$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/66b96ba3-a619-320e-96a1-c3dfb3782abd.roa File: 66b96ba3-a619-320e-96a1-c3dfb3782abd.roa (raw, json) Hash identifier: gYkFwDi+u60cb+PSdow3K6/AoFd4eEkgcCT9JQrLubY= Subject key identifier: 63:4F:C9:17:CB:CB:50:1A:89:CF:40:39:3E:40:FD:58:94:CD:2D:5B Certificate issuer: /CN=1f7f3ed0-ca8e-409b-b6ad-4f431743c90a Certificate serial: 010D0C9F43285848FD56AB4E7BEA0CF920036520 Authority key identifier: 2E:79:3C:7C:B8:7B:88:21:61:19:74:23:68:9E:39:59:15:D0:E0:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/66b96ba3-a619-320e-96a1-c3dfb3782abd.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 398982 IP address blocks: 172.99.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:ab:4e:7b:ea:0c:f9:20:03:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f7f3ed0-ca8e-409b-b6ad-4f431743c90a Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=c8afdf23-a6b2-4d91-b057-55a4f0f7201a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:38:6b:99:8b:13:73:14:23:0a:a5:d4:0c:5e: 31:27:e7:15:3e:f3:e6:6c:ad:a2:83:96:0f:d8:7b: 44:ec:7a:03:81:52:6e:a1:78:86:70:42:1d:d0:42: f9:cf:02:d2:ec:c5:99:1b:ae:30:f4:e0:c0:9f:23: 5e:8d:a8:67:9f:da:54:83:e0:5d:2f:f5:f8:2c:47: 15:b3:1e:57:08:0b:1d:b2:31:52:0b:90:fa:cd:88: 58:2d:69:73:a0:9c:c1:81:24:3c:cd:7f:d4:59:cd: 27:c6:22:7a:57:76:41:84:5a:40:73:45:00:d7:ea: 86:78:8b:b3:67:34:aa:c5:6d:5d:ca:2b:4a:b2:1c: 97:77:c8:87:0d:86:bd:f5:6d:b8:0d:f4:d7:6c:22: 0c:75:2e:b6:0d:7b:70:70:82:05:91:b8:a4:73:bf: 21:f1:c5:bb:0c:bc:c8:eb:6b:4e:2f:71:f6:d3:8a: ec:2e:c4:f4:34:61:b1:0a:8f:e7:84:d6:d4:27:62: a2:2d:f9:fd:df:81:19:51:02:43:6f:d7:88:fb:37: 6a:8d:e7:66:48:16:e1:8f:ed:9a:81:72:51:a7:85: 6a:66:c9:b4:65:86:be:f1:f0:c8:89:54:17:8d:e9: 77:4f:5f:b2:3d:42:b5:0a:af:75:e0:4a:16:b2:ba: cd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4F:C9:17:CB:CB:50:1A:89:CF:40:39:3E:40:FD:58:94:CD:2D:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/66b96ba3-a619-320e-96a1-c3dfb3782abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.crl X509v3 Authority Key Identifier: keyid:2E:79:3C:7C:B8:7B:88:21:61:19:74:23:68:9E:39:59:15:D0:E0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f7f3ed0-ca8e-409b-b6ad-4f431743c90a.cer sbgp-ipAddrBlock: critical IPv4: 172.99.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:f4:a4:d2:e5:e1:86:61:4c:78:5b:e3:db:9d:21:be:63:dc: cd:d0:ba:11:4d:f9:9b:f4:c1:87:80:97:65:d3:de:e5:6f:10: 28:dd:c0:00:63:47:5e:c4:27:78:49:24:72:31:2e:ee:bc:3c: 3b:fc:78:b5:1d:88:be:a5:d4:00:99:7c:89:0b:16:0c:00:ba: c5:f5:64:7d:3e:16:ba:58:af:4a:e7:11:76:56:e4:c9:7a:fb: 29:06:15:6b:d9:0b:13:52:b2:92:1b:14:43:f7:2c:34:de:43: 85:9f:5b:b0:3f:57:3f:ec:ca:c7:da:a1:a5:30:39:c2:33:a3: 6c:c8:cf:dc:6b:16:e2:f9:a1:5b:82:cb:dc:31:a7:5e:03:94: 01:ed:c4:47:aa:0e:18:70:92:16:af:63:92:59:0a:76:89:b7: 8e:2b:44:ed:2e:f4:64:e7:ab:de:e4:52:82:71:d4:80:d8:aa: 7c:7a:23:69:2d:d5:14:aa:41:2c:8e:ab:be:73:67:54:e4:ac: 3c:89:4a:6b:3b:08:2c:f6:c5:92:ef:8f:ee:a8:9f:16:19:76: b0:52:de:ab:e3:72:2c:13:b8:a3:2f:87:c5:06:c5:a0:70:05: 97:67:24:24:a7:1c:b8:b9:75:17:0e:a7:9f:f3:0d:0e:b1:21: c4:e3:dc:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VqtOe+oM+SADZSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY3ZjNlZDAtY2E4ZS00MDliLWI2YWQtNGY0MzE3NDNj OTBhMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzhhZmRmMjMtYTZiMi00ZDkxLWIwNTctNTVhNGYwZjcyMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjhrmYsTcxQjCqXUDF4xJ+cVPvPmbK2ig5YP 2HtE7HoDgVJuoXiGcEId0EL5zwLS7MWZG64w9ODAnyNejahnn9pUg+BdL/X4LEcV sx5XCAsdsjFSC5D6zYhYLWlzoJzBgSQ8zX/UWc0nxiJ6V3ZBhFpAc0UA1+qGeIuz ZzSqxW1dyitKshyXd8iHDYa99W24DfTXbCIMdS62DXtwcIIFkbikc78h8cW7DLzI 62tOL3H204rsLsT0NGGxCo/nhNbUJ2KiLfn934EZUQJDb9eI+zdqjedmSBbhj+2a gXJRp4VqZsm0ZYa+8fDIiVQXjel3T1+yPUK1Cq914EoWsrrNuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNPyRfLy1Aaic9AOT5A/ViUzS1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjdm M2VkMC1jYThlLTQwOWItYjZhZC00ZjQzMTc0M2M5MGEvNjZiOTZiYTMtYTYxOS0z MjBlLTk2YTEtYzNkZmIzNzgyYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWY3ZjNlZDAtY2E4ZS00MDliLWI2 YWQtNGY0MzE3NDNjOTBhLzFmN2YzZWQwLWNhOGUtNDA5Yi1iNmFkLTRmNDMxNzQz YzkwYS5jcmwwHwYDVR0jBBgwFoAULnk8fLh7iCFhGXQjaJ45WRXQ4PwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjdmM2VkMC1jYThlLTQwOWItYjZhZC00ZjQz MTc0M2M5MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKH0pNLl4YZhTHhb49udIb5j3M3QuhFN+Zv0wYeAl2XT3uVvECjdwABj R17EJ3hJJHIxLu68PDv8eLUdiL6l1ACZfIkLFgwAusX1ZH0+FrpYr0rnEXZW5Ml6 +ykGFWvZCxNSspIbFEP3LDTeQ4WfW7A/Vz/sysfaoaUwOcIzo2zIz9xrFuL5oVuC y9wxp14DlAHtxEeqDhhwkhavY5JZCnaJt44rRO0u9GTnq97kUoJx1IDYqnx6I2kt 1RSqQSyOq75zZ1TkrDyJSms7CCz2xZLvj+6onxYZdrBS3qvjciwTuKMvh8UGxaBw BZdnJCSnHLi5dRcOp5/zDQ6xIcTj3II= -----END CERTIFICATE-----Generated at Fri Mar 14 13:15:44 2025 by rpki-client