$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2609eb60-2038-36dc-aeef-9bde88489e86.roa File: 2609eb60-2038-36dc-aeef-9bde88489e86.roa (raw, json) Hash identifier: wNPeETpjxKzvYV2CnK7HOIYbTX1l81dyfky0Ctwctes= Subject key identifier: 07:E6:C1:25:0D:E6:2F:1E:F3:C3:49:E8:64:E9:8D:88:03:A3:F4:ED Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858489BC1DC223BE651FE23BE58C8 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2609eb60-2038-36dc-aeef-9bde88489e86.roa Signing time: Mon 20 Jan 2025 15:07:47 +0000 ROA not before: Mon 20 Jan 2025 15:07:47 +0000 ROA not after: Sun 20 Apr 2025 14:07:47 +0000 asID: 40509 IP address blocks: 66.51.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:c1:dc:22:3b:e6:51:fe:23:be:58:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jan 20 15:07:47 2025 GMT Not After : Apr 20 14:07:47 2025 GMT Subject: CN=e1b52c9f-5c92-4d04-9428-861201a4c2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:00:ec:75:f6:e4:c7:8b:29:f7:d5:2e:fa:2e: db:48:91:6a:f7:47:82:70:98:6e:b1:84:87:c1:0f: 3c:17:ed:1b:1f:82:4c:e3:8f:c5:f6:64:b0:fb:ab: 83:22:51:dc:f2:4f:22:ba:ea:e7:9d:48:34:6c:6b: 60:25:9a:85:9e:35:d9:e0:d6:16:52:38:4a:5a:b5: 87:ce:6d:cd:49:87:e3:de:4f:98:d0:54:4e:3f:cc: 03:28:c3:0c:3b:bf:a6:ba:09:47:91:25:cf:61:9b: ea:f7:83:0a:03:c2:4d:e2:e3:65:d2:ba:3f:84:1d: d8:20:41:c9:ad:35:41:3e:6e:51:86:5b:e2:8e:80: 8e:80:b7:51:7d:33:b4:11:8b:a5:8e:6e:2a:39:c8: 29:ea:ef:fd:8c:9d:f4:b1:b0:2e:21:5b:5d:a4:32: ab:16:32:fd:69:64:4b:f5:00:f9:b5:70:30:d6:df: 4c:2b:83:71:04:bb:dc:a9:6f:37:a3:c9:cf:7e:09: 44:3b:77:0c:f6:a8:2f:73:5d:a8:55:c7:73:f3:c4: 52:e3:91:95:a5:63:70:22:4a:e7:0c:c5:fd:bb:d3: da:d8:e3:34:0d:ad:5a:2d:5c:cc:0e:07:8d:ff:cd: 52:7d:27:5d:2e:3b:41:fc:ba:71:04:74:3f:b6:53: ec:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E6:C1:25:0D:E6:2F:1E:F3:C3:49:E8:64:E9:8D:88:03:A3:F4:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2609eb60-2038-36dc-aeef-9bde88489e86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 66.51.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:fa:69:a6:30:e6:a8:db:69:28:b0:2f:4c:a2:c0:54:6e:d0: ee:e7:a4:eb:fc:24:18:bf:73:ad:fc:f6:d8:6b:68:85:42:b8: 93:69:04:24:b8:c7:cc:a4:eb:f6:35:ae:5b:2f:9d:00:0a:85: 28:a3:b6:ca:0f:db:f3:54:91:5a:30:a4:3d:f8:36:69:c1:00: c7:5c:f5:ec:2e:5b:35:32:a5:f9:70:2f:bb:93:84:1e:a7:eb: 2c:15:f9:96:9c:a3:74:16:c0:d4:bf:35:72:83:f6:3b:0f:e0: 71:22:f1:ca:7b:bb:45:25:86:fe:7f:76:f9:4a:06:29:d2:e7: a9:c9:1c:c6:be:83:5c:ef:af:f2:2e:13:a0:5b:db:29:1e:60: 36:ad:2a:5d:8f:3c:03:8c:78:74:20:13:2d:71:9e:6a:da:f9: a9:f9:bf:1c:61:77:a1:94:4c:c4:e8:d3:22:74:5e:17:74:12: de:0d:d9:20:af:24:36:2c:e4:e8:4f:18:56:17:b2:37:a0:e5: 13:ba:af:bf:c7:ab:26:c3:9d:70:b5:03:f3:1a:db:6a:27:76: 19:bf:d5:d8:5d:7c:91:55:15:fa:a7:d5:66:dd:46:ba:7a:96: 5d:36:53:ce:1d:cb:e0:0a:ef:a3:d1:4f:c7:c4:4b:bb:fb:be: 78:57:fb:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEibwdwiO+ZR/iO+WMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDEyMDE1MDc0N1oXDTI1MDQyMDE0MDc0N1owLzEtMCsGA1UEAxMk ZTFiNTJjOWYtNWM5Mi00ZDA0LTk0MjgtODYxMjAxYTRjMmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgDsdfbkx4sp99Uu+i7bSJFq90eCcJhusYSH wQ88F+0bH4JM44/F9mSw+6uDIlHc8k8iuurnnUg0bGtgJZqFnjXZ4NYWUjhKWrWH zm3NSYfj3k+Y0FROP8wDKMMMO7+muglHkSXPYZvq94MKA8JN4uNl0ro/hB3YIEHJ rTVBPm5RhlvijoCOgLdRfTO0EYuljm4qOcgp6u/9jJ30sbAuIVtdpDKrFjL9aWRL 9QD5tXAw1t9MK4NxBLvcqW83o8nPfglEO3cM9qgvc12oVcdz88RS45GVpWNwIkrn DMX9u9Pa2OM0Da1aLVzMDgeN/81SfSddLjtB/LpxBHQ/tlPsAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfmwSUN5i8e88NJ6GTpjYgDo/TtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMjYwOWViNjAtMjAzOC0z NmRjLWFlZWYtOWJkZTg4NDg5ZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQjN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/6aaYw5qjbaSiwL0yiwFRu0O7npOv8JBi/c6389thraIVCuJNpBCS4 x8yk6/Y1rlsvnQAKhSijtsoP2/NUkVowpD34NmnBAMdc9ewuWzUypflwL7uThB6n 6ywV+Zaco3QWwNS/NXKD9jsP4HEi8cp7u0Ulhv5/dvlKBinS56nJHMa+g1zvr/Iu E6Bb2ykeYDatKl2PPAOMeHQgEy1xnmra+an5vxxhd6GUTMTo0yJ0Xhd0Et4N2SCv JDYs5OhPGFYXsjeg5RO6r7/HqybDnXC1A/Ma22ondhm/1dhdfJFVFfqn1WbdRrp6 ll02U84dy+AK76PRT8fES7v7vnhX+/0= -----END CERTIFICATE-----Generated at Sun Feb 2 15:49:30 2025 by rpki-client