$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e93b652e-f4e2-3292-b364-76a41c761a27.roa File: e93b652e-f4e2-3292-b364-76a41c761a27.roa (raw, json) Hash identifier: sI0UYrg5qcQ8Sglg2tQo4OH/iVlWHb41rR3/r3sSiI0= Subject key identifier: AC:70:04:C5:1C:0D:A1:41:97:6F:9E:E2:AA:48:93:CA:8E:63:C0:0E Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584812D52AF1EDDF87C3209BF580 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e93b652e-f4e2-3292-b364-76a41c761a27.roa Signing time: Mon 02 Dec 2024 14:00:51 +0000 ROA not before: Mon 02 Dec 2024 14:00:51 +0000 ROA not after: Sun 02 Mar 2025 14:00:51 +0000 asID: 6453 IP address blocks: 66.198.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:12:d5:2a:f1:ed:df:87:c3:20:9b:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Dec 2 14:00:51 2024 GMT Not After : Mar 2 14:00:51 2025 GMT Subject: CN=a186f263-467e-4ceb-bd73-8df948819e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fa:31:ce:4a:b1:9a:35:35:bf:37:0e:e9:d5: 58:9c:bd:36:56:7e:ab:bb:d3:a1:20:97:8b:d5:9d: 32:43:20:25:c2:2b:8a:68:ce:b7:00:8d:83:f3:5b: a0:0c:3e:17:69:99:27:7b:41:22:bc:db:27:39:a4: 5c:1b:dd:f2:f9:c1:6a:fa:6b:37:ba:bb:d4:17:78: 69:e5:ad:b9:1c:0f:e1:01:cd:bc:12:b2:e7:33:06: a9:34:52:4f:d7:10:1a:2b:00:ca:fa:69:4a:4d:b2: 5b:01:ae:04:72:12:a4:c0:5e:c4:ac:01:88:a9:0b: 91:8f:bb:76:3a:a9:67:b4:a8:26:66:5a:48:c4:0a: e2:55:15:6d:9f:4a:23:6a:8f:ba:88:9d:9e:86:2b: ca:74:3c:09:8c:0b:c9:c9:c9:24:76:ab:ce:bc:74: 1e:7f:66:08:fa:fd:fd:74:60:19:3e:87:39:5e:b8: 55:a2:80:08:2a:39:36:eb:02:63:d7:7f:00:e1:9a: 94:51:e7:b0:ae:73:06:c6:8e:af:e4:7e:1c:fb:e1: ea:36:87:e9:fa:63:fd:ad:9b:5c:89:10:32:c7:0c: a1:dc:67:c9:a1:bf:b8:b1:ec:81:5c:49:88:3e:88: a6:27:5b:ad:18:93:06:75:9b:74:c8:c3:4b:ae:7e: 82:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:70:04:C5:1C:0D:A1:41:97:6F:9E:E2:AA:48:93:CA:8E:63:C0:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e93b652e-f4e2-3292-b364-76a41c761a27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 66.198.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fe:dc:d1:94:75:99:45:48:7f:4f:34:00:a3:66:75:93:a5: e0:83:67:4b:dd:cd:f7:44:4d:53:a5:2e:7e:8f:3c:c7:b1:e7: a7:2d:c6:16:27:18:2d:7e:8a:32:05:c2:56:5f:57:8f:69:0f: de:1c:47:ee:29:cf:f9:b7:30:e8:bc:c2:79:dd:64:2b:68:69: 6d:45:f7:2a:f0:16:01:f8:03:f4:93:21:0e:49:8e:66:34:49: 02:49:d9:33:3b:f1:e7:67:24:fc:df:4c:8a:78:07:da:db:68: 72:5e:b6:cc:0f:48:54:a6:b5:40:c2:39:f5:68:bb:c0:dc:c8: 21:ad:cb:55:0d:f7:2b:4f:20:30:96:93:e5:82:f6:55:5d:f7: 83:95:0b:b0:8a:3f:6b:56:9b:cf:3c:1a:fa:d8:d0:ab:f1:3d: 84:3a:35:97:ac:e7:09:c0:2c:42:f3:3a:11:c8:2f:44:a2:1f: db:0f:c5:46:21:f5:57:66:60:3a:b6:c5:89:26:a2:7a:d2:53: fc:73:5f:b0:56:0a:ec:c8:ee:3a:38:c0:b7:07:6c:3f:5d:c1: 83:a9:ce:33:92:7a:97:b0:67:d0:a1:cd:17:5f:0b:45:3e:ce: 68:fe:99:67:2e:73:ee:c8:eb:c9:97:21:99:af:d6:09:47:9d: e0:82:13:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1Srx7d+HwyCb9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk YTE4NmYyNjMtNDY3ZS00Y2ViLWJkNzMtOGRmOTQ4ODE5ZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/oxzkqxmjU1vzcO6dVYnL02Vn6ru9OhIJeL 1Z0yQyAlwiuKaM63AI2D81ugDD4XaZkne0EivNsnOaRcG93y+cFq+ms3urvUF3hp 5a25HA/hAc28ErLnMwapNFJP1xAaKwDK+mlKTbJbAa4EchKkwF7ErAGIqQuRj7t2 OqlntKgmZlpIxAriVRVtn0ojao+6iJ2ehivKdDwJjAvJyckkdqvOvHQef2YI+v39 dGAZPoc5XrhVooAIKjk26wJj138A4ZqUUeewrnMGxo6v5H4c++HqNofp+mP9rZtc iRAyxwyh3GfJob+4seyBXEmIPoimJ1utGJMGdZt0yMNLrn6CTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxwBMUcDaFBl2+e4qpIk8qOY8AOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvZTkzYjY1MmUtZjRlMi0z MjkyLWIzNjQtNzZhNDFjNzYxYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQsZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr+3NGUdZlFSH9PNACjZnWTpeCDZ0vdzfdETVOlLn6PPMex56ctxhYn GC1+ijIFwlZfV49pD94cR+4pz/m3MOi8wnndZCtoaW1F9yrwFgH4A/STIQ5JjmY0 SQJJ2TM78ednJPzfTIp4B9rbaHJetswPSFSmtUDCOfVou8DcyCGty1UN9ytPIDCW k+WC9lVd94OVC7CKP2tWm888GvrY0KvxPYQ6NZes5wnALELzOhHIL0SiH9sPxUYh 9VdmYDq2xYkmonrSU/xzX7BWCuzI7jo4wLcHbD9dwYOpzjOSepewZ9ChzRdfC0U+ zmj+mWcuc+7I68mXIZmv1glHneCCE/g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:04 2025 by rpki-client