$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/849770b3-423d-36e5-898b-d99735708a9c.roa File: 849770b3-423d-36e5-898b-d99735708a9c.roa (raw, json) Hash identifier: rSPqjonZyxlNwM3BbG5R4mvIF7OcKRAMGrD9DU0GdFA= Subject key identifier: 7F:5E:E1:EF:A5:90:5A:3E:D9:ED:55:DE:A5:17:D4:CA:97:F4:C1:A6 Certificate issuer: /CN=459d6e61-8613-4289-be34-cb0fe0aeea6e Certificate serial: 010D0C9F43285848BBBB81EE69546FCECA1E10C0 Authority key identifier: E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/849770b3-423d-36e5-898b-d99735708a9c.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 31919 IP address blocks: 66.119.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:81:ee:69:54:6f:ce:ca:1e:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459d6e61-8613-4289-be34-cb0fe0aeea6e Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=9312c4b9-0d3b-4b17-880c-d03f00372ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:27:15:23:5f:0d:5f:a4:cb:13:34:1a:a1:00: c5:c3:13:e6:6f:4d:9e:11:48:92:b5:45:f6:93:c3: ed:14:6f:f7:a0:f9:df:f0:20:35:93:6d:d7:80:71: 8f:55:a3:99:71:00:20:99:2a:fb:da:94:b2:47:01: 48:ea:50:a0:1d:e3:53:72:12:e8:3e:c4:b5:4d:2d: a7:be:72:54:f0:9f:48:90:7e:fa:79:23:1a:6f:c4: 33:7c:78:5d:60:f2:8b:15:68:7f:54:ad:32:39:56: 4d:73:7d:be:d6:93:5a:30:2c:5c:d0:21:66:39:57: 87:d9:81:2d:36:57:88:70:5e:fb:49:e1:d4:d2:b1: 19:c2:48:30:7f:65:ed:67:c0:02:b7:0e:e2:0b:bf: d5:24:2a:cf:f7:8d:3a:62:aa:68:94:d5:9f:90:e3: f4:c1:9e:77:bb:81:ca:f5:fa:6e:af:f4:72:89:42: 89:07:71:18:d8:38:9f:3c:49:9c:d0:a1:f9:71:1f: 64:51:c2:1f:8b:fc:96:c6:49:a3:7c:fe:5e:d7:6f: 77:c0:6c:85:68:9d:ac:51:5a:57:36:ce:a7:91:85: 8e:d1:1d:5a:4e:4a:31:a3:a1:bd:4b:ec:89:8e:af: 44:a7:80:e9:36:ca:1e:7f:99:5b:de:88:b5:3b:c0: a7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5E:E1:EF:A5:90:5A:3E:D9:ED:55:DE:A5:17:D4:CA:97:F4:C1:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/849770b3-423d-36e5-898b-d99735708a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl X509v3 Authority Key Identifier: keyid:E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer sbgp-ipAddrBlock: critical IPv4: 66.119.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:de:60:11:fb:86:a1:8c:d5:f3:15:b5:fa:79:f0:0c:ab:74: f9:27:61:92:fe:5f:21:52:63:56:db:1d:dc:7b:43:d4:cd:fd: 1f:a7:2e:af:bf:9d:0c:b7:3c:cc:7f:df:df:cf:1a:fd:13:0b: aa:81:8a:5e:a1:67:d7:18:9f:7e:69:cb:1a:2f:6e:d0:00:47: 3a:c7:d8:46:dc:45:bd:f8:2e:16:f9:8f:ee:3c:5c:5f:e6:71: 17:b6:c3:38:c0:ca:e0:b2:5b:66:f8:b6:ba:ed:33:5b:ef:d8: c4:9c:88:4e:56:58:c7:33:a2:f7:df:5c:ce:ca:db:ea:39:15: d9:4f:62:2c:35:b4:64:ef:a4:a6:dd:4d:6a:a2:c4:e2:1f:87: 4a:35:0b:55:a5:09:07:ba:d7:97:db:16:8a:14:6e:b4:9d:c7: 97:20:d0:f2:63:e5:94:63:84:b2:b1:0a:8a:26:17:70:f2:b3: 5b:78:c2:2c:29:47:3a:3b:4c:59:11:73:7d:ff:88:89:13:1f: 07:3a:6f:68:6d:77:64:7b:8d:83:01:f6:d3:b6:d8:c1:91:ba: bb:0a:3c:ac:f9:02:f1:ad:1a:ff:96:34:31:69:63:6d:7f:7a: 89:96:67:ee:dd:f6:e8:ee:8d:00:d4:42:c6:cd:08:47:00:b5: c1:12:c6:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4HuaVRvzsoeEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU5ZDZlNjEtODYxMy00Mjg5LWJlMzQtY2IwZmUwYWVl YTZlMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk OTMxMmM0YjktMGQzYi00YjE3LTg4MGMtZDAzZjAwMzcyYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmycVI18NX6TLEzQaoQDFwxPmb02eEUiStUX2 k8PtFG/3oPnf8CA1k23XgHGPVaOZcQAgmSr72pSyRwFI6lCgHeNTchLoPsS1TS2n vnJU8J9IkH76eSMab8QzfHhdYPKLFWh/VK0yOVZNc32+1pNaMCxc0CFmOVeH2YEt NleIcF77SeHU0rEZwkgwf2XtZ8ACtw7iC7/VJCrP9406YqpolNWfkOP0wZ53u4HK 9fpur/RyiUKJB3EY2DifPEmc0KH5cR9kUcIfi/yWxkmjfP5e1293wGyFaJ2sUVpX Ns6nkYWO0R1aTkoxo6G9S+yJjq9Ep4DpNsoef5lb3oi1O8CnhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9e4e+lkFo+2e1V3qUX1MqX9MGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80NTlk NmU2MS04NjEzLTQyODktYmUzNC1jYjBmZTBhZWVhNmUvODQ5NzcwYjMtNDIzZC0z NmU1LTg5OGItZDk5NzM1NzA4YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDU5ZDZlNjEtODYxMy00Mjg5LWJl MzQtY2IwZmUwYWVlYTZlLzQ1OWQ2ZTYxLTg2MTMtNDI4OS1iZTM0LWNiMGZlMGFl ZWE2ZS5jcmwwHwYDVR0jBBgwFoAU4cDQPgBLYWNKRx1bI0QthHr5a8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NTlkNmU2MS04NjEzLTQyODktYmUzNC1jYjBm ZTBhZWVhNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQndgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDeYBH7hqGM1fMVtfp58AyrdPknYZL+XyFSY1bbHdx7Q9TN/R+nLq+/ nQy3PMx/39/PGv0TC6qBil6hZ9cYn35pyxovbtAARzrH2EbcRb34Lhb5j+48XF/m cRe2wzjAyuCyW2b4trrtM1vv2MSciE5WWMczovffXM7K2+o5FdlPYiw1tGTvpKbd TWqixOIfh0o1C1WlCQe615fbFooUbrSdx5cg0PJj5ZRjhLKxCoomF3Dys1t4wiwp Rzo7TFkRc33/iIkTHwc6b2htd2R7jYMB9tO22MGRursKPKz5AvGtGv+WNDFpY21/ eomWZ+7d9ujujQDUQsbNCEcAtcESxvQ= -----END CERTIFICATE-----Generated at Fri Apr 4 19:35:36 2025 by rpki-client