$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa File: dff21604-1698-3188-98f1-6b0994e52624.roa (raw, json) Hash identifier: 9QaZxmSo4Pua+nUBxrJdMLiBB9mRQO2mip/ZnwSLjZc= Subject key identifier: AA:ED:2B:56:0E:F2:EF:0E:FE:63:8F:35:28:C2:D1:2C:00:8E:96:6A Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F43285848B1F62F016FFE55307576BDA0 Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 393821 IP address blocks: 192.169.66.0/23 maxlen: 24 206.125.144.0/21 maxlen: 24 2607:3680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:2f:01:6f:fe:55:30:75:76:bd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=7dcbd235-3e58-4099-a767-42e57108e27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:90:23:fe:05:bb:ee:4a:db:70:09:41:26:f9: 1b:4b:9d:64:a0:92:ad:51:f5:ad:5e:b8:28:41:6d: 28:80:b5:21:d6:63:2a:f2:b3:23:1a:7e:62:13:ac: 5b:af:27:66:bb:70:ee:71:50:8b:83:9f:4d:86:9b: 7f:e9:75:2d:73:38:0a:23:cc:85:bc:c6:de:ff:eb: ae:3d:cf:fd:f5:82:dd:4a:57:ad:0b:9c:14:f4:dd: d5:60:d4:5f:4a:4a:25:6a:a3:7d:48:1a:b5:84:cd: e0:86:dc:71:f6:ef:8a:d6:87:15:a7:fd:26:61:e2: cf:04:32:d2:21:fd:02:1c:e4:16:11:36:53:16:1c: 2a:93:b7:52:1d:d8:34:57:43:ef:fb:50:7f:2f:7d: 77:3b:2b:15:6e:c6:4a:1b:3e:f3:c4:f3:86:d2:84: 73:4d:21:bf:4a:94:fb:80:1f:40:19:cf:b8:65:3b: f3:76:43:23:64:d6:bc:9c:bc:54:67:45:0b:f0:60: 28:4e:8b:2c:cb:d0:72:00:ab:59:b8:c9:c4:ee:a8: 7d:a2:f5:fe:e0:ed:80:be:bb:1a:b4:9c:df:d5:dc: c4:84:0c:4e:f3:b4:f7:38:9f:53:ad:37:8e:fb:73: 48:12:9a:fd:a2:87:06:ba:22:88:92:3c:fb:32:1c: 01:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:ED:2B:56:0E:F2:EF:0E:FE:63:8F:35:28:C2:D1:2C:00:8E:96:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: 192.169.66.0/23 206.125.144.0/21 IPv6: 2607:3680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ac:16:5a:1e:71:08:38:95:8e:7a:80:57:da:7a:bf:e2:ee: ea:e0:4e:c7:81:01:70:2a:a9:4a:cf:ff:34:6b:bf:6f:24:f9: a6:b1:74:c8:9b:8e:ee:e2:da:6e:de:07:36:db:50:41:38:66: d5:ad:55:40:56:e8:80:0a:5a:42:21:10:be:d3:0f:e2:c5:e2: 03:69:6c:2e:f2:85:4e:b6:f9:98:f9:2f:58:fd:6a:45:1f:5d: 60:18:0d:35:71:b4:60:2f:76:57:c4:66:aa:c5:4f:be:92:62: 0d:f6:51:06:98:f0:30:89:c6:db:32:27:1f:c4:5c:95:dc:64: 33:e3:ad:f8:42:7b:ce:14:bc:bd:4b:ab:bd:c2:1d:3f:2d:52: c9:df:7d:39:b4:bb:a6:3e:f1:ea:54:e4:ec:a8:2e:8f:4b:85: aa:58:63:a9:e2:09:0f:8b:d7:95:20:86:3d:34:e7:fe:87:5f: 08:8d:25:d2:6d:66:03:3d:f3:35:bd:a6:3b:70:23:51:87:57: bf:3e:17:58:da:68:80:f7:60:0e:99:75:11:5b:7b:17:a5:bd: ed:37:45:64:cd:8e:fe:95:58:d7:30:68:b6:d8:58:39:5e:d8: 26:fd:a6:ab:55:92:9d:39:6d:da:62:ea:7f:de:54:f9:e4:16: 8e:14:05:30 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEix9i8Bb/5VMHV2vaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk N2RjYmQyMzUtM2U1OC00MDk5LWE3NjctNDJlNTcxMDhlMjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJAj/gW77krbcAlBJvkbS51koJKtUfWtXrgo QW0ogLUh1mMq8rMjGn5iE6xbrydmu3DucVCLg59Nhpt/6XUtczgKI8yFvMbe/+uu Pc/99YLdSletC5wU9N3VYNRfSkolaqN9SBq1hM3ghtxx9u+K1ocVp/0mYeLPBDLS If0CHOQWETZTFhwqk7dSHdg0V0Pv+1B/L313OysVbsZKGz7zxPOG0oRzTSG/SpT7 gB9AGc+4ZTvzdkMjZNa8nLxUZ0UL8GAoTossy9ByAKtZuMnE7qh9ovX+4O2Avrsa tJzf1dzEhAxO87T3OJ9TrTeO+3NIEpr9oocGuiKIkjz7MhwBYwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFKrtK1YO8u8O/mOPNSjC0SwAjpZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZGZmMjE2MDQtMTY5OC0z MTg4LTk4ZjEtNmIwOTk0ZTUyNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwKlCAwQD zn2QMA0EAgACMAcDBQAmBzaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHKsFloecQg4lY56gFfaer/i7urg TseBAXAqqUrP/zRrv28k+aaxdMibju7i2m7eBzbbUEE4ZtWtVUBW6IAKWkIhEL7T D+LF4gNpbC7yhU62+Zj5L1j9akUfXWAYDTVxtGAvdlfEZqrFT76SYg32UQaY8DCJ xtsyJx/EXJXcZDPjrfhCe84UvL1Lq73CHT8tUsnffTm0u6Y+8epU5OyoLo9LhapY Y6niCQ+L15Ughj005/6HXwiNJdJtZgM98zW9pjtwI1GHV78+F1jaaID3YA6ZdRFb exelve03RWTNjv6VWNcwaLbYWDle2Cb9pqtVkp05bdpi6n/eVPnkFo4UBTA= -----END CERTIFICATE-----Generated at Fri Apr 4 16:20:36 2025 by rpki-client