$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/8b93b86c-a38d-34d9-a165-f26a6919889e.roa File: 8b93b86c-a38d-34d9-a165-f26a6919889e.roa (raw, json) Hash identifier: tA/h8v+vh3CvPcB+48hp1+8vIG68DYlVsDOnVwEKwlc= Subject key identifier: 94:99:37:71:53:BE:44:8D:3E:06:00:75:D1:4C:49:0B:C1:F3:51:8D Certificate issuer: /CN=cf602fb3-e0a4-4315-96e3-52b1359c9d10 Certificate serial: 010D0C9F43285848C41B7F7A3F35C2765E92FDA0 Authority key identifier: 29:72:FB:6B:B1:9E:91:73:94:55:C1:A8:AE:05:66:73:D5:52:55:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/8b93b86c-a38d-34d9-a165-f26a6919889e.roa Signing time: Tue 04 Feb 2025 02:00:40 +0000 ROA not before: Tue 04 Feb 2025 02:00:40 +0000 ROA not after: Mon 05 May 2025 01:00:40 +0000 asID: 63302 IP address blocks: 66.97.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:1b:7f:7a:3f:35:c2:76:5e:92:fd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf602fb3-e0a4-4315-96e3-52b1359c9d10 Validity Not Before: Feb 4 02:00:40 2025 GMT Not After : May 5 01:00:40 2025 GMT Subject: CN=cfea64fb-6854-4aa8-b74c-d32aaaadc84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0f:d3:8d:50:d4:ef:c0:33:c7:ba:d2:ab:fb: 9f:42:e4:53:70:b4:7a:ba:17:ef:ae:6c:a0:8b:2c: ac:22:32:8e:fd:64:75:fd:5f:f5:19:59:70:f3:f3: a9:a6:dc:ef:72:89:8a:04:e2:ae:a8:92:f3:34:40: 93:2d:fa:74:c9:23:7b:8d:d8:cf:5b:86:d6:3e:03: 70:70:7c:a2:f7:d6:57:1e:68:b7:2f:64:aa:4e:66: a1:a3:45:d7:34:a8:8a:22:48:dc:3a:01:f2:39:98: bd:89:c4:70:3c:48:c8:45:96:d4:e3:c7:be:93:bf: cc:2e:9d:5e:89:6f:97:5e:c1:92:74:6f:02:db:17: da:28:92:af:1a:e1:be:26:69:2f:38:6d:88:38:ee: 90:24:46:f1:43:00:c3:65:ce:81:2b:57:8d:f9:86: 77:22:0a:9b:15:b9:18:23:13:d5:95:31:18:0d:9a: 73:bb:43:f3:f5:95:12:6f:71:b6:12:49:5b:a7:04: 09:a7:ce:01:ec:58:c2:70:ec:56:5c:f2:b5:75:28: b5:43:02:66:57:52:e5:57:26:fe:ac:bb:52:5a:12: ff:dd:1c:94:96:a4:25:37:2f:37:de:14:e9:7d:70: 37:c6:2a:4f:02:7b:32:e6:0d:dc:d9:94:e6:c8:41: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:99:37:71:53:BE:44:8D:3E:06:00:75:D1:4C:49:0B:C1:F3:51:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/8b93b86c-a38d-34d9-a165-f26a6919889e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.crl X509v3 Authority Key Identifier: keyid:29:72:FB:6B:B1:9E:91:73:94:55:C1:A8:AE:05:66:73:D5:52:55:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer sbgp-ipAddrBlock: critical IPv4: 66.97.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:7a:05:8e:fb:43:3f:c9:ac:1c:7c:2c:ec:4d:d4:d9:02:6c: cb:a0:1b:6a:b6:a7:11:e1:45:6b:f4:78:8a:67:e4:93:bd:b9: 3c:3a:b6:75:d8:d3:89:ae:07:59:51:fd:bd:38:e8:14:cc:8b: 28:30:0d:ce:f9:44:de:0d:1a:6d:31:42:b8:46:ff:66:6e:e4: 3e:25:7a:a7:f0:89:ef:e1:ea:b0:5e:e5:3a:9a:5d:06:65:9c: fc:5d:8a:1b:de:c7:68:4e:6f:16:63:2e:b2:c0:de:f9:67:1c: c9:bf:5b:ce:b3:2b:09:4b:43:77:30:08:4d:2f:f4:3d:b1:5e: 4a:f9:d0:92:4e:e6:9e:c9:3e:dc:c6:cb:1a:fa:4c:61:03:4b: 0e:e6:21:70:5c:c3:f9:f1:88:f5:9c:d8:c6:e1:54:87:40:d1: bf:f4:df:d8:50:0b:49:9a:9c:72:60:f9:5a:4c:14:36:c0:f4: 09:3b:7a:8c:91:37:cb:2b:71:3d:b1:2e:7f:04:32:f5:1e:33: ec:0d:e0:10:9b:29:e3:1f:e2:93:3f:3d:44:62:92:f1:6b:1c: 24:57:5c:d3:b6:5b:72:be:53:76:92:9c:bc:f4:b7:df:cf:30: 6d:52:8f:d2:fb:37:e0:ba:c2:74:d2:c0:e8:e1:c4:7c:81:ce: 34:fe:a1:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEG396PzXCdl6S/aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y2MDJmYjMtZTBhNC00MzE1LTk2ZTMtNTJiMTM1OWM5 ZDEwMB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk Y2ZlYTY0ZmItNjg1NC00YWE4LWI3NGMtZDMyYWFhYWRjODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ/TjVDU78Azx7rSq/ufQuRTcLR6uhfvrmyg iyysIjKO/WR1/V/1GVlw8/OpptzvcomKBOKuqJLzNECTLfp0ySN7jdjPW4bWPgNw cHyi99ZXHmi3L2SqTmaho0XXNKiKIkjcOgHyOZi9icRwPEjIRZbU48e+k7/MLp1e iW+XXsGSdG8C2xfaKJKvGuG+JmkvOG2IOO6QJEbxQwDDZc6BK1eN+YZ3IgqbFbkY IxPVlTEYDZpzu0Pz9ZUSb3G2EklbpwQJp84B7FjCcOxWXPK1dSi1QwJmV1LlVyb+ rLtSWhL/3RyUlqQlNy833hTpfXA3xipPAnsy5g3c2ZTmyEG+6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSZN3FTvkSNPgYAddFMSQvB81GNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZjYw MmZiMy1lMGE0LTQzMTUtOTZlMy01MmIxMzU5YzlkMTAvOGI5M2I4NmMtYTM4ZC0z NGQ5LWExNjUtZjI2YTY5MTk4ODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Y2MDJmYjMtZTBhNC00MzE1LTk2 ZTMtNTJiMTM1OWM5ZDEwL2NmNjAyZmIzLWUwYTQtNDMxNS05NmUzLTUyYjEzNTlj OWQxMC5jcmwwHwYDVR0jBBgwFoAUKXL7a7GekXOUVcGorgVmc9VSVSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZjYwMmZiMy1lMGE0LTQzMTUtOTZlMy01MmIx MzU5YzlkMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF6BY77Qz/JrBx8LOxN1NkCbMugG2q2pxHhRWv0eIpn5JO9uTw6tnXY 04muB1lR/b046BTMiygwDc75RN4NGm0xQrhG/2Zu5D4leqfwie/h6rBe5TqaXQZl nPxdihvex2hObxZjLrLA3vlnHMm/W86zKwlLQ3cwCE0v9D2xXkr50JJO5p7JPtzG yxr6TGEDSw7mIXBcw/nxiPWc2MbhVIdA0b/039hQC0manHJg+VpMFDbA9Ak7eoyR N8srcT2xLn8EMvUeM+wN4BCbKeMf4pM/PURikvFrHCRXXNO2W3K+U3aSnLz0t9/P MG1Sj9L7N+C6wnTSwOjhxHyBzjT+oZk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:44 2025 by rpki-client