$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/a2097500-d8c0-3095-aa3a-f3e1bb56f9b4.roa File: a2097500-d8c0-3095-aa3a-f3e1bb56f9b4.roa (raw, json) Hash identifier: pBwx40wlUgbiqdNLcoKjVWsgCj4R4bx8aIjdWan2Mtw= Subject key identifier: 1A:FF:1F:FD:C2:B8:FA:08:95:1F:D7:89:C8:38:A3:13:0C:B5:B3:9F Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F43285849064ABF20A22370CAE808C360 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/a2097500-d8c0-3095-aa3a-f3e1bb56f9b4.roa Signing time: Thu 27 Feb 2025 18:59:17 +0000 ROA not before: Thu 27 Feb 2025 18:59:17 +0000 ROA not after: Wed 28 May 2025 17:59:17 +0000 asID: 32710 IP address blocks: 164.153.166.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:06:4a:bf:20:a2:23:70:ca:e8:08:c3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Feb 27 18:59:17 2025 GMT Not After : May 28 17:59:17 2025 GMT Subject: CN=dead0d4f-9fe9-45cb-9cc6-680842b33e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:c0:b6:67:ff:40:1d:98:38:61:50:06:64: 10:78:a2:cf:bc:f5:ea:1b:1d:78:fc:67:bb:fb:02: 82:3e:b8:2c:b0:3b:9d:08:b3:3d:45:65:e0:5f:08: 94:c0:60:04:a5:5e:88:0b:67:12:42:ac:17:ad:31: d2:d5:c2:23:5b:41:50:40:5d:81:52:81:ce:8c:6b: 6f:4a:b7:a6:f5:36:41:1f:75:c3:48:55:33:58:a8: 0a:66:c5:22:fd:4c:f1:25:1c:33:ef:a0:49:df:da: 98:f2:a3:75:cb:b4:93:4b:33:66:55:9e:ff:05:09: 1d:0b:6d:e0:f8:6a:d5:e7:ef:13:89:7e:44:40:f4: 4c:8c:c5:24:79:38:07:59:72:db:87:6c:47:7c:22: 65:90:80:2a:c8:91:37:06:44:82:81:96:44:f2:28: 9d:ca:16:75:fb:18:ac:ea:7e:c2:31:66:85:4f:4e: f2:89:5d:b3:d3:e2:e7:2c:08:40:29:84:45:82:02: f2:2b:7b:9a:92:0e:9d:9f:1d:42:f4:3a:5f:20:94: d8:92:fc:cd:51:6d:e4:31:dd:45:e4:08:4c:0f:41: 1a:c4:c0:4c:b3:fe:09:6b:d2:13:7d:30:b9:56:3e: b7:6f:57:e0:93:50:cc:2c:d4:18:e3:99:c8:83:70: 31:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FF:1F:FD:C2:B8:FA:08:95:1F:D7:89:C8:38:A3:13:0C:B5:B3:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/a2097500-d8c0-3095-aa3a-f3e1bb56f9b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:44:d2:be:dc:0f:f7:91:e7:62:f0:2f:85:aa:30:8e:88:e0: c4:fc:e0:21:18:46:64:b3:57:a3:47:af:2f:4f:ef:65:95:9b: a9:59:cc:72:90:16:e1:84:8b:aa:48:9d:a4:c4:aa:98:73:96: a4:bf:69:a4:02:06:24:db:a5:3e:67:50:ca:98:82:9b:b4:d6: 1a:e6:af:2f:32:a0:57:1b:fc:a9:a9:e2:99:72:6e:eb:ae:36: be:a5:12:e6:e7:65:fd:cd:28:4f:a8:02:81:0e:c7:ab:e0:8e: d7:e1:d1:db:ca:48:b2:87:50:e4:e0:fc:72:7b:9a:cb:4f:03: 64:8c:30:ae:c4:2f:15:b9:98:32:23:d5:9d:99:96:40:b2:d4: b4:62:72:39:4c:d6:ed:34:65:41:81:a4:ce:0f:4d:94:6d:8b: db:8f:e3:a3:41:06:7b:27:57:df:ee:60:3f:8b:81:ed:1e:6a: d9:ce:48:5c:7e:d2:fa:6a:4d:80:2e:8a:57:29:a0:4b:02:3a: 1e:8f:db:48:6c:f9:01:d4:8e:fc:87:c0:00:f3:84:0c:36:1b: 36:0b:99:a3:7e:c3:b5:10:f6:84:dc:ae:dc:39:c8:fe:c6:fb: d9:d1:af:94:73:11:fe:26:8e:32:5b:35:73:1d:42:75:c0:91: aa:12:98:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkGSr8goiNwyugIw2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MDIyNzE4NTkxN1oXDTI1MDUyODE3NTkxN1owLzEtMCsGA1UEAxMk ZGVhZDBkNGYtOWZlOS00NWNiLTljYzYtNjgwODQyYjMzZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArynAtmf/QB2YOGFQBmQQeKLPvPXqGx14/Ge7 +wKCPrgssDudCLM9RWXgXwiUwGAEpV6IC2cSQqwXrTHS1cIjW0FQQF2BUoHOjGtv Srem9TZBH3XDSFUzWKgKZsUi/UzxJRwz76BJ39qY8qN1y7STSzNmVZ7/BQkdC23g +GrV5+8TiX5EQPRMjMUkeTgHWXLbh2xHfCJlkIAqyJE3BkSCgZZE8iidyhZ1+xis 6n7CMWaFT07yiV2z0+LnLAhAKYRFggLyK3uakg6dnx1C9DpfIJTYkvzNUW3kMd1F 5AhMD0EaxMBMs/4Ja9ITfTC5Vj63b1fgk1DMLNQY45nIg3Ax0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBr/H/3CuPoIlR/Xicg4oxMMtbOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvYTIwOTc1MDAtZDhjMC0z MDk1LWFhM2EtZjNlMWJiNTZmOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtE0r7cD/eR52LwL4WqMI6I4MT84CEYRmSzV6NHry9P72WVm6lZzHKQ FuGEi6pInaTEqphzlqS/aaQCBiTbpT5nUMqYgpu01hrmry8yoFcb/Kmp4plybuuu Nr6lEubnZf3NKE+oAoEOx6vgjtfh0dvKSLKHUOTg/HJ7mstPA2SMMK7ELxW5mDIj 1Z2ZlkCy1LRicjlM1u00ZUGBpM4PTZRti9uP46NBBnsnV9/uYD+Lge0eatnOSFx+ 0vpqTYAuilcpoEsCOh6P20hs+QHUjvyHwADzhAw2GzYLmaN+w7UQ9oTcrtw5yP7G +9nRr5RzEf4mjjJbNXMdQnXAkaoSmFQ= -----END CERTIFICATE-----Generated at Mon Apr 28 01:56:56 2025 by rpki-client