$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/a48abf35-c2cf-3f99-901f-4c22d9a1f796.roa File: a48abf35-c2cf-3f99-901f-4c22d9a1f796.roa (raw, json) Hash identifier: 6alDQ9FR/8c/Mxwmux2x1YasTw2SxGMDdvXJFvAmWRE= Subject key identifier: 64:4C:6C:B1:4B:4A:11:A0:C5:A9:4F:8B:56:E2:94:8F:15:F2:3B:0D Certificate issuer: /CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b Certificate serial: 010D0C9F43285848FD56BFDD3E81E78C478E2080 Authority key identifier: A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/a48abf35-c2cf-3f99-901f-4c22d9a1f796.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 12175 IP address blocks: 66.243.232.0/21 maxlen: 24 66.243.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:bf:dd:3e:81:e7:8c:47:8e:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=93c8d658-9dc8-42a5-a08b-af64c01985d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:97:2e:43:bc:4e:42:53:a7:7a:f3:e5:35:a3: d1:10:67:64:86:e8:3b:75:c4:a5:39:06:84:25:5d: b1:87:38:ba:07:37:d7:68:25:28:11:d5:6d:84:6d: a5:72:23:b0:e0:22:18:fb:76:66:91:c1:af:67:cd: 3c:13:b0:81:e3:eb:bf:4f:ba:24:75:23:5c:a1:e1: 10:fa:36:4b:6c:50:4c:ad:e6:73:88:33:dc:63:19: 7e:fb:ab:ad:69:08:2d:4f:8e:98:05:f9:b3:1a:d5: da:49:01:9f:60:b5:4c:45:fa:8c:a7:eb:32:05:4e: b6:65:ba:3d:3d:80:ec:84:c5:85:99:cc:05:75:f8: e9:04:60:fa:c9:bf:86:7c:da:46:89:00:e8:dc:fc: 04:75:d2:d9:51:5a:e0:42:1b:41:a8:f2:fa:05:be: 68:41:3d:9b:34:86:5d:a2:a6:01:ea:80:82:70:6d: 8b:f3:48:35:6e:00:da:bb:6e:20:87:7c:97:d3:3b: 80:b2:9d:53:0a:a8:14:0c:cb:9f:c6:bd:a4:6f:a2: f7:d8:eb:65:8b:f0:56:76:9e:23:93:c3:09:19:58: 46:cb:8a:02:6a:97:d0:96:92:5f:d2:a2:e7:c7:7f: 94:6d:33:84:32:5b:25:7d:a9:b1:cb:e5:06:4c:eb: 38:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4C:6C:B1:4B:4A:11:A0:C5:A9:4F:8B:56:E2:94:8F:15:F2:3B:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/a48abf35-c2cf-3f99-901f-4c22d9a1f796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl X509v3 Authority Key Identifier: keyid:A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer sbgp-ipAddrBlock: critical IPv4: 66.243.232.0-66.243.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:29:7d:a3:42:46:bd:78:0b:1f:38:94:94:d1:67:9a:fc:97: 48:43:0e:e9:f3:22:ee:00:41:33:93:b7:49:b2:6b:d0:26:fc: ee:e9:ee:f1:5f:b3:d6:6a:83:2e:e4:9f:c5:86:ff:f7:e4:55: ab:cf:ac:7d:ae:4c:30:c2:94:5b:96:e2:1d:e3:56:b4:d3:c6: 55:f4:8f:63:8c:4a:8d:e9:38:2a:f9:ae:29:b3:ac:f4:73:72: 03:d0:b5:87:e7:5a:f7:83:09:11:59:3a:b9:02:7d:6a:1c:7f: d3:3b:68:84:94:a0:f6:ee:0c:23:83:39:db:c0:24:fe:70:dd: 7b:6a:bc:40:3f:2f:9b:81:55:7c:78:80:ee:54:49:72:65:b7: 1c:b0:3b:3b:96:08:a7:fa:55:03:b3:5a:48:70:e9:50:fb:e0: 03:96:9b:de:68:4a:cb:2a:5a:7a:54:23:5c:d0:af:34:3c:0e: ee:e3:af:9b:4c:a3:63:e8:6b:3d:63:45:af:21:09:fb:51:2a: 17:35:e5:65:09:ac:76:92:64:ea:11:84:3b:55:23:03:29:42: 89:6c:43:96:a8:28:8d:b6:21:24:d2:7f:e8:62:51:84:e9:83: 14:e1:4f:13:a6:7c:7f:a7:d6:48:7e:2c:98:44:e9:0d:23:8d: 78:36:cb:ce -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEj9Vr/dPoHnjEeOIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDc5NWI3YjktZjJkYS00NGZhLWIxODEtZDc0YTU3ZjY0 ZTFiMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk OTNjOGQ2NTgtOWRjOC00MmE1LWEwOGItYWY2NGMwMTk4NWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5cuQ7xOQlOnevPlNaPREGdkhug7dcSlOQaE JV2xhzi6BzfXaCUoEdVthG2lciOw4CIY+3ZmkcGvZ808E7CB4+u/T7okdSNcoeEQ +jZLbFBMreZziDPcYxl++6utaQgtT46YBfmzGtXaSQGfYLVMRfqMp+syBU62Zbo9 PYDshMWFmcwFdfjpBGD6yb+GfNpGiQDo3PwEddLZUVrgQhtBqPL6Bb5oQT2bNIZd oqYB6oCCcG2L80g1bgDau24gh3yX0zuAsp1TCqgUDMufxr2kb6L32Otli/BWdp4j k8MJGVhGy4oCapfQlpJf0qLnx3+UbTOEMlslfamxy+UGTOs4/wIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFGRMbLFLShGgxalPi1bilI8V8jsNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNzk1 YjdiOS1mMmRhLTQ0ZmEtYjE4MS1kNzRhNTdmNjRlMWIvYTQ4YWJmMzUtYzJjZi0z Zjk5LTkwMWYtNGMyMmQ5YTFmNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDc5NWI3YjktZjJkYS00NGZhLWIx ODEtZDc0YTU3ZjY0ZTFiLzA3OTViN2I5LWYyZGEtNDRmYS1iMTgxLWQ3NGE1N2Y2 NGUxYi5jcmwwHwYDVR0jBBgwFoAUo/sdWc0v2+ROWIpYu25Nbyd2SgMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNzk1YjdiOS1mMmRhLTQ0ZmEtYjE4MS1kNzRh NTdmNjRlMWIuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBANC8+gD AwJC8DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQADKX2jQka9eAsfOJSU0Wea/JdIQw7p8yLuAEEzk7dJsmvQ Jvzu6e7xX7PWaoMu5J/Fhv/35FWrz6x9rkwwwpRbluId41a008ZV9I9jjEqN6Tgq +a4ps6z0c3ID0LWH51r3gwkRWTq5An1qHH/TO2iElKD27gwjgznbwCT+cN17arxA Py+bgVV8eIDuVElyZbccsDs7lgin+lUDs1pIcOlQ++ADlpveaErLKlp6VCNc0K80 PA7u46+bTKNj6Gs9Y0WvIQn7USoXNeVlCax2kmTqEYQ7VSMDKUKJbEOWqCiNtiEk 0n/oYlGE6YMU4U8Tpnx/p9ZIfiyYROkNI414NsvO -----END CERTIFICATE-----Generated at Sat Apr 12 14:50:46 2025 by rpki-client