$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/aa17d820-7b12-31f4-9e2c-68bad6f9d183.roa File: aa17d820-7b12-31f4-9e2c-68bad6f9d183.roa (raw, json) Hash identifier: aIdoSKY06LxJgxWUQcCeFs7w6sxeUdqc+4IOX++TRAs= Subject key identifier: F3:F3:F2:22:D3:7A:18:FB:05:DE:EC:BA:4C:D2:BE:A2:E6:CD:BF:9C Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F432858492CB21498C91C1439ABA96380 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/aa17d820-7b12-31f4-9e2c-68bad6f9d183.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 15092 IP address blocks: 66.43.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:14:98:c9:1c:14:39:ab:a9:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=b2d3d5ae-e509-4bf6-9756-71c92d02b05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:03:6c:19:ec:2a:86:4d:3b:85:38:04:f4:98: d2:10:2f:e8:e8:67:45:e9:ea:10:4a:e1:f1:e9:e9: 0e:c8:be:ff:83:ea:d4:12:00:21:f0:bd:cc:fc:b4: b4:4f:c7:20:b7:4f:8d:2a:a4:ec:0b:1f:24:e0:3a: ef:15:6b:9c:0f:13:d9:02:f9:06:ad:89:e5:a0:f4: 61:73:83:96:c1:cf:59:2f:c8:d4:c3:35:da:5f:2b: 6c:07:98:7f:fb:b5:11:7f:00:5b:ef:44:dc:0e:7c: ae:09:31:2c:06:04:00:4d:10:d4:d4:63:af:77:16: 1c:02:05:a8:d5:3c:55:5b:a2:84:ba:5a:31:82:06: 6a:38:d4:aa:33:70:b3:f3:8f:c0:f1:21:3d:c5:77: e5:db:11:b1:c7:0f:cb:4d:3a:90:7d:54:2e:ae:5a: 54:d1:b8:30:d1:33:c9:16:53:8b:ef:4f:f2:1f:47: 5a:52:a8:f4:85:f0:21:64:1f:22:52:bd:43:64:ca: a5:29:7c:d2:bd:2d:40:ba:fe:e2:ff:9e:27:0b:7f: 44:a4:65:90:76:cc:9d:bd:62:fc:09:6f:78:8a:cd: fd:96:0f:96:50:e0:bf:1d:4c:0f:09:53:20:e1:8e: 15:7d:38:fc:84:9c:b1:66:7e:d7:f1:b2:9e:24:a3: e3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F3:F2:22:D3:7A:18:FB:05:DE:EC:BA:4C:D2:BE:A2:E6:CD:BF:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/aa17d820-7b12-31f4-9e2c-68bad6f9d183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 66.43.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:0c:56:04:3b:6c:9b:64:4e:cb:f6:8e:65:1d:65:16:9a:fc: 6c:87:6f:b5:cf:9c:34:db:92:ad:03:e4:87:17:4f:86:30:ef: cb:92:a2:4e:70:63:e4:64:5f:62:c8:96:ba:c8:ea:f3:40:f1: ef:5a:10:62:51:8e:0c:4f:d8:55:21:3b:75:c3:59:72:16:45: 37:40:3b:1c:48:e1:fa:80:70:46:0d:7d:93:42:81:44:6a:fd: 3d:eb:e6:64:c3:30:7a:62:02:17:bc:a8:9a:0d:be:84:80:b8: 3d:50:e9:d0:95:61:35:76:05:a0:31:ca:91:57:4a:3d:b7:d2: 0e:81:34:36:5f:f8:eb:8d:2f:85:b2:d8:24:84:89:30:c9:46: 85:f1:68:35:7c:a5:7c:a5:39:0e:1a:f8:5b:db:75:29:3d:1e: e6:91:95:9e:c5:15:60:77:18:34:fb:3e:0a:30:90:80:a9:b2: ec:6a:85:55:f5:39:d3:27:37:d9:1f:5b:df:24:cf:06:b9:a5: 3d:df:f9:25:5b:a4:5d:a3:72:26:e7:76:08:6a:12:3a:fd:cf: 45:72:69:26:91:0b:53:7d:9e:66:3c:43:14:6e:1f:a1:0c:1d: ea:0f:5c:c5:88:bc:38:9c:fb:fb:55:76:e0:18:cd:a2:27:1d: 6a:3f:a7:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksshSYyRwUOaupY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjJkM2Q1YWUtZTUwOS00YmY2LTk3NTYtNzFjOTJkMDJiMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmANsGewqhk07hTgE9JjSEC/o6GdF6eoQSuHx 6ekOyL7/g+rUEgAh8L3M/LS0T8cgt0+NKqTsCx8k4DrvFWucDxPZAvkGrYnloPRh c4OWwc9ZL8jUwzXaXytsB5h/+7URfwBb70TcDnyuCTEsBgQATRDU1GOvdxYcAgWo 1TxVW6KEuloxggZqONSqM3Cz84/A8SE9xXfl2xGxxw/LTTqQfVQurlpU0bgw0TPJ FlOL70/yH0daUqj0hfAhZB8iUr1DZMqlKXzSvS1Auv7i/54nC39EpGWQdsydvWL8 CW94is39lg+WUOC/HUwPCVMg4Y4VfTj8hJyxZn7X8bKeJKPjXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPz8iLTehj7Bd7sukzSvqLmzb+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvYWExN2Q4MjAtN2IxMi0z MWY0LTllMmMtNjhiYWQ2ZjlkMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQitpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwMVgQ7bJtkTsv2jmUdZRaa/GyHb7XPnDTbkq0D5IcXT4Yw78uSok5w Y+RkX2LIlrrI6vNA8e9aEGJRjgxP2FUhO3XDWXIWRTdAOxxI4fqAcEYNfZNCgURq /T3r5mTDMHpiAhe8qJoNvoSAuD1Q6dCVYTV2BaAxypFXSj230g6BNDZf+OuNL4Wy 2CSEiTDJRoXxaDV8pXylOQ4a+FvbdSk9HuaRlZ7FFWB3GDT7PgowkICpsuxqhVX1 OdMnN9kfW98kzwa5pT3f+SVbpF2jcibndghqEjr9z0VyaSaRC1N9nmY8QxRuH6EM HeoPXMWIvDic+/tVduAYzaInHWo/p7Y= -----END CERTIFICATE-----Generated at Sun Apr 27 13:10:41 2025 by rpki-client