$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7e9452a5-c6da-395d-856e-12142d01ff50.roa File: 7e9452a5-c6da-395d-856e-12142d01ff50.roa (raw, json) Hash identifier: Grlpp6bFK/Q3Gmffn1tlmxeh/m4/MpcTMVAXZhxztjU= Subject key identifier: 2D:5E:63:8F:7A:37:E5:75:BC:46:54:15:BA:06:3E:63:AA:59:DB:93 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285848467ABFA0621B2A4021A74340 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7e9452a5-c6da-395d-856e-12142d01ff50.roa Signing time: Sat 21 Dec 2024 02:00:39 +0000 ROA not before: Sat 21 Dec 2024 02:00:39 +0000 ROA not after: Fri 21 Mar 2025 01:00:39 +0000 asID: 13576 IP address blocks: 66.231.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:46:7a:bf:a0:62:1b:2a:40:21:a7:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 21 02:00:39 2024 GMT Not After : Mar 21 01:00:39 2025 GMT Subject: CN=ee5ec42f-da07-4752-8b5c-3d38938a3e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:85:ea:18:1a:db:b0:0c:31:89:31:b2:18:f6: 35:52:35:98:8c:72:c3:03:cb:9d:96:12:f8:a6:ad: 12:96:ae:02:96:0c:29:98:5c:81:4f:6e:21:e9:b6: b0:df:b8:cd:d0:18:cf:9d:f1:b1:a5:51:dc:6a:16: 36:71:1b:85:43:62:93:b2:9e:fe:e6:51:5c:38:3b: ad:74:b9:95:51:2a:4d:b6:9f:57:37:a9:52:d9:be: 29:3d:3a:6a:b7:95:ab:8f:fc:27:84:82:0c:e2:6b: 0f:c7:26:51:19:fb:6a:eb:25:ce:d4:13:fa:06:de: ca:91:88:04:03:79:6a:4f:e0:2e:22:9c:71:40:25: 87:38:d8:62:79:14:b7:46:5d:27:2c:1b:bc:c9:26: e6:89:c0:5e:8b:f7:ec:67:ca:4e:51:f9:65:6f:25: 8d:2b:53:a4:2f:07:12:84:17:4a:b8:b4:0f:a2:1a: 19:d8:ca:36:e3:98:fa:ca:15:03:64:d7:cb:b7:2a: 48:b2:b8:af:04:cd:5d:b3:68:1b:8b:b6:71:4d:07: 7b:cf:ca:a4:93:3a:af:00:a2:79:1a:88:d5:6f:78: dd:06:e3:0b:76:29:8a:ea:76:72:06:f6:fc:89:4b: 5a:42:2d:fa:1f:f3:fa:6e:bb:86:b0:81:3b:b1:ac: a6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5E:63:8F:7A:37:E5:75:BC:46:54:15:BA:06:3E:63:AA:59:DB:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7e9452a5-c6da-395d-856e-12142d01ff50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:68:0e:5e:a7:a8:13:ac:5f:bb:01:bc:58:14:3b:69:03:3f: 9e:91:8b:c2:d7:af:3e:eb:ba:7a:f3:ab:16:25:3f:e9:b2:2a: 9a:75:93:b9:84:1c:26:b7:64:fb:6a:f8:2b:9a:13:d6:22:42: b2:df:cb:2b:6e:df:3b:cf:59:9d:a6:95:70:5d:98:3c:80:99: 82:d0:33:50:f2:59:fd:66:a3:25:ba:3f:f5:43:73:fc:f7:37: 3e:a1:72:79:52:f1:86:e2:0b:1b:d8:b4:d3:6b:e0:b9:6c:e2: 8b:4a:cb:21:96:3d:3e:83:44:92:de:f6:7f:20:46:d8:ea:05: 86:d6:70:7a:ce:3f:47:19:0c:7b:e4:0d:08:82:1f:ad:c6:d2: ca:95:9a:d2:76:05:ff:df:14:67:c1:40:ac:c8:6f:05:92:fa: 5b:1c:ae:97:40:0d:de:d9:31:e6:88:16:f8:5a:61:c8:be:8e: f3:da:05:78:72:da:b8:c3:56:21:fd:2f:3e:16:b7:47:a6:e7: cb:d7:8c:30:5b:63:18:42:d5:88:25:7c:47:08:63:67:b6:81: 6f:8e:c7:71:11:df:ca:3b:9b:70:9c:ea:bd:96:81:72:7b:40: b4:df:e1:fe:ed:a3:49:b5:ec:2c:d2:45:cf:2b:04:d4:55:5c: 2a:ae:60:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhGer+gYhsqQCGnQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZWU1ZWM0MmYtZGEwNy00NzUyLThiNWMtM2QzODkzOGEzZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4XqGBrbsAwxiTGyGPY1UjWYjHLDA8udlhL4 pq0Slq4ClgwpmFyBT24h6baw37jN0BjPnfGxpVHcahY2cRuFQ2KTsp7+5lFcODut dLmVUSpNtp9XN6lS2b4pPTpqt5Wrj/wnhIIM4msPxyZRGftq6yXO1BP6Bt7KkYgE A3lqT+AuIpxxQCWHONhieRS3Rl0nLBu8ySbmicBei/fsZ8pOUfllbyWNK1OkLwcS hBdKuLQPohoZ2Mo245j6yhUDZNfLtypIsrivBM1ds2gbi7ZxTQd7z8qkkzqvAKJ5 GojVb3jdBuMLdimK6nZyBvb8iUtaQi36H/P6bruGsIE7saym5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1eY496N+V1vEZUFboGPmOqWduTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvN2U5NDUyYTUtYzZkYS0z OTVkLTg1NmUtMTIxNDJkMDFmZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5oDl6nqBOsX7sBvFgUO2kDP56Ri8LXrz7runrzqxYlP+myKpp1k7mE HCa3ZPtq+CuaE9YiQrLfyytu3zvPWZ2mlXBdmDyAmYLQM1DyWf1moyW6P/VDc/z3 Nz6hcnlS8YbiCxvYtNNr4Lls4otKyyGWPT6DRJLe9n8gRtjqBYbWcHrOP0cZDHvk DQiCH63G0sqVmtJ2Bf/fFGfBQKzIbwWS+lscrpdADd7ZMeaIFvhaYci+jvPaBXhy 2rjDViH9Lz4Wt0em58vXjDBbYxhC1YglfEcIY2e2gW+Ox3ER38o7m3Cc6r2WgXJ7 QLTf4f7to0m17CzSRc8rBNRVXCquYEY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:58 2025 by rpki-client