$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea5b8a17-465e-3806-935e-87cb1d092488.roa File: ea5b8a17-465e-3806-935e-87cb1d092488.roa (raw, json) Hash identifier: 9xaSGKYZB99qjusmVvm3X9AHcpNz97HT2kXRdTY81qg= Subject key identifier: 85:77:0E:AA:A2:DC:21:89:02:3D:AE:63:F0:6F:31:81:A7:8D:AA:C6 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584988CF28FEB77E04FD85CA0440 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea5b8a17-465e-3806-935e-87cb1d092488.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 13536 IP address blocks: 66.152.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:28:fe:b7:7e:04:fd:85:ca:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=6b02a1fb-467c-4e69-a3f8-358875e4614f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:34:ff:66:dc:41:f1:b3:5d:14:ce:fe:c3:66: 0a:56:0b:fd:55:66:da:46:11:2d:94:64:ff:c6:59: 8e:e8:d7:79:c8:b3:da:13:45:9d:86:16:5f:da:49: 2b:7f:cc:0b:90:3c:b5:d7:3d:8c:66:94:a5:66:0c: 1e:7b:7f:87:2c:93:80:7f:f5:dc:d7:05:b1:f7:f2: ec:7b:86:fb:d7:07:19:0f:0c:e3:29:04:12:60:1c: 3d:bd:5a:24:85:2d:77:15:85:36:78:1e:89:f5:86: ee:f5:c0:08:23:00:9b:2a:c8:45:08:af:33:45:4d: c5:2a:e7:3d:9a:a2:e8:17:84:9f:c4:4a:6b:eb:97: 24:24:50:4c:68:5f:c9:93:c6:96:c0:29:1b:3c:fe: b6:72:fd:71:a4:b2:11:24:aa:04:bd:84:ad:41:48: 9b:64:cc:2c:e7:08:4b:e5:79:62:c1:71:a0:07:b0: 5c:ec:ed:4a:51:a4:95:f5:2e:a1:1f:01:17:71:e3: 24:5c:b3:d1:b4:5c:61:3a:d8:1f:c0:5e:0e:f3:38: 84:63:7d:fd:8d:19:fd:04:ed:90:bc:77:d3:bf:77: 64:14:bc:5d:61:4a:a0:f8:d6:b6:ad:44:99:7a:ad: 85:62:6d:a7:15:51:5f:e1:ab:a4:b0:80:c2:0e:84: 10:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:77:0E:AA:A2:DC:21:89:02:3D:AE:63:F0:6F:31:81:A7:8D:AA:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea5b8a17-465e-3806-935e-87cb1d092488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.152.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:07:38:45:c2:89:a4:e2:cb:fc:6c:63:02:94:d0:95:df:5e: d0:93:87:f3:ff:95:5e:e0:25:23:2e:ca:4e:27:fa:42:88:12: 4c:a8:4a:b0:21:1c:3a:d6:06:5f:18:58:db:46:8b:65:00:11: 34:5f:5e:9d:bd:f0:73:f3:68:28:58:c7:46:d2:a9:05:bd:78: a1:fd:8c:93:b5:bf:cf:99:0b:d1:34:fa:8f:96:a0:df:1b:38: 8c:4b:31:71:88:ae:3f:ac:65:58:67:77:fe:00:83:1b:e3:52: c0:4e:ef:ff:82:5f:b4:1a:01:b7:26:40:4b:e3:dc:b2:f8:45: 3b:73:65:e7:82:d0:5f:86:18:14:4f:9d:c1:d7:3f:86:1f:4b: e3:03:c5:c1:a0:9d:de:cf:1d:f3:79:63:dc:c3:41:c2:86:fb: a1:d8:0b:63:8f:a6:20:c6:cb:31:11:5c:bd:37:d0:82:87:e8: e9:88:05:62:55:41:1f:2f:c8:bc:61:fb:0f:c3:03:3c:96:b0: 01:2c:3f:ef:78:3a:86:26:48:25:e1:83:51:01:15:9b:eb:dc: 6d:a0:e1:25:3e:2f:fc:e4:76:57:f7:28:ba:64:8d:a4:5b:e0: 32:5b:11:11:19:61:6b:2d:a9:0e:c1:46:87:fb:10:3b:f3:20: 2c:67:ea:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyj+t34E/YXKBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NmIwMmExZmItNDY3Yy00ZTY5LWEzZjgtMzU4ODc1ZTQ2MTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzT/ZtxB8bNdFM7+w2YKVgv9VWbaRhEtlGT/ xlmO6Nd5yLPaE0WdhhZf2kkrf8wLkDy11z2MZpSlZgwee3+HLJOAf/Xc1wWx9/Ls e4b71wcZDwzjKQQSYBw9vVokhS13FYU2eB6J9Ybu9cAIIwCbKshFCK8zRU3FKuc9 mqLoF4SfxEpr65ckJFBMaF/Jk8aWwCkbPP62cv1xpLIRJKoEvYStQUibZMws5whL 5XliwXGgB7Bc7O1KUaSV9S6hHwEXceMkXLPRtFxhOtgfwF4O8ziEY339jRn9BO2Q vHfTv3dkFLxdYUqg+Na2rUSZeq2FYm2nFVFf4auksIDCDoQQqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIV3Dqqi3CGJAj2uY/BvMYGnjarGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZWE1YjhhMTctNDY1ZS0z ODA2LTkzNWUtODdjYjFkMDkyNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQph/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMHOEXCiaTiy/xsYwKU0JXfXtCTh/P/lV7gJSMuyk4n+kKIEkyoSrAh HDrWBl8YWNtGi2UAETRfXp298HPzaChYx0bSqQW9eKH9jJO1v8+ZC9E0+o+WoN8b OIxLMXGIrj+sZVhnd/4AgxvjUsBO7/+CX7QaAbcmQEvj3LL4RTtzZeeC0F+GGBRP ncHXP4YfS+MDxcGgnd7PHfN5Y9zDQcKG+6HYC2OPpiDGyzERXL030IKH6OmIBWJV QR8vyLxh+w/DAzyWsAEsP+94OoYmSCXhg1EBFZvr3G2g4SU+L/zkdlf3KLpkjaRb 4DJbEREZYWstqQ7BRof7EDvzICxn6tc= -----END CERTIFICATE-----Generated at Tue Apr 29 07:06:54 2025 by rpki-client