$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa File: d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa (raw, json) Hash identifier: de/jn8X6BIl1iqAY7rVqmJYWb9Tgzgo8yMhpRyOEBi8= Subject key identifier: 6F:D5:C8:C8:0D:22:AD:15:CF:3A:4D:86:0A:DC:20:B8:C2:17:C4:9B Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F432858480EA5091405B875C625717100 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa Signing time: Sun 01 Dec 2024 02:00:39 +0000 ROA not before: Sun 01 Dec 2024 02:00:39 +0000 ROA not after: Sat 01 Mar 2025 02:00:39 +0000 asID: 7782 IP address blocks: 66.230.80.0/20 maxlen: 20 66.230.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0e:a5:09:14:05:b8:75:c6:25:71:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Dec 1 02:00:39 2024 GMT Not After : Mar 1 02:00:39 2025 GMT Subject: CN=f67d6182-f108-4b46-8e68-70c8b1e7c451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6d:1b:df:fe:8d:b5:06:83:7c:34:69:27:61: 70:35:6a:b4:ea:d1:f6:ea:18:6d:6f:93:df:11:d6: 6a:bb:d7:2f:7d:53:a9:b8:42:83:a9:0a:dc:a7:43: 2e:47:e9:35:ca:0d:3b:23:b7:1d:a4:3d:c1:9e:3d: a0:cd:73:ee:58:87:00:50:cb:59:3e:99:74:c8:f4: 7c:46:e7:1b:7f:47:bd:be:09:ec:55:0d:f0:32:ea: 74:3f:64:53:5b:7c:df:f8:25:5b:98:33:de:29:c1: fb:63:f5:ec:09:32:74:36:fe:ca:a0:14:d9:9e:c8: 38:0f:08:49:18:18:64:c1:ab:c2:68:1b:58:a2:2f: 04:00:fe:4b:f8:32:e6:4b:8b:96:1c:00:83:f6:30: 87:d6:dc:94:43:7c:ef:5d:c9:1d:b6:bc:8a:58:8c: c0:85:54:90:80:bc:77:29:19:67:fd:bd:13:cf:b6: 08:8d:87:cf:77:3d:eb:f3:38:fe:f1:a9:2d:11:5d: f6:d5:f7:f0:73:77:71:51:ac:60:8f:cf:31:2a:c0: dd:a0:46:2b:d2:fa:73:fb:40:e5:53:97:91:c8:47: 6b:bf:72:47:ff:77:bc:76:40:5b:82:a6:bc:d7:12: 4c:8f:67:cd:4f:92:b5:66:da:e3:94:60:89:56:4e: 3d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D5:C8:C8:0D:22:AD:15:CF:3A:4D:86:0A:DC:20:B8:C2:17:C4:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/d5cf750d-bb6a-34eb-a4d8-5d0948567519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 66.230.80.0-66.230.127.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:38:80:d5:96:0c:57:8e:0d:9f:e4:3a:18:f7:cf:76:52:62: 66:5b:60:de:e1:d0:87:dd:3e:60:6c:2d:b8:d4:50:10:b3:de: 79:48:57:ca:70:98:ad:c6:cb:64:39:43:17:70:34:18:29:38: a1:5f:5c:4a:5c:ac:f8:b9:c7:e7:48:ee:7c:a7:47:57:cd:64: b8:65:8e:f4:b9:3e:50:41:83:2b:6a:ba:c0:47:78:27:0c:84: 0f:c5:ef:59:1c:c8:34:51:a0:62:d4:57:12:a3:94:63:47:67: a5:0a:18:b8:fc:86:f0:d8:8d:a9:7a:b0:a8:c6:b1:5b:32:28: a8:12:2c:be:0f:a2:66:9f:27:71:c4:5a:3d:57:fa:39:72:5d: a7:fa:4d:99:04:24:66:2d:27:b8:4d:d2:14:7d:d4:33:23:57: 84:0a:3b:42:34:7b:68:15:fb:f0:6e:19:01:be:71:27:49:54: 9a:d2:b4:2e:ea:c3:e2:92:f2:fc:8a:8e:69:82:ad:7b:cf:a7: da:3a:0a:2d:d5:ea:dc:bc:10:cf:ef:a1:c3:18:24:da:d6:ef: 52:a5:af:87:24:95:13:fd:11:d4:99:16:0a:9b:c7:a5:8b:54: 0e:a0:77:5c:d3:22:3e:1b:e0:7a:40:b0:72:fb:5b:af:c0:6f: c3:fa:ad:8e -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEgOpQkUBbh1xiVxcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk ZjY3ZDYxODItZjEwOC00YjQ2LThlNjgtNzBjOGIxZTdjNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G0b3/6NtQaDfDRpJ2FwNWq06tH26hhtb5Pf EdZqu9cvfVOpuEKDqQrcp0MuR+k1yg07I7cdpD3Bnj2gzXPuWIcAUMtZPpl0yPR8 Rucbf0e9vgnsVQ3wMup0P2RTW3zf+CVbmDPeKcH7Y/XsCTJ0Nv7KoBTZnsg4DwhJ GBhkwavCaBtYoi8EAP5L+DLmS4uWHACD9jCH1tyUQ3zvXckdtryKWIzAhVSQgLx3 KRln/b0Tz7YIjYfPdz3r8zj+8aktEV321ffwc3dxUaxgj88xKsDdoEYr0vpz+0Dl U5eRyEdrv3JH/3e8dkBbgqa81xJMj2fNT5K1ZtrjlGCJVk49aQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFG/VyMgNIq0VzzpNhgrcILjCF8SbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvZDVjZjc1MGQtYmI2YS0z NGViLWE0ZDgtNWQwOTQ4NTY3NTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARC5lAD BAdC5gAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAWziA1ZYMV44Nn+Q6GPfPdlJiZltg3uHQh90+YGwtuNRQ ELPeeUhXynCYrcbLZDlDF3A0GCk4oV9cSlys+LnH50jufKdHV81kuGWO9Lk+UEGD K2q6wEd4JwyED8XvWRzINFGgYtRXEqOUY0dnpQoYuPyG8NiNqXqwqMaxWzIoqBIs vg+iZp8nccRaPVf6OXJdp/pNmQQkZi0nuE3SFH3UMyNXhAo7QjR7aBX78G4ZAb5x J0lUmtK0LurD4pLy/IqOaYKte8+n2joKLdXq3LwQz++hwxgk2tbvUqWvhySVE/0R 1JkWCpvHpYtUDqB3XNMiPhvgekCwcvtbr8Bvw/qtjg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:00 2025 by rpki-client