$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa File: a71bf399-4b1b-3700-8996-65eac6cc402a.roa (raw, json) Hash identifier: rnzlL8valg1iP+xSBe393619V+02yyleSjI4fYT/7Ws= Subject key identifier: 13:81:0F:61:C6:74:7A:9C:D2:BE:00:41:C7:C8:67:19:80:6A:B7:58 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285849E4EFBC0108FB527DCD125A00 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13536 IP address blocks: 66.231.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:bc:01:08:fb:52:7d:cd:12:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=99439bcf-1d4a-4ea9-b114-b903a8b74cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:57:c6:48:1e:a2:a5:b4:d4:7f:f6:19:c6:49: 15:d3:bf:5d:c2:6e:32:47:05:9a:32:ee:4b:17:75: 62:ea:ac:69:55:06:cf:d5:c5:79:35:ed:6f:b3:d4: d5:57:81:66:1c:b4:cd:f8:c6:59:a6:60:77:90:1c: 42:3f:8c:24:c1:e0:6a:f4:7e:0b:f2:bb:a1:7a:86: 5b:06:88:88:13:16:3d:f9:e3:45:69:6c:82:b2:df: 49:24:51:d6:5e:85:ed:3b:4a:88:31:e1:43:3c:16: f0:59:46:fb:ba:da:4d:84:38:4b:ea:eb:ad:24:6c: 71:5e:be:5c:df:4a:93:b9:1b:f7:b6:dd:25:82:8a: b4:41:7b:c1:48:98:df:8d:2a:df:42:ff:d0:c0:11: 1e:c1:78:18:30:4c:5d:30:1c:a7:1e:51:38:40:b1: 24:6d:f0:4d:80:90:da:82:4e:51:55:d2:3d:1b:ec: 80:da:f0:29:cd:29:70:0d:90:11:50:78:4e:73:7d: 56:b1:ec:a0:89:df:f1:c3:72:4a:f6:9d:8a:98:23: 5f:4d:99:98:0d:6c:71:b9:04:a0:36:ee:96:e9:e6: bf:22:b6:ce:af:2c:79:39:94:cc:be:44:b2:2d:6c: fd:4a:b7:ea:57:93:65:ef:6f:61:58:17:41:9c:cb: 41:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:81:0F:61:C6:74:7A:9C:D2:BE:00:41:C7:C8:67:19:80:6A:B7:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.231.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:e8:7d:3d:1a:02:e9:9a:42:c5:f0:09:da:20:1e:a4:89:8a: 0a:db:be:02:10:4d:48:8a:ae:a8:b4:0c:bd:00:68:6e:1d:ab: e1:c1:0c:bb:6b:16:ec:73:dd:54:24:73:19:35:13:63:a8:45: 3c:da:59:5d:c8:8f:57:69:4a:a2:87:20:b7:9c:c9:95:5a:a2: 9a:c0:a0:3a:e9:9d:12:e1:d1:82:33:95:b4:73:7c:b5:c5:e7: 71:08:2c:a0:ac:6a:f9:38:c8:e5:47:df:30:2a:43:b7:b5:08: 34:da:c5:e3:b3:89:45:21:7f:c0:12:d7:60:b2:19:b6:a9:c4: 13:cf:bb:8b:81:63:cd:f2:05:dc:39:cb:46:91:cf:fa:60:b6: e5:8f:b1:15:7c:24:17:41:e3:0c:39:3a:4c:5e:44:d8:8c:a9: 1e:aa:4a:f0:a2:0e:79:70:2a:4d:7d:52:a8:5d:9e:22:2c:41: 3c:c8:ca:cb:8e:b8:cf:46:9d:d2:2d:1c:ff:bf:71:49:2d:61: 5f:f6:c4:48:cd:76:6e:a4:16:16:4d:95:86:7b:ac:e0:6a:f4: ae:9d:86:3d:ae:fc:c9:39:dd:38:8a:56:9b:f1:bd:7c:58:94: b6:58:4e:97:e6:4e:c0:62:8f:62:c7:68:38:24:ae:39:df:50: 3a:b4:06:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk77wBCPtSfc0SWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk OTk0MzliY2YtMWQ0YS00ZWE5LWIxMTQtYjkwM2E4Yjc0Y2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1fGSB6ipbTUf/YZxkkV079dwm4yRwWaMu5L F3Vi6qxpVQbP1cV5Ne1vs9TVV4FmHLTN+MZZpmB3kBxCP4wkweBq9H4L8ruheoZb BoiIExY9+eNFaWyCst9JJFHWXoXtO0qIMeFDPBbwWUb7utpNhDhL6uutJGxxXr5c 30qTuRv3tt0lgoq0QXvBSJjfjSrfQv/QwBEewXgYMExdMBynHlE4QLEkbfBNgJDa gk5RVdI9G+yA2vApzSlwDZARUHhOc31Wseygid/xw3JK9p2KmCNfTZmYDWxxuQSg Nu6W6ea/IrbOryx5OZTMvkSyLWz9SrfqV5Nl729hWBdBnMtBEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOBD2HGdHqc0r4AQcfIZxmAardYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYTcxYmYzOTktNGIxYi0z NzAwLTg5OTYtNjVlYWM2Y2M0MDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQufYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANPofT0aAumaQsXwCdogHqSJigrbvgIQTUiKrqi0DL0AaG4dq+HBDLtr Fuxz3VQkcxk1E2OoRTzaWV3Ij1dpSqKHILecyZVaoprAoDrpnRLh0YIzlbRzfLXF 53EILKCsavk4yOVH3zAqQ7e1CDTaxeOziUUhf8AS12CyGbapxBPPu4uBY83yBdw5 y0aRz/pgtuWPsRV8JBdB4ww5OkxeRNiMqR6qSvCiDnlwKk19UqhdniIsQTzIysuO uM9GndItHP+/cUktYV/2xEjNdm6kFhZNlYZ7rOBq9K6dhj2u/Mk53TiKVpvxvXxY lLZYTpfmTsBij2LHaDgkrjnfUDq0BnI= -----END CERTIFICATE-----Generated at Tue Jun 17 04:39:29 2025 by rpki-client