$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7e47bb59-deb6-3967-96f2-31a28f774a44.roa File: 7e47bb59-deb6-3967-96f2-31a28f774a44.roa (raw, json) Hash identifier: rVcbJ9mcxnYsf6HdJ2QjOjpAuU7wokDemNsKO8atzKE= Subject key identifier: B3:47:62:F1:86:78:0A:B4:3C:34:6C:FB:F8:DE:E7:67:75:E2:6A:A7 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584925B3AC49D5294F3895853300 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7e47bb59-deb6-3967-96f2-31a28f774a44.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 393417 IP address blocks: 66.231.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:ac:49:d5:29:4f:38:95:85:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=e9a46758-b5d7-4edd-9bd0-30c24a39abca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:58:be:e9:22:9b:8d:03:a8:b7:66:9f:61: c7:62:38:a2:6c:5e:24:52:d4:57:d8:4f:ef:75:71: a7:7c:cf:57:3e:d5:2b:45:5a:a7:5c:b9:ad:61:a5: cd:4b:44:71:85:ba:80:1c:0b:83:79:f0:36:86:73: 99:ae:d1:63:d4:63:d7:43:fb:68:cb:40:16:3b:61: 69:e6:ad:82:19:3a:eb:09:4a:2d:e9:b5:a7:c7:f8: 02:74:ef:0d:1d:73:5b:b7:21:81:99:07:4c:3c:f3: 9b:2b:1f:e8:df:60:53:54:2d:31:93:c0:6c:4a:79: bb:f1:a3:30:46:47:c0:f6:0a:44:40:dc:24:5c:f9: 0d:01:d2:59:e9:85:42:e2:66:5b:1f:11:41:2a:a6: f9:db:b5:09:c6:11:34:6b:18:01:fa:44:93:70:14: 26:f4:1c:c2:54:a6:a2:9e:6b:4d:9b:98:32:75:5f: 10:7f:0d:b7:f9:e6:b6:3c:f0:c5:e5:57:7c:69:6a: 4f:81:9a:cb:3f:0a:6c:75:6e:83:01:d4:cf:78:87: 77:48:bc:92:18:16:af:9b:f0:8a:c5:37:5c:e3:8a: 44:46:b1:0a:0b:b6:b0:d0:49:e2:4c:b5:1c:65:62: c4:fa:aa:43:18:3d:48:ed:22:21:91:65:a7:fe:3d: 35:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:47:62:F1:86:78:0A:B4:3C:34:6C:FB:F8:DE:E7:67:75:E2:6A:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7e47bb59-deb6-3967-96f2-31a28f774a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:33:47:0a:fb:92:72:cf:f2:dc:bc:95:06:00:be:99:63:6a: df:74:f0:e8:92:6d:e1:1f:02:03:07:c3:e9:1f:f0:3a:b9:29: a9:77:6e:eb:81:80:6f:d1:00:93:55:8d:28:89:c7:c5:e5:da: bb:db:76:02:74:6f:ca:04:8f:21:e3:bd:22:cb:42:cb:0f:01: c5:58:8b:45:69:14:26:76:bf:31:05:16:78:71:cc:c5:76:cf: 4e:cf:47:b7:6b:6c:bd:45:03:a3:c2:11:59:c1:f6:6f:6b:a8: 5b:28:cb:50:d9:d0:a3:7e:71:86:af:07:2f:3a:86:d4:35:05: 4b:44:27:5d:47:d5:2c:93:36:73:a4:87:3d:4c:0f:fa:2d:80: 7c:49:92:cd:7b:17:c2:bd:7e:47:c3:72:9d:95:37:a3:cc:70: f1:b2:f7:6c:3c:cc:f1:c5:78:ff:27:f4:a3:08:60:a1:1a:27: 6f:ce:ea:73:9e:82:79:de:cd:a9:34:77:a8:55:68:33:5b:e4: 76:9a:34:20:04:4b:1e:76:dd:54:3c:ef:27:0c:ec:06:4f:f9: 1b:6d:42:20:ca:78:7a:70:43:63:bb:07:bd:e6:d6:bf:a3:ac: 8c:99:fa:82:6d:51:49:06:fc:70:f9:67:41:98:79:48:d4:06: 0f:71:2b:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6xJ1SlPOJWFMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk ZTlhNDY3NTgtYjVkNy00ZWRkLTliZDAtMzBjMjRhMzlhYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/dYvukim40DqLdmn2HHYjiibF4kUtRX2E/v dXGnfM9XPtUrRVqnXLmtYaXNS0RxhbqAHAuDefA2hnOZrtFj1GPXQ/toy0AWO2Fp 5q2CGTrrCUot6bWnx/gCdO8NHXNbtyGBmQdMPPObKx/o32BTVC0xk8BsSnm78aMw RkfA9gpEQNwkXPkNAdJZ6YVC4mZbHxFBKqb527UJxhE0axgB+kSTcBQm9BzCVKai nmtNm5gydV8Qfw23+ea2PPDF5Vd8aWpPgZrLPwpsdW6DAdTPeId3SLySGBavm/CK xTdc44pERrEKC7aw0EniTLUcZWLE+qpDGD1I7SIhkWWn/j016wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNHYvGGeAq0PDRs+/je52d14mqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvN2U0N2JiNTktZGViNi0z OTY3LTk2ZjItMzFhMjhmNzc0YTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHszRwr7knLP8ty8lQYAvpljat908OiSbeEfAgMHw+kf8Dq5Kal3buuB gG/RAJNVjSiJx8Xl2rvbdgJ0b8oEjyHjvSLLQssPAcVYi0VpFCZ2vzEFFnhxzMV2 z07PR7drbL1FA6PCEVnB9m9rqFsoy1DZ0KN+cYavBy86htQ1BUtEJ11H1SyTNnOk hz1MD/otgHxJks17F8K9fkfDcp2VN6PMcPGy92w8zPHFeP8n9KMIYKEaJ2/O6nOe gnnezak0d6hVaDNb5HaaNCAESx523VQ87ycM7AZP+RttQiDKeHpwQ2O7B73m1r+j rIyZ+oJtUUkG/HD5Z0GYeUjUBg9xK9M= -----END CERTIFICATE-----Generated at Sat Apr 12 10:16:49 2025 by rpki-client