$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/c71d10a6-c681-373a-ab3c-2f811b2b8035.roa File: c71d10a6-c681-373a-ab3c-2f811b2b8035.roa (raw, json) Hash identifier: dI+6x8xKnzCwP53dhfn1QoihS5tMoxtt+5aY2XBuC6E= Subject key identifier: 49:49:4F:51:B8:00:D7:DE:8B:76:DC:14:E9:DE:D1:37:60:EC:4E:EF Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F432858495ABEE49212644B05584D5300 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/c71d10a6-c681-373a-ab3c-2f811b2b8035.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 14618 IP address blocks: 155.63.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e4:92:12:64:4b:05:58:4d:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=df0a736d-9344-4fcd-925e-37a31aff16ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:db:52:5d:3e:dc:ee:f7:30:29:e2:9f:b1:73: 86:b6:05:da:88:e8:89:a5:c2:66:c4:df:b0:c1:00: 8a:04:5f:fb:77:07:20:84:7a:d8:81:09:47:7f:14: 29:18:eb:96:19:68:b9:22:47:3c:23:ca:12:22:ff: 86:66:97:e9:bc:7f:37:a9:c6:42:6a:c9:f4:bd:11: 88:ff:78:40:7d:45:94:41:2f:c6:6c:9d:3f:d0:d3: 1a:c0:37:bf:88:d8:6b:de:8b:28:71:a9:1f:7d:03: e1:42:59:73:ff:21:7b:3e:0d:64:3c:46:c7:35:a6: 02:6e:ff:aa:e0:72:df:e3:3c:9d:48:d7:42:0b:3b: 24:b3:ad:2f:09:a4:f1:82:4b:be:fd:71:74:73:08: 90:10:9f:6b:5e:11:13:50:2d:9f:20:77:00:4f:3b: 76:8e:6a:18:06:a5:fc:b8:7d:81:92:0c:0b:14:1c: 80:f0:94:ea:33:8c:58:f2:ad:57:52:ca:ad:d4:1d: 44:42:04:17:af:b9:05:a6:5d:d5:43:42:7a:05:dc: 48:d5:ec:99:0f:f2:6e:7e:96:8e:0e:89:69:1a:b5: 25:01:47:e3:4f:d0:5c:1a:05:8e:a1:ce:83:ca:1c: 17:ea:a0:96:eb:02:10:1e:49:5d:3b:fe:c0:1e:b6: 42:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:49:4F:51:B8:00:D7:DE:8B:76:DC:14:E9:DE:D1:37:60:EC:4E:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/c71d10a6-c681-373a-ab3c-2f811b2b8035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:fc:99:50:bd:6c:70:78:95:26:38:5a:bf:27:f0:0f:a2:34: 3b:6e:e2:fc:41:65:37:45:b2:15:e0:6f:1e:bd:8f:3b:79:80: da:24:29:d3:61:c5:b9:2d:36:1f:30:de:4c:60:52:60:0e:02: 44:a4:f6:67:87:ce:43:98:18:68:e0:0a:8b:9a:59:0b:73:d7: 47:0f:b2:0f:84:1f:93:81:23:67:cb:de:bc:55:1a:c9:10:62: d6:63:3b:53:7c:10:b2:77:3d:30:11:af:43:b2:17:23:99:26: cb:97:34:86:4f:73:5a:19:30:14:54:f7:78:3b:62:a5:8a:12: 19:45:39:98:83:9b:81:8a:55:a1:1e:7f:15:f8:9b:13:9e:5a: 76:93:68:3d:34:7e:ba:c7:69:3e:3e:92:c7:23:f0:74:99:f3: 06:49:ee:61:1e:bf:53:22:1b:d4:36:34:f4:5c:f9:30:d9:5d: a2:56:c6:de:d9:c8:ad:0e:3c:02:45:4e:94:5f:8f:da:ec:f6: 5b:e5:2a:0e:f5:4d:57:44:3b:a0:e4:dc:7a:db:c0:0c:30:1f: 54:ba:cd:6b:fc:8c:f3:f2:bc:13:04:87:74:f5:64:42:f1:6e: 6e:7b:c9:04:f4:1e:e5:e1:8c:bd:47:fb:10:33:70:5c:48:71: 64:91:0c:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuSSEmRLBVhNUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZGYwYTczNmQtOTM0NC00ZmNkLTkyNWUtMzdhMzFhZmYxNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49tSXT7c7vcwKeKfsXOGtgXaiOiJpcJmxN+w wQCKBF/7dwcghHrYgQlHfxQpGOuWGWi5Ikc8I8oSIv+GZpfpvH83qcZCasn0vRGI /3hAfUWUQS/GbJ0/0NMawDe/iNhr3osocakffQPhQllz/yF7Pg1kPEbHNaYCbv+q 4HLf4zydSNdCCzsks60vCaTxgku+/XF0cwiQEJ9rXhETUC2fIHcATzt2jmoYBqX8 uH2BkgwLFByA8JTqM4xY8q1XUsqt1B1EQgQXr7kFpl3VQ0J6BdxI1eyZD/JufpaO DolpGrUlAUfjT9BcGgWOoc6DyhwX6qCW6wIQHkldO/7AHrZC8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElJT1G4ANfei3bcFOne0Tdg7E7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvYzcxZDEwYTYtYzY4MS0z NzNhLWFiM2MtMmY4MTFiMmI4MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz9CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP8mVC9bHB4lSY4Wr8n8A+iNDtu4vxBZTdFshXgbx69jzt5gNokKdNh xbktNh8w3kxgUmAOAkSk9meHzkOYGGjgCouaWQtz10cPsg+EH5OBI2fL3rxVGskQ YtZjO1N8ELJ3PTARr0OyFyOZJsuXNIZPc1oZMBRU93g7YqWKEhlFOZiDm4GKVaEe fxX4mxOeWnaTaD00frrHaT4+kscj8HSZ8wZJ7mEev1MiG9Q2NPRc+TDZXaJWxt7Z yK0OPAJFTpRfj9rs9lvlKg71TVdEO6Dk3HrbwAwwH1S6zWv8jPPyvBMEh3T1ZELx bm57yQT0HuXhjL1H+xAzcFxIcWSRDMI= -----END CERTIFICATE-----Generated at Fri Apr 4 23:28:11 2025 by rpki-client