$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa File: cfa20e25-bed2-3567-961a-5bbdbe881853.roa (raw, json) Hash identifier: u/EZcXVL+rFieIPnKpa7as+Df76jxMG9sKqIbCH14JM= Subject key identifier: B0:09:45:5A:20:FF:30:35:52:24:E4:62:03:30:C0:F2:E0:3C:37:A9 Certificate issuer: /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Certificate serial: 010D0C9F43285848CDE10F4A423B45C607112100 Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 26703 IP address blocks: 66.102.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:0f:4a:42:3b:45:c6:07:11:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=3df93c7d-f23f-4c13-b526-47f2ecac8b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:36:39:05:de:93:f3:62:75:83:5a:f0:28:02: 82:93:64:e0:ca:96:fa:b2:ba:6b:d3:f7:83:7f:ec: 75:4b:4f:0d:eb:08:52:5e:b2:1e:29:9b:1e:27:68: d8:c4:06:78:63:c7:a7:26:1b:e9:22:e8:e5:40:23: c0:01:2f:b7:86:50:01:a6:d4:e1:80:80:f0:3a:f4: 39:e5:84:9e:1f:fd:62:d1:e7:2c:3c:b2:0d:22:d5: e7:04:c5:fd:8b:28:eb:8b:37:2f:dc:5e:39:11:c9: 7f:d5:6c:14:ca:3f:30:ee:0d:5e:52:45:6c:5b:0b: a1:cd:d5:e1:8e:bd:fe:cc:c1:b2:a0:18:f6:8e:df: 35:eb:e0:5b:06:c6:99:2f:7e:05:5f:aa:0a:e5:67: 54:4e:75:4e:1c:5a:e0:84:54:9b:c2:fa:ca:d7:00: e4:38:e9:fd:be:92:f2:6c:07:0b:3d:1d:2a:97:75: c6:11:35:80:f7:a8:ce:97:ac:03:05:6f:f4:74:f1: 74:72:61:3d:39:9c:cf:8b:43:7b:11:79:22:7d:59: 18:b6:9a:4f:b0:f0:58:19:e8:95:de:02:b7:69:79: e4:c7:85:b3:7e:6f:d8:0b:73:52:6d:a5:fb:29:4e: 1a:92:e3:45:86:06:70:2f:9e:31:26:5b:6b:74:96: cd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:09:45:5A:20:FF:30:35:52:24:E4:62:03:30:C0:F2:E0:3C:37:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/cfa20e25-bed2-3567-961a-5bbdbe881853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl X509v3 Authority Key Identifier: keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer sbgp-ipAddrBlock: critical IPv4: 66.102.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c2:a9:49:47:b0:55:e0:34:5f:84:34:3c:93:39:84:e0:e7: 44:97:71:90:b4:2e:c9:d7:b9:88:d7:ef:dd:8c:22:a5:d6:e3: a7:b0:fe:71:f9:2d:2b:5d:98:90:41:30:cd:14:96:7f:aa:8d: 14:16:0d:f0:1c:70:ce:5a:f8:bb:50:72:64:48:18:56:49:d9: 08:92:4c:37:1a:54:73:3b:5b:30:68:57:2f:f3:da:a3:57:57: ce:d0:1b:dc:c2:0c:71:80:cc:a5:c0:72:52:79:e5:97:4b:b9: 39:05:3c:07:76:fa:59:ac:de:e2:e6:27:67:46:53:bf:bb:a0: 98:b9:89:01:04:6b:b4:92:18:5c:80:e0:be:9f:db:88:70:83: 55:c0:be:c9:7c:73:4e:c1:59:c8:6d:87:10:42:64:36:a2:2e: 14:eb:96:1f:f4:6e:d6:f2:dd:45:00:e1:6c:3e:3c:e9:bc:8d: d0:13:f5:00:41:a2:39:fc:75:d7:15:66:07:d6:e9:7c:48:e1: 80:ce:33:c8:38:f0:c9:c0:d3:b5:ff:c2:b5:07:38:93:44:b2: 39:af:80:4d:20:5e:98:c0:33:55:45:51:4a:62:1d:98:fc:d3: 61:7d:e0:17:7d:83:0b:28:98:14:51:3d:69:23:8a:bc:ca:07: c4:61:d3:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4Q9KQjtFxgcRIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ2ODNhNTQtZjhhNS00ZDRiLTg4NzgtOGE5ZWU3OGVj ZTA4MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk M2RmOTNjN2QtZjIzZi00YzEzLWI1MjYtNDdmMmVjYWM4YjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjY5Bd6T82J1g1rwKAKCk2Tgypb6srpr0/eD f+x1S08N6whSXrIeKZseJ2jYxAZ4Y8enJhvpIujlQCPAAS+3hlABptThgIDwOvQ5 5YSeH/1i0ecsPLINItXnBMX9iyjrizcv3F45Ecl/1WwUyj8w7g1eUkVsWwuhzdXh jr3+zMGyoBj2jt816+BbBsaZL34FX6oK5WdUTnVOHFrghFSbwvrK1wDkOOn9vpLy bAcLPR0ql3XGETWA96jOl6wDBW/0dPF0cmE9OZzPi0N7EXkifVkYtppPsPBYGeiV 3gK3aXnkx4Wzfm/YC3NSbaX7KU4akuNFhgZwL54xJltrdJbNjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAJRVog/zA1UiTkYgMwwPLgPDepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4 M2E1NC1mOGE1LTRkNGItODg3OC04YTllZTc4ZWNlMDgvY2ZhMjBlMjUtYmVkMi0z NTY3LTk2MWEtNWJiZGJlODgxODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGQ2ODNhNTQtZjhhNS00ZDRiLTg4 NzgtOGE5ZWU3OGVjZTA4LzBkNjgzYTU0LWY4YTUtNGQ0Yi04ODc4LThhOWVlNzhl Y2UwOC5jcmwwHwYDVR0jBBgwFoAUYhQJZeW4q2q2o5sGcBnKdCWTjqswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4M2E1NC1mOGE1LTRkNGItODg3OC04YTll ZTc4ZWNlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQmbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPCqUlHsFXgNF+ENDyTOYTg50SXcZC0LsnXuYjX792MIqXW46ew/nH5 LStdmJBBMM0Uln+qjRQWDfAccM5a+LtQcmRIGFZJ2QiSTDcaVHM7WzBoVy/z2qNX V87QG9zCDHGAzKXAclJ55ZdLuTkFPAd2+lms3uLmJ2dGU7+7oJi5iQEEa7SSGFyA 4L6f24hwg1XAvsl8c07BWchthxBCZDaiLhTrlh/0btby3UUA4Ww+POm8jdAT9QBB ojn8ddcVZgfW6XxI4YDOM8g48MnA07X/wrUHOJNEsjmvgE0gXpjAM1VFUUpiHZj8 02F94Bd9gwsomBRRPWkjirzKB8Rh0ws= -----END CERTIFICATE-----Generated at Tue Apr 8 14:52:19 2025 by rpki-client