$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/25868134-7ff6-361c-806c-bb00bedcb12d.roa File: 25868134-7ff6-361c-806c-bb00bedcb12d.roa (raw, json) Hash identifier: tgybv+DOuCKnjTygM6jfvEqNOOiK3xqc0/cxycqN22s= Subject key identifier: 88:A6:09:34:3E:C1:56:5B:5E:7B:57:0F:17:EC:CE:04:FD:75:65:FA Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858486AC59E031031225B55609D80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/25868134-7ff6-361c-806c-bb00bedcb12d.roa Signing time: Fri 03 Jan 2025 02:00:40 +0000 ROA not before: Fri 03 Jan 2025 02:00:40 +0000 ROA not after: Thu 03 Apr 2025 01:00:40 +0000 asID: 13576 IP address blocks: 66.115.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6a:c5:9e:03:10:31:22:5b:55:60:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 3 02:00:40 2025 GMT Not After : Apr 3 01:00:40 2025 GMT Subject: CN=3baeec27-e4a9-4528-8348-820fd6647caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e0:01:a0:84:30:cc:04:22:0e:75:0d:2f:fb: 3a:82:42:63:8a:51:34:28:7e:59:09:18:87:45:5d: 63:38:a7:a0:92:83:2a:84:18:d8:cb:12:05:eb:d1: 01:7c:aa:30:8e:0a:0a:c0:45:b1:4d:32:e6:4b:ef: 10:fa:af:96:9f:b4:22:88:44:6f:ac:50:52:c2:64: a3:4e:8b:0c:3b:91:30:bf:d9:a4:14:52:e4:6d:8d: 19:4f:7a:de:e5:d8:85:97:b8:8c:20:be:78:94:30: c9:0d:62:ff:5b:06:11:83:18:8e:5f:56:5a:88:9b: 1a:7e:b6:f2:b4:0e:97:a7:e5:41:00:61:f4:f4:d7: 20:ca:dd:f6:b2:f9:73:d7:ca:40:f6:6d:17:9b:76: a3:96:8e:8b:75:0a:23:2b:06:33:05:ac:17:18:58: 79:c8:73:84:2e:b0:92:67:ae:84:66:56:89:bd:81: 03:3f:68:6e:6a:42:60:cf:c2:11:86:26:2d:1d:c7: 99:df:45:de:c5:29:98:39:b3:7d:c5:84:63:93:9c: 43:9c:1b:f6:b4:fe:0f:e5:40:28:3a:a1:88:e3:15: 19:59:43:27:96:41:06:f5:21:ab:09:98:88:78:8a: 26:2d:41:d9:f3:90:33:11:0d:df:66:40:13:c1:de: d4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A6:09:34:3E:C1:56:5B:5E:7B:57:0F:17:EC:CE:04:FD:75:65:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/25868134-7ff6-361c-806c-bb00bedcb12d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:8f:5d:6d:aa:ed:c8:5d:23:cc:34:42:db:c7:b0:17:5c:32: 41:3f:bc:33:7a:4e:3d:36:58:dd:77:34:27:d5:e1:24:0c:2b: ac:e2:51:cd:0b:b0:f4:9f:4a:fc:f7:4a:85:7e:77:33:73:05: dc:fc:0a:14:10:11:42:d2:58:4b:50:c2:b4:28:bd:4d:db:e4: eb:30:0b:88:3b:fe:d7:f5:c6:fb:26:09:01:65:0d:56:3e:0b: bf:3d:59:8d:fd:c8:55:91:d0:74:da:b3:a7:34:eb:01:ec:29: ea:3f:c8:bb:e5:63:cc:00:17:0c:af:3b:de:c8:1a:7a:25:c0: a6:bd:2c:0d:11:a7:3d:de:de:7a:e0:df:56:20:72:95:60:a3: 57:50:65:c7:82:8c:b0:2d:99:62:2b:b2:ad:44:ee:4e:28:a1: 3c:9c:ec:99:0d:ab:7d:0e:8a:3c:ff:7c:f9:2d:74:68:ba:3a: 2e:bc:88:64:9a:c7:20:c4:21:a8:20:e9:d2:d0:4c:a4:46:6d: 5d:9a:56:ca:e9:ab:15:f2:4e:bf:bb:15:ef:6f:87:8b:85:f0: f0:bb:09:99:09:c0:50:8a:64:ad:b8:db:f2:9e:cf:55:8c:8e: aa:e7:ee:b1:f9:19:45:58:56:50:67:03:ee:2a:76:7f:74:74: 9b:2e:43:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqxZ4DEDEiW1VgnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDEwMzAyMDA0MFoXDTI1MDQwMzAxMDA0MFowLzEtMCsGA1UEAxMk M2JhZWVjMjctZTRhOS00NTI4LTgzNDgtODIwZmQ2NjQ3Y2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheABoIQwzAQiDnUNL/s6gkJjilE0KH5ZCRiH RV1jOKegkoMqhBjYyxIF69EBfKowjgoKwEWxTTLmS+8Q+q+Wn7QiiERvrFBSwmSj TosMO5Ewv9mkFFLkbY0ZT3re5diFl7iMIL54lDDJDWL/WwYRgxiOX1ZaiJsafrby tA6Xp+VBAGH09Ncgyt32svlz18pA9m0Xm3ajlo6LdQojKwYzBawXGFh5yHOELrCS Z66EZlaJvYEDP2huakJgz8IRhiYtHceZ30XexSmYObN9xYRjk5xDnBv2tP4P5UAo OqGI4xUZWUMnlkEG9SGrCZiIeIomLUHZ85AzEQ3fZkATwd7UCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIimCTQ+wVZbXntXDxfszgT9dWX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMjU4NjgxMzQtN2ZmNi0z NjFjLTgwNmMtYmIwMGJlZGNiMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaPXW2q7chdI8w0QtvHsBdcMkE/vDN6Tj02WN13NCfV4SQMK6ziUc0L sPSfSvz3SoV+dzNzBdz8ChQQEULSWEtQwrQovU3b5OswC4g7/tf1xvsmCQFlDVY+ C789WY39yFWR0HTas6c06wHsKeo/yLvlY8wAFwyvO97IGnolwKa9LA0Rpz3e3nrg 31YgcpVgo1dQZceCjLAtmWIrsq1E7k4ooTyc7JkNq30Oijz/fPktdGi6Oi68iGSa xyDEIagg6dLQTKRGbV2aVsrpqxXyTr+7Fe9vh4uF8PC7CZkJwFCKZK242/Kez1WM jqrn7rH5GUVYVlBnA+4qdn90dJsuQ6Q= -----END CERTIFICATE-----Generated at Fri Mar 14 10:00:09 2025 by rpki-client