$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/aa3453a3-370d-3411-bd8b-7c7173848656.roa File: aa3453a3-370d-3411-bd8b-7c7173848656.roa (raw, json) Hash identifier: CUrFVohW2dVJcnmjIPX8x8BtexFf93zkzNr7eAq7sxs= Subject key identifier: 42:A1:35:DA:46:94:45:8A:3E:77:EF:09:1A:78:4A:D7:79:0D:EA:5F Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Certificate serial: 010D0C9F432858499DBF2C004F74557B9832F398 Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/aa3453a3-370d-3411-bd8b-7c7173848656.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16509 IP address blocks: 66.197.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2c:00:4f:74:55:7b:98:32:f3:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=13895099-08de-4906-8766-244dd83b7701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:63:76:f4:d4:7d:b8:66:d3:e1:60:dc:37:61: 3b:26:31:20:ca:b9:a1:06:ec:09:2e:f6:ad:ca:2b: ea:d6:cd:b0:88:fe:40:c9:4c:c7:ec:59:af:db:35: 85:fe:a7:37:16:01:c9:fc:75:0e:80:ff:99:b0:24: b2:d1:25:e9:df:d0:50:5d:39:bd:59:e3:8a:c1:52: e2:e2:b8:27:78:7b:24:a5:7f:6d:26:75:06:96:8f: e9:64:d9:01:2e:f5:87:3b:93:42:3e:9b:e3:82:30: b4:2d:32:93:c1:81:88:f5:bb:fd:44:b7:f7:53:21: c7:29:b3:e2:2a:67:37:51:36:84:67:5d:53:6f:69: 8a:3c:6a:d6:8c:a2:32:ff:16:a0:35:8d:91:fc:be: 20:a1:e9:1c:78:05:32:f3:c7:ef:68:1f:e0:82:46: a9:33:e9:b5:66:c1:c0:5b:95:58:11:e0:3c:94:f1: 88:3e:ad:66:22:97:d4:05:28:d0:5e:59:73:ee:ad: a3:74:82:f0:c9:66:e7:18:3e:47:30:80:73:ed:2d: c8:79:fe:05:5d:24:2e:8f:1e:2e:81:1c:7d:02:ab: c4:3f:9c:82:07:5b:6c:d8:93:85:ae:ba:e5:1d:29: 93:4c:f0:69:1e:45:9c:54:64:e7:44:2e:0d:1e:d0: ad:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A1:35:DA:46:94:45:8A:3E:77:EF:09:1A:78:4A:D7:79:0D:EA:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/aa3453a3-370d-3411-bd8b-7c7173848656.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl X509v3 Authority Key Identifier: keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer sbgp-ipAddrBlock: critical IPv4: 66.197.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:08:c4:fc:e0:3d:26:a9:e6:3f:e7:f9:36:cd:54:ef:d8:0c: dc:7c:ec:3e:7f:b7:8d:c5:c3:a3:8b:a6:2d:cd:0b:e4:ea:d4: 0c:00:62:1b:2a:5d:3d:0f:33:67:c1:bf:4b:f0:1e:37:e0:be: 81:b0:9d:e8:b4:29:7d:b6:e5:08:88:02:c0:f8:9e:30:1f:ba: 18:7e:85:8b:33:bc:e3:ab:ed:67:9b:9b:bd:17:7e:21:03:84: e1:1d:89:2a:7e:dc:ce:ac:db:89:f7:86:e6:ff:8e:2a:67:39: a0:63:9d:e7:a7:97:2a:53:54:2b:88:55:81:24:74:8b:d7:ed: 0e:3b:b8:9a:60:6f:03:e0:54:a6:7d:4c:80:9f:55:aa:9a:0c: 84:45:be:87:52:60:a6:01:46:06:b7:75:3e:a3:f3:bc:0b:2f: 2d:04:5c:64:d3:6d:f5:86:98:fa:57:dd:e6:31:b3:3f:7a:eb: 00:ba:06:90:a2:30:f1:8b:62:b0:93:ac:d4:dd:df:b4:90:5b: 72:28:7d:94:5f:8f:8f:3e:95:6f:fb:f5:b8:86:68:25:d3:2a: a1:f2:df:00:5f:b4:f8:d0:fe:e8:71:48:1d:01:b8:91:e1:14: fa:0c:1d:8a:61:e3:8b:40:9d:d3:18:0f:54:2e:89:0a:b9:73: ad:a0:73:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvywAT3RVe5gy85gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl NTdjMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MTM4OTUwOTktMDhkZS00OTA2LTg3NjYtMjQ0ZGQ4M2I3NzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2N29NR9uGbT4WDcN2E7JjEgyrmhBuwJLvat yivq1s2wiP5AyUzH7Fmv2zWF/qc3FgHJ/HUOgP+ZsCSy0SXp39BQXTm9WeOKwVLi 4rgneHskpX9tJnUGlo/pZNkBLvWHO5NCPpvjgjC0LTKTwYGI9bv9RLf3UyHHKbPi Kmc3UTaEZ11Tb2mKPGrWjKIy/xagNY2R/L4goekceAUy88fvaB/ggkapM+m1ZsHA W5VYEeA8lPGIPq1mIpfUBSjQXllz7q2jdILwyWbnGD5HMIBz7S3Ief4FXSQujx4u gRx9AqvEP5yCB1ts2JOFrrrlHSmTTPBpHkWcVGTnRC4NHtCt2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKhNdpGlEWKPnfvCRp4Std5DepfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2 NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvYWEzNDUzYTMtMzcwZC0z NDExLWJkOGItN2M3MTczODQ4NjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2 ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2 NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQsWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgIxPzgPSap5j/n+TbNVO/YDNx87D5/t43Fw6OLpi3NC+Tq1AwAYhsq XT0PM2fBv0vwHjfgvoGwnei0KX225QiIAsD4njAfuhh+hYszvOOr7Webm70XfiED hOEdiSp+3M6s24n3hub/jipnOaBjneenlypTVCuIVYEkdIvX7Q47uJpgbwPgVKZ9 TICfVaqaDIRFvodSYKYBRga3dT6j87wLLy0EXGTTbfWGmPpX3eYxsz966wC6BpCi MPGLYrCTrNTd37SQW3IofZRfj48+lW/79biGaCXTKqHy3wBftPjQ/uhxSB0BuJHh FPoMHYph44tAndMYD1QuiQq5c62gc+M= -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:43 2025 by rpki-client