$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa File: ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa (raw, json) Hash identifier: T/zesbLsRPZBni/YR0SMT0WDdcw8orAtZ7UX8iiu8qI= Subject key identifier: 63:C9:9E:73:57:FF:16:77:0F:59:FC:CB:6E:07:F8:C1:A8:1F:68:E6 Certificate issuer: /CN=6038e2ed-90e4-4896-8a5b-2db43376a32c Certificate serial: 010D0C9F43285848DA70FFF14E69B3C748D8FE60 Authority key identifier: 29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 21723 IP address blocks: 66.163.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:ff:f1:4e:69:b3:c7:48:d8:fe:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6038e2ed-90e4-4896-8a5b-2db43376a32c Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=c193e387-7fb9-40fd-b359-51862b96c6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:37:53:c7:46:d1:26:36:c3:e5:75:58:e0:1f: 4b:cb:2d:13:97:56:5f:30:9f:a2:57:da:16:01:bc: cc:d7:87:85:34:4a:fe:37:07:25:83:e7:7c:a8:81: 59:f8:4c:cd:97:db:37:6a:12:b9:11:e8:79:5e:41: c3:88:32:45:97:32:ee:9b:e0:03:fe:e9:ee:b3:c3: a9:f5:db:df:bd:47:70:f0:8b:75:71:72:83:b6:83: e7:34:8b:d1:26:16:8a:13:50:de:a5:e5:51:b3:9c: e8:44:2c:c4:e4:4d:ea:0d:d2:b4:7e:6d:ce:04:43: 90:84:34:2e:ba:bc:06:bf:31:e0:7d:62:1e:52:79: 66:96:11:8b:d4:6f:28:fe:25:62:e7:19:0b:9f:77: 6f:a0:92:3d:ce:60:7b:3f:1d:fd:6e:46:d7:fb:2b: 1a:a4:51:0a:1b:db:e7:5f:fd:3c:d4:06:c9:91:e3: ae:b4:b7:e9:78:77:c6:8e:a8:49:39:20:8d:f0:ed: 18:7a:87:c9:2b:1c:ed:4c:a5:89:e0:cd:1e:be:ea: 67:9b:65:46:72:99:2a:a3:9c:8f:5d:82:f1:56:69: a8:85:4f:6e:6b:e2:0d:53:79:78:5c:4b:25:68:2a: 33:24:ab:f7:1d:9c:31:c9:2d:81:83:b7:a7:19:ca: c3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C9:9E:73:57:FF:16:77:0F:59:FC:CB:6E:07:F8:C1:A8:1F:68:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/ff1f7d27-c7d2-3fa3-8934-b87171daca54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl X509v3 Authority Key Identifier: keyid:29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer sbgp-ipAddrBlock: critical IPv4: 66.163.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:03:ab:cd:09:03:be:73:6e:22:92:71:b1:62:19:9a:b2:05: 14:cc:27:65:17:a5:0e:5a:93:21:94:4c:5b:e4:f3:fd:9b:91: 23:0e:d4:c0:3b:bb:dc:e2:cd:08:c1:56:19:ee:80:3f:a0:5d: 42:a8:af:6e:f6:cf:75:8f:81:58:4c:7e:97:45:54:11:0c:9f: 6b:39:ab:46:5e:4f:42:87:bb:68:e0:d9:9e:84:15:76:5a:b4: cf:a1:dc:21:0f:7a:be:c8:45:5c:0f:f3:97:e1:62:09:0a:21: 01:5f:c1:4c:c6:11:e7:da:28:23:c6:ba:e6:8b:9d:56:0f:1d: d2:2c:eb:a7:eb:bf:e6:98:3b:71:e2:f7:f3:cd:d4:8b:54:b4: ed:73:f2:47:a6:88:4c:55:88:ff:5e:1f:09:a6:ae:c7:e3:17: 80:b9:78:3f:b8:b6:24:f0:6d:b8:cb:01:18:46:8a:2e:b2:58: a2:54:7a:f6:28:78:a4:d9:c6:57:45:89:a2:42:ce:46:5d:0c: 01:dd:64:b5:24:d2:db:de:cc:b2:2b:69:4a:c8:cc:c4:23:22: 30:7e:f9:89:1a:0f:a2:30:9b:c6:a9:b3:54:74:bf:c6:2b:78: d8:9d:23:4a:ef:1f:8a:32:d8:3c:38:d8:bf:97:a6:03:b7:6c: 4c:c8:96:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacP/xTmmzx0jY/mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzOGUyZWQtOTBlNC00ODk2LThhNWItMmRiNDMzNzZh MzJjMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk YzE5M2UzODctN2ZiOS00MGZkLWIzNTktNTE4NjJiOTZjNmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzdTx0bRJjbD5XVY4B9Lyy0Tl1ZfMJ+iV9oW AbzM14eFNEr+Nwclg+d8qIFZ+EzNl9s3ahK5Eeh5XkHDiDJFlzLum+AD/unus8Op 9dvfvUdw8It1cXKDtoPnNIvRJhaKE1DepeVRs5zoRCzE5E3qDdK0fm3OBEOQhDQu urwGvzHgfWIeUnlmlhGL1G8o/iVi5xkLn3dvoJI9zmB7Px39bkbX+ysapFEKG9vn X/081AbJkeOutLfpeHfGjqhJOSCN8O0YeofJKxztTKWJ4M0evupnm2VGcpkqo5yP XYLxVmmohU9ua+INU3l4XEslaCozJKv3HZwxyS2Bg7enGcrD5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPJnnNX/xZ3D1n8y24H+MGoH2jmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4 ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0MzM3NmEzMmMvZmYxZjdkMjctYzdkMi0z ZmEzLTg5MzQtYjg3MTcxZGFjYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAzOGUyZWQtOTBlNC00ODk2LThh NWItMmRiNDMzNzZhMzJjLzYwMzhlMmVkLTkwZTQtNDg5Ni04YTViLTJkYjQzMzc2 YTMyYy5jcmwwHwYDVR0jBBgwFoAUKQXSFcuRrCTkVNF0V9vyB3VzTUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0 MzM3NmEzMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQqPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEDq80JA75zbiKScbFiGZqyBRTMJ2UXpQ5akyGUTFvk8/2bkSMO1MA7 u9zizQjBVhnugD+gXUKor272z3WPgVhMfpdFVBEMn2s5q0ZeT0KHu2jg2Z6EFXZa tM+h3CEPer7IRVwP85fhYgkKIQFfwUzGEefaKCPGuuaLnVYPHdIs66frv+aYO3Hi 9/PN1ItUtO1z8kemiExViP9eHwmmrsfjF4C5eD+4tiTwbbjLARhGii6yWKJUevYo eKTZxldFiaJCzkZdDAHdZLUk0tvezLIraUrIzMQjIjB++YkaD6Iwm8aps1R0v8Yr eNidI0rvH4oy2Dw42L+XpgO3bEzIloY= -----END CERTIFICATE-----Generated at Sun Apr 13 01:41:11 2025 by rpki-client