$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a1e76851-7e86-30a4-9fce-1fd39b3ccf68.roa File: a1e76851-7e86-30a4-9fce-1fd39b3ccf68.roa (raw, json) Hash identifier: gampo7lXugIt6ljd7WWF8eerhnS4+a+lNmNgMlK4nmg= Subject key identifier: DD:21:43:20:05:E6:F6:2E:05:99:61:F8:85:3E:B6:64:91:FD:69:86 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858491AA6CBDA07221A8E3DFEF280 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a1e76851-7e86-30a4-9fce-1fd39b3ccf68.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 15290 IP address blocks: 66.46.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:cb:da:07:22:1a:8e:3d:fe:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=ca877d53-d1fb-405d-814a-09ce6fc7ef3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b9:e4:39:49:82:d6:f3:56:5f:cd:46:2d:a8: bf:17:c9:a1:fe:ed:3e:37:39:d9:5e:95:38:10:6f: 30:c3:0e:ec:8d:b0:6f:f1:71:e3:74:bf:5e:66:86: ea:12:e4:b9:7e:cc:e0:8a:11:a5:74:25:4e:d1:9d: 22:be:a3:12:80:ee:ae:c2:ff:7d:7b:8c:6c:16:d7: 0a:57:38:8f:e1:0e:2e:5c:39:88:dd:58:8a:91:ee: 7e:42:9e:62:88:f6:30:88:1f:fd:31:2a:0d:30:73: 58:a5:94:a1:72:b5:79:77:af:95:10:b0:b4:e4:2b: 78:31:51:a0:d4:e5:b2:59:73:98:ae:c0:d8:f3:d6: 38:54:b9:29:37:54:a9:98:62:f6:4b:78:04:32:3a: 95:96:af:70:0d:71:29:b4:d7:d1:97:ce:d9:ad:e4: 35:b0:fa:11:64:48:26:5c:1f:bd:3a:84:b9:46:f0: be:75:7b:d6:0e:3b:63:70:2e:fb:2c:a6:4c:47:a1: 5c:1b:a6:3d:bf:52:54:32:59:fa:e3:26:16:8a:f2: d2:5d:95:71:df:17:bb:e2:9c:11:7d:6f:78:9b:c8: 77:ce:eb:c6:f2:29:35:63:32:59:de:a4:27:ef:05: 03:58:c5:c8:0a:e5:c9:a7:df:97:33:dd:39:a6:ab: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:21:43:20:05:E6:F6:2E:05:99:61:F8:85:3E:B6:64:91:FD:69:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a1e76851-7e86-30a4-9fce-1fd39b3ccf68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 66.46.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ea:4e:29:d5:d4:82:50:2b:aa:cf:36:eb:db:12:f8:f4:09: 8e:d0:b2:32:ec:fc:a9:cb:49:cf:af:d5:0d:e5:74:a7:36:56: 9a:a3:9f:00:76:9a:77:e7:7a:6f:ac:54:35:e1:a6:8d:b8:8a: 11:94:36:68:df:81:c6:b4:2b:21:aa:a8:a5:f1:fd:ff:a4:6d: ec:7e:4e:bc:b5:d6:aa:4c:87:7a:9a:71:22:78:58:32:7b:76: 8c:4e:bd:d8:d0:3e:79:02:8b:90:e5:df:ae:35:c3:cb:c1:65: a6:44:c3:94:c2:3c:05:6b:5c:e7:f4:b0:c6:65:7b:ed:b6:8a: 18:16:48:d7:86:8a:ae:15:26:17:4d:79:6d:48:f2:49:f6:16: 95:18:c2:9e:26:b1:e4:c4:59:44:e3:c5:ff:df:4e:a3:cf:45: ee:d2:6d:b7:3f:a6:dd:c2:95:a7:2d:b5:3d:51:af:de:16:60: b0:ff:a0:66:c3:86:77:df:3a:28:3c:ac:c8:9b:27:ba:1a:62: 01:85:1d:8f:99:aa:4e:ef:ce:cf:31:52:ff:ad:5d:5b:33:27: dd:a2:84:54:59:38:97:18:3f:b8:94:e8:30:37:f3:43:b5:47: b7:c2:1e:95:af:89:15:53:8d:94:d5:76:36:58:94:ff:3b:cb: 9c:ec:3e:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapsvaByIajj3+8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk Y2E4NzdkNTMtZDFmYi00MDVkLTgxNGEtMDljZTZmYzdlZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7nkOUmC1vNWX81GLai/F8mh/u0+NznZXpU4 EG8www7sjbBv8XHjdL9eZobqEuS5fszgihGldCVO0Z0ivqMSgO6uwv99e4xsFtcK VziP4Q4uXDmI3ViKke5+Qp5iiPYwiB/9MSoNMHNYpZShcrV5d6+VELC05Ct4MVGg 1OWyWXOYrsDY89Y4VLkpN1SpmGL2S3gEMjqVlq9wDXEptNfRl87ZreQ1sPoRZEgm XB+9OoS5RvC+dXvWDjtjcC77LKZMR6FcG6Y9v1JUMln64yYWivLSXZVx3xe74pwR fW94m8h3zuvG8ik1YzJZ3qQn7wUDWMXICuXJp9+XM905pqsGJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0hQyAF5vYuBZlh+IU+tmSR/WmGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvYTFlNzY4NTEtN2U4Ni0z MGE0LTlmY2UtMWZkMzliM2NjZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQi4vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrqTinV1IJQK6rPNuvbEvj0CY7QsjLs/KnLSc+v1Q3ldKc2VpqjnwB2 mnfnem+sVDXhpo24ihGUNmjfgca0KyGqqKXx/f+kbex+Try11qpMh3qacSJ4WDJ7 doxOvdjQPnkCi5Dl3641w8vBZaZEw5TCPAVrXOf0sMZle+22ihgWSNeGiq4VJhdN eW1I8kn2FpUYwp4mseTEWUTjxf/fTqPPRe7Sbbc/pt3ClacttT1Rr94WYLD/oGbD hnffOig8rMibJ7oaYgGFHY+Zqk7vzs8xUv+tXVszJ92ihFRZOJcYP7iU6DA380O1 R7fCHpWviRVTjZTVdjZYlP87y5zsPsE= -----END CERTIFICATE-----Generated at Sun Apr 6 22:55:47 2025 by rpki-client