$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826/573e55ea-c7b7-350f-b662-649ca448d46e.roa File: 573e55ea-c7b7-350f-b662-649ca448d46e.roa (raw, json) Hash identifier: Qi1gqNcxGwI5IoCB5I0XdX5ccLq2oKgSM5G82ISLDhg= Subject key identifier: 0E:68:46:8A:59:A7:B3:2D:11:A4:8D:92:02:56:6B:60:D1:11:6B:FE Certificate issuer: /CN=fcbea799-ceab-4c67-b016-1b60d5b80826 Certificate serial: 010D0C9F43285848E59BB6A8EB65813232A73880 Authority key identifier: EC:56:E9:71:0D:61:88:FB:4A:FF:69:78:B4:16:0B:E4:CC:2C:E9:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826/573e55ea-c7b7-350f-b662-649ca448d46e.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 400865 IP address blocks: 66.132.140.0/24 maxlen: 24 2602:fa5e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826/fcbea799-ceab-4c67-b016-1b60d5b80826.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826/fcbea799-ceab-4c67-b016-1b60d5b80826.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b6:a8:eb:65:81:32:32:a7:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbea799-ceab-4c67-b016-1b60d5b80826 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=14bb4e08-e4e8-42fb-b967-5b012d1e01e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b7:5a:9d:37:fa:e4:57:d5:8e:2d:ed:f0:2f: 74:4e:24:0c:78:a1:97:91:de:41:2b:07:d2:dc:c4: 86:71:e6:87:01:b9:ab:81:d0:4c:03:d8:a9:3e:ab: a8:21:b6:ed:33:c5:36:b1:7b:c2:82:d5:f6:a4:2d: 09:b2:76:d0:54:07:9d:91:01:5b:4a:a0:c7:fe:ae: 1d:7d:93:32:94:55:95:92:61:c3:82:b6:d8:be:ba: b7:05:77:70:79:eb:49:72:1b:d1:75:f4:06:be:fd: d4:99:8e:fe:7b:a3:91:d7:dd:a0:37:6c:b7:fc:aa: 17:cd:56:26:7e:38:a9:91:f3:b9:2a:7b:4b:8f:f5: d3:26:7b:08:2e:1d:c6:88:5e:a3:de:48:0e:97:48: af:c8:ee:55:7c:0d:01:d5:1d:e6:85:c1:0a:bb:a5: 3e:92:dc:6a:d4:2b:93:1a:3a:a5:06:c6:d4:0c:26: fa:73:cd:c0:bc:e7:64:bc:47:f2:e7:3b:02:89:04: 8e:db:a1:90:1c:86:e6:00:c8:71:b2:1c:43:70:00: b5:84:d7:50:99:1f:ba:4e:36:1f:9d:aa:4f:29:6e: 03:74:d8:26:91:b2:61:a3:d9:6c:c7:21:12:e7:4a: a0:0c:1c:b5:ff:e7:29:87:47:30:f4:8c:98:f5:9a: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:68:46:8A:59:A7:B3:2D:11:A4:8D:92:02:56:6B:60:D1:11:6B:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826/573e55ea-c7b7-350f-b662-649ca448d46e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826/fcbea799-ceab-4c67-b016-1b60d5b80826.crl X509v3 Authority Key Identifier: keyid:EC:56:E9:71:0D:61:88:FB:4A:FF:69:78:B4:16:0B:E4:CC:2C:E9:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826.cer sbgp-ipAddrBlock: critical IPv4: 66.132.140.0/24 IPv6: 2602:fa5e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:80:1e:1a:22:05:29:b7:56:3c:d0:56:29:a4:c2:4f:26:f9: a1:24:39:8f:50:bb:41:2c:65:ca:5e:87:dc:0d:a5:15:f4:bd: 02:de:28:cb:ed:a8:5d:6d:0f:ed:4a:2d:98:ca:07:42:e1:77: 01:84:f2:51:29:81:f8:59:90:68:92:f2:8a:16:f7:b3:e1:3d: f6:40:7a:dd:21:97:be:c1:ed:a7:a8:6b:66:5e:5b:4a:f8:15: 9f:53:11:90:44:fb:a7:0c:87:f2:5a:00:c9:b0:17:bd:93:95: 55:a1:76:60:ec:e3:a8:41:0e:c1:5d:94:20:68:24:ae:38:9f: d4:5e:4e:c4:22:5e:76:22:c5:20:25:13:bf:86:10:cc:30:54: 76:77:02:29:5e:cb:e5:14:d4:69:28:34:b0:4d:9d:be:87:b1: 6e:4a:f4:34:15:d9:a5:1f:c5:e8:07:60:68:8c:02:0f:31:0b: fd:66:03:e2:30:87:a1:7d:4c:1c:16:64:84:c0:0a:23:2d:fc: e6:d5:fa:f1:60:1b:a4:ba:1f:a6:97:6c:3f:ef:5e:3b:10:fa: 4a:6a:39:43:06:45:ab:80:66:f3:88:7c:9b:63:a8:08:6c:21: 73:9c:f6:ae:7d:32:fc:0d:69:dc:92:35:4d:08:4e:f3:1b:a7: 06:d5:84:07 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEjlm7ao62WBMjKnOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNiZWE3OTktY2VhYi00YzY3LWIwMTYtMWI2MGQ1Yjgw ODI2MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MTRiYjRlMDgtZTRlOC00MmZiLWI5NjctNWIwMTJkMWUwMWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLdanTf65FfVji3t8C90TiQMeKGXkd5BKwfS 3MSGceaHAbmrgdBMA9ipPquoIbbtM8U2sXvCgtX2pC0JsnbQVAedkQFbSqDH/q4d fZMylFWVkmHDgrbYvrq3BXdweetJchvRdfQGvv3UmY7+e6OR192gN2y3/KoXzVYm fjipkfO5KntLj/XTJnsILh3GiF6j3kgOl0ivyO5VfA0B1R3mhcEKu6U+ktxq1CuT GjqlBsbUDCb6c83AvOdkvEfy5zsCiQSO26GQHIbmAMhxshxDcAC1hNdQmR+6TjYf napPKW4DdNgmkbJho9lsxyES50qgDBy1/+cph0cw9IyY9ZojTwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFA5oRopZp7MtEaSNkgJWa2DREWv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mY2Jl YTc5OS1jZWFiLTRjNjctYjAxNi0xYjYwZDViODA4MjYvNTczZTU1ZWEtYzdiNy0z NTBmLWI2NjItNjQ5Y2E0NDhkNDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmNiZWE3OTktY2VhYi00YzY3LWIw MTYtMWI2MGQ1YjgwODI2L2ZjYmVhNzk5LWNlYWItNGM2Ny1iMDE2LTFiNjBkNWI4 MDgyNi5jcmwwHwYDVR0jBBgwFoAU7FbpcQ1hiPtK/2l4tBYL5Mws6RQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mY2JlYTc5OS1jZWFiLTRjNjctYjAxNi0xYjYw ZDViODA4MjYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAQoSMMA4E AgACMAgDBgAmAvpeADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFgB4aIgUpt1Y80FYppMJPJvmhJDmPULtB LGXKXofcDaUV9L0C3ijL7ahdbQ/tSi2YygdC4XcBhPJRKYH4WZBokvKKFvez4T32 QHrdIZe+we2nqGtmXltK+BWfUxGQRPunDIfyWgDJsBe9k5VVoXZg7OOoQQ7BXZQg aCSuOJ/UXk7EIl52IsUgJRO/hhDMMFR2dwIpXsvlFNRpKDSwTZ2+h7FuSvQ0Fdml H8XoB2BojAIPMQv9ZgPiMIehfUwcFmSEwAojLfzm1frxYBukuh+ml2w/7147EPpK ajlDBkWrgGbziHybY6gIbCFznPaufTL8DWnckjVNCE7zG6cG1YQH -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:51 2025 by rpki-client