$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/735fd1a1-acec-3398-9376-ac6c9bb36549.roa File: 735fd1a1-acec-3398-9376-ac6c9bb36549.roa (raw, json) Hash identifier: X2y7nmYMxqZkYosrOv6JRBR/5CizdY6abSU5E4+RPH0= Subject key identifier: AA:A5:53:5D:C4:EF:72:32:9B:04:06:C9:34:80:12:03:6E:7B:C6:C3 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285848467ABFF46973D98429C87480 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/735fd1a1-acec-3398-9376-ac6c9bb36549.roa Signing time: Sat 21 Dec 2024 02:00:39 +0000 ROA not before: Sat 21 Dec 2024 02:00:39 +0000 ROA not after: Fri 21 Mar 2025 01:00:39 +0000 asID: 13576 IP address blocks: 66.231.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:46:7a:bf:f4:69:73:d9:84:29:c8:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 21 02:00:39 2024 GMT Not After : Mar 21 01:00:39 2025 GMT Subject: CN=46066cd9-a520-41f9-a2b3-02019db0d096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:3b:1a:df:04:eb:8c:9b:77:06:44:4d:89: 3d:34:fe:c4:b7:5d:e0:04:9f:67:36:e1:38:0a:05: 85:76:ce:b1:34:26:63:c0:ed:1c:c5:f2:46:f2:9b: 64:14:46:a3:72:a7:0f:5b:d3:4f:7e:ca:c1:23:49: 98:f1:a4:53:7d:a6:bc:e3:8f:94:7a:9f:0b:1b:78: 4b:22:d6:79:35:9e:4d:01:88:3b:a5:71:d7:3b:af: 11:a1:e9:5e:56:30:63:77:88:21:7a:6b:53:99:f2: a1:53:64:b0:d1:b0:55:51:9a:0f:6b:9f:6a:b5:64: c6:02:ed:73:fe:be:78:20:b3:22:59:e9:d2:91:e1: 8d:46:69:63:02:89:b9:34:7e:6a:7e:89:0f:61:c1: 11:de:b2:5e:8a:f3:4f:24:cf:24:d3:72:9e:89:d2: 31:d9:76:5f:1c:c4:96:06:30:7e:8a:a8:76:8c:8c: 59:a4:d2:ae:62:dd:91:94:a3:77:45:01:ef:7e:cc: 99:d3:0a:4e:4a:c7:cb:e2:69:f6:6c:5c:9a:00:64: 2d:1b:e1:bb:8f:69:95:ab:59:e5:66:0c:30:57:f9: 9a:2b:3d:57:fc:9a:a2:1d:c7:ea:a2:9c:a5:86:dd: d8:4e:1a:7c:cd:c0:58:18:ea:4f:c5:3b:42:de:e4: 95:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A5:53:5D:C4:EF:72:32:9B:04:06:C9:34:80:12:03:6E:7B:C6:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/735fd1a1-acec-3398-9376-ac6c9bb36549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:09:3c:f8:be:ef:15:d0:d1:51:41:75:5a:17:22:62:24:c7: 7c:fa:31:24:09:b6:08:42:3a:70:6a:e4:f5:23:3e:e8:40:cd: ed:b3:53:84:ec:67:e3:c6:71:88:35:84:be:3f:38:45:01:06: 2d:14:8d:64:d0:09:48:56:d8:90:ce:ef:9f:82:f8:5e:a8:dc: ac:a8:d5:f9:eb:b3:c3:c9:19:71:49:e7:e8:3e:30:f1:07:18: d1:12:5d:d4:b4:c5:04:72:72:55:be:c8:5b:2e:aa:66:6e:9e: 9a:53:b4:39:85:ef:4e:d2:44:77:51:5d:55:31:17:34:03:9f: a1:d3:77:90:44:96:3a:77:30:c1:55:35:a2:10:a0:ca:22:b0: 47:48:2d:43:d9:84:38:55:44:f9:9f:c7:9d:5e:9e:36:55:5e: a1:b1:5e:59:bf:de:bb:63:3d:cf:23:39:08:df:73:ba:d4:4c: f9:f0:84:7f:e8:92:6f:ad:f3:e7:2c:e9:76:e6:b0:1b:46:f9: f3:88:02:1b:56:30:f8:08:57:8a:09:4d:81:9f:97:dd:bf:e8: d1:9f:cb:e8:29:62:3d:78:fc:05:6b:db:fa:2c:99:2f:48:f4: 13:35:d5:6e:1e:96:6b:ef:93:6d:ea:2e:3a:2c:b8:fe:f7:60: 61:09:29:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhGer/0aXPZhCnIdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk NDYwNjZjZDktYTUyMC00MWY5LWEyYjMtMDIwMTlkYjBkMDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYI7Gt8E64ybdwZETYk9NP7Et13gBJ9nNuE4 CgWFds6xNCZjwO0cxfJG8ptkFEajcqcPW9NPfsrBI0mY8aRTfaa844+Uep8LG3hL ItZ5NZ5NAYg7pXHXO68RoeleVjBjd4ghemtTmfKhU2Sw0bBVUZoPa59qtWTGAu1z /r54ILMiWenSkeGNRmljAom5NH5qfokPYcER3rJeivNPJM8k03KeidIx2XZfHMSW BjB+iqh2jIxZpNKuYt2RlKN3RQHvfsyZ0wpOSsfL4mn2bFyaAGQtG+G7j2mVq1nl ZgwwV/maKz1X/JqiHcfqopylht3YThp8zcBYGOpPxTtC3uSVTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqlU13E73IymwQGyTSAEgNue8bDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNzM1ZmQxYTEtYWNlYy0z Mzk4LTkzNzYtYWM2YzliYjM2NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4JPPi+7xXQ0VFBdVoXImIkx3z6MSQJtghCOnBq5PUjPuhAze2zU4Ts Z+PGcYg1hL4/OEUBBi0UjWTQCUhW2JDO75+C+F6o3Kyo1fnrs8PJGXFJ5+g+MPEH GNESXdS0xQRyclW+yFsuqmZunppTtDmF707SRHdRXVUxFzQDn6HTd5BEljp3MMFV NaIQoMoisEdILUPZhDhVRPmfx51enjZVXqGxXlm/3rtjPc8jOQjfc7rUTPnwhH/o km+t8+cs6XbmsBtG+fOIAhtWMPgIV4oJTYGfl92/6NGfy+gpYj14/AVr2/osmS9I 9BM11W4elmvvk23qLjosuP73YGEJKZo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:18 2025 by rpki-client