$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/a68ea5a3-4e54-3e21-b006-2030b235600f.roa File: a68ea5a3-4e54-3e21-b006-2030b235600f.roa (raw, json) Hash identifier: OnEtg+WYZYhrNkj/WcD9x5ALkYjzfluesnzjBMniTGU= Subject key identifier: DA:A9:DF:47:72:4B:D4:39:32:55:21:8A:DE:FB:28:A5:76:C1:67:B8 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858489E1269E3DACB3A053CDF4F80 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/a68ea5a3-4e54-3e21-b006-2030b235600f.roa Signing time: Tue 21 Jan 2025 11:01:42 +0000 ROA not before: Tue 21 Jan 2025 11:01:42 +0000 ROA not after: Mon 21 Apr 2025 10:01:42 +0000 asID: 40509 IP address blocks: 137.66.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:12:69:e3:da:cb:3a:05:3c:df:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jan 21 11:01:42 2025 GMT Not After : Apr 21 10:01:42 2025 GMT Subject: CN=bdb1e519-66ed-47e9-b546-b5cf3dc6c83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:2a:63:a2:8c:6e:2f:13:fe:b0:b0:4e:7b: de:38:d0:ce:70:2c:72:d5:79:6d:68:5b:92:ba:79: f1:dd:46:d4:21:58:e6:1f:2d:ce:01:25:e9:92:98: 57:46:86:fc:30:6f:fc:0a:4e:6e:60:af:4f:46:ec: 41:69:22:5a:3a:b4:e5:93:90:89:15:76:4c:7a:ff: 08:9d:22:49:d7:53:57:97:ce:3c:34:21:b1:13:7a: 5e:4a:b7:22:5e:86:04:5c:dc:64:b2:e5:a9:12:bd: b8:75:d4:4e:02:2a:2a:d9:73:4a:76:d9:56:c5:fc: d1:19:e1:7e:b1:6e:c6:2b:f3:71:2a:5a:57:a7:7b: 34:17:87:0d:b4:00:fb:08:36:75:d3:38:a0:c4:80: 66:3b:7b:71:4b:0a:8f:01:82:e3:05:28:b0:1c:f2: 0b:e4:89:8b:6a:1b:2b:a8:ce:b5:5d:79:a5:45:fe: 3f:09:63:86:cd:a4:81:11:c1:de:82:50:e6:4b:ba: 03:45:f9:0a:66:a6:ba:15:b7:8d:5b:81:5d:cc:34: ee:6d:9f:e9:09:e7:61:3e:95:8a:27:e1:b9:d2:d6: c3:81:27:7a:aa:d8:ee:8d:69:a6:bb:2d:2b:ca:e8: 74:bd:71:6f:2b:0c:77:0b:99:56:74:a6:5d:8e:71: 2e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A9:DF:47:72:4B:D4:39:32:55:21:8A:DE:FB:28:A5:76:C1:67:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/a68ea5a3-4e54-3e21-b006-2030b235600f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 137.66.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:cb:ab:ac:ae:56:59:38:58:32:55:f6:24:3a:57:b8:43:e7: aa:64:64:0e:88:15:80:ea:43:d4:9d:15:b7:ac:65:07:42:48: 74:a2:b2:b4:a9:02:db:72:d6:7b:de:7e:fb:f1:3c:b8:8f:3e: f8:30:4f:82:41:dc:d9:b2:8a:d0:6e:84:92:1b:d7:89:4a:50: 6a:1f:e4:f4:d3:9c:2f:7e:75:a2:ab:64:8e:f1:df:7e:cb:54: ae:fd:c4:a8:6e:8d:b4:20:40:6b:66:5d:bf:0b:06:e4:d5:9b: 8f:3f:e6:cc:b1:dc:ac:af:6b:fe:8a:20:91:7e:74:ee:42:9f: 30:bc:3c:a9:a1:4b:0a:64:32:8c:47:9a:60:3a:67:37:2c:ea: ed:be:c3:21:37:41:d3:4d:43:a7:81:29:f6:ab:83:ed:d3:06: 5d:70:83:ab:65:71:95:84:7b:37:de:f4:66:87:d1:54:b9:4b: 04:95:7f:95:41:a6:3f:db:84:f5:c1:be:be:de:64:a1:b7:44: 3d:e1:ec:11:f6:2b:b6:fb:af:99:16:76:27:c4:ad:64:3e:30: 4e:a9:9b:d2:be:86:ac:1e:4e:62:9a:9e:b5:fc:65:ad:df:d4: 31:57:f4:69:90:00:8d:c5:01:bb:81:2a:18:fb:d3:d5:be:ff: 68:08:f4:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEieEmnj2ss6BTzfT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDEyMTExMDE0MloXDTI1MDQyMTEwMDE0MlowLzEtMCsGA1UEAxMk YmRiMWU1MTktNjZlZC00N2U5LWI1NDYtYjVjZjNkYzZjODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4gqY6KMbi8T/rCwTnveONDOcCxy1XltaFuS unnx3UbUIVjmHy3OASXpkphXRob8MG/8Ck5uYK9PRuxBaSJaOrTlk5CJFXZMev8I nSJJ11NXl848NCGxE3peSrciXoYEXNxksuWpEr24ddROAioq2XNKdtlWxfzRGeF+ sW7GK/NxKlpXp3s0F4cNtAD7CDZ10zigxIBmO3txSwqPAYLjBSiwHPIL5ImLahsr qM61XXmlRf4/CWOGzaSBEcHeglDmS7oDRfkKZqa6FbeNW4FdzDTubZ/pCedhPpWK J+G50tbDgSd6qtjujWmmuy0ryuh0vXFvKwx3C5lWdKZdjnEu0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqp30dyS9Q5MlUhit77KKV2wWe4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvYTY4ZWE1YTMtNGU1NC0z ZTIxLWIwMDYtMjAzMGIyMzU2MDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiUIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzLq6yuVlk4WDJV9iQ6V7hD56pkZA6IFYDqQ9SdFbesZQdCSHSisrSp Atty1nvefvvxPLiPPvgwT4JB3NmyitBuhJIb14lKUGof5PTTnC9+daKrZI7x337L VK79xKhujbQgQGtmXb8LBuTVm48/5syx3Kyva/6KIJF+dO5CnzC8PKmhSwpkMoxH mmA6Zzcs6u2+wyE3QdNNQ6eBKfarg+3TBl1wg6tlcZWEezfe9GaH0VS5SwSVf5VB pj/bhPXBvr7eZKG3RD3h7BH2K7b7r5kWdifErWQ+ME6pm9K+hqweTmKanrX8Za3f 1DFX9GmQAI3FAbuBKhj709W+/2gI9EQ= -----END CERTIFICATE-----Generated at Sun Feb 2 15:47:31 2025 by rpki-client