$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/1dfbed56-f082-3432-98ff-fa31e6937028.roa File: 1dfbed56-f082-3432-98ff-fa31e6937028.roa (raw, json) Hash identifier: wOzldfcdGH8QEboE/Kh6sd5exqkabXcLNubSha9hPkw= Subject key identifier: 1D:15:D1:99:BD:F4:52:50:47:F2:4C:27:21:BD:C7:20:2D:E0:1D:72 Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F43285848159FD8967954A042A40BCB00 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/1dfbed56-f082-3432-98ff-fa31e6937028.roa Signing time: Tue 03 Dec 2024 14:00:52 +0000 ROA not before: Tue 03 Dec 2024 14:00:52 +0000 ROA not after: Mon 03 Mar 2025 14:00:52 +0000 asID: 16904 IP address blocks: 66.242.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:15:9f:d8:96:79:54:a0:42:a4:0b:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: Dec 3 14:00:52 2024 GMT Not After : Mar 3 14:00:52 2025 GMT Subject: CN=f60b65b2-54a4-438c-86e6-e09aa0604679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:78:23:e7:71:c9:9a:58:88:ba:2b:0a:11: 8f:05:84:c5:76:a3:0f:3a:be:13:d9:38:a0:3a:b9: 3a:78:9f:19:c1:75:46:e1:dc:cf:b6:f7:47:cc:f0: f1:60:f5:ce:60:eb:aa:0e:05:a2:c9:7f:ec:1d:44: e7:64:a2:a5:d9:ec:43:b1:97:f7:d6:e2:b3:ae:67: 75:31:82:4f:e3:1f:06:af:e4:28:13:9d:b0:4a:96: 93:e7:88:e9:06:ac:68:03:ec:b7:7a:5f:f8:d1:88: 6b:aa:69:c1:fa:b7:fe:ba:30:65:93:e7:be:9c:0c: 1d:fd:97:0b:22:65:74:de:92:17:df:66:9c:1c:83: 28:09:71:57:38:a5:67:5e:9e:ee:88:6e:9e:1c:8e: 69:b8:7e:8f:0d:17:e3:e4:25:2f:e2:e2:e3:54:6d: 1e:c8:93:46:c6:a0:99:df:c9:5c:e3:e9:0c:07:54: 40:2f:11:c0:cf:6b:49:25:d6:6e:c5:d4:26:4c:0c: cc:5f:b7:cf:19:be:6b:c9:5c:89:53:eb:a7:27:63: 31:91:82:34:13:70:a9:02:28:74:9d:5f:bc:e1:47: 3f:41:f9:d1:22:11:98:79:f6:17:30:ac:df:13:7c: b9:a9:e8:6b:11:2f:a9:50:60:e1:82:f0:34:c9:86: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:15:D1:99:BD:F4:52:50:47:F2:4C:27:21:BD:C7:20:2D:E0:1D:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/1dfbed56-f082-3432-98ff-fa31e6937028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv4: 66.242.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:76:af:ec:f3:71:e3:6c:2c:0d:3d:71:bf:2c:9c:ce:f5:19: 67:43:e8:3b:91:50:fd:8b:19:ab:31:b2:13:de:2d:b7:03:86: 62:cb:04:26:95:72:e8:d1:89:e9:12:da:53:ec:7b:c9:b2:d5: 92:fd:08:45:c5:bd:49:15:ac:d8:de:3d:49:6e:2b:1a:c8:dc: 2a:f2:b5:5d:31:67:2b:96:4f:be:84:e5:f6:a5:d1:d5:32:47: d6:1b:07:1e:3e:8d:19:4e:83:2f:62:17:87:4d:97:14:99:4d: a0:2f:cc:8b:a8:87:54:ab:65:98:39:81:d6:0e:2e:02:f2:de: bf:24:bc:50:fe:7d:1d:ee:63:a8:00:9f:c3:d0:2c:a6:d2:9e: 9a:04:b9:15:93:9d:77:1e:02:8e:6e:fb:89:45:f9:4c:f3:98: 91:b4:4e:85:7a:20:32:bb:4d:f0:ef:d5:56:ad:8b:bc:99:f2: 45:77:1e:e2:f8:08:89:e1:fc:fb:88:bf:de:7f:01:75:f4:bf: 0d:fd:bd:09:47:a6:9c:cc:db:9a:c1:64:c9:fd:2d:7a:b3:5a: 80:e8:4d:49:5f:b5:9d:b5:a3:ac:22:88:ea:83:ce:bb:64:fa: 58:2f:b9:02:02:f6:7e:fb:8d:f4:b2:c1:97:8f:3c:1d:6d:be: cc:8d:55:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn9iWeVSgQqQLywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk ZjYwYjY1YjItNTRhNC00MzhjLTg2ZTYtZTA5YWEwNjA0Njc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujR4I+dxyZpYiLorChGPBYTFdqMPOr4T2Tig Ork6eJ8ZwXVG4dzPtvdHzPDxYPXOYOuqDgWiyX/sHUTnZKKl2exDsZf31uKzrmd1 MYJP4x8Gr+QoE52wSpaT54jpBqxoA+y3el/40YhrqmnB+rf+ujBlk+e+nAwd/ZcL ImV03pIX32acHIMoCXFXOKVnXp7uiG6eHI5puH6PDRfj5CUv4uLjVG0eyJNGxqCZ 38lc4+kMB1RALxHAz2tJJdZuxdQmTAzMX7fPGb5ryVyJU+unJ2MxkYI0E3CpAih0 nV+84Uc/QfnRIhGYefYXMKzfE3y5qehrES+pUGDhgvA0yYY8IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0V0Zm99FJQR/JMJyG9xyAt4B1yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvMWRmYmVkNTYtZjA4Mi0z NDMyLTk4ZmYtZmEzMWU2OTM3MDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvJGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl2r+zzceNsLA09cb8snM71GWdD6DuRUP2LGasxshPeLbcDhmLLBCaV cujRiekS2lPse8my1ZL9CEXFvUkVrNjePUluKxrI3CrytV0xZyuWT76E5fal0dUy R9YbBx4+jRlOgy9iF4dNlxSZTaAvzIuoh1SrZZg5gdYOLgLy3r8kvFD+fR3uY6gA n8PQLKbSnpoEuRWTnXceAo5u+4lF+UzzmJG0ToV6IDK7TfDv1Vati7yZ8kV3HuL4 CInh/PuIv95/AXX0vw39vQlHppzM25rBZMn9LXqzWoDoTUlftZ21o6wiiOqDzrtk +lgvuQIC9n77jfSywZePPB1tvsyNVQg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:19 2025 by rpki-client