$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/c36233d7-5966-3536-923c-9a7d1cf31774.roa File: c36233d7-5966-3536-923c-9a7d1cf31774.roa (raw, json) Hash identifier: oX4N+39tr97STYFPQXBGBOruwVy8t+GjCwS2wBbvKbw= Subject key identifier: 18:07:F6:1D:70:78:9A:9D:BD:2C:36:BC:F3:96:8E:EF:C1:16:2D:31 Certificate issuer: /CN=32ed61a1-e1cd-40f4-ae04-a6a7a24248eb Certificate serial: 010D0C9F4328584834557D900836C3A2ED50C140 Authority key identifier: EA:CE:FA:4E:91:37:CB:B0:FF:EE:79:E5:EA:80:CA:5C:8A:EC:EF:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/c36233d7-5966-3536-923c-9a7d1cf31774.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 398229 IP address blocks: 66.54.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:7d:90:08:36:c3:a2:ed:50:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ed61a1-e1cd-40f4-ae04-a6a7a24248eb Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=300f28d6-1cc6-4c5a-9c28-9ac59fe44646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6a:a9:fa:14:91:af:3d:c8:cb:b0:d7:a0:46: 8b:a8:ca:01:25:97:36:70:e4:57:be:02:fb:a6:5e: 21:18:cf:5c:1b:ac:e5:e3:f2:06:45:36:eb:7e:02: 1a:b8:8c:6c:2e:1a:a9:5c:7b:9a:0e:36:d4:8f:2e: bf:b6:8f:5a:12:d1:2f:94:d9:4b:8d:7e:3c:1e:bd: 19:b4:d5:a2:e9:63:66:ef:e6:0a:69:f7:ab:9c:92: 92:7d:58:c6:03:cc:fb:b2:78:ca:dd:31:c3:8d:0c: e8:0e:4a:5b:d8:19:9b:db:00:df:42:a9:9a:40:65: 36:e0:49:01:21:47:cc:d6:6c:9f:35:92:cf:01:91: 50:07:03:c4:59:d9:89:e4:ed:01:3f:20:34:ab:ba: a3:08:78:ee:a0:95:02:fb:aa:11:e8:51:05:7a:ac: 9f:33:00:da:b7:e5:f2:1d:57:7f:61:bc:fb:cd:be: 65:63:86:d9:3a:96:99:0d:c8:ce:64:ae:72:39:0e: 07:c7:08:d9:4e:44:38:fc:e1:1b:77:a6:94:8d:f5: 81:ba:c2:da:26:1d:f6:1d:0b:e2:ce:59:28:b3:26: 36:fa:c3:98:82:4b:00:42:26:e1:2f:75:1f:de:6f: 83:cc:3d:b2:ce:81:9b:87:1f:ad:26:0f:46:72:56: 34:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:07:F6:1D:70:78:9A:9D:BD:2C:36:BC:F3:96:8E:EF:C1:16:2D:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/c36233d7-5966-3536-923c-9a7d1cf31774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.crl X509v3 Authority Key Identifier: keyid:EA:CE:FA:4E:91:37:CB:B0:FF:EE:79:E5:EA:80:CA:5C:8A:EC:EF:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.cer sbgp-ipAddrBlock: critical IPv4: 66.54.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b6:53:1e:57:ff:ad:1b:94:98:44:02:11:02:a8:51:aa:46: 53:51:b5:77:a4:f3:ba:3c:40:b7:fb:36:ea:6d:41:d5:ac:c8: 1a:3f:59:15:4c:4b:b6:cf:52:57:25:28:e5:5b:60:52:ca:02: e2:75:59:86:d2:2c:f8:f3:28:2a:6b:96:14:e0:fd:4a:68:90: 79:d0:c4:37:cb:a1:1a:df:ae:d7:73:64:9d:73:20:fa:fd:a0: 03:c6:3e:39:6e:e6:85:02:f2:cc:22:52:ee:83:95:d9:ef:ab: 29:46:c2:e1:45:12:e5:ef:b9:a3:cb:d5:85:93:33:55:f3:47: 7a:6b:53:68:c2:7b:92:4f:fb:c4:d8:da:c7:e7:36:5f:36:9c: e2:1c:f5:bd:73:a4:42:55:af:8d:c0:24:7c:4b:08:27:49:09: 16:ef:c7:ed:98:5e:bf:37:81:cf:fc:74:d2:32:50:2a:72:04: bb:cd:04:f0:88:af:ec:c9:40:65:27:be:d9:21:6b:69:d1:4f: 16:05:b6:1c:1d:ee:66:e6:d5:7a:22:a5:4a:de:28:37:a0:cd: 46:e0:16:e1:bd:09:3c:98:51:a6:da:73:04:56:4f:d7:d1:5b: 6d:d0:b6:36:2c:cd:d9:32:2d:dd:f6:4f:73:34:8e:fd:2c:b5: 2e:89:3e:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VX2QCDbDou1QwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlZDYxYTEtZTFjZC00MGY0LWFlMDQtYTZhN2EyNDI0 OGViMB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk MzAwZjI4ZDYtMWNjNi00YzVhLTljMjgtOWFjNTlmZTQ0NjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2qp+hSRrz3Iy7DXoEaLqMoBJZc2cORXvgL7 pl4hGM9cG6zl4/IGRTbrfgIauIxsLhqpXHuaDjbUjy6/to9aEtEvlNlLjX48Hr0Z tNWi6WNm7+YKafernJKSfVjGA8z7snjK3THDjQzoDkpb2Bmb2wDfQqmaQGU24EkB IUfM1myfNZLPAZFQBwPEWdmJ5O0BPyA0q7qjCHjuoJUC+6oR6FEFeqyfMwDat+Xy HVd/Ybz7zb5lY4bZOpaZDcjOZK5yOQ4HxwjZTkQ4/OEbd6aUjfWBusLaJh32HQvi zlkosyY2+sOYgksAQibhL3Uf3m+DzD2yzoGbhx+tJg9GclY0+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgH9h1weJqdvSw2vPOWju/BFi0xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMmVk NjFhMS1lMWNkLTQwZjQtYWUwNC1hNmE3YTI0MjQ4ZWIvYzM2MjMzZDctNTk2Ni0z NTM2LTkyM2MtOWE3ZDFjZjMxNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzJlZDYxYTEtZTFjZC00MGY0LWFl MDQtYTZhN2EyNDI0OGViLzMyZWQ2MWExLWUxY2QtNDBmNC1hZTA0LWE2YTdhMjQy NDhlYi5jcmwwHwYDVR0jBBgwFoAU6s76TpE3y7D/7nnl6oDKXIrs73UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMmVkNjFhMS1lMWNkLTQwZjQtYWUwNC1hNmE3 YTI0MjQ4ZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQjZqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEG2Ux5X/60blJhEAhECqFGqRlNRtXek87o8QLf7NuptQdWsyBo/WRVM S7bPUlclKOVbYFLKAuJ1WYbSLPjzKCprlhTg/UpokHnQxDfLoRrfrtdzZJ1zIPr9 oAPGPjlu5oUC8swiUu6DldnvqylGwuFFEuXvuaPL1YWTM1XzR3prU2jCe5JP+8TY 2sfnNl82nOIc9b1zpEJVr43AJHxLCCdJCRbvx+2YXr83gc/8dNIyUCpyBLvNBPCI r+zJQGUnvtkha2nRTxYFthwd7mbm1XoipUreKDegzUbgFuG9CTyYUabacwRWT9fR W23QtjYszdkyLd32T3M0jv0stS6JPiI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:22 2025 by rpki-client