$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/2fe49cfa-f6ac-3af8-9b6c-10d3793f099a.roa File: 2fe49cfa-f6ac-3af8-9b6c-10d3793f099a.roa (raw, json) Hash identifier: gQovLUPhgF8+DggjCPThP25jT0IhvxtXZeJRnrkJfhU= Subject key identifier: 30:72:79:B5:D1:36:10:41:47:C3:07:04:CA:DC:2E:64:C8:AE:3A:56 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F432858490881783A930E138E1769C400 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/2fe49cfa-f6ac-3af8-9b6c-10d3793f099a.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 11693 IP address blocks: 66.216.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:78:3a:93:0e:13:8e:17:69:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=0693b001-b230-4420-9b1a-1559287cb75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:68:22:1b:de:44:64:ca:d2:45:71:43:3f: 55:de:e4:f4:b9:f1:c4:bb:73:53:ae:6e:ea:df:86: 4e:00:27:a6:61:54:3c:fa:bd:56:88:e1:db:75:f0: 86:bd:36:11:c7:f9:65:8e:20:34:b9:bf:c4:fc:28: ce:0d:0e:56:cc:7b:d9:03:38:f8:d2:a9:6b:00:0b: c1:a2:91:20:c3:73:37:64:83:d8:de:73:b8:9f:53: bf:26:ae:99:ab:3a:49:7f:d2:cc:3f:fa:fc:c1:95: 9c:aa:b4:31:24:b9:17:ee:fe:e1:31:5a:47:64:5f: 84:71:69:45:d3:a1:ee:f4:47:f8:c9:9a:34:3b:71: d5:e1:38:f8:43:86:73:b1:0c:1c:ae:2b:2a:ab:05: b0:2f:d1:ec:c3:6e:46:de:73:d0:e9:aa:8f:92:63: 11:59:2f:94:90:84:56:2b:73:03:c4:09:cf:a2:34: 99:a6:82:c6:b2:68:54:f2:3d:cd:30:49:02:7d:35: 74:f5:ab:3c:30:e5:8b:72:67:82:59:9c:95:67:84: 69:e6:3d:64:a7:0a:63:cb:22:82:84:6c:1b:26:ce: 13:d4:2c:25:2d:67:11:83:ce:e7:54:7b:4b:8b:f2: ad:df:92:de:20:2f:b1:7a:9d:b7:0d:77:27:fb:46: 2c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:72:79:B5:D1:36:10:41:47:C3:07:04:CA:DC:2E:64:C8:AE:3A:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/2fe49cfa-f6ac-3af8-9b6c-10d3793f099a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 66.216.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:95:02:a1:a0:60:bc:05:93:24:3a:20:77:34:06:f4:64:dd: 8f:04:3d:7c:6a:c5:0b:c3:89:7b:31:61:d9:0a:13:5a:ed:33: ef:46:4d:f1:66:1f:73:a0:1d:8b:44:22:ad:95:d4:ec:a2:d8: 99:d4:bc:df:7d:7b:1c:86:8e:3b:21:ff:5f:7f:77:e0:78:6b: 7c:dd:6b:d9:5e:1e:8f:58:f0:fc:a5:8c:87:8d:fb:a1:89:ea: 22:e2:16:30:6b:8b:9d:c9:85:30:48:e5:be:af:ee:13:7c:20: a7:ff:bf:42:81:1c:56:70:01:d8:1a:86:f3:d0:97:cf:4e:43: f7:0c:8d:fa:ce:cb:3d:f9:3a:c8:3a:aa:97:c8:bc:0e:d5:1c: d5:d2:b1:de:04:64:07:29:10:6a:99:95:fc:0e:fc:b8:a8:7f: 66:e9:7b:7b:7f:98:cb:cc:9a:a7:f4:14:2b:7a:6c:b1:25:e8: 32:d2:fa:fb:07:5e:57:2e:42:9e:ff:77:01:75:e7:1f:bb:98: 3f:80:12:a3:47:0b:2f:1f:80:82:2e:21:80:6b:63:55:50:59: 01:e8:22:a8:35:32:bb:8d:2b:fd:e1:35:06:38:a2:e4:5b:30: 3c:67:e3:bf:65:ca:b3:35:85:d4:52:69:f1:c3:19:0d:5c:b4: cd:28:b6:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXg6kw4TjhdpxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MDY5M2IwMDEtYjIzMC00NDIwLTliMWEtMTU1OTI4N2NiNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI9oIhveRGTK0kVxQz9V3uT0ufHEu3NTrm7q 34ZOACemYVQ8+r1WiOHbdfCGvTYRx/lljiA0ub/E/CjODQ5WzHvZAzj40qlrAAvB opEgw3M3ZIPY3nO4n1O/Jq6ZqzpJf9LMP/r8wZWcqrQxJLkX7v7hMVpHZF+EcWlF 06Hu9Ef4yZo0O3HV4Tj4Q4ZzsQwcrisqqwWwL9Hsw25G3nPQ6aqPkmMRWS+UkIRW K3MDxAnPojSZpoLGsmhU8j3NMEkCfTV09as8MOWLcmeCWZyVZ4Rp5j1kpwpjyyKC hGwbJs4T1CwlLWcRg87nVHtLi/Kt35LeIC+xep23DXcn+0YsbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDByebXRNhBBR8MHBMrcLmTIrjpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvMmZlNDljZmEtZjZhYy0z YWY4LTliNmMtMTBkMzc5M2YwOTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOVAqGgYLwFkyQ6IHc0BvRk3Y8EPXxqxQvDiXsxYdkKE1rtM+9GTfFm H3OgHYtEIq2V1Oyi2JnUvN99exyGjjsh/19/d+B4a3zda9leHo9Y8PyljIeN+6GJ 6iLiFjBri53JhTBI5b6v7hN8IKf/v0KBHFZwAdgahvPQl89OQ/cMjfrOyz35Osg6 qpfIvA7VHNXSsd4EZAcpEGqZlfwO/Liof2bpe3t/mMvMmqf0FCt6bLEl6DLS+vsH XlcuQp7/dwF15x+7mD+AEqNHCy8fgIIuIYBrY1VQWQHoIqg1MruNK/3hNQY4ouRb MDxn479lyrM1hdRSafHDGQ1ctM0ots0= -----END CERTIFICATE-----Generated at Sat Apr 5 10:51:03 2025 by rpki-client