$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa File: 4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa (raw, json) Hash identifier: la1U+DIpeVYiJAAZO+KWj/swnqTE1saJs8NaPLnFfag= Subject key identifier: 63:20:B8:43:A7:F0:E7:89:4A:7F:66:38:07:58:6C:F2:66:F7:FD:C4 Certificate issuer: /CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e Certificate serial: 010D0C9F4328584827C544D2373B34A1ED4ADD00 Authority key identifier: B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 46719 IP address blocks: 140.106.208.0/20 maxlen: 24 199.167.132.0/22 maxlen: 24 199.188.240.0/22 maxlen: 24 204.154.240.0/21 maxlen: 24 206.190.228.0/22 maxlen: 24 216.213.112.0/20 maxlen: 24 2600:d000::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:44:d2:37:3b:34:a1:ed:4a:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=f507470e-6474-45d5-8f9f-878562ec7489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:99:d4:e6:18:b9:e4:dc:19:fc:9d:14:d3:4d: 2a:b7:26:68:cb:64:42:2b:cc:95:ba:d0:40:f9:9c: 44:a9:9c:d7:7a:a5:ce:08:09:94:27:52:22:f1:e3: 0b:17:45:aa:7d:73:cf:52:a3:e8:4b:47:f4:b4:28: 0b:1a:4e:46:0b:4a:0a:fc:07:f7:eb:9c:16:ea:89: 3e:18:57:7a:3f:7d:42:e4:08:c7:e5:a8:30:9b:07: e1:9f:4b:57:ec:4a:80:fa:67:84:bf:d4:35:1e:9c: 98:63:48:6a:a9:94:c8:a7:db:b0:82:bc:28:e0:39: 2c:d2:3a:fb:db:10:41:47:b0:de:b2:2b:5f:f4:08: d4:0d:8e:09:73:66:d5:e7:d5:bf:0f:79:ba:4a:ff: 1b:32:c3:af:38:f4:a3:e7:1e:b5:09:0c:a2:b4:53: a5:54:b3:82:d2:3d:86:44:5c:db:4e:7e:8f:9d:26: 65:e6:ba:7f:2a:31:b2:cf:d2:c5:44:fe:ec:6b:c1: 75:7b:55:2d:4a:3b:38:4e:dd:9e:47:cb:61:14:15: b7:62:18:d0:6b:c6:06:74:fc:a0:a4:3f:eb:8f:21: 9c:b5:3a:29:48:80:f9:69:e8:77:e1:95:73:44:3f: 76:51:e6:33:23:79:44:63:59:08:90:2c:30:60:41: 93:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:20:B8:43:A7:F0:E7:89:4A:7F:66:38:07:58:6C:F2:66:F7:FD:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.crl X509v3 Authority Key Identifier: keyid:B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer sbgp-ipAddrBlock: critical IPv4: 140.106.208.0/20 199.167.132.0/22 199.188.240.0/22 204.154.240.0/21 206.190.228.0/22 216.213.112.0/20 IPv6: 2600:d000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:12:72:ed:1d:43:92:eb:b1:43:24:d5:47:f2:7f:2f:d3:09: e6:4e:f4:42:2b:eb:a8:db:1f:12:68:56:a8:0a:93:b2:6a:56: 8a:57:3c:54:5c:e6:5c:5c:20:e7:c8:c9:a4:7b:61:3b:7c:0b: dd:1c:84:86:af:51:70:80:b6:6b:0b:28:30:32:56:20:75:78: 97:37:b1:ff:f3:53:9b:a8:f8:60:7e:d0:bd:a3:2e:59:a6:91: 67:80:d7:d0:e8:0b:aa:dd:54:ba:b5:f5:4b:75:14:80:37:5b: 7a:7e:90:e1:30:16:2d:7e:71:47:f3:dc:16:a5:f5:e9:57:9d: 4f:7e:8e:c9:41:19:5b:2b:a5:e5:7f:3a:45:d4:61:81:c8:16: 0a:2d:cd:7b:8e:1b:45:8d:01:44:79:40:c7:dc:b4:01:45:e1: 5b:bf:2a:be:e2:b1:b0:a2:cb:6b:d4:f6:b4:8c:8a:97:0e:9b: d1:0a:11:c9:b8:bd:4a:e0:b9:c6:33:74:c9:b9:fe:00:f7:08: 4e:2d:d9:7a:7d:59:83:92:b4:6f:ad:b8:fc:fa:b4:14:d1:96: 4f:bb:7f:fd:91:d2:5e:76:04:46:52:73:f9:05:3b:ee:06:8f: 5b:97:39:bb:75:f0:9c:71:f0:99:79:a6:cf:f8:10:6f:df:3c: ce:9e:ec:f3 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEgnxUTSNzs0oe1K3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY2YzZiNmYtMTI4Ny00ZGMwLTkwNzQtNmNlZjNjMjEx YzBlMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk ZjUwNzQ3MGUtNjQ3NC00NWQ1LThmOWYtODc4NTYyZWM3NDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJnU5hi55NwZ/J0U000qtyZoy2RCK8yVutBA +ZxEqZzXeqXOCAmUJ1Ii8eMLF0WqfXPPUqPoS0f0tCgLGk5GC0oK/Af365wW6ok+ GFd6P31C5AjH5agwmwfhn0tX7EqA+meEv9Q1HpyYY0hqqZTIp9uwgrwo4Dks0jr7 2xBBR7Desitf9AjUDY4Jc2bV59W/D3m6Sv8bMsOvOPSj5x61CQyitFOlVLOC0j2G RFzbTn6PnSZl5rp/KjGyz9LFRP7sa8F1e1UtSjs4Tt2eR8thFBW3YhjQa8YGdPyg pD/rjyGctTopSID5aeh34ZVzRD92UeYzI3lEY1kIkCwwYEGTQQIDAQABo4IDgjCC A34wHQYDVR0OBBYEFGMguEOn8OeJSn9mOAdYbPJm9/3EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wNjZj NmI2Zi0xMjg3LTRkYzAtOTA3NC02Y2VmM2MyMTFjMGUvNGY4OWQ5ZDQtZGJlOC0z ZDJmLWE1MjktYTk3N2UwZDU3MTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDY2YzZiNmYtMTI4Ny00ZGMwLTkw NzQtNmNlZjNjMjExYzBlLzA2NmM2YjZmLTEyODctNGRjMC05MDc0LTZjZWYzYzIx MWMwZS5jcmwwHwYDVR0jBBgwFoAUuJDhNK6omS7bXp+BBkdv2555WnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wNjZjNmI2Zi0xMjg3LTRkYzAtOTA3NC02Y2Vm M2MyMTFjMGUuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEjGrQAwQC x6eEAwQCx7zwAwQDzJrwAwQCzr7kAwQE2NVwMA0EAgACMAcDBQQmANAAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAF0Scu0dQ5LrsUMk1Ufyfy/TCeZO9EIr66jbHxJoVqgKk7JqVopXPFRc5lxc IOfIyaR7YTt8C90chIavUXCAtmsLKDAyViB1eJc3sf/zU5uo+GB+0L2jLlmmkWeA 19DoC6rdVLq19Ut1FIA3W3p+kOEwFi1+cUfz3Bal9elXnU9+jslBGVsrpeV/OkXU YYHIFgotzXuOG0WNAUR5QMfctAFF4Vu/Kr7isbCiy2vU9rSMipcOm9EKEcm4vUrg ucYzdMm5/gD3CE4t2Xp9WYOStG+tuPz6tBTRlk+7f/2R0l52BEZSc/kFO+4Gj1uX Obt18Jxx8Jl5ps/4EG/fPM6e7PM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:23 2025 by rpki-client