-8408-4f2c-8e81-05f7a1b73686 Certificate serial: 010D0C9F43285849FCAA7847DA05933182DED880 Authority key identifier: E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/20ee16b6-94f3-3d25-9d91-f2bbea700def.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 18779 IP address blocks: 66.154.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:78:47:da:05:93:31:82:de:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de84b539-8408-4f2c-8e81-05f7a1b73686 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=6ab98625-320f-462d-b12e-acce9205b2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b9:c1:ec:7b:88:7c:7b:16:75:3b:b7:4a:13: d2:d7:00:5f:4a:f0:10:0a:57:a1:62:16:7a:a4:51: 1e:6d:b3:71:a8:d0:da:20:2e:9d:cf:49:53:fa:71: 62:9d:ff:93:b5:fa:3b:35:18:0a:32:26:60:eb:a5: 35:68:0c:b9:a9:93:78:21:5a:9d:9b:1f:9c:80:b5: 0a:6a:34:bb:ff:54:de:40:dc:a0:2d:d4:37:aa:f4: 70:9c:46:fe:ae:2b:8e:c8:aa:00:72:7c:e4:4a:00: aa:0f:58:46:73:d8:f1:0f:41:e3:5a:56:5a:d8:0f: 9f:98:ae:c5:0d:1b:9d:f5:80:71:35:cb:d4:67:18: cd:63:cf:e1:8a:8f:79:ad:a1:63:67:12:73:19:eb: 33:8f:74:1c:4d:a1:fa:84:17:c7:6f:bd:7e:21:01: eb:bd:ae:8e:8c:80:4c:4b:32:90:fb:40:ad:fc:f1: ba:fd:9f:e2:2d:78:4d:14:67:68:2c:e8:17:e6:74: 29:61:de:e9:65:33:9f:6f:f9:4a:b0:0d:e6:b7:ee: da:03:02:24:41:df:d4:1d:b4:f4:39:3d:36:61:5a: 94:93:4c:39:b5:66:b6:04:a6:6d:e2:30:a6:1c:dd: 32:05:21:95:13:77:ef:1b:15:3d:e4:62:5b:84:12: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:ED:BF:9D:84:41:27:31:22:FF:15:30:82:8D:2C:F3:D4:F5:22:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/20ee16b6-94f3-3d25-9d91-f2bbea700def.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.crl X509v3 Authority Key Identifier: keyid:E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer sbgp-ipAddrBlock: critical IPv4: 66.154.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:53:00:12:36:13:01:7d:9c:11:65:a6:7b:1b:2d:42:55:a6: 3f:f3:13:9a:0f:d8:06:de:4c:9d:50:2f:62:dd:51:44:01:d6: d4:3d:12:4c:6c:de:64:04:da:64:3e:3e:82:5a:0c:b3:69:e8: 85:d1:68:51:3a:44:c2:7e:f1:f2:be:1e:70:fc:5f:15:6f:f2: b6:b5:11:d6:3f:4b:53:27:2e:11:11:a2:dd:36:a4:6e:cb:1c: 92:79:73:b1:92:61:11:e0:2f:85:03:46:0c:a1:47:6a:8c:d0: a2:ca:eb:c7:ef:bb:00:b1:6d:44:57:27:b0:2d:52:f5:00:43: b5:a8:e7:da:ff:9c:46:e5:5d:66:96:f0:b0:12:41:56:ef:42: 77:21:9f:60:42:bd:31:37:9d:84:e9:f9:2b:aa:12:f3:bd:3c: e4:8b:d0:49:7f:ef:66:c9:20:45:38:44:20:1f:e3:22:2d:60: 5a:52:bd:2c:ee:82:c2:e7:51:cd:68:5a:4d:e4:48:3a:f7:62: 52:f6:9c:1b:00:7e:40:eb:69:7e:17:80:46:b6:0a:97:9d:0e: 58:a8:05:4c:36:72:3f:28:97:8f:95:a7:3e:aa:3e:8e:75:43: a1:24:8c:cf:83:32:e0:d4:b2:24:cc:75:c8:04:d2:17:36:b5: 10:22:67:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnhH2gWTMYLe2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4NGI1MzktODQwOC00ZjJjLThlODEtMDVmN2ExYjcz Njg2MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NmFiOTg2MjUtMzIwZi00NjJkLWIxMmUtYWNjZTkyMDViMmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bnB7HuIfHsWdTu3ShPS1wBfSvAQClehYhZ6 pFEebbNxqNDaIC6dz0lT+nFinf+Ttfo7NRgKMiZg66U1aAy5qZN4IVqdmx+cgLUK ajS7/1TeQNygLdQ3qvRwnEb+riuOyKoAcnzkSgCqD1hGc9jxD0HjWlZa2A+fmK7F DRud9YBxNcvUZxjNY8/hio95raFjZxJzGeszj3QcTaH6hBfHb71+IQHrva6OjIBM SzKQ+0Ct/PG6/Z/iLXhNFGdoLOgX5nQpYd7pZTOfb/lKsA3mt+7aAwIkQd/UHbT0 OT02YVqUk0w5tWa2BKZt4jCmHN0yBSGVE3fvGxU95GJbhBKUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbtv52EQScxIv8VMIKNLPPU9SLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kZTg0 YjUzOS04NDA4LTRmMmMtOGU4MS0wNWY3YTFiNzM2ODYvMjBlZTE2YjYtOTRmMy0z ZDI1LTlkOTEtZjJiYmVhNzAwZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGU4NGI1MzktODQwOC00ZjJjLThl ODEtMDVmN2ExYjczNjg2L2RlODRiNTM5LTg0MDgtNGYyYy04ZTgxLTA1ZjdhMWI3 MzY4Ni5jcmwwHwYDVR0jBBgwFoAU4NkfWb9QMeGWd8J4jCCThQXrHxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kZTg0YjUzOS04NDA4LTRmMmMtOGU4MS0wNWY3 YTFiNzM2ODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQpp+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNTABI2EwF9nBFlpnsbLUJVpj/zE5oP2AbeTJ1QL2LdUUQB1tQ9Ekxs 3mQE2mQ+PoJaDLNp6IXRaFE6RMJ+8fK+HnD8XxVv8ra1EdY/S1MnLhERot02pG7L HJJ5c7GSYRHgL4UDRgyhR2qM0KLK68fvuwCxbURXJ7AtUvUAQ7Wo59r/nEblXWaW 8LASQVbvQnchn2BCvTE3nYTp+SuqEvO9POSL0El/72bJIEU4RCAf4yItYFpSvSzu gsLnUc1oWk3kSDr3YlL2nBsAfkDraX4XgEa2CpedDlioBUw2cj8ol4+Vpz6qPo51 Q6EkjM+DMuDUsiTMdcgE0hc2tRAiZxs= -----END CERTIFICATE-----Generated at Sun Jun 15 15:10:45 2025 by rpki-client