$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8a46c52b-8413-34ff-a9a0-85514b7c1c9f.roa File: 8a46c52b-8413-34ff-a9a0-85514b7c1c9f.roa (raw, json) Hash identifier: zwkB91hhuJva6NtQZ4pwNHPy+yfVtAhb8CYsp1JmEFs= Subject key identifier: CE:39:77:D8:B1:E5:A9:91:CA:34:18:F1:70:DC:D4:30:EB:49:BF:87 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584988CF30FEC92DE2F8C44F3880 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8a46c52b-8413-34ff-a9a0-85514b7c1c9f.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 13536 IP address blocks: 66.186.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:30:fe:c9:2d:e2:f8:c4:4f:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=43fff6aa-d3a7-40b0-93b4-397af08e728b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:05:5a:b7:06:32:5e:c9:b1:c6:c1:96:c2:e4: 9d:cf:4d:1a:98:e9:3c:50:fc:30:9c:2e:9e:ee:6f: 56:4c:b7:6c:9e:84:2d:13:87:bb:d1:29:61:98:cf: d6:5d:b6:c6:f3:f2:19:d3:9e:2d:19:b2:ba:74:63: b2:7a:bf:26:9d:38:62:29:9d:ce:da:5b:37:bb:10: 5e:09:d0:a1:5d:39:51:62:13:d5:a4:29:58:7d:16: 0e:72:9f:d5:b2:17:ca:39:9b:a4:af:b0:37:8c:49: 75:9a:7d:1c:bb:b9:a5:40:35:be:b5:69:b2:0c:56: 76:28:ff:a9:ec:b4:89:dd:ee:58:d1:f0:61:b5:8c: a1:eb:f8:bd:62:a5:96:39:ac:06:fb:4b:e1:d4:ee: 06:61:22:2f:ee:64:96:f7:03:8d:a6:a8:4f:a2:19: f5:0e:18:43:47:dd:99:15:46:4a:8c:2c:1b:43:f1: a7:19:e9:26:f8:33:2b:f7:24:e6:1c:b9:58:d4:58: 67:28:2a:da:92:d9:24:8b:c7:37:66:ad:67:89:a0: e6:19:d9:9a:fd:73:0b:94:d3:ed:32:b1:91:75:d1: 75:40:5d:30:e6:81:8e:67:1d:49:46:ee:b2:e9:c2: 8d:2b:57:e7:5e:ab:05:d5:6c:ee:d2:48:26:11:38: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:39:77:D8:B1:E5:A9:91:CA:34:18:F1:70:DC:D4:30:EB:49:BF:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8a46c52b-8413-34ff-a9a0-85514b7c1c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.186.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:ee:67:a6:ba:76:90:0f:7a:ea:5c:28:0c:bd:c8:f3:5a:a2: 98:0d:1d:99:26:a5:8b:50:81:10:85:4b:6f:1d:ad:15:d4:bb: 07:b1:60:57:45:08:24:c0:3e:80:57:33:f0:fa:97:9c:e6:13: 25:b7:1c:fd:87:8c:bb:95:67:e2:e0:2d:62:a2:a5:7b:52:bd: 53:97:2b:ca:28:e8:c0:99:27:df:ac:f3:30:d9:a3:78:96:52: ff:8e:a2:6b:2a:e9:b0:d9:0e:08:44:b1:5a:9c:26:bf:4e:dc: 0e:06:45:70:b5:05:04:c0:55:03:53:0d:c1:b8:7e:ec:21:29: ba:47:7c:e5:87:e3:25:5d:8c:9a:0a:4e:b9:c3:da:55:87:d1: 5b:65:c5:dc:ef:a6:58:a5:23:6d:c4:39:b7:a1:87:35:74:0e: fa:62:e1:d3:87:f5:4d:5c:52:82:2d:56:9c:2e:5b:88:76:95: d8:fc:9f:69:26:67:2f:2d:64:51:eb:66:05:c3:00:02:a2:a0: 7e:56:76:83:41:8d:a4:91:2d:b3:ae:e6:c3:91:2f:66:a8:1e: 11:54:dc:78:9c:8d:82:0c:62:c5:29:12:fa:2c:9d:92:67:7d: b7:c7:33:96:d5:02:55:b6:41:b7:4d:5c:a8:ed:3e:23:1c:85: 4f:61:54:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzD+yS3i+MRPOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NDNmZmY2YWEtZDNhNy00MGIwLTkzYjQtMzk3YWYwOGU3MjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQVatwYyXsmxxsGWwuSdz00amOk8UPwwnC6e 7m9WTLdsnoQtE4e70SlhmM/WXbbG8/IZ054tGbK6dGOyer8mnThiKZ3O2ls3uxBe CdChXTlRYhPVpClYfRYOcp/VshfKOZukr7A3jEl1mn0cu7mlQDW+tWmyDFZ2KP+p 7LSJ3e5Y0fBhtYyh6/i9YqWWOawG+0vh1O4GYSIv7mSW9wONpqhPohn1DhhDR92Z FUZKjCwbQ/GnGekm+DMr9yTmHLlY1FhnKCraktkki8c3Zq1niaDmGdma/XMLlNPt MrGRddF1QF0w5oGOZx1JRu6y6cKNK1fnXqsF1Wzu0kgmETiZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM45d9ix5amRyjQY8XDc1DDrSb+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvOGE0NmM1MmItODQxMy0z NGZmLWE5YTAtODU1MTRiN2MxYzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrqnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTuZ6a6dpAPeupcKAy9yPNaopgNHZkmpYtQgRCFS28drRXUuwexYFdF CCTAPoBXM/D6l5zmEyW3HP2HjLuVZ+LgLWKipXtSvVOXK8oo6MCZJ9+s8zDZo3iW Uv+Oomsq6bDZDghEsVqcJr9O3A4GRXC1BQTAVQNTDcG4fuwhKbpHfOWH4yVdjJoK TrnD2lWH0VtlxdzvplilI23EObehhzV0Dvpi4dOH9U1cUoItVpwuW4h2ldj8n2km Zy8tZFHrZgXDAAKioH5WdoNBjaSRLbOu5sORL2aoHhFU3HicjYIMYsUpEvosnZJn fbfHM5bVAlW2QbdNXKjtPiMchU9hVK8= -----END CERTIFICATE-----Generated at Sat May 10 04:45:46 2025 by rpki-client