$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3c60df21-7955-33f6-9955-b793787e5bf7.roa File: 3c60df21-7955-33f6-9955-b793787e5bf7.roa (raw, json) Hash identifier: tKZXqUWwuTvG6N+KR0uYv16W7VTDWGeF0UAhqZZOaAg= Subject key identifier: C2:5B:D9:6C:B9:CA:36:38:02:C4:49:A0:8B:43:C7:B6:1A:1E:A2:BF Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285848CC7B8B2B5A9FD690D0C44D00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3c60df21-7955-33f6-9955-b793787e5bf7.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 3320 IP address blocks: 198.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:8b:2b:5a:9f:d6:90:d0:c4:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=60777602-8e9e-4508-b39d-07c47f328fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f5:d4:45:ae:ac:5b:27:32:36:d6:bb:c0:9d: c5:2d:85:7a:26:02:27:00:fe:36:f1:9a:26:c9:6f: bf:9d:d5:e0:ca:e3:48:03:39:f2:2e:08:60:83:40: 29:4e:d3:cb:0c:78:62:fa:62:b0:da:b2:0c:2f:36: df:89:f5:97:25:d4:cf:bd:ff:27:c8:42:ae:8d:ea: 4c:98:38:0b:7b:9f:98:9e:0a:2e:2a:ac:2c:3b:e5: d4:97:45:7e:f0:6e:85:a7:20:05:d6:d8:cb:07:9e: e9:7c:46:d0:30:e2:16:a2:c3:6b:d5:b2:37:57:91: a5:04:05:ea:83:1d:09:24:54:4d:25:fb:f6:42:4d: f7:52:31:f4:48:a2:d3:f0:19:ef:f9:b7:78:d7:7e: 5d:d2:cc:82:18:30:a8:37:4a:eb:a9:fe:f2:80:89: 2c:47:87:c4:53:70:6d:e4:6c:0b:4d:4e:f3:15:90: 42:de:8e:2f:1a:a7:4c:fb:ce:61:87:e8:34:7b:2e: 08:01:3c:71:17:15:29:05:4c:11:c4:b4:ef:b1:09: e5:31:6e:fc:5b:c9:b3:7b:b8:aa:e8:a3:87:c8:b8: fb:24:26:f5:3e:32:59:90:51:1f:08:59:65:1d:be: f6:40:a1:03:8a:e9:01:8d:40:19:04:2c:a8:5a:c8: 76:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5B:D9:6C:B9:CA:36:38:02:C4:49:A0:8B:43:C7:B6:1A:1E:A2:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3c60df21-7955-33f6-9955-b793787e5bf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d7:64:b9:1e:80:d7:a4:3b:d1:e9:98:71:12:76:5f:92:5f: b2:d1:6b:f2:8e:96:21:16:c9:f5:ec:cc:14:21:0a:d0:01:e4: 8b:a5:76:bc:7c:17:73:db:ff:c1:c6:9d:cf:c9:b2:c5:05:dc: e8:4a:e0:95:58:e6:be:cc:2f:ad:9b:61:f2:72:59:a0:1c:3f: 15:af:b3:f2:ee:55:61:10:2c:d4:ff:0a:dd:60:e7:2d:b7:a3: 3b:6a:6b:24:e5:75:b5:b9:a4:46:b3:23:73:02:fb:3b:db:ae: 33:75:02:bb:18:e5:91:94:43:30:18:44:26:f0:cf:72:21:13: c1:d1:73:1a:f6:05:1d:34:3d:79:1a:e7:0e:4b:50:91:42:e7: c5:a8:ce:3c:12:15:2c:b5:64:bb:eb:56:2e:05:19:a3:b3:a5: c7:9f:d2:75:aa:7c:57:4f:84:c9:c4:4d:7a:97:0b:c4:ab:59: dc:d0:17:13:40:e1:a6:47:ab:30:94:b8:c9:8d:bf:26:b9:dc: 3f:9d:9b:25:fe:6d:81:84:e2:2e:2e:70:0d:e6:06:2b:33:3c: 84:ab:0e:b3:a1:c0:a6:d7:3a:26:7d:55:59:7b:46:3a:12:84: f7:a8:46:13:76:76:64:a7:f3:68:95:7e:f8:83:6b:0e:b6:b8: 49:76:11:cb -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjMe4srWp/WkNDETQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk NjA3Nzc2MDItOGU5ZS00NTA4LWIzOWQtMDdjNDdmMzI4ZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/XURa6sWycyNta7wJ3FLYV6JgInAP428Zom yW+/ndXgyuNIAznyLghgg0ApTtPLDHhi+mKw2rIMLzbfifWXJdTPvf8nyEKujepM mDgLe5+YngouKqwsO+XUl0V+8G6FpyAF1tjLB57pfEbQMOIWosNr1bI3V5GlBAXq gx0JJFRNJfv2Qk33UjH0SKLT8Bnv+bd4135d0syCGDCoN0rrqf7ygIksR4fEU3Bt 5GwLTU7zFZBC3o4vGqdM+85hh+g0ey4IATxxFxUpBUwRxLTvsQnlMW78W8mze7iq 6KOHyLj7JCb1PjJZkFEfCFllHb72QKEDiukBjUAZBCyoWsh2QQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMJb2Wy5yjY4AsRJoItDx7YaHqK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2M2MGRmMjEtNzk1NS0z M2Y2LTk5NTUtYjc5Mzc4N2U1YmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZddkuR6A16Q70emYcRJ2X5JfstFr8o6WIRbJ9ezMFCEK0AHki6V2vHwX c9v/wcadz8myxQXc6ErglVjmvswvrZth8nJZoBw/Fa+z8u5VYRAs1P8K3WDnLbej O2prJOV1tbmkRrMjcwL7O9uuM3UCuxjlkZRDMBhEJvDPciETwdFzGvYFHTQ9eRrn DktQkULnxajOPBIVLLVku+tWLgUZo7Olx5/Sdap8V0+EycRNepcLxKtZ3NAXE0Dh pkerMJS4yY2/JrncP52bJf5tgYTiLi5wDeYGKzM8hKsOs6HAptc6Jn1VWXtGOhKE 96hGE3Z2ZKfzaJV++INrDra4SXYRyw== -----END CERTIFICATE-----Generated at Fri Apr 4 17:34:09 2025 by rpki-client