$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/c4def65c-3694-3645-bf50-43caec096461.roa File: c4def65c-3694-3645-bf50-43caec096461.roa (raw, json) Hash identifier: jDoDMFaBqTol3T5h4DhRmJXNey6FXCCLy+icIumnTys= Subject key identifier: 49:AD:BB:A7:A6:0B:AE:27:49:BD:51:7A:B6:C8:F4:0F:0D:B5:5E:5F Certificate issuer: /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Certificate serial: 010D0C9F43285848B1F62441C2F4B01B488DB400 Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/c4def65c-3694-3645-bf50-43caec096461.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 67.221.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:24:41:c2:f4:b0:1b:48:8d:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=685530d2-2369-41da-9dd0-a32aa76b3787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:0b:c6:cb:30:30:69:a3:8a:42:04:17:22:d1: c0:46:9a:6f:48:41:3e:1d:e4:46:02:24:10:5a:40: 55:3e:e1:3d:c6:c8:f7:63:c0:27:ad:fd:4b:5c:1d: 5d:0a:27:36:15:c1:fd:41:74:97:34:fe:78:22:8e: dd:de:a9:91:81:57:2c:dc:a7:76:e6:0f:ba:10:e6: 3b:4e:49:69:24:8d:e5:9d:3f:cc:6e:61:ab:39:07: f0:51:3a:82:19:77:8f:65:49:5e:69:ef:6d:69:8e: 52:1a:64:b3:fe:4e:f6:c6:24:8e:c9:2f:13:c2:20: 0c:bb:08:c1:30:6e:f8:a6:8c:e5:3e:9f:89:fb:5d: ee:62:2e:f7:ef:24:ea:ce:69:31:cb:26:31:0e:3c: d6:c3:df:f6:cb:fd:bf:bd:b1:fd:8d:ae:a8:8e:fc: 76:6c:57:eb:df:a6:52:0a:29:40:c5:32:db:00:09: a0:7b:da:d2:01:05:b2:e2:6b:cd:cc:61:32:fc:c0: 5d:3e:c8:33:78:44:29:e1:cf:c9:a6:47:08:fc:61: ce:82:e7:62:b4:d1:25:4f:70:65:a9:42:b6:f2:76: fb:44:97:81:16:2e:de:e8:17:00:84:70:0a:d4:d5: f9:98:e9:ac:53:95:33:d6:d6:1a:7b:64:39:e7:98: a7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AD:BB:A7:A6:0B:AE:27:49:BD:51:7A:B6:C8:F4:0F:0D:B5:5E:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/c4def65c-3694-3645-bf50-43caec096461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl X509v3 Authority Key Identifier: keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer sbgp-ipAddrBlock: critical IPv4: 67.221.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:45:50:7c:26:ba:58:d6:ad:02:97:22:d6:9c:f9:f9:8c:17: 64:a6:a2:03:64:d8:d7:24:6a:79:d0:56:ed:d6:ed:09:8f:b3: fb:22:6c:46:db:a0:4e:61:43:a4:1f:40:55:da:40:42:b4:bd: 14:26:3b:1a:5e:94:5f:c1:b0:17:79:6a:83:11:ea:b4:9d:ad: 18:ec:0b:bd:b1:4d:65:6a:b3:bd:e1:5b:61:49:5c:a0:63:e0: 0c:f9:7a:f0:85:14:0c:d6:62:d6:2e:bf:ab:54:23:56:78:67: f7:3b:4b:f2:e7:08:5e:db:ba:ba:54:21:09:3d:28:66:f9:23: 96:9a:d0:07:44:0b:83:d8:5d:a4:43:06:10:9d:93:ff:80:d5: 7d:8a:5a:33:5a:ac:f4:35:54:75:5b:5b:3b:d6:eb:63:4a:12: 28:1e:e4:5f:7b:75:a2:d8:d7:8d:ba:3c:3e:e4:57:d7:07:76: ac:9c:1c:85:ae:56:88:94:1a:b4:81:0a:0c:b5:b8:f6:df:c0: 18:b8:7e:a5:d7:f1:44:03:a1:6e:7a:1e:5d:ab:c6:7c:e6:42: c7:33:44:83:50:89:30:73:97:6e:90:d1:01:f9:7a:7a:0d:2d: 60:a2:41:a7:f5:cf:4f:ae:c8:33:5f:55:39:f9:a5:44:63:d5: 58:48:3d:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9iRBwvSwG0iNtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZjYTgxYzMtZTViZi00OGFjLThhZjktMGQ3ODljMzVh MmFkMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk Njg1NTMwZDItMjM2OS00MWRhLTlkZDAtYTMyYWE3NmIzNzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+QvGyzAwaaOKQgQXItHARppvSEE+HeRGAiQQ WkBVPuE9xsj3Y8Anrf1LXB1dCic2FcH9QXSXNP54Io7d3qmRgVcs3Kd25g+6EOY7 TklpJI3lnT/MbmGrOQfwUTqCGXePZUleae9taY5SGmSz/k72xiSOyS8TwiAMuwjB MG74pozlPp+J+13uYi737yTqzmkxyyYxDjzWw9/2y/2/vbH9ja6ojvx2bFfr36ZS CilAxTLbAAmge9rSAQWy4mvNzGEy/MBdPsgzeEQp4c/JpkcI/GHOguditNElT3Bl qUK28nb7RJeBFi7e6BcAhHAK1NX5mOmsU5Uz1tYae2Q555in5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmtu6emC64nSb1RerbI9A8NtV5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNh ODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4OWMzNWEyYWQvYzRkZWY2NWMtMzY5NC0z NjQ1LWJmNTAtNDNjYWVjMDk2NDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTZjYTgxYzMtZTViZi00OGFjLThh ZjktMGQ3ODljMzVhMmFkLzE2Y2E4MWMzLWU1YmYtNDhhYy04YWY5LTBkNzg5YzM1 YTJhZC5jcmwwHwYDVR0jBBgwFoAUOpt3WcS0K+2JuuBO0tmA1rhWa4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNmNhODFjMy1lNWJmLTQ4YWMtOGFmOS0wZDc4 OWMzNWEyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ90nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdFUHwmuljWrQKXItac+fmMF2SmogNk2NckannQVu3W7QmPs/sibEbb oE5hQ6QfQFXaQEK0vRQmOxpelF/BsBd5aoMR6rSdrRjsC72xTWVqs73hW2FJXKBj 4Az5evCFFAzWYtYuv6tUI1Z4Z/c7S/LnCF7burpUIQk9KGb5I5aa0AdEC4PYXaRD BhCdk/+A1X2KWjNarPQ1VHVbWzvW62NKEige5F97daLY1426PD7kV9cHdqycHIWu VoiUGrSBCgy1uPbfwBi4fqXX8UQDoW56Hl2rxnzmQsczRINQiTBzl26Q0QH5enoN LWCiQaf1z0+uyDNfVTn5pURj1VhIPXA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:10 2025 by rpki-client