$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa File: 5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa (raw, json) Hash identifier: C4aN/Db7jMQsK0EL0iS+BxZXyuzJlcGdCd9yK7omeS4= Subject key identifier: A6:B4:D0:7F:D0:98:AA:4F:CF:03:08:18:EE:5F:1A:E6:B7:A5:B8:EF Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858485CD02E241582122B08D27280 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa Signing time: Sun 29 Dec 2024 02:00:39 +0000 ROA not before: Sun 29 Dec 2024 02:00:39 +0000 ROA not after: Sat 29 Mar 2025 01:00:39 +0000 asID: 15204 IP address blocks: 66.128.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5c:d0:2e:24:15:82:12:2b:08:d2:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 29 02:00:39 2024 GMT Not After : Mar 29 01:00:39 2025 GMT Subject: CN=9cb11880-d390-466d-820f-b7ee63f7ca19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:86:74:4f:23:64:61:5e:22:ba:c3:a5:1c: ae:07:0d:dc:dc:26:a7:0d:7f:b1:57:53:0b:9d:5f: 38:e5:a2:21:e5:df:0a:c7:9f:8e:ac:11:dc:e8:d5: 42:ff:6a:e9:f8:2a:3c:4b:06:81:48:ce:27:ed:13: df:79:73:6a:34:ef:80:2e:7e:c3:75:8e:1e:6d:f5: 36:4f:c1:3a:7e:e6:46:20:09:b1:86:3d:e3:34:89: 06:d7:5a:1c:7e:a4:84:60:7b:7f:5b:04:dd:8a:d0: 59:68:f0:fb:37:7c:b7:a4:80:34:61:54:1f:90:4b: 86:b2:85:34:d5:77:c9:7a:bc:dd:f1:e9:8e:99:a4: a4:ae:57:e0:81:32:ad:20:73:b1:90:73:17:0a:d0: ab:0e:c8:35:c2:21:3b:05:a2:75:fd:d2:61:2c:31: 3d:81:21:9c:56:b4:1b:c4:0f:45:ef:a3:18:2b:66: 4f:6c:a1:f4:73:91:e8:b0:74:13:30:da:63:62:49: 7a:17:03:ee:1f:14:85:43:55:c8:74:1b:8f:0a:f6: fe:22:88:d2:ae:57:7a:0e:60:81:2c:c1:a3:ab:27: ad:be:2e:3f:12:0b:b9:8d:3f:ae:d2:a1:a5:bd:18: 19:18:da:cc:a0:91:3b:f7:71:89:1d:21:10:e9:9e: 8c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B4:D0:7F:D0:98:AA:4F:CF:03:08:18:EE:5F:1A:E6:B7:A5:B8:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5392b7cd-da86-31cd-a4c1-a0f851f11b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:44:c2:d8:d4:4f:7e:c5:e6:e2:17:7f:4e:62:d3:7b:7c:36: 12:e7:27:89:5a:1d:03:70:a1:51:17:f8:f6:1a:ea:66:3a:45: 4f:04:69:54:39:c1:d3:52:b2:69:a8:e1:e6:cc:b3:49:13:63: c8:fd:b7:58:92:11:61:83:88:f5:86:c6:34:79:ff:80:cf:33: 04:07:ee:a3:4e:93:24:98:01:f1:7d:ad:db:04:10:bc:66:37: 9c:9e:38:c9:bb:bd:3c:8f:b2:2b:17:f1:03:2d:98:ee:c8:4f: 06:82:d3:43:6b:a8:9f:78:7c:7a:06:27:54:5c:eb:e2:1b:87: db:53:97:0e:6e:0e:5e:c6:0a:25:dc:76:16:7b:94:42:d1:19: 50:db:38:a1:82:a4:ac:5f:ea:a9:9f:40:24:e7:1b:36:fd:38: af:fb:ed:75:ef:f2:ae:6c:4c:b2:1b:b2:aa:71:11:44:5c:ef: 0f:59:97:66:79:4b:d1:f2:44:6a:8b:59:34:01:03:7b:36:8d: b7:f3:99:e0:97:c2:50:72:33:43:35:83:bd:a3:48:8c:69:db: d0:53:94:38:17:0c:8f:9e:df:71:82:2f:39:fa:25:a8:7a:34: 99:44:cd:a9:b8:5a:3a:a1:31:48:33:13:76:33:f3:f5:88:c9: a7:24:91:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0C4kFYISKwjScoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk OWNiMTE4ODAtZDM5MC00NjZkLTgyMGYtYjdlZTYzZjdjYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb6GdE8jZGFeIrrDpRyuBw3c3CanDX+xV1ML nV845aIh5d8Kx5+OrBHc6NVC/2rp+Co8SwaBSM4n7RPfeXNqNO+ALn7DdY4ebfU2 T8E6fuZGIAmxhj3jNIkG11ocfqSEYHt/WwTditBZaPD7N3y3pIA0YVQfkEuGsoU0 1XfJerzd8emOmaSkrlfggTKtIHOxkHMXCtCrDsg1wiE7BaJ1/dJhLDE9gSGcVrQb xA9F76MYK2ZPbKH0c5HosHQTMNpjYkl6FwPuHxSFQ1XIdBuPCvb+IojSrld6DmCB LMGjqyetvi4/Egu5jT+u0qGlvRgZGNrMoJE793GJHSEQ6Z6MLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa00H/QmKpPzwMIGO5fGua3pbjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNTM5MmI3Y2QtZGE4Ni0z MWNkLWE0YzEtYTBmODUxZjExYjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQoCiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHREwtjUT37F5uIXf05i03t8NhLnJ4laHQNwoVEX+PYa6mY6RU8EaVQ5 wdNSsmmo4ebMs0kTY8j9t1iSEWGDiPWGxjR5/4DPMwQH7qNOkySYAfF9rdsEELxm N5yeOMm7vTyPsisX8QMtmO7ITwaC00NrqJ94fHoGJ1Rc6+Ibh9tTlw5uDl7GCiXc dhZ7lELRGVDbOKGCpKxf6qmfQCTnGzb9OK/77XXv8q5sTLIbsqpxEURc7w9Zl2Z5 S9HyRGqLWTQBA3s2jbfzmeCXwlByM0M1g72jSIxp29BTlDgXDI+e33GCLzn6Jah6 NJlEzam4WjqhMUgzE3Yz8/WIyackkdM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:02:10 2025 by rpki-client