$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/be712c95-8da1-3462-9104-f7ad39bb722c.roa File: be712c95-8da1-3462-9104-f7ad39bb722c.roa (raw, json) Hash identifier: wddQU915+6tKuo0KObcouPpE7NKXhLBMfV0+Ru6OqcM= Subject key identifier: A9:7C:83:CF:82:A0:E1:F9:34:EB:80:21:C1:3E:D6:BA:D6:98:C7:6B Certificate issuer: /CN=0605680b-ca76-43b6-81d9-2ac50993c59e Certificate serial: 010D0C9F43285848A565FBA1D9187099265CCFA0 Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/be712c95-8da1-3462-9104-f7ad39bb722c.roa Signing time: Fri 24 Jan 2025 02:00:39 +0000 ROA not before: Fri 24 Jan 2025 02:00:39 +0000 ROA not after: Thu 24 Apr 2025 01:00:39 +0000 asID: 11758 IP address blocks: 66.85.43.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:65:fb:a1:d9:18:70:99:26:5c:cf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e Validity Not Before: Jan 24 02:00:39 2025 GMT Not After : Apr 24 01:00:39 2025 GMT Subject: CN=7e5fbe03-74df-45eb-ae49-a1403b7b0bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2a:a5:72:d6:9c:ea:62:88:17:0a:d9:1c:f6: bf:85:3c:3b:00:7f:60:74:cb:81:1d:6c:da:c7:96: b9:8c:e5:96:96:54:81:57:1c:96:c7:ae:f1:e5:79: 65:f0:84:0f:5f:79:41:57:cb:6c:80:b7:1c:4d:d8: a8:aa:bd:29:54:50:62:f6:a3:37:75:7e:57:c5:d6: 35:1f:4d:e5:f9:39:86:5b:41:3e:a5:d1:83:e5:c5: 9c:49:a4:4e:fc:d2:15:61:33:da:55:00:19:b6:e9: 92:ee:c3:26:25:b4:9b:57:7b:a5:04:60:62:05:15: 81:42:59:49:5d:02:7d:4a:db:e4:68:61:55:78:85: df:38:bf:09:39:67:56:a2:e5:cf:cd:79:7f:fe:aa: 22:c0:45:a6:7a:d0:cd:61:eb:15:cc:e8:60:89:53: bd:c6:18:ab:e5:41:9c:be:7f:15:5a:4f:f4:b7:98: 1e:aa:89:a6:71:09:ee:49:49:1c:2d:13:6e:09:a6: 70:c3:34:f4:13:c6:ef:c4:ed:fe:ad:ff:f0:df:1b: 62:63:a1:1b:86:ce:38:fa:b5:44:71:73:31:ad:b0: 61:f9:66:da:3d:c2:1d:7b:58:88:4f:01:c6:00:9c: 62:f5:b1:6b:96:0f:19:66:11:21:18:d6:c0:5d:ae: 71:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7C:83:CF:82:A0:E1:F9:34:EB:80:21:C1:3E:D6:BA:D6:98:C7:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/be712c95-8da1-3462-9104-f7ad39bb722c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl X509v3 Authority Key Identifier: keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer sbgp-ipAddrBlock: critical IPv4: 66.85.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6b:81:0b:cf:58:d2:79:e2:07:87:2f:2e:a4:a8:cf:a6:b6: b9:10:82:fc:74:38:d0:f7:cc:40:08:60:1d:12:70:04:08:f1: 97:b2:1e:ff:5d:a9:bc:72:6a:99:75:7f:ae:b5:0c:e2:22:71: 3f:d9:de:2f:9a:0c:12:c5:1d:8d:ad:d0:09:90:66:ab:e9:02: 35:b0:20:58:c8:33:7c:bf:b6:59:ac:ba:53:62:00:fa:7c:cf: 76:93:5e:84:6a:d8:a4:65:1a:85:ad:51:5a:49:a8:7d:14:e9: 5f:f6:0d:2f:43:ab:ee:57:8d:f9:9f:ac:9c:82:7c:df:b0:be: fc:64:70:fd:7d:e8:c4:05:9a:e0:45:db:c4:cc:c0:94:dc:8b: 7c:bd:bf:a3:38:56:dc:fd:9f:c4:21:c7:1d:00:59:b7:a6:06: 33:9a:19:bf:01:03:39:42:69:23:af:5a:27:11:b1:79:ba:ff: 18:da:b5:0f:f8:bf:1e:dd:49:da:da:91:7f:10:7e:ad:14:9b: a4:0b:a1:91:fe:b0:ed:65:a4:99:39:13:51:1a:64:30:83:34: 5c:7e:b3:91:95:af:59:4a:93:35:ec:c0:45:9b:37:35:ab:a8: b3:1f:75:9d:dd:e2:7a:cf:e2:72:a4:c5:c0:9a:84:f6:40:0e: 9a:a9:ac:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEilZfuh2RhwmSZcz6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYwNTY4MGItY2E3Ni00M2I2LTgxZDktMmFjNTA5OTNj NTllMB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk N2U1ZmJlMDMtNzRkZi00NWViLWFlNDktYTE0MDNiN2IwYmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyqlctac6mKIFwrZHPa/hTw7AH9gdMuBHWza x5a5jOWWllSBVxyWx67x5Xll8IQPX3lBV8tsgLccTdioqr0pVFBi9qM3dX5XxdY1 H03l+TmGW0E+pdGD5cWcSaRO/NIVYTPaVQAZtumS7sMmJbSbV3ulBGBiBRWBQllJ XQJ9StvkaGFVeIXfOL8JOWdWouXPzXl//qoiwEWmetDNYesVzOhgiVO9xhir5UGc vn8VWk/0t5geqommcQnuSUkcLRNuCaZwwzT0E8bvxO3+rf/w3xtiY6Ebhs44+rVE cXMxrbBh+WbaPcIde1iITwHGAJxi9bFrlg8ZZhEhGNbAXa5xjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl8g8+CoOH5NOuAIcE+1rrWmMdrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1 NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5M2M1OWUvYmU3MTJjOTUtOGRhMS0z NDYyLTkxMDQtZjdhZDM5YmI3MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDYwNTY4MGItY2E3Ni00M2I2LTgx ZDktMmFjNTA5OTNjNTllLzA2MDU2ODBiLWNhNzYtNDNiNi04MWQ5LTJhYzUwOTkz YzU5ZS5jcmwwHwYDVR0jBBgwFoAUSUhmydhN2RQ18NBnqAdbMJX69FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1 MDk5M2M1OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlrgQvPWNJ54geHLy6kqM+mtrkQgvx0OND3zEAIYB0ScAQI8ZeyHv9d qbxyapl1f661DOIicT/Z3i+aDBLFHY2t0AmQZqvpAjWwIFjIM3y/tlmsulNiAPp8 z3aTXoRq2KRlGoWtUVpJqH0U6V/2DS9Dq+5XjfmfrJyCfN+wvvxkcP196MQFmuBF 28TMwJTci3y9v6M4Vtz9n8Qhxx0AWbemBjOaGb8BAzlCaSOvWicRsXm6/xjatQ/4 vx7dSdrakX8Qfq0Um6QLoZH+sO1lpJk5E1EaZDCDNFx+s5GVr1lKkzXswEWbNzWr qLMfdZ3d4nrP4nKkxcCahPZADpqprMQ= -----END CERTIFICATE-----Generated at Sat Apr 12 13:09:26 2025 by rpki-client