$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2df3101c-35d8-3dbd-bc68-55e456b873a6.roa File: 2df3101c-35d8-3dbd-bc68-55e456b873a6.roa (raw, json) Hash identifier: e589q7Qrvtmprq/mAQHAe+Ops4rRTEHCvrcJ/+kyADE= Subject key identifier: 7A:E7:1A:CE:24:D1:6E:AC:9D:5D:39:40:70:4F:1E:96:BD:12:79:38 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858485CD02E48EEA5985D65E59F00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2df3101c-35d8-3dbd-bc68-55e456b873a6.roa Signing time: Sun 29 Dec 2024 02:00:39 +0000 ROA not before: Sun 29 Dec 2024 02:00:39 +0000 ROA not after: Sat 29 Mar 2025 01:00:39 +0000 asID: 15204 IP address blocks: 66.128.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5c:d0:2e:48:ee:a5:98:5d:65:e5:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 29 02:00:39 2024 GMT Not After : Mar 29 01:00:39 2025 GMT Subject: CN=514689e8-04f9-4ad1-812e-29d0a709e5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fc:a1:33:28:37:7d:a8:68:7d:35:c7:d5:8e: 6d:af:cc:f0:71:e4:9d:88:21:b2:fa:c9:90:9e:3e: ae:a6:17:30:29:db:95:06:ae:02:4c:dc:cd:a2:2d: 65:a4:11:44:e4:bc:79:da:b4:8c:1e:ac:3b:76:f2: 88:4f:3c:0d:a7:e7:be:1c:23:97:66:ae:41:66:83: 51:4a:99:45:53:76:ab:9d:03:a1:20:2a:54:d9:57: 89:fd:19:4a:86:b9:cd:5b:32:5d:4f:eb:80:ff:26: c6:f9:32:07:ef:07:7b:42:b4:8c:d0:77:a9:c9:82: 31:fd:d9:bf:0e:31:6c:c2:c5:04:90:ab:24:46:c5: d4:79:17:e2:68:dd:aa:dd:47:03:64:be:8b:2d:7b: 78:a8:c0:ca:a0:a4:c0:dc:4f:e9:d0:05:8f:44:4c: 0a:ae:4e:ea:6f:ee:d1:ac:40:98:0c:d7:76:75:67: 01:3c:ec:02:5f:5d:e9:d2:3c:a4:46:67:56:50:8d: 55:3e:3d:69:ba:9b:bc:cf:93:cd:0d:c0:13:14:93: 65:22:ce:89:2b:8b:94:4f:18:1b:b1:69:59:37:40: ff:fe:9f:4a:36:ce:05:ef:fa:57:10:32:1a:e9:52: 69:e1:e0:f6:7e:5f:bf:94:2d:c7:1b:3e:89:08:34: 1b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E7:1A:CE:24:D1:6E:AC:9D:5D:39:40:70:4F:1E:96:BD:12:79:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2df3101c-35d8-3dbd-bc68-55e456b873a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:cb:eb:70:8c:17:d2:11:3e:f4:2c:d4:a2:0f:2b:e5:90:ae: c3:e1:b8:53:db:90:7d:9a:d2:5d:83:27:fc:63:e6:fb:38:26: b6:48:05:00:41:69:ba:5e:24:d6:8f:e4:08:c6:af:37:c2:d7: 67:03:db:f2:b0:e7:a0:f3:72:cc:4f:f5:40:dc:58:c4:6b:59: 10:cd:f9:a8:d4:b6:83:91:98:3e:f0:ea:23:9d:dd:05:e1:9c: 85:18:c2:38:67:01:2f:f9:7f:9e:59:82:14:b4:39:8f:49:14: 95:27:4c:3f:0a:36:2b:15:26:fa:3a:bf:35:92:fb:d0:53:28: 52:41:17:97:93:33:66:f3:4c:2b:3d:d4:be:39:64:d8:20:3d: 7f:c7:8d:73:d9:ed:3a:da:a9:0a:bd:6f:9a:c6:eb:b4:4e:29: 5c:a1:f9:32:ba:63:8a:ae:46:b2:a0:21:ad:3c:4e:0c:02:11: 98:30:c9:c1:f7:4e:a2:78:4c:bc:3d:63:54:28:f0:87:8d:ab: a6:a2:21:3a:63:f4:1c:f1:35:47:c6:c3:a0:a3:d0:fd:ee:64: 2f:8e:6a:17:6d:09:fc:65:96:e2:2a:e1:af:14:d6:9a:dc:b0: 05:6a:a5:5c:b6:f2:59:63:eb:88:65:ed:78:eb:38:d7:cb:3a: 5d:22:25:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0C5I7qWYXWXlnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk NTE0Njg5ZTgtMDRmOS00YWQxLTgxMmUtMjlkMGE3MDllNWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvyhMyg3fahofTXH1Y5tr8zwceSdiCGy+smQ nj6uphcwKduVBq4CTNzNoi1lpBFE5Lx52rSMHqw7dvKITzwNp+e+HCOXZq5BZoNR SplFU3arnQOhICpU2VeJ/RlKhrnNWzJdT+uA/ybG+TIH7wd7QrSM0HepyYIx/dm/ DjFswsUEkKskRsXUeRfiaN2q3UcDZL6LLXt4qMDKoKTA3E/p0AWPREwKrk7qb+7R rECYDNd2dWcBPOwCX13p0jykRmdWUI1VPj1pupu8z5PNDcATFJNlIs6JK4uUTxgb sWlZN0D//p9KNs4F7/pXEDIa6VJp4eD2fl+/lC3HGz6JCDQb4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrnGs4k0W6snV05QHBPHpa9Enk4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMmRmMzEwMWMtMzVkOC0z ZGJkLWJjNjgtNTVlNDU2Yjg3M2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoC2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7L63CMF9IRPvQs1KIPK+WQrsPhuFPbkH2a0l2DJ/xj5vs4JrZIBQBB abpeJNaP5AjGrzfC12cD2/Kw56DzcsxP9UDcWMRrWRDN+ajUtoORmD7w6iOd3QXh nIUYwjhnAS/5f55ZghS0OY9JFJUnTD8KNisVJvo6vzWS+9BTKFJBF5eTM2bzTCs9 1L45ZNggPX/HjXPZ7TraqQq9b5rG67ROKVyh+TK6Y4quRrKgIa08TgwCEZgwycH3 TqJ4TLw9Y1Qo8IeNq6aiITpj9BzxNUfGw6Cj0P3uZC+OahdtCfxlluIq4a8U1prc sAVqpVy28llj64hl7XjrONfLOl0iJVU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:32 2025 by rpki-client