$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa File: f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa (raw, json) Hash identifier: q+k2QRJiPDazG/g0qs82jkJ2uu/NxMLG24K3VCBdp9s= Subject key identifier: 42:D5:78:77:9C:B3:DE:D4:95:07:0F:72:D6:9A:1F:EB:1C:97:A3:ED Certificate issuer: /CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0 Certificate serial: 010D0C9F432858489FD09CBF2E67DF3DFC970AC0 Authority key identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa Signing time: Wed 22 Jan 2025 02:00:39 +0000 ROA not before: Wed 22 Jan 2025 02:00:39 +0000 ROA not after: Tue 22 Apr 2025 01:00:39 +0000 asID: 22611 IP address blocks: 66.33.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:d0:9c:bf:2e:67:df:3d:fc:97:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0 Validity Not Before: Jan 22 02:00:39 2025 GMT Not After : Apr 22 01:00:39 2025 GMT Subject: CN=e42aa2ef-7363-4063-b961-58bdb2545f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:7c:c6:7f:8a:26:26:63:3d:05:13:07:3c: ec:cd:ff:d6:8e:37:43:fd:c1:a1:95:5a:01:68:fa: a2:ec:b8:44:eb:f5:98:49:07:fc:2a:74:e3:b6:b7: 48:a9:49:a2:33:cc:2e:e4:89:53:1b:8d:4d:b1:e5: ae:6d:a3:63:00:d8:64:db:aa:75:a7:79:53:e6:96: 2b:63:eb:c3:47:d6:82:dd:24:f5:85:c6:ca:25:d7: 78:56:a4:d1:d9:59:6e:63:d2:92:e1:51:3c:72:06: c6:8c:25:9c:5c:ce:3c:b3:20:be:25:41:d7:81:49: 8e:a4:c9:2c:53:3b:8b:17:c8:c4:8c:a5:b7:89:96: f1:1c:b3:96:35:a6:1e:7a:d1:ae:01:62:06:b8:c3: 83:60:fd:6a:02:5f:77:9c:7b:08:8b:9a:ab:d9:c4: b0:31:c5:db:a0:82:33:a4:03:be:20:7a:34:85:74: 54:b6:f7:e9:1d:cc:5f:8e:1d:e1:72:fb:26:8c:5a: b2:dc:f8:dc:89:ac:db:49:7d:af:0c:93:9b:df:65: 24:7e:9b:49:a3:15:79:39:ea:7e:47:99:09:25:b4: d9:05:4f:3c:85:28:6c:40:66:25:ce:96:0d:c9:f9: b7:db:5b:10:5a:8c:35:24:6e:48:16:be:2e:29:99: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D5:78:77:9C:B3:DE:D4:95:07:0F:72:D6:9A:1F:EB:1C:97:A3:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl X509v3 Authority Key Identifier: keyid:B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer sbgp-ipAddrBlock: critical IPv4: 66.33.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:6d:33:59:75:6c:77:bc:3e:7e:54:83:31:09:7e:63:3e:fc: 6b:39:47:d3:3a:8d:84:5f:f7:21:7f:be:ec:1c:fd:0d:2a:b0: a7:2d:fe:12:ac:55:7c:b2:aa:ef:f9:10:a9:59:f1:78:cd:e6: b8:c4:23:eb:ee:3e:ab:3b:d5:70:cf:83:d3:eb:61:80:67:66: b7:42:e0:f7:8b:2e:a3:b9:95:81:03:a0:f1:43:d1:c4:63:cf: 42:0e:b0:51:62:f2:97:97:ee:91:06:5c:e1:7d:63:d8:6e:ff: 95:bd:38:fc:71:cb:05:f0:d3:81:37:04:36:5b:b8:ab:30:fa: fe:a8:20:7b:61:78:ae:bb:f4:8b:7e:1c:b8:f0:b8:84:90:a8: e8:87:a8:78:21:8f:f8:16:9a:72:bb:7e:bc:bb:cb:02:86:06: 3e:6b:60:69:e3:b4:7e:b4:e5:ae:6b:d8:e4:cd:f5:30:0b:af: 42:9d:24:9f:2f:c0:05:26:51:fd:82:8e:b1:3c:6c:07:60:cf: 2c:82:2f:b9:56:8a:0c:b4:73:9c:dc:04:2b:6b:e5:9a:0a:a3: ca:57:ba:1b:6b:96:6a:a6:0b:30:52:8d:d8:2e:7b:a7:43:fe: 35:2c:a2:85:08:f0:78:b1:96:a4:b5:c5:96:32:52:4f:62:b3: b7:94:41:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEif0Jy/LmffPfyXCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmUzZTEwNGUtZGFlZi00ZmRiLTlkNjUtYWExZWU2ZGM0 YmUwMB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk ZTQyYWEyZWYtNzM2My00MDYzLWI5NjEtNThiZGIyNTQ1ZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoh8xn+KJiZjPQUTBzzszf/WjjdD/cGhlVoB aPqi7LhE6/WYSQf8KnTjtrdIqUmiM8wu5IlTG41NseWubaNjANhk26p1p3lT5pYr Y+vDR9aC3ST1hcbKJdd4VqTR2VluY9KS4VE8cgbGjCWcXM48syC+JUHXgUmOpMks UzuLF8jEjKW3iZbxHLOWNaYeetGuAWIGuMODYP1qAl93nHsIi5qr2cSwMcXboIIz pAO+IHo0hXRUtvfpHcxfjh3hcvsmjFqy3PjciazbSX2vDJOb32UkfptJoxV5Oep+ R5kJJbTZBU88hShsQGYlzpYNyfm321sQWow1JG5IFr4uKZmdfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELVeHecs97UlQcPctaaH+scl6PtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNl MTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFlZTZkYzRiZTAvZjBlMDgyMWMtYmJmMy0z NGViLTgyNjYtNTU1ZjQ2YzljOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmUzZTEwNGUtZGFlZi00ZmRiLTlk NjUtYWExZWU2ZGM0YmUwL2ZlM2UxMDRlLWRhZWYtNGZkYi05ZDY1LWFhMWVlNmRj NGJlMC5jcmwwHwYDVR0jBBgwFoAUufWiUaI76sSwD1L8hmm6LjRR5AswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNlMTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFl ZTZkYzRiZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZtM1l1bHe8Pn5UgzEJfmM+/Gs5R9M6jYRf9yF/vuwc/Q0qsKct/hKs VXyyqu/5EKlZ8XjN5rjEI+vuPqs71XDPg9PrYYBnZrdC4PeLLqO5lYEDoPFD0cRj z0IOsFFi8peX7pEGXOF9Y9hu/5W9OPxxywXw04E3BDZbuKsw+v6oIHtheK679It+ HLjwuISQqOiHqHghj/gWmnK7fry7ywKGBj5rYGnjtH605a5r2OTN9TALr0KdJJ8v wAUmUf2CjrE8bAdgzyyCL7lWigy0c5zcBCtr5ZoKo8pXuhtrlmqmCzBSjdgue6dD /jUsooUI8HixlqS1xZYyUk9is7eUQSg= -----END CERTIFICATE-----Generated at Tue Apr 8 12:11:29 2025 by rpki-client