$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa File: a661538f-4136-32b8-a899-88104881e2db.roa (raw, json) Hash identifier: E1JEEtaSenVh719W4ETt4pJtl0b1KDBL78nlCj5/dYc= Subject key identifier: 16:F7:EB:6A:67:C4:78:37:04:C1:A3:B2:89:8B:22:12:99:BE:46:10 Certificate issuer: /CN=d64341ea-4a31-4684-bf89-237774f5a468 Certificate serial: 010D0C9F432858487A20826CBFF0D1A1B6D61300 Authority key identifier: A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 16509 IP address blocks: 66.22.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:82:6c:bf:f0:d1:a1:b6:d6:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d64341ea-4a31-4684-bf89-237774f5a468 Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=cf67060f-5c12-4572-8599-193597780356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2c:3a:d8:0b:ce:ef:1f:bb:18:96:c5:fa:90: c0:00:79:24:5d:46:89:85:02:e9:0e:72:72:52:7a: 72:7b:d0:28:14:96:f1:ee:c7:07:18:70:3b:d8:28: cc:bb:c6:0a:53:d4:87:da:15:18:99:02:2e:15:ae: 54:d5:c5:5a:c1:dd:8e:25:b0:50:73:ce:f7:5b:48: 8f:a9:b4:c4:7e:f5:59:3e:6c:25:60:c8:27:02:8b: 39:fb:8a:0d:8e:d3:e2:d6:cb:0c:37:7b:e5:8d:b7: 5d:db:1c:c0:73:a0:0b:78:15:9c:c0:f4:7a:5f:2c: c5:b5:37:e6:09:9e:34:e2:27:21:ee:3a:c7:34:d6: 3e:56:32:2b:50:1c:dc:60:a2:8c:4a:ff:3b:b9:d1: de:f3:a0:ee:07:cd:26:8a:2e:6d:35:a0:ce:2f:7a: 5f:d2:7b:bf:51:8e:ad:21:eb:ec:99:b7:f0:a6:13: 18:42:f2:c8:b5:3e:58:7f:d2:61:5d:af:5e:f8:2b: 71:b1:ed:65:1a:46:74:1f:30:01:58:b9:1e:82:79: c4:c4:b9:6b:de:d6:f3:86:fb:d0:6c:fd:7c:9e:0e: 5c:cc:7e:13:ca:73:f2:48:d6:fb:21:a9:33:da:4e: 53:0d:ce:bf:31:89:05:f5:d1:77:e2:92:f5:74:c7: c6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F7:EB:6A:67:C4:78:37:04:C1:A3:B2:89:8B:22:12:99:BE:46:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.crl X509v3 Authority Key Identifier: keyid:A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer sbgp-ipAddrBlock: critical IPv4: 66.22.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:44:a4:80:d2:cf:b5:45:b8:a9:ff:9f:30:df:36:30:3d:a9: 1e:e2:4b:3a:7c:3e:9a:99:93:81:8e:32:19:70:e7:b7:dc:27: a6:e9:f9:6b:ee:b5:b4:6f:96:fb:3f:41:23:43:f0:45:e6:e8: 50:cc:f4:e9:a6:bf:ec:64:f4:f1:d4:43:d4:ab:5e:2f:55:f8: 6b:a5:28:43:62:e7:ce:fa:d3:49:65:c2:24:8e:50:cd:a8:e0: 46:b9:36:ce:3a:de:23:01:29:ea:68:0f:9b:70:cf:ae:61:b0: ce:60:23:66:67:4e:51:3f:d1:49:90:0f:d0:67:8d:d3:0b:0b: aa:0f:bb:6f:43:aa:ff:be:91:b0:7f:02:d5:51:27:c4:b1:1d: 04:83:4b:91:4d:f9:04:6a:3e:6c:9d:44:89:06:9a:08:82:6e: 3b:c5:57:51:5e:e7:80:39:77:6b:97:1c:0d:5a:ec:20:ce:67: 7f:98:dc:22:3b:27:76:9a:cc:c6:83:7a:a9:de:a7:4d:48:67: 44:49:bb:99:85:89:fe:5d:de:66:e1:df:03:4a:88:15:77:68: d4:ab:49:0a:52:9f:d0:49:66:2a:a4:18:6e:96:81:43:a8:21: 98:cd:b9:16:95:03:4f:80:7f:b3:07:bd:51:b7:da:39:ed:0a: c6:4e:bf:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IIJsv/DRobbWEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY0MzQxZWEtNGEzMS00Njg0LWJmODktMjM3Nzc0ZjVh NDY4MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk Y2Y2NzA2MGYtNWMxMi00NTcyLTg1OTktMTkzNTk3NzgwMzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiw62AvO7x+7GJbF+pDAAHkkXUaJhQLpDnJy Unpye9AoFJbx7scHGHA72CjMu8YKU9SH2hUYmQIuFa5U1cVawd2OJbBQc873W0iP qbTEfvVZPmwlYMgnAos5+4oNjtPi1ssMN3vljbdd2xzAc6ALeBWcwPR6XyzFtTfm CZ404ich7jrHNNY+VjIrUBzcYKKMSv87udHe86DuB80mii5tNaDOL3pf0nu/UY6t IevsmbfwphMYQvLItT5Yf9JhXa9e+Ctxse1lGkZ0HzABWLkegnnExLlr3tbzhvvQ bP18ng5czH4TynPySNb7Iakz2k5TDc6/MYkF9dF34pL1dMfGywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBb362pnxHg3BMGjsomLIhKZvkYQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNjQz NDFlYS00YTMxLTQ2ODQtYmY4OS0yMzc3NzRmNWE0NjgvYTY2MTUzOGYtNDEzNi0z MmI4LWE4OTktODgxMDQ4ODFlMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDY0MzQxZWEtNGEzMS00Njg0LWJm ODktMjM3Nzc0ZjVhNDY4L2Q2NDM0MWVhLTRhMzEtNDY4NC1iZjg5LTIzNzc3NGY1 YTQ2OC5jcmwwHwYDVR0jBBgwFoAUoO8vnwBda9ZyIfSWE7ac8RT9OlQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNjQzNDFlYS00YTMxLTQ2ODQtYmY4OS0yMzc3 NzRmNWE0NjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFEpIDSz7VFuKn/nzDfNjA9qR7iSzp8PpqZk4GOMhlw57fcJ6bp+Wvu tbRvlvs/QSND8EXm6FDM9Ommv+xk9PHUQ9SrXi9V+GulKENi587600llwiSOUM2o 4Ea5Ns463iMBKepoD5twz65hsM5gI2ZnTlE/0UmQD9BnjdMLC6oPu29Dqv++kbB/ AtVRJ8SxHQSDS5FN+QRqPmydRIkGmgiCbjvFV1Fe54A5d2uXHA1a7CDOZ3+Y3CI7 J3aazMaDeqnep01IZ0RJu5mFif5d3mbh3wNKiBV3aNSrSQpSn9BJZiqkGG6WgUOo IZjNuRaVA0+Af7MHvVG32jntCsZOvwI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:32 2025 by rpki-client