$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/871a65de-6a67-3b86-8838-1a85131b8f46.roa File: 871a65de-6a67-3b86-8838-1a85131b8f46.roa (raw, json) Hash identifier: 1l578XdXlnYuwLrH8PGzEKS8m7kLF93nd+c2xyq+HtM= Subject key identifier: 3D:7D:5D:BC:AF:5B:13:03:A6:E7:21:00:FD:00:73:FD:4F:25:09:26 Certificate issuer: /CN=5c6c3a7f-86b7-4f9a-b2ab-04c827927389 Certificate serial: 010D0C9F43285849806F25869E938E3D950B6B80 Authority key identifier: 93:4F:C0:68:0F:B6:73:44:0B:D0:25:EB:63:C7:E7:CF:0A:DD:00:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/871a65de-6a67-3b86-8838-1a85131b8f46.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 66.179.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:25:86:9e:93:8e:3d:95:0b:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6c3a7f-86b7-4f9a-b2ab-04c827927389 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=7670c282-efe4-44df-b516-2897dd5fd8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3e:ed:77:83:a1:50:0c:50:b7:0c:4b:5c:23: 09:41:b1:e8:17:c1:10:17:21:38:93:cb:08:45:b0: 73:d4:12:c3:90:c4:4c:a4:83:b3:93:f6:2e:99:21: b9:44:c9:9e:1c:a4:49:18:be:28:47:18:40:99:28: 42:89:2f:b1:0a:5a:29:d3:b8:e3:aa:9b:b4:42:87: d8:0e:40:75:a4:6b:ce:11:93:0e:61:44:6a:01:d6: 7b:ef:f1:ef:38:b5:c0:90:de:06:40:51:c9:f0:2b: 39:83:eb:96:25:2c:f8:4d:8a:69:94:e0:04:ec:6b: 7b:ac:17:1c:50:51:a3:49:47:2c:43:b0:6e:b6:a4: 5e:54:e2:b4:86:7c:d5:23:ba:a4:ed:7c:1d:7c:05: 87:c5:b4:dd:ab:13:be:03:a2:09:51:bc:ac:18:01: d4:29:77:cd:b7:ba:01:4b:87:a3:1c:55:83:48:93: c0:11:6e:0f:fa:c8:88:b7:f5:2a:fd:67:ce:52:5b: 87:8a:0e:bf:61:45:42:7a:b1:a5:2c:73:7a:dd:e3: a5:3f:95:26:50:9f:a4:8d:ab:6f:81:14:66:b0:49: a0:f8:5e:f5:41:61:78:96:fc:b8:0c:bc:47:94:99: 7b:c5:91:3a:27:9c:57:77:74:d5:0c:a9:41:ab:c9: 8a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7D:5D:BC:AF:5B:13:03:A6:E7:21:00:FD:00:73:FD:4F:25:09:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/871a65de-6a67-3b86-8838-1a85131b8f46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.crl X509v3 Authority Key Identifier: keyid:93:4F:C0:68:0F:B6:73:44:0B:D0:25:EB:63:C7:E7:CF:0A:DD:00:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.cer sbgp-ipAddrBlock: critical IPv4: 66.179.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:86:cd:03:16:58:56:84:2a:ee:28:42:0c:42:55:93:17:b4: fc:cf:5e:5d:9c:73:0f:26:b7:9b:5a:e4:da:af:ed:dc:9a:17: 9f:65:90:d1:dd:20:b8:b6:f2:2d:0f:2a:c6:f9:96:fe:c2:e0: 91:8b:38:b6:7c:51:7f:f6:40:c8:0e:f8:cf:33:9a:e4:4f:9d: ac:11:ab:24:6d:d3:fe:39:f3:01:cd:02:4c:81:17:e3:e8:e5: c5:d7:fc:ac:d9:a7:af:19:95:01:98:05:25:02:91:ac:d2:57: e3:de:93:13:1a:6b:14:ca:68:0a:9e:62:ab:4f:17:a5:25:60: 86:2d:50:6b:52:1b:85:e9:09:1e:45:c9:f3:ee:6f:78:10:d1: 01:5c:0f:c3:a2:9d:a0:db:06:94:8f:14:f5:ef:db:70:70:45: 78:e3:7e:ad:54:cc:5b:a8:2b:2a:f4:af:40:17:c9:61:28:ca: 70:37:c3:aa:00:18:67:be:e6:c5:49:35:9b:c3:47:fc:3d:67: 80:34:f5:70:74:87:c6:10:00:dc:9b:2a:80:e1:41:9e:70:68: 1a:9e:ed:5a:28:c6:e1:31:ba:83:d2:9a:46:38:3a:fc:ff:f5: 49:0d:ef:11:07:14:78:08:21:ca:65:7b:aa:e7:58:37:72:fb: e6:36:83:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbyWGnpOOPZULa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM2YzNhN2YtODZiNy00ZjlhLWIyYWItMDRjODI3OTI3 Mzg5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk NzY3MGMyODItZWZlNC00NGRmLWI1MTYtMjg5N2RkNWZkOGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT7td4OhUAxQtwxLXCMJQbHoF8EQFyE4k8sI RbBz1BLDkMRMpIOzk/YumSG5RMmeHKRJGL4oRxhAmShCiS+xClop07jjqpu0QofY DkB1pGvOEZMOYURqAdZ77/HvOLXAkN4GQFHJ8Cs5g+uWJSz4TYpplOAE7Gt7rBcc UFGjSUcsQ7ButqReVOK0hnzVI7qk7XwdfAWHxbTdqxO+A6IJUbysGAHUKXfNt7oB S4ejHFWDSJPAEW4P+siIt/Uq/WfOUluHig6/YUVCerGlLHN63eOlP5UmUJ+kjatv gRRmsEmg+F71QWF4lvy4DLxHlJl7xZE6J5xXd3TVDKlBq8mKvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD19XbyvWxMDpuchAP0Ac/1PJQkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YzZj M2E3Zi04NmI3LTRmOWEtYjJhYi0wNGM4Mjc5MjczODkvODcxYTY1ZGUtNmE2Ny0z Yjg2LTg4MzgtMWE4NTEzMWI4ZjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWM2YzNhN2YtODZiNy00ZjlhLWIy YWItMDRjODI3OTI3Mzg5LzVjNmMzYTdmLTg2YjctNGY5YS1iMmFiLTA0YzgyNzky NzM4OS5jcmwwHwYDVR0jBBgwFoAUk0/AaA+2c0QL0CXrY8fnzwrdAFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YzZjM2E3Zi04NmI3LTRmOWEtYjJhYi0wNGM4 Mjc5MjczODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrM7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiGzQMWWFaEKu4oQgxCVZMXtPzPXl2ccw8mt5ta5Nqv7dyaF59lkNHd ILi28i0PKsb5lv7C4JGLOLZ8UX/2QMgO+M8zmuRPnawRqyRt0/458wHNAkyBF+Po 5cXX/KzZp68ZlQGYBSUCkazSV+PekxMaaxTKaAqeYqtPF6UlYIYtUGtSG4XpCR5F yfPub3gQ0QFcD8OinaDbBpSPFPXv23BwRXjjfq1UzFuoKyr0r0AXyWEoynA3w6oA GGe+5sVJNZvDR/w9Z4A09XB0h8YQANybKoDhQZ5waBqe7VooxuExuoPSmkY4Ovz/ 9UkN7xEHFHgIIcple6rnWDdy++Y2g3Q= -----END CERTIFICATE-----Generated at Sat Apr 26 14:52:37 2025 by rpki-client