$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f/ac3adda7-f4b4-3426-9ef8-71402c16e054.roa File: ac3adda7-f4b4-3426-9ef8-71402c16e054.roa (raw, json) Hash identifier: 0X40oejMeNUu135bRKO57DINadHFFKXhhLNjiOH1G9c= Subject key identifier: 30:41:70:A4:5F:2A:22:94:68:80:69:E9:46:C3:85:05:00:40:18:E9 Certificate issuer: /CN=6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f Certificate serial: 010D0C9F432858499FAD3912FA3D07D8CEF8DA68 Authority key identifier: DA:9F:76:A1:41:47:B4:8E:C4:DF:AD:A4:EB:0C:4C:EF:7B:D4:F7:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f/ac3adda7-f4b4-3426-9ef8-71402c16e054.roa Signing time: Wed 23 Apr 2025 17:36:23 +0000 ROA not before: Wed 23 Apr 2025 17:36:23 +0000 ROA not after: Tue 22 Jul 2025 17:36:23 +0000 asID: 1784 IP address blocks: 66.6.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:ad:39:12:fa:3d:07:d8:ce:f8:da:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f Validity Not Before: Apr 23 17:36:23 2025 GMT Not After : Jul 22 17:36:23 2025 GMT Subject: CN=1c70b608-907c-44e4-864f-030d3433ced3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8e:14:76:ef:1b:72:3f:2a:dc:76:64:6b:75: 0c:87:1c:1d:1d:60:d8:59:0b:24:3e:7f:4b:7f:05: 6c:37:d1:7e:de:19:48:f9:df:1f:b5:41:4e:d9:38: 2d:1f:33:c3:b1:20:30:3e:81:d2:48:ee:30:68:6a: f4:4d:78:6d:0d:24:12:22:be:dd:17:bb:c8:a9:bb: fa:b1:08:11:85:da:82:ef:a8:50:1e:5a:d9:ec:b4: e8:0f:97:7a:fd:db:7b:80:19:ee:0a:c3:b2:b7:c4: f2:95:ac:24:d6:13:28:0c:dc:54:bd:a1:cd:8c:8b: 2f:20:72:41:5d:82:db:07:35:84:b5:8d:89:6a:9a: f8:07:54:a2:fa:3a:62:14:ae:6a:96:ce:7d:ac:3f: d2:ff:24:06:27:b0:57:54:d1:f0:9a:e7:97:f2:77: 14:65:4b:e4:02:c2:44:aa:ae:7b:99:b6:f6:7f:e2: c6:3d:df:3f:97:57:19:b7:28:09:3f:7e:0c:74:1a: ab:0b:16:76:90:bc:4a:c4:cc:16:de:b8:01:2c:fa: cd:6c:8c:77:dd:09:fc:39:c6:37:f1:05:f9:9e:23: 4a:14:e6:d2:f7:cb:4a:38:f7:f5:8f:6c:58:ff:8a: 2e:ee:dd:ed:3e:90:42:a9:89:b7:56:6b:27:62:88: f7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:41:70:A4:5F:2A:22:94:68:80:69:E9:46:C3:85:05:00:40:18:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f/ac3adda7-f4b4-3426-9ef8-71402c16e054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f.crl X509v3 Authority Key Identifier: keyid:DA:9F:76:A1:41:47:B4:8E:C4:DF:AD:A4:EB:0C:4C:EF:7B:D4:F7:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f.cer sbgp-ipAddrBlock: critical IPv4: 66.6.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:18:d3:bf:9e:de:06:18:9b:2d:e4:b2:52:da:67:77:1a:7a: 61:f5:f1:19:34:b9:84:a2:c4:f9:84:46:90:08:1c:40:3e:bb: f3:ab:81:13:0c:51:22:7f:b3:6b:1c:86:49:34:b0:89:fe:0a: 23:d5:93:10:54:81:91:fb:66:ea:c3:a4:89:73:31:ca:43:bb: 75:1b:0f:d8:40:66:cb:cf:12:49:16:78:7a:d5:51:66:ab:d2: 0a:07:b1:67:13:62:b5:07:89:1e:4f:32:ef:41:44:c6:08:6d: f3:bf:8e:09:a9:ab:e7:f2:59:c7:be:28:45:cd:c8:1f:5b:42: 77:dd:0d:24:cd:0c:80:d4:34:f3:d5:c7:cd:ea:13:22:85:f3: 31:1e:0f:82:93:25:98:94:b6:e4:09:91:f8:4a:cd:f3:71:70: 9e:b1:7e:bc:c0:e9:39:74:e3:d6:c2:b3:50:62:59:ed:4d:e3: da:ac:db:71:ce:71:58:b6:8b:ee:e3:3e:4d:ee:55:b5:74:f4: 84:12:5d:cf:59:42:22:99:da:c4:8b:6b:ab:97:c8:ef:e9:06: 8d:1b:3d:c8:4b:a2:79:d8:4e:ba:d8:85:ed:8d:7d:eb:b3:9c: 14:52:75:b7:42:2f:0a:2c:89:52:52:fd:d4:32:54:23:99:95: 12:b4:ec:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfrTkS+j0H2M742mgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM2Y2ExZWUtOWFkMC00N2NlLTljYWYtNGY5NzMxZmZj ODZmMB4XDTI1MDQyMzE3MzYyM1oXDTI1MDcyMjE3MzYyM1owLzEtMCsGA1UEAxMk MWM3MGI2MDgtOTA3Yy00NGU0LTg2NGYtMDMwZDM0MzNjZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk44Udu8bcj8q3HZka3UMhxwdHWDYWQskPn9L fwVsN9F+3hlI+d8ftUFO2TgtHzPDsSAwPoHSSO4waGr0TXhtDSQSIr7dF7vIqbv6 sQgRhdqC76hQHlrZ7LToD5d6/dt7gBnuCsOyt8Tylawk1hMoDNxUvaHNjIsvIHJB XYLbBzWEtY2Japr4B1Si+jpiFK5qls59rD/S/yQGJ7BXVNHwmueX8ncUZUvkAsJE qq57mbb2f+LGPd8/l1cZtygJP34MdBqrCxZ2kLxKxMwW3rgBLPrNbIx33Qn8OcY3 8QX5niNKFObS98tKOPf1j2xY/4ou7t3tPpBCqYm3VmsnYoj3zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBBcKRfKiKUaIBp6UbDhQUAQBjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82YzZj YTFlZS05YWQwLTQ3Y2UtOWNhZi00Zjk3MzFmZmM4NmYvYWMzYWRkYTctZjRiNC0z NDI2LTllZjgtNzE0MDJjMTZlMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmM2Y2ExZWUtOWFkMC00N2NlLTlj YWYtNGY5NzMxZmZjODZmLzZjNmNhMWVlLTlhZDAtNDdjZS05Y2FmLTRmOTczMWZm Yzg2Zi5jcmwwHwYDVR0jBBgwFoAU2p92oUFHtI7E362k6wxM73vU9wUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82YzZjYTFlZS05YWQwLTQ3Y2UtOWNhZi00Zjk3 MzFmZmM4NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQgawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMY07+e3gYYmy3kslLaZ3caemH18Rk0uYSixPmERpAIHEA+u/OrgRMM USJ/s2schkk0sIn+CiPVkxBUgZH7ZurDpIlzMcpDu3UbD9hAZsvPEkkWeHrVUWar 0goHsWcTYrUHiR5PMu9BRMYIbfO/jgmpq+fyWce+KEXNyB9bQnfdDSTNDIDUNPPV x83qEyKF8zEeD4KTJZiUtuQJkfhKzfNxcJ6xfrzA6Tl049bCs1BiWe1N49qs23HO cVi2i+7jPk3uVbV09IQSXc9ZQiKZ2sSLa6uXyO/pBo0bPchLonnYTrrYhe2Nfeuz nBRSdbdCLwosiVJS/dQyVCOZlRK07DI= -----END CERTIFICATE-----Generated at Tue Apr 29 07:10:06 2025 by rpki-client