$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0942768f-4820-3c6e-b27d-b1612c25d11a.roa File: 0942768f-4820-3c6e-b27d-b1612c25d11a.roa (raw, json) Hash identifier: YqaqAb4bR6lKk7qzeV9VQNB2eSKfI7YAV11LLWsgJfk= Subject key identifier: 5E:90:7F:53:BB:00:3B:2A:AE:AB:E0:DC:14:00:AE:9F:92:1E:46:13 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858486AC59D8DFCDD38D698999680 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0942768f-4820-3c6e-b27d-b1612c25d11a.roa Signing time: Fri 03 Jan 2025 02:00:40 +0000 ROA not before: Fri 03 Jan 2025 02:00:40 +0000 ROA not after: Thu 03 Apr 2025 01:00:40 +0000 asID: 13576 IP address blocks: 66.115.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6a:c5:9d:8d:fc:dd:38:d6:98:99:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 3 02:00:40 2025 GMT Not After : Apr 3 01:00:40 2025 GMT Subject: CN=09fefbf7-3745-42d0-acf6-dba0cbe670f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b2:78:99:f8:e0:eb:7a:ff:49:db:65:e3:1d: ab:0d:8a:64:21:14:a5:4a:c5:85:c9:85:87:73:f6: 14:93:4c:33:56:44:a4:50:18:d1:01:a0:3e:af:e3: e3:fc:6e:99:bc:5c:13:e2:6f:9f:34:01:a4:b1:9f: 26:14:7b:07:1a:ad:8b:7a:2d:2e:32:95:36:74:92: ff:00:a0:ff:df:47:4a:ed:8b:94:89:84:b3:fa:2c: e9:22:bc:df:52:42:ec:db:9b:e8:be:ed:13:d0:20: 85:1f:f8:d4:0f:4d:c3:78:dd:0b:2c:04:f3:7b:df: 7e:b3:d4:bd:ed:29:06:81:bb:77:bf:3d:55:e0:f7: cf:04:2a:72:24:bc:42:0e:da:38:14:5e:cc:3a:71: 39:eb:03:55:ee:45:0c:fe:ef:b6:c1:a8:7c:e2:f5: 86:b4:0f:ec:58:44:76:95:09:95:ed:b4:08:d0:bd: c1:35:5f:b9:2e:34:f2:b5:11:4d:ee:b2:74:27:b5: 7a:b1:55:4b:11:c7:b3:fe:3d:45:31:4c:5b:c6:d5: 09:a1:0b:90:e3:f7:32:10:10:2d:2a:df:6a:e8:da: 66:75:1b:c6:03:05:0f:20:fe:66:d2:b3:ff:dc:9e: 35:bf:ef:c2:fb:84:1c:57:00:8c:0b:76:34:7e:0e: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:90:7F:53:BB:00:3B:2A:AE:AB:E0:DC:14:00:AE:9F:92:1E:46:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0942768f-4820-3c6e-b27d-b1612c25d11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:0f:aa:41:40:d4:f1:64:dc:bb:c3:e9:5b:34:33:ba:61:f1: 7e:c3:36:d2:79:ce:9e:ce:ac:b8:58:30:6c:6f:75:ca:62:93: 94:c7:cd:36:47:bd:a8:b8:58:95:b3:f8:3c:b6:57:df:63:b7: a6:76:7a:32:e2:6e:db:6f:c2:36:b2:13:c9:60:69:45:f6:58: bb:82:59:e6:d1:ee:59:6d:84:90:3c:a5:75:20:40:21:43:0b: 94:a5:82:88:38:18:61:63:93:1a:57:eb:db:17:ee:21:1a:d7: c3:d3:7e:27:24:c3:89:8f:63:7a:4b:c8:d3:4e:85:31:e7:b8: 61:fb:bc:41:a7:1d:e1:21:69:b7:70:2e:47:f8:62:70:e2:d0: ee:c7:e7:c1:6d:6f:3c:14:9b:2c:91:a0:36:6b:8e:88:03:33: 34:43:5a:c4:f0:67:64:c0:f2:39:45:9a:2b:d4:f6:e9:82:36: 06:a0:f1:4e:39:a2:99:b0:f1:d3:5d:a0:2d:02:fd:95:99:fd: 1a:78:b2:b9:11:50:62:83:29:15:ae:27:66:4c:d3:5b:f5:97: 50:e3:bc:b7:d4:03:6c:8b:05:d8:07:af:1c:55:ef:23:e7:9a: 9c:14:86:52:e8:aa:1f:f9:96:c2:0f:30:ee:b7:48:d2:ac:27: 49:5a:d4:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqxZ2N/N041piZloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDEwMzAyMDA0MFoXDTI1MDQwMzAxMDA0MFowLzEtMCsGA1UEAxMk MDlmZWZiZjctMzc0NS00MmQwLWFjZjYtZGJhMGNiZTY3MGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7J4mfjg63r/Sdtl4x2rDYpkIRSlSsWFyYWH c/YUk0wzVkSkUBjRAaA+r+Pj/G6ZvFwT4m+fNAGksZ8mFHsHGq2Lei0uMpU2dJL/ AKD/30dK7YuUiYSz+izpIrzfUkLs25vovu0T0CCFH/jUD03DeN0LLATze99+s9S9 7SkGgbt3vz1V4PfPBCpyJLxCDto4FF7MOnE56wNV7kUM/u+2wah84vWGtA/sWER2 lQmV7bQI0L3BNV+5LjTytRFN7rJ0J7V6sVVLEcez/j1FMUxbxtUJoQuQ4/cyEBAt Kt9q6NpmdRvGAwUPIP5m0rP/3J41v+/C+4QcVwCMC3Y0fg7jFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6Qf1O7ADsqrqvg3BQArp+SHkYTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMDk0Mjc2OGYtNDgyMC0z YzZlLWIyN2QtYjE2MTJjMjVkMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQnPWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwPqkFA1PFk3LvD6Vs0M7ph8X7DNtJ5zp7OrLhYMGxvdcpik5THzTZH vai4WJWz+Dy2V99jt6Z2ejLibttvwjayE8lgaUX2WLuCWebR7llthJA8pXUgQCFD C5Slgog4GGFjkxpX69sX7iEa18PTfickw4mPY3pLyNNOhTHnuGH7vEGnHeEhabdw Lkf4YnDi0O7H58FtbzwUmyyRoDZrjogDMzRDWsTwZ2TA8jlFmivU9umCNgag8U45 opmw8dNdoC0C/ZWZ/Rp4srkRUGKDKRWuJ2ZM01v1l1DjvLfUA2yLBdgHrxxV7yPn mpwUhlLoqh/5lsIPMO63SNKsJ0la1DU= -----END CERTIFICATE-----Generated at Fri Mar 14 09:40:25 2025 by rpki-client