$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa File: 4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa (raw, json) Hash identifier: sag8WuVlNFp5jFqPM2HtX9t8/c86HLka3f7JhBq3r3E= Subject key identifier: 2D:34:AA:F4:2B:B6:A2:F5:7D:E0:C9:02:EF:51:B6:C8:8D:78:40:97 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584988CF30E31B29579B4118581C Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 13536 IP address blocks: 66.152.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:30:e3:1b:29:57:9b:41:18:58:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=6a7efd19-de73-49e1-a83b-73e3031f3203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:63:02:87:42:89:42:32:40:08:c9:09:1c:e5: 49:b4:1d:38:37:5d:12:ae:0c:06:5b:05:6b:38:e6: 2a:b2:f9:e7:d3:cf:aa:24:9c:ea:75:b1:9d:35:6b: 80:de:42:0e:60:d1:86:7c:4f:b7:48:76:00:fe:a6: 29:c6:7e:bd:f6:e2:5b:59:e0:65:33:21:88:db:84: d0:4b:7b:1c:22:66:ae:0f:70:cc:3d:b5:47:67:a1: ae:48:0f:6e:ba:fc:77:c6:0d:72:b7:b8:b3:0b:5b: 07:29:26:7d:4f:65:76:8d:a5:c5:10:45:9b:ae:14: c2:c5:e1:c5:40:a7:02:1e:95:05:80:4a:54:36:76: e2:64:5f:97:20:21:25:a8:8a:7e:f4:86:3c:03:d5: 05:7c:76:e1:2d:fa:23:a7:5c:85:1f:73:72:db:d0: 38:d2:d4:58:3b:e2:4a:6d:76:19:85:36:af:3b:2e: 67:4c:fe:0e:61:cd:df:a6:2f:7f:d8:96:57:a2:b7: db:26:c5:36:e9:bb:d4:b6:43:c4:2a:af:84:d3:3e: 8d:9f:0f:be:40:3f:c2:78:22:c5:7a:a2:75:77:35: 8f:2f:fd:1d:45:05:2e:b1:87:69:46:f9:4c:dd:eb: ba:51:22:a7:e9:90:f8:32:0a:f2:38:d9:38:33:ab: 3c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:34:AA:F4:2B:B6:A2:F5:7D:E0:C9:02:EF:51:B6:C8:8D:78:40:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.152.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:72:96:9e:68:76:f9:e0:58:8b:67:27:84:74:74:f8:56:e2: 6f:d3:19:cb:06:b7:43:b3:5d:b9:a7:c7:58:ad:95:6b:5f:39: c8:e3:22:4b:ae:57:dc:fb:ff:9b:1a:47:dd:ba:db:3e:d8:0a: 96:b0:ab:9b:5f:17:a2:cc:c8:59:42:c4:04:95:2e:c9:75:ea: f6:07:a0:81:ea:d6:be:0e:b3:10:be:c7:a1:10:c3:38:14:f8: 4f:c7:50:a0:b4:b1:9c:3d:26:12:6c:fa:3e:26:02:b5:7e:0d: 73:6e:c9:b9:90:24:5a:e8:d1:b2:36:7f:0a:64:41:99:a1:bf: db:c9:ae:95:81:f0:a1:1c:4c:29:28:43:b3:5a:8a:87:a5:ff: b9:85:f0:1b:40:fc:03:3e:bb:ae:1e:84:bf:27:88:18:37:82: 1a:8e:9a:71:70:70:52:8a:ac:e6:43:65:e0:62:e6:2e:b4:3b: 81:0d:15:a3:a3:82:b8:5e:b1:b0:e4:7f:a3:63:de:f5:82:05: 56:da:70:58:61:33:a7:12:2c:bd:6b:2d:55:ef:de:f9:83:43: 35:e3:af:e5:b2:42:48:1b:3a:68:c7:ca:72:31:06:49:c7:9e: b4:c7:3b:b4:c2:f5:6b:2d:5c:d4:66:04:94:81:0a:5b:c1:dd: aa:66:f1:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzDjGylXm0EYWBwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NmE3ZWZkMTktZGU3My00OWUxLWE4M2ItNzNlMzAzMWYzMjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mMCh0KJQjJACMkJHOVJtB04N10SrgwGWwVr OOYqsvnn08+qJJzqdbGdNWuA3kIOYNGGfE+3SHYA/qYpxn699uJbWeBlMyGI24TQ S3scImauD3DMPbVHZ6GuSA9uuvx3xg1yt7izC1sHKSZ9T2V2jaXFEEWbrhTCxeHF QKcCHpUFgEpUNnbiZF+XICElqIp+9IY8A9UFfHbhLfojp1yFH3Ny29A40tRYO+JK bXYZhTavOy5nTP4OYc3fpi9/2JZXorfbJsU26bvUtkPEKq+E0z6Nnw++QD/CeCLF eqJ1dzWPL/0dRQUusYdpRvlM3eu6USKn6ZD4MgryONk4M6s8EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC00qvQrtqL1feDJAu9RtsiNeECXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNGVmOWQzM2MtZTg4Ni0z ZTFkLWE5NTAtNjhmZWFhOWE5Y2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQphgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANylp5odvngWItnJ4R0dPhW4m/TGcsGt0OzXbmnx1itlWtfOcjjIkuu V9z7/5saR9262z7YCpawq5tfF6LMyFlCxASVLsl16vYHoIHq1r4OsxC+x6EQwzgU +E/HUKC0sZw9JhJs+j4mArV+DXNuybmQJFro0bI2fwpkQZmhv9vJrpWB8KEcTCko Q7Naioel/7mF8BtA/AM+u64ehL8niBg3ghqOmnFwcFKKrOZDZeBi5i60O4ENFaOj grhesbDkf6Nj3vWCBVbacFhhM6cSLL1rLVXv3vmDQzXjr+WyQkgbOmjHynIxBknH nrTHO7TC9WstXNRmBJSBClvB3apm8Ws= -----END CERTIFICATE-----Generated at Tue Apr 29 09:28:50 2025 by rpki-client