$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa File: 3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa (raw, json) Hash identifier: RZGIp1XsUbeUGGXIdWabrtOSlWNTXKDK36PFzB86Mds= Subject key identifier: 36:55:E3:EE:A0:B8:4A:88:20:0A:FB:A2:6F:FD:16:50:A5:C9:C4:82 Certificate issuer: /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Certificate serial: 010D0C9F43285848A29B4995BDA8D1C834D1A440 Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 26935 IP address blocks: 66.35.0.0/20 maxlen: 20 69.55.208.0/20 maxlen: 20 207.32.192.0/20 maxlen: 20 2607:f688::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:49:95:bd:a8:d1:c8:34:d1:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=776d48f5-8944-4355-a69b-ff6796398c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2a:87:34:a3:1d:04:ff:b0:37:bb:ea:c8:50: d9:7e:ec:3e:04:02:93:cb:8f:cf:5c:72:b3:bd:18: 20:e3:69:70:26:d8:f3:04:a3:ce:89:fd:e7:f8:14: de:99:ef:4e:ce:4a:20:82:e3:25:fa:35:ed:d5:7f: 28:36:48:2a:73:48:84:c5:70:0b:54:88:d0:85:67: b4:04:f5:9b:a8:ae:40:c1:50:24:ce:ba:d2:c0:0a: e6:7a:5f:ca:0c:8f:96:e6:88:fd:2d:b6:c8:f1:bb: f7:05:79:68:fe:c4:be:b9:cc:4f:5e:c8:67:fc:97: 1e:42:3a:97:d4:55:78:c6:58:d3:de:b3:b3:5c:e0: 93:1f:6a:8c:7a:04:91:53:27:6e:67:37:86:02:a4: c9:f4:b2:95:83:cd:6e:c9:40:e7:c8:f0:f4:08:c4: 57:7b:33:95:18:be:d5:cf:b5:3d:7d:5d:48:4a:23: 75:6f:53:aa:65:c4:9a:76:2a:70:32:24:b1:22:6b: 4e:81:96:5b:02:5e:bb:93:09:50:c2:0f:89:61:79: 98:df:24:0f:1a:ac:d8:90:0b:3a:ef:6a:16:6a:cb: dc:75:af:f8:1e:c4:7f:ea:13:fd:72:69:6f:15:a3: ab:8d:e6:95:93:fd:5b:ac:04:c1:bd:d4:38:5f:7f: 64:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:55:E3:EE:A0:B8:4A:88:20:0A:FB:A2:6F:FD:16:50:A5:C9:C4:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl X509v3 Authority Key Identifier: keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer sbgp-ipAddrBlock: critical IPv4: 66.35.0.0/20 69.55.208.0/20 207.32.192.0/20 IPv6: 2607:f688::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:66:02:1f:28:a6:fc:86:64:11:2e:41:43:f1:03:ee:61:3e: 78:d4:49:f3:7c:cf:af:6a:69:63:7f:36:5d:56:f0:a9:d7:60: 12:88:9d:0e:c9:5e:3f:55:70:68:22:42:9c:c8:96:88:9f:17: 5d:1a:65:05:05:61:78:6b:5c:33:2a:82:8b:2a:d9:05:d5:52: 5e:d9:eb:c1:be:a3:1d:50:ed:78:c1:eb:17:32:1d:90:53:32: c8:a9:c0:44:ba:34:b7:bd:35:c4:9d:9e:ac:8d:0d:1d:74:43: aa:e2:fd:25:5a:bf:e1:19:7f:1b:a4:32:ba:9d:a9:f9:6d:ef: 35:9b:6c:89:26:67:45:b1:fa:98:53:17:a9:4e:1f:40:74:23: 56:a7:4c:4f:5d:2b:4b:9a:eb:15:8f:7a:d9:02:70:7a:86:cf: 1c:cc:4b:39:ed:12:f8:29:4b:c5:9a:ba:57:8e:bc:40:7d:1d: 52:ef:2b:44:68:bf:fc:ff:f2:45:21:5d:37:8c:00:66:9b:b8: 94:ef:60:c1:0a:39:67:f9:76:c8:25:cf:a0:98:c6:5a:c5:bb: 39:cd:a2:be:a7:43:39:95:9e:0a:1a:99:33:bb:9c:db:bb:39: 5e:a4:be:1c:a7:66:80:25:6a:39:2d:ef:df:67:e9:f7:e8:60: 3d:ea:69:81 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEiim0mVvajRyDTRpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJm M2M4MB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk Nzc2ZDQ4ZjUtODk0NC00MzU1LWE2OWItZmY2Nzk2Mzk4Yzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SqHNKMdBP+wN7vqyFDZfuw+BAKTy4/PXHKz vRgg42lwJtjzBKPOif3n+BTeme9OzkogguMl+jXt1X8oNkgqc0iExXALVIjQhWe0 BPWbqK5AwVAkzrrSwArmel/KDI+W5oj9LbbI8bv3BXlo/sS+ucxPXshn/JceQjqX 1FV4xljT3rOzXOCTH2qMegSRUyduZzeGAqTJ9LKVg81uyUDnyPD0CMRXezOVGL7V z7U9fV1ISiN1b1OqZcSadipwMiSxImtOgZZbAl67kwlQwg+JYXmY3yQPGqzYkAs6 72oWasvcda/4HsR/6hP9cmlvFaOrjeaVk/1brATBvdQ4X39kUwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFDZV4+6guEqIIAr7om/9FlClycSCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm YmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvM2I4ZTg0MWYtMGExZS0z NTZiLTkzOTAtYmMyZDYxZjFjNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZmJkOGItNGVkOS00ZjVkLWE4 ZjAtNzU1OWQ5MWJmM2M4L2ZjMWZiZDhiLTRlZDktNGY1ZC1hOGYwLTc1NTlkOTFi ZjNjOC5jcmwwHwYDVR0jBBgwFoAUbKtKsvVYO/RVBP3F8Yue3m5JAT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5 ZDkxYmYzYzguY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEQiMAAwQE RTfQAwQEzyDAMA0EAgACMAcDBQAmB/aIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADBmAh8opvyGZBEuQUPx A+5hPnjUSfN8z69qaWN/Nl1W8KnXYBKInQ7JXj9VcGgiQpzIloifF10aZQUFYXhr XDMqgosq2QXVUl7Z68G+ox1Q7XjB6xcyHZBTMsipwES6NLe9NcSdnqyNDR10Q6ri /SVav+EZfxukMrqdqflt7zWbbIkmZ0Wx+phTF6lOH0B0I1anTE9dK0ua6xWPetkC cHqGzxzMSzntEvgpS8WauleOvEB9HVLvK0Rov/z/8kUhXTeMAGabuJTvYMEKOWf5 dsglz6CYxlrFuznNor6nQzmVngoamTO7nNu7OV6kvhynZoAlajkt799n6ffoYD3q aYE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:29 2025 by rpki-client