$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/4deac7bd-bb42-3c2d-9be3-d984835111b5.roa File: 4deac7bd-bb42-3c2d-9be3-d984835111b5.roa (raw, json) Hash identifier: 3wTb7Efn/lmtsoXxQKO73uGh+rX9gsiaEZa8H3NkaBM= Subject key identifier: 35:53:81:1E:DF:10:63:AA:46:BF:5D:C8:1E:A1:20:FA:12:2D:22:43 Certificate issuer: /CN=a1f49b6f-a170-485e-8c07-d518b906c6ae Certificate serial: 010D0C9F432858484D758DFD8FEC009EE3261B80 Authority key identifier: 5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/4deac7bd-bb42-3c2d-9be3-d984835111b5.roa Signing time: Mon 23 Dec 2024 14:00:51 +0000 ROA not before: Mon 23 Dec 2024 14:00:51 +0000 ROA not after: Sun 23 Mar 2025 13:00:51 +0000 asID: 25637 IP address blocks: 66.228.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:75:8d:fd:8f:ec:00:9e:e3:26:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1f49b6f-a170-485e-8c07-d518b906c6ae Validity Not Before: Dec 23 14:00:51 2024 GMT Not After : Mar 23 13:00:51 2025 GMT Subject: CN=cd254b2c-e3e4-46a9-ac93-e594bc97c41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:e3:d9:b0:1d:80:e5:75:e2:02:8d:44:62: 9b:74:99:53:66:52:7d:68:14:a8:39:3d:8b:c2:4c: c4:01:cf:7e:cd:d6:cd:da:a4:e6:d3:6f:e2:d6:37: 25:c8:65:fb:82:54:62:2f:3a:e2:aa:f0:ee:96:c4: 46:4c:47:c7:06:37:00:30:9b:68:d0:7c:09:79:ef: 95:26:45:81:87:60:f1:01:02:21:c4:43:b1:25:a0: a6:01:66:18:07:8b:38:c7:fa:53:29:65:fc:3a:e1: ab:7f:c6:a7:d9:e9:2e:3d:d2:7b:13:1c:f3:30:b5: ef:f9:e2:28:ca:8e:d5:69:c1:5a:f7:c6:41:d8:b2: 77:a0:28:1f:3d:f5:03:27:b2:78:38:71:3c:ea:2c: 17:a7:79:39:92:2d:98:8f:57:e7:21:4d:ea:05:6a: c4:98:44:19:90:b5:9d:21:3b:93:98:70:1b:b9:fc: 10:1d:5a:f3:bc:ef:26:7d:29:69:49:94:08:2c:36: e6:08:30:41:5e:3e:e6:ea:e1:e7:b6:1b:81:95:58: a3:c1:4e:24:e4:83:77:1c:f6:bc:c8:76:b6:03:6c: 40:21:31:9e:f1:e8:12:a2:83:01:0e:06:93:28:f4: 58:8f:60:7c:d6:f9:8b:ba:86:b2:3b:8f:8d:d2:26: 36:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:53:81:1E:DF:10:63:AA:46:BF:5D:C8:1E:A1:20:FA:12:2D:22:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/4deac7bd-bb42-3c2d-9be3-d984835111b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl X509v3 Authority Key Identifier: keyid:5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer sbgp-ipAddrBlock: critical IPv4: 66.228.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ec:31:77:f3:08:79:6f:f5:42:77:1a:05:09:fc:21:12:59: 18:c5:ce:f8:35:3d:84:de:e7:3e:e6:81:54:72:de:d2:62:61: d0:2a:ae:79:5e:de:84:1a:da:f1:98:32:0e:94:c6:d4:c0:8d: 62:b0:5a:84:f2:6a:d1:75:61:89:6e:6a:3f:6b:97:cc:c5:9e: 4c:9a:82:45:89:63:6e:e5:1e:66:3c:7b:24:86:2d:68:90:7b: c0:ca:fb:15:7b:14:d2:09:f2:f3:5a:92:38:94:38:8d:7f:e5: fb:a7:49:2f:74:50:56:5e:bb:7a:fc:db:6a:6f:1c:e0:cc:99: 7e:a6:be:a5:65:4b:50:6b:4d:c4:41:d2:ea:48:c6:05:ea:ea: d3:59:22:bd:ff:1b:d8:80:bb:5d:1d:9b:32:15:0f:de:99:5e: ab:cd:f2:2b:49:b8:d8:4b:56:da:9f:a0:81:43:fa:c4:5a:e9: c6:12:61:12:73:a6:cb:42:e5:0f:d3:48:d6:96:ad:61:78:ed: 95:1c:14:d0:ea:db:e7:d7:fe:51:e1:11:94:dc:9f:93:a0:4b: 0c:32:c9:52:d3:ad:c9:73:04:96:a6:f1:6f:85:bd:1d:57:aa: a5:d8:9e:b9:25:f6:78:22:c0:9c:a1:7a:36:fa:1b:f5:ce:7d: 0a:d7:aa:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNdY39j+wAnuMmG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFmNDliNmYtYTE3MC00ODVlLThjMDctZDUxOGI5MDZj NmFlMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk Y2QyNTRiMmMtZTNlNC00NmE5LWFjOTMtZTU5NGJjOTdjNDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Dj2bAdgOV14gKNRGKbdJlTZlJ9aBSoOT2L wkzEAc9+zdbN2qTm02/i1jclyGX7glRiLzriqvDulsRGTEfHBjcAMJto0HwJee+V JkWBh2DxAQIhxEOxJaCmAWYYB4s4x/pTKWX8OuGrf8an2ekuPdJ7ExzzMLXv+eIo yo7VacFa98ZB2LJ3oCgfPfUDJ7J4OHE86iwXp3k5ki2Yj1fnIU3qBWrEmEQZkLWd ITuTmHAbufwQHVrzvO8mfSlpSZQILDbmCDBBXj7m6uHnthuBlVijwU4k5IN3HPa8 yHa2A2xAITGe8egSooMBDgaTKPRYj2B81vmLuoayO4+N0iY2XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVTgR7fEGOqRr9dyB6hIPoSLSJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMWY0 OWI2Zi1hMTcwLTQ4NWUtOGMwNy1kNTE4YjkwNmM2YWUvNGRlYWM3YmQtYmI0Mi0z YzJkLTliZTMtZDk4NDgzNTExMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTFmNDliNmYtYTE3MC00ODVlLThj MDctZDUxOGI5MDZjNmFlL2ExZjQ5YjZmLWExNzAtNDg1ZS04YzA3LWQ1MThiOTA2 YzZhZS5jcmwwHwYDVR0jBBgwFoAUX9bbEgNtVA77X1VfwUr8INlUplQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMWY0OWI2Zi1hMTcwLTQ4NWUtOGMwNy1kNTE4 YjkwNmM2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQuTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzsMXfzCHlv9UJ3GgUJ/CESWRjFzvg1PYTe5z7mgVRy3tJiYdAqrnle 3oQa2vGYMg6UxtTAjWKwWoTyatF1YYluaj9rl8zFnkyagkWJY27lHmY8eySGLWiQ e8DK+xV7FNIJ8vNakjiUOI1/5funSS90UFZeu3r822pvHODMmX6mvqVlS1BrTcRB 0upIxgXq6tNZIr3/G9iAu10dmzIVD96ZXqvN8itJuNhLVtqfoIFD+sRa6cYSYRJz pstC5Q/TSNaWrWF47ZUcFNDq2+fX/lHhEZTcn5OgSwwyyVLTrclzBJam8W+FvR1X qqXYnrkl9ngiwJyhejb6G/XOfQrXqgY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:39 2025 by rpki-client