$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa File: d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa (raw, json) Hash identifier: A9IgFODMihjDjfUjlS9TprHDumOaQu++gAN76N4RmxQ= Subject key identifier: F6:69:11:B1:32:EC:6F:F3:99:C3:14:DA:27:7C:A2:B0:A4:4E:CB:20 Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F43285848F22C683482B411342148F5C8 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 11650 IP address blocks: 64.250.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:68:34:82:b4:11:34:21:48:f5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=3d21be05-6b39-48ee-826e-40039292092e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ec:f6:7d:a6:d4:4d:0b:24:e9:49:1d:c0:9f: 22:a4:35:8c:97:ee:89:fa:00:2f:9d:47:58:a2:ec: f6:69:bb:f8:8c:f2:20:57:d9:f2:bc:f6:5d:d6:f5: 83:3d:9b:f4:11:c2:fd:9a:ce:de:94:a2:88:7f:03: dd:30:95:e3:32:e5:5b:3f:be:af:49:a0:fa:04:5b: 6b:89:b3:79:1b:cb:30:6d:59:16:20:e1:59:d3:73: 95:20:9d:8c:9a:47:c1:3e:85:14:33:87:88:11:33: 0b:8e:23:14:a5:d4:8e:63:22:5c:0c:22:81:f2:f3: e6:fa:0b:87:a1:83:85:85:7d:18:68:96:0e:b5:1b: f3:da:63:5e:de:c9:a1:cc:ac:93:b8:a5:71:27:36: 8c:94:2f:13:ca:d1:f2:07:90:3e:d3:43:b9:b6:5a: aa:a2:9b:5c:71:f0:94:47:1f:17:0a:66:a0:62:27: 44:30:29:8a:23:18:2c:5b:b3:26:73:bb:ae:ea:af: de:6e:5a:89:ba:80:02:79:24:2e:87:53:03:0c:8f: 68:f0:f1:29:f4:c2:1f:31:c9:c3:20:a5:50:b0:46: 56:87:46:57:06:75:ea:d3:f4:45:86:46:ae:48:aa: 52:71:39:e1:fa:ce:83:98:74:f3:6f:c8:fa:c9:0f: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:69:11:B1:32:EC:6F:F3:99:C3:14:DA:27:7C:A2:B0:A4:4E:CB:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 64.250.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:25:75:a9:22:c6:d6:59:ad:ae:7b:55:e5:da:23:21:71:77: 89:9c:4c:2b:05:ba:3b:a0:ca:57:73:60:54:29:90:f1:8b:ec: 79:aa:10:bc:25:a0:e1:5a:11:7d:84:fa:1d:d8:04:f6:59:a3: 68:02:65:ab:76:22:87:fb:5e:d6:ad:ca:74:a6:6d:0c:af:9e: 3d:f6:c7:ab:d2:d4:37:a0:8e:fd:05:cd:21:2c:09:40:61:e3: b7:6c:7f:a2:2e:e8:a9:f5:67:30:3c:b3:7d:2f:d3:31:98:db: 44:2c:bc:4e:c0:e9:79:cd:c0:6c:2b:e9:ed:96:8b:56:46:80: 89:66:47:6f:c2:47:26:33:a1:a3:09:64:72:98:6a:99:60:1e: 03:20:5a:51:64:11:d0:cd:20:56:d3:4e:0c:12:c3:69:eb:23: 33:c0:6f:5b:3c:67:84:3c:4f:ae:4a:2f:a0:68:2a:41:73:b9: 11:4b:0e:13:41:5f:ac:85:78:b5:e7:d8:65:88:84:ad:32:3d: 06:1f:d3:a9:89:c9:dd:e1:42:be:70:a3:ce:28:69:63:cb:26: 5d:3c:a3:03:8d:2f:22:47:82:1a:9a:19:2a:66:8e:e1:3e:7b: 04:b6:27:07:1e:5a:82:0c:08:0e:c5:dc:16:2a:89:45:cd:d4: b5:f1:71:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGg0grQRNCFI9cgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk M2QyMWJlMDUtNmIzOS00OGVlLTgyNmUtNDAwMzkyOTIwOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuz2fabUTQsk6UkdwJ8ipDWMl+6J+gAvnUdY ouz2abv4jPIgV9nyvPZd1vWDPZv0EcL9ms7elKKIfwPdMJXjMuVbP76vSaD6BFtr ibN5G8swbVkWIOFZ03OVIJ2MmkfBPoUUM4eIETMLjiMUpdSOYyJcDCKB8vPm+guH oYOFhX0YaJYOtRvz2mNe3smhzKyTuKVxJzaMlC8TytHyB5A+00O5tlqqoptccfCU Rx8XCmagYidEMCmKIxgsW7Mmc7uu6q/eblqJuoACeSQuh1MDDI9o8PEp9MIfMcnD IKVQsEZWh0ZXBnXq0/RFhkauSKpScTnh+s6DmHTzb8j6yQ8umwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZpEbEy7G/zmcMU2id8orCkTssgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvZDY2ZWQ2OGYtMGNhYS0z ZjRlLTg3ZDEtMzYyMDQwYmVjN2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQPrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIldakixtZZra57VeXaIyFxd4mcTCsFujugyldzYFQpkPGL7HmqELwl oOFaEX2E+h3YBPZZo2gCZat2Iof7XtatynSmbQyvnj32x6vS1Degjv0FzSEsCUBh 47dsf6Iu6Kn1ZzA8s30v0zGY20QsvE7A6XnNwGwr6e2Wi1ZGgIlmR2/CRyYzoaMJ ZHKYaplgHgMgWlFkEdDNIFbTTgwSw2nrIzPAb1s8Z4Q8T65KL6BoKkFzuRFLDhNB X6yFeLXn2GWIhK0yPQYf06mJyd3hQr5wo84oaWPLJl08owONLyJHghqaGSpmjuE+ ewS2JwceWoIMCA7F3BYqiUXN1LXxcaU= -----END CERTIFICATE-----Generated at Fri Apr 11 23:41:54 2025 by rpki-client