$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/25650197-93ce-38a6-a5ff-4e433a2bdbc9.roa File: 25650197-93ce-38a6-a5ff-4e433a2bdbc9.roa (raw, json) Hash identifier: okPOc+T4Nk4dCtocWJvSDvSpmES5uR0sp5h4mX1SDaU= Subject key identifier: EB:1B:47:84:76:1E:34:D5:6C:A4:E4:61:09:6A:C4:88:7E:8C:C3:7A Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F43285848BBBB7229E8A9BE2E49FBEDA0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/25650197-93ce-38a6-a5ff-4e433a2bdbc9.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 394437 IP address blocks: 66.60.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:72:29:e8:a9:be:2e:49:fb:ed:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=f3200cf9-f2b3-4504-a279-56d8307b2ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:d9:b1:38:79:18:1e:07:18:52:b9:2c:fd: 70:c9:88:87:00:2b:16:e3:75:a4:14:06:e0:be:68: ab:48:2d:07:5d:fd:35:0c:67:a7:09:69:03:4f:1f: d8:ab:68:7d:a0:e4:28:06:2b:25:7a:64:b1:ca:b4: 2e:07:d8:2d:c9:fa:f5:4e:c3:ff:1e:fd:78:ed:2f: 45:a5:1a:10:27:30:2e:d4:14:1b:12:af:4e:91:1a: 0a:93:6c:0f:c3:ce:dc:76:74:45:b2:3a:68:b3:9a: ba:ee:56:3b:20:ed:59:f6:9d:b6:c3:52:4e:2c:9f: 2b:a8:48:7d:c2:1d:36:38:55:4c:73:51:ec:78:dd: d2:37:ae:14:2b:34:26:7f:c7:19:b1:42:59:16:c0: 9c:3c:ee:44:73:86:27:6c:eb:fa:cc:13:a1:e0:b4: 3a:08:8a:71:ee:71:a0:48:5e:77:8d:bd:e1:73:ea: 99:ea:03:94:c0:45:a9:14:ab:b3:a8:98:63:a8:2a: d2:5e:69:63:72:ca:91:30:0a:83:ec:58:78:43:de: e2:ed:47:94:4d:21:28:16:d4:04:dd:64:25:82:21: c9:68:05:78:c6:93:3e:43:97:a7:85:dc:24:57:fe: ef:bc:5e:73:03:a9:03:5e:a0:da:9d:62:b2:1c:85: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1B:47:84:76:1E:34:D5:6C:A4:E4:61:09:6A:C4:88:7E:8C:C3:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/25650197-93ce-38a6-a5ff-4e433a2bdbc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 66.60.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:1d:a2:5d:0f:87:5d:6f:2a:93:0d:de:bf:5e:8b:8b:2d:07: dc:6e:70:d8:5e:48:6b:69:19:44:d4:a9:f9:e2:9b:26:bc:6c: d6:67:1f:c1:6b:f7:22:00:26:5f:ab:e2:a4:22:1b:24:0b:54: a7:43:20:74:2a:26:1b:22:ea:a9:4f:8d:fc:6a:37:5e:0a:88: c8:fb:51:18:7c:0f:fc:2a:35:fd:1b:90:4b:8c:c0:85:b8:50: b6:a5:60:25:e6:b9:74:44:62:be:79:7a:e3:ad:17:f3:3b:dc: 38:ca:76:12:21:28:49:81:ca:22:be:b5:80:3d:4e:9c:a2:75: 76:b0:11:e2:be:46:3d:6b:ac:7f:ac:09:4e:07:19:1c:89:7f: c7:62:94:56:47:3e:55:fa:13:53:6b:64:aa:73:65:0f:63:08: d2:73:21:71:0d:07:32:f4:45:db:a5:d4:dc:f4:1e:1d:e1:63: f1:7d:0d:91:f0:97:39:82:1c:1b:8b:aa:74:e7:33:3b:2b:af: ff:cc:d8:a1:55:73:fc:d0:a7:da:db:25:d5:3b:0e:0a:cd:c8: 27:5d:bb:88:25:19:03:b8:62:9a:0f:21:c9:db:1a:79:1a:ac: ee:c2:78:ce:a7:97:c8:86:30:ec:c2:a0:88:4a:83:c9:13:b2: b2:3e:94:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u3Ip6Km+Lkn77aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ZjMyMDBjZjktZjJiMy00NTA0LWEyNzktNTZkODMwN2IyZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuXZsTh5GB4HGFK5LP1wyYiHACsW43WkFAbg vmirSC0HXf01DGenCWkDTx/Yq2h9oOQoBislemSxyrQuB9gtyfr1TsP/Hv147S9F pRoQJzAu1BQbEq9OkRoKk2wPw87cdnRFsjpos5q67lY7IO1Z9p22w1JOLJ8rqEh9 wh02OFVMc1HseN3SN64UKzQmf8cZsUJZFsCcPO5Ec4YnbOv6zBOh4LQ6CIpx7nGg SF53jb3hc+qZ6gOUwEWpFKuzqJhjqCrSXmljcsqRMAqD7Fh4Q97i7UeUTSEoFtQE 3WQlgiHJaAV4xpM+Q5enhdwkV/7vvF5zA6kDXqDanWKyHIXuBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsbR4R2HjTVbKTkYQlqxIh+jMN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMjU2NTAxOTctOTNjZS0z OGE2LWE1ZmYtNGU0MzNhMmJkYmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjzqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMwdol0Ph11vKpMN3r9ei4stB9xucNheSGtpGUTUqfnimya8bNZnH8Fr 9yIAJl+r4qQiGyQLVKdDIHQqJhsi6qlPjfxqN14KiMj7URh8D/wqNf0bkEuMwIW4 ULalYCXmuXREYr55euOtF/M73DjKdhIhKEmByiK+tYA9TpyidXawEeK+Rj1rrH+s CU4HGRyJf8dilFZHPlX6E1NrZKpzZQ9jCNJzIXENBzL0Rdul1Nz0Hh3hY/F9DZHw lzmCHBuLqnTnMzsrr//M2KFVc/zQp9rbJdU7DgrNyCddu4glGQO4YpoPIcnbGnka rO7CeM6nl8iGMOzCoIhKg8kTsrI+lBI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:28 2025 by rpki-client