$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7d7dc10a-737a-3507-8608-457a37bc28a2.roa File: 7d7dc10a-737a-3507-8608-457a37bc28a2.roa (raw, json) Hash identifier: Hz5+4AUI77//fw+DkKgLqgWUhUvRKoDAXMbt4RPIvRU= Subject key identifier: 2F:ED:13:56:1B:E8:49:EC:B0:89:98:FD:35:1E:7D:9B:0C:BD:30:A7 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584988CF291095C6CF070B676BE0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7d7dc10a-737a-3507-8608-457a37bc28a2.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 23525 IP address blocks: 66.152.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:29:10:95:c6:cf:07:0b:67:6b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=1f3c22d8-e629-4c3d-a1b2-455684c9505a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:06:0b:42:ff:90:33:ea:f4:a1:5c:6f:97:9e: 84:41:ae:cd:1d:f2:f0:9c:a5:8e:79:05:e9:92:f0: 06:2d:26:3e:c0:ed:81:dc:db:c6:7b:0a:ba:82:90: bc:5c:46:ad:c9:57:c3:19:3c:e7:6c:a3:e4:f6:02: 76:40:a6:82:53:c3:7f:5a:8e:1e:c6:2b:39:6c:7a: 09:1b:28:ca:7e:bd:9f:be:d7:08:53:0e:9a:a9:3c: 6a:33:53:ed:29:be:6c:ad:81:71:eb:0e:17:fc:fc: f8:f6:2b:dd:0e:72:d5:cd:6f:38:7f:4f:d9:f0:a1: b1:93:25:a7:ff:b9:66:6e:f8:66:5e:a7:20:0f:79: 23:51:75:e7:4b:fb:06:fe:96:7d:16:f9:42:a0:b8: d8:58:2a:91:ae:cd:4f:bc:f2:c6:43:1f:0b:e6:45: 1f:01:87:98:6c:fb:45:61:04:f6:a9:57:8d:91:ef: 94:39:1d:0b:96:99:21:b8:22:b3:5f:d7:d8:43:ca: 95:1e:ef:c6:8d:17:ca:a6:3d:04:37:83:13:6d:17: 2f:7a:42:92:6b:e7:fd:b7:b2:fb:fd:ae:bd:7f:d2: 3d:52:03:69:ba:39:89:49:05:2c:b5:e3:35:c6:6e: 9f:90:85:96:9c:06:d3:d6:de:e4:23:09:ec:51:9f: e4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:ED:13:56:1B:E8:49:EC:B0:89:98:FD:35:1E:7D:9B:0C:BD:30:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7d7dc10a-737a-3507-8608-457a37bc28a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.152.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:1a:6a:b5:6f:93:75:5b:c2:c8:8f:2b:1b:95:26:ec:b4:0d: 1b:73:61:75:eb:fa:28:bd:b5:68:6f:ed:7e:ca:df:2e:56:2b: 73:05:0c:07:de:31:59:f1:7b:42:ab:ae:6c:8c:b7:23:1c:35: 64:17:98:03:24:a4:88:b5:02:34:d8:6a:eb:24:79:83:3e:1d: 2c:db:ca:1b:54:0f:f2:ac:8e:d8:56:a2:24:35:96:a8:3a:f7: da:38:cd:5d:fb:dd:46:db:e7:24:ba:a7:17:b5:5c:44:9e:1e: 04:c6:56:92:5e:d9:8b:12:89:da:8c:5e:48:68:23:4d:2b:7b: b2:08:b9:79:a5:b3:6b:9b:22:68:31:13:66:f3:df:9f:ed:41: b0:54:6c:38:17:32:40:3d:37:8b:cc:75:09:26:0e:6d:32:72: 04:a9:fe:47:82:a3:fb:14:40:54:a4:b0:58:18:7f:c5:eb:d6: 90:4f:0b:a1:69:b2:46:50:a9:d9:49:79:b1:1e:7a:29:14:55: 0e:a4:1b:a4:cf:e8:09:04:01:3a:97:87:2e:19:46:f7:8a:e4: aa:4a:c8:5a:a8:28:36:f7:bb:13:aa:3a:dd:c5:da:91:78:eb: 61:00:36:da:05:31:0b:2c:a0:ad:63:a5:ea:c6:02:d6:e8:c1: 15:29:0e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzykQlcbPBwtna+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MWYzYzIyZDgtZTYyOS00YzNkLWExYjItNDU1Njg0Yzk1MDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAYLQv+QM+r0oVxvl56EQa7NHfLwnKWOeQXp kvAGLSY+wO2B3NvGewq6gpC8XEatyVfDGTznbKPk9gJ2QKaCU8N/Wo4exis5bHoJ GyjKfr2fvtcIUw6aqTxqM1PtKb5srYFx6w4X/Pz49ivdDnLVzW84f0/Z8KGxkyWn /7lmbvhmXqcgD3kjUXXnS/sG/pZ9FvlCoLjYWCqRrs1PvPLGQx8L5kUfAYeYbPtF YQT2qVeNke+UOR0LlpkhuCKzX9fYQ8qVHu/GjRfKpj0EN4MTbRcvekKSa+f9t7L7 /a69f9I9UgNpujmJSQUsteM1xm6fkIWWnAbT1t7kIwnsUZ/kvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/tE1Yb6EnssImY/TUefZsMvTCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvN2Q3ZGMxMGEtNzM3YS0z NTA3LTg2MDgtNDU3YTM3YmMyOGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQph+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAaarVvk3VbwsiPKxuVJuy0DRtzYXXr+ii9tWhv7X7K3y5WK3MFDAfe MVnxe0KrrmyMtyMcNWQXmAMkpIi1AjTYauskeYM+HSzbyhtUD/KsjthWoiQ1lqg6 99o4zV373Ubb5yS6pxe1XESeHgTGVpJe2YsSidqMXkhoI00re7IIuXmls2ubImgx E2bz35/tQbBUbDgXMkA9N4vMdQkmDm0ycgSp/keCo/sUQFSksFgYf8Xr1pBPC6Fp skZQqdlJebEeeikUVQ6kG6TP6AkEATqXhy4ZRveK5KpKyFqoKDb3uxOqOt3F2pF4 62EANtoFMQssoK1jperGAtbowRUpDiQ= -----END CERTIFICATE-----Generated at Sun May 11 04:10:32 2025 by rpki-client