$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67480b46-f29d-3781-9835-105e7c253634.roa File: 67480b46-f29d-3781-9835-105e7c253634.roa (raw, json) Hash identifier: rCvXH1pdlq0gCzeNYEVOXeVe4kUA2hZ6Fb1XSz76UAg= Subject key identifier: DA:6C:9D:0E:F8:CC:B3:17:E3:3D:D5:3E:94:2A:32:F8:05:94:F9:5A Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584988CF30F1C9DBC187D1CC8C80 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67480b46-f29d-3781-9835-105e7c253634.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 32043 IP address blocks: 66.186.176.0/24 maxlen: 24 66.186.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:30:f1:c9:db:c1:87:d1:cc:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=5f83bbc5-37d2-4789-9411-06de3a406649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:59:45:6b:a8:0c:82:00:7e:4a:6e:b6:97:3d: 80:63:59:6d:63:be:bd:07:cf:be:59:7a:4f:17:04: 42:26:60:a4:7f:c0:ee:c6:82:34:2e:1e:d5:ad:3d: c5:ba:b0:53:e2:81:4c:8b:19:bf:e5:4f:97:ef:0f: 1b:17:4e:69:51:3c:71:1c:92:e2:69:55:75:97:16: ba:c2:6c:83:d2:4e:b5:fa:73:c1:02:ba:4d:86:31: 7e:9a:43:fa:ef:09:39:2b:29:32:3f:51:f9:0b:ba: 2b:1f:23:8b:b1:3b:4c:a3:43:ae:e6:b6:23:35:8d: 28:41:c0:f2:ca:03:61:98:a1:52:c8:e9:92:cd:8c: 76:6c:9b:2a:35:d1:9c:82:3e:c7:ff:6e:42:1d:09: 3a:e1:50:02:42:9c:c4:9d:2b:bf:17:89:8d:00:68: 7c:a6:73:4f:b6:94:a1:9b:41:fc:eb:63:9c:2d:27: 7a:28:fb:a8:b4:52:a3:87:86:88:c3:b6:c5:8c:c1: e0:79:5c:a5:d1:7e:ae:93:4b:2f:f5:25:0e:9d:de: 46:10:60:ff:31:8e:be:67:14:dc:4c:9d:a4:8c:e1: 1a:a6:e6:9f:1d:3e:ce:ab:4d:7c:85:7a:b4:0b:f6: b4:69:b3:a4:2a:07:1e:36:54:7f:75:79:69:12:c9: 79:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6C:9D:0E:F8:CC:B3:17:E3:3D:D5:3E:94:2A:32:F8:05:94:F9:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67480b46-f29d-3781-9835-105e7c253634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.186.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:82:d2:1e:6e:d2:5c:11:86:0b:9b:34:a5:e8:af:6d:e5:c6: 84:29:9f:dc:2c:d9:91:07:c1:4f:ba:0a:e1:b6:00:0f:01:b7: aa:10:4a:c3:ca:b9:85:83:f1:a5:73:0a:b6:fc:47:dc:16:31: c5:a6:88:34:03:fc:5c:ba:14:68:a7:d1:0b:aa:d7:1f:eb:5d: 53:32:be:4c:ac:21:26:f5:8f:f7:df:20:27:ed:dc:6c:b8:ac: ab:ca:3b:44:3a:3f:84:f8:22:d0:fc:39:7f:b8:cb:43:5c:ac: d9:08:d4:d3:2f:21:74:c7:98:25:93:b2:38:d1:21:a0:6f:95: b6:7f:48:84:f4:09:d0:6e:42:6c:75:5e:14:aa:78:0b:43:65: 10:8a:e9:c7:43:4f:cc:ec:5a:48:96:16:da:1a:65:d4:13:ab: 92:8b:4c:6c:32:45:8f:65:2c:7f:b9:ca:22:f8:7c:be:16:ca: 24:e2:5e:82:89:59:82:70:32:6e:b1:78:22:a4:33:c6:93:83: 2f:ab:be:5b:22:0f:ad:41:4e:56:f5:08:6c:86:62:26:b1:98: 9a:5b:4b:c3:6d:e7:68:cb:6b:4d:d3:fc:62:81:9e:2b:8e:29: 66:dd:c4:76:43:84:2b:e3:1b:6f:de:5e:81:c1:0b:07:bf:82: ad:9b:c5:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzDxydvBh9HMjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NWY4M2JiYzUtMzdkMi00Nzg5LTk0MTEtMDZkZTNhNDA2NjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVlFa6gMggB+Sm62lz2AY1ltY769B8++WXpP FwRCJmCkf8DuxoI0Lh7VrT3FurBT4oFMixm/5U+X7w8bF05pUTxxHJLiaVV1lxa6 wmyD0k61+nPBArpNhjF+mkP67wk5KykyP1H5C7orHyOLsTtMo0Ou5rYjNY0oQcDy ygNhmKFSyOmSzYx2bJsqNdGcgj7H/25CHQk64VACQpzEnSu/F4mNAGh8pnNPtpSh m0H862OcLSd6KPuotFKjh4aIw7bFjMHgeVyl0X6uk0sv9SUOnd5GEGD/MY6+ZxTc TJ2kjOEapuafHT7Oq018hXq0C/a0abOkKgceNlR/dXlpEsl5RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpsnQ74zLMX4z3VPpQqMvgFlPlaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNjc0ODBiNDYtZjI5ZC0z NzgxLTk4MzUtMTA1ZTdjMjUzNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6C0h5u0lwRhgubNKXor23lxoQpn9ws2ZEHwU+6CuG2AA8Bt6oQSsPK uYWD8aVzCrb8R9wWMcWmiDQD/Fy6FGin0Quq1x/rXVMyvkysISb1j/ffICft3Gy4 rKvKO0Q6P4T4ItD8OX+4y0NcrNkI1NMvIXTHmCWTsjjRIaBvlbZ/SIT0CdBuQmx1 XhSqeAtDZRCK6cdDT8zsWkiWFtoaZdQTq5KLTGwyRY9lLH+5yiL4fL4WyiTiXoKJ WYJwMm6xeCKkM8aTgy+rvlsiD61BTlb1CGyGYiaxmJpbS8Nt52jLa03T/GKBniuO KWbdxHZDhCvjG2/eXoHBCwe/gq2bxQw= -----END CERTIFICATE-----Generated at Tue Apr 29 14:06:09 2025 by rpki-client