$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/0dbbd700-1bef-33bd-94e5-b95935ab65e1.roa File: 0dbbd700-1bef-33bd-94e5-b95935ab65e1.roa (raw, json) Hash identifier: 2HduTNbA1Au1x3ImROYJOQyF4NiKb4csm/6CY8IsW74= Subject key identifier: 1E:CF:13:8D:61:4D:85:1C:EE:66:9F:03:C2:50:8A:07:11:92:8D:55 Certificate issuer: /CN=5f0444bf-8f35-4754-9121-fb0e0baca58d Certificate serial: 010D0C9F43285848E59BC4C2C848444A8C1BB280 Authority key identifier: 46:45:6E:EB:E8:2D:43:55:0B:C2:E8:8E:14:B7:F9:BB:7D:24:FD:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/0dbbd700-1bef-33bd-94e5-b95935ab65e1.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16509 IP address blocks: 66.232.20.0/23 maxlen: 23 206.166.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/5f0444bf-8f35-4754-9121-fb0e0baca58d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/5f0444bf-8f35-4754-9121-fb0e0baca58d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c4:c2:c8:48:44:4a:8c:1b:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0444bf-8f35-4754-9121-fb0e0baca58d Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=6523fb7b-df0b-422a-926f-0bedb880da40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:38:49:7d:ea:a7:55:0c:2d:94:43:20:7a:5e: 83:c2:29:c6:1b:a0:b6:55:b6:31:18:8c:de:72:f8: df:30:84:9b:87:50:0d:84:c5:1f:47:1c:0e:7f:a5: b2:54:68:2d:c0:02:74:b0:75:c5:24:5d:11:2d:e2: e4:5f:f3:17:9a:e7:1d:81:95:a9:71:56:b4:db:64: a6:71:9b:0f:ea:c8:77:08:17:ef:44:ad:98:54:83: e5:73:25:99:4c:b6:e3:1f:5e:ee:99:f5:0c:30:e0: 5a:7e:02:c2:c1:20:f0:36:95:61:dc:9d:7a:4f:d5: ba:d5:d7:14:49:6f:84:f6:a5:38:49:08:e0:e5:96: 65:54:93:83:62:b9:e5:d1:2a:7a:77:bb:7a:64:b7: 69:ba:81:79:03:1f:0d:2d:e0:c5:cb:9d:4b:6c:53: 69:6a:3f:f9:63:b8:7f:b4:ae:d0:ed:d5:3d:32:4b: f0:43:c8:d7:76:6b:1d:4e:97:5d:49:83:69:61:41: 5e:2b:3c:e3:0f:c8:a2:17:aa:82:5b:fe:2b:52:66: 74:27:e0:b3:8a:82:ba:77:0e:d1:b2:d6:53:ce:38: 97:62:05:8c:74:98:2e:44:09:ae:5e:df:c9:05:c2: 28:26:f4:87:7f:d2:2e:ad:68:58:75:5b:11:3e:93: ec:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CF:13:8D:61:4D:85:1C:EE:66:9F:03:C2:50:8A:07:11:92:8D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/0dbbd700-1bef-33bd-94e5-b95935ab65e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d/5f0444bf-8f35-4754-9121-fb0e0baca58d.crl X509v3 Authority Key Identifier: keyid:46:45:6E:EB:E8:2D:43:55:0B:C2:E8:8E:14:B7:F9:BB:7D:24:FD:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f0444bf-8f35-4754-9121-fb0e0baca58d.cer sbgp-ipAddrBlock: critical IPv4: 66.232.20.0/23 206.166.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:76:9b:fc:ea:3c:eb:60:91:4f:3a:65:ce:57:06:19:e3:33: 77:66:48:b8:de:11:9c:cf:bb:f8:89:b8:41:0d:ee:10:9e:00: 64:2e:55:1a:6e:b9:dc:4b:a2:12:9f:ca:60:fd:2c:2c:f0:5c: 33:2d:02:e8:f9:ac:16:1e:61:e1:3c:a6:9d:39:b4:9e:86:0d: 7f:5f:57:0f:ce:72:3e:3d:04:69:43:11:d2:5b:d4:82:d5:53: 5d:9f:3f:e2:8c:95:c3:43:77:ea:09:2d:eb:2e:29:b4:5e:e0: 17:b3:1f:91:67:7e:a1:53:c4:23:62:02:41:3a:f6:ea:ef:a5: 55:0f:be:5b:74:f0:f4:97:bb:2a:7d:75:97:69:cb:5e:85:47: 66:8d:56:a9:de:02:23:9c:36:ab:9d:d2:5c:86:fe:8c:6b:f5: 32:21:40:a5:39:cd:96:cd:6c:89:df:7a:54:ab:cd:ab:02:5f: a4:fc:99:22:f3:08:f0:36:f2:6b:66:c9:39:00:87:cd:fe:95: 2d:50:fd:26:85:c5:17:ae:3f:39:b6:4f:57:e5:2a:9d:85:34: 3e:20:76:e7:c5:a8:f3:f2:57:6a:17:9e:72:23:09:63:6f:7f: 1f:c2:49:ef:e7:fa:05:ee:9c:fb:02:6b:45:79:14:54:00:6a: 32:c8:0b:0c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjlm8TCyEhESowbsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYwNDQ0YmYtOGYzNS00NzU0LTkxMjEtZmIwZTBiYWNh NThkMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NjUyM2ZiN2ItZGYwYi00MjJhLTkyNmYtMGJlZGI4ODBkYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlThJfeqnVQwtlEMgel6DwinGG6C2VbYxGIze cvjfMISbh1ANhMUfRxwOf6WyVGgtwAJ0sHXFJF0RLeLkX/MXmucdgZWpcVa022Sm cZsP6sh3CBfvRK2YVIPlcyWZTLbjH17umfUMMOBafgLCwSDwNpVh3J16T9W61dcU SW+E9qU4SQjg5ZZlVJODYrnl0Sp6d7t6ZLdpuoF5Ax8NLeDFy51LbFNpaj/5Y7h/ tK7Q7dU9MkvwQ8jXdmsdTpddSYNpYUFeKzzjD8iiF6qCW/4rUmZ0J+CzioK6dw7R stZTzjiXYgWMdJguRAmuXt/JBcIoJvSHf9IurWhYdVsRPpPsEwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB7PE41hTYUc7mafA8JQigcRko1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZjA0 NDRiZi04ZjM1LTQ3NTQtOTEyMS1mYjBlMGJhY2E1OGQvMGRiYmQ3MDAtMWJlZi0z M2JkLTk0ZTUtYjk1OTM1YWI2NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWYwNDQ0YmYtOGYzNS00NzU0LTkx MjEtZmIwZTBiYWNhNThkLzVmMDQ0NGJmLThmMzUtNDc1NC05MTIxLWZiMGUwYmFj YTU4ZC5jcmwwHwYDVR0jBBgwFoAURkVu6+gtQ1ULwuiOFLf5u30k/YUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZjA0NDRiZi04ZjM1LTQ3NTQtOTEyMS1mYjBl MGJhY2E1OGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBQugUAwQB zqb4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKF2m/zqPOtgkU86Zc5XBhnjM3dmSLjeEZzPu/iJuEEN7hCe AGQuVRpuudxLohKfymD9LCzwXDMtAuj5rBYeYeE8pp05tJ6GDX9fVw/Ocj49BGlD EdJb1ILVU12fP+KMlcNDd+oJLesuKbRe4BezH5FnfqFTxCNiAkE69urvpVUPvlt0 8PSXuyp9dZdpy16FR2aNVqneAiOcNqud0lyG/oxr9TIhQKU5zZbNbInfelSrzasC X6T8mSLzCPA28mtmyTkAh83+lS1Q/SaFxReuPzm2T1flKp2FND4gdufFqPPyV2oX nnIjCWNvfx/CSe/n+gXunPsCa0V5FFQAajLICww= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:46 2025 by rpki-client