$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7e9452a5-c6da-395d-856e-12142d01ff50.roa File: 7e9452a5-c6da-395d-856e-12142d01ff50.roa (raw, json) Hash identifier: pg1oX42fBgnL/X1OSWJi0fc/SfANfVRVuzrJh1NtYAU= Subject key identifier: 5B:64:B8:BA:CD:C4:58:2E:B9:6C:C7:C7:51:BA:41:E3:22:5A:56:66 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584925B3AC6A5C7C5962E7AC0C80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7e9452a5-c6da-395d-856e-12142d01ff50.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 13576 IP address blocks: 66.231.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:ac:6a:5c:7c:59:62:e7:ac:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=92b4fbaf-176b-4568-9d2c-9f2fee30a0a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:e4:32:01:0b:f9:7e:9d:61:d8:1d:9a:d4: 56:69:7e:68:73:56:27:d4:5b:11:aa:c2:3a:cb:75: a0:91:5e:79:51:b2:d6:94:8c:43:95:eb:6f:9a:7b: ee:bb:17:70:f9:e2:49:b7:2c:b0:a9:4b:47:70:d0: b4:e9:22:10:22:3f:f2:93:2a:88:52:d8:44:ee:c3: 3a:ad:a8:c4:3d:3b:c1:0e:ef:97:5c:b7:a7:64:55: 63:5f:90:06:e2:de:1b:1f:37:27:b2:d0:4e:fd:e3: 4f:71:f9:eb:2b:78:07:b7:1f:c0:cd:ee:cb:83:08: d6:fe:29:ad:18:9c:79:74:af:95:94:9a:17:8d:b0: f4:6a:79:61:13:97:a2:56:9f:4f:85:90:2b:c1:57: c5:7a:9b:b5:63:b2:ba:c5:4f:c4:45:4f:36:33:84: 2e:94:eb:4b:50:a6:0d:29:02:54:e7:fd:e8:2f:43: 83:69:56:25:c7:5a:73:b4:72:37:a1:ac:4f:15:4b: a5:d2:b4:10:57:6c:87:0d:05:d2:89:49:36:24:15: a1:a3:4e:7d:72:d6:1c:85:09:d0:ca:aa:86:31:30: 9b:aa:0a:86:f8:23:02:75:09:6c:c0:83:ff:b3:9f: bb:f0:28:ee:48:e2:0c:85:d0:57:b9:f8:63:b8:7f: 45:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:64:B8:BA:CD:C4:58:2E:B9:6C:C7:C7:51:BA:41:E3:22:5A:56:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7e9452a5-c6da-395d-856e-12142d01ff50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:20:b0:db:2d:e2:a6:85:2d:3a:8f:24:d2:ed:0b:ec:a2:b1: 6d:0f:84:bb:b1:c2:7a:69:8d:52:c7:33:4d:d6:ad:c4:6a:db: 26:cf:35:a5:80:c3:34:62:25:dc:33:de:6d:39:96:bc:9c:3f: fa:26:94:73:12:72:8b:cd:5f:7d:02:42:66:be:bb:49:f5:79: a4:0f:5e:bf:63:74:d4:55:03:ee:6d:89:8c:3c:a9:1f:e1:52: f8:09:21:6b:e9:4f:f3:44:3b:1e:20:2a:16:1f:4b:0a:10:7d: 6b:9e:a3:cc:39:4e:62:15:7e:99:2e:96:eb:fe:16:ae:34:8e: 36:2b:5a:f4:44:7e:7e:f9:a1:05:6f:1e:63:5c:06:7a:0c:e4: 50:52:b0:00:10:bd:9c:e1:b5:f7:1a:67:a2:a5:e8:82:92:df: ae:8b:27:95:3b:ae:e0:05:7b:74:62:12:f6:23:62:cb:e3:1f: 9d:b1:3c:7d:21:35:d6:8c:78:5d:97:1e:bd:9a:c2:06:74:97: a0:85:aa:a4:ec:4e:d9:de:17:46:9f:51:08:3b:ee:64:71:f4: b5:0d:22:cb:81:20:3b:b1:a5:9d:84:ae:89:ec:53:56:75:23: 02:de:ed:06:24:0e:d5:0a:3e:82:62:52:6d:45:fd:ca:d2:c0: f4:a5:11:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6xqXHxZYuesDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk OTJiNGZiYWYtMTc2Yi00NTY4LTlkMmMtOWYyZmVlMzBhMGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4vkMgEL+X6dYdgdmtRWaX5oc1Yn1FsRqsI6 y3WgkV55UbLWlIxDletvmnvuuxdw+eJJtyywqUtHcNC06SIQIj/ykyqIUthE7sM6 rajEPTvBDu+XXLenZFVjX5AG4t4bHzcnstBO/eNPcfnrK3gHtx/Aze7LgwjW/imt GJx5dK+VlJoXjbD0anlhE5eiVp9PhZArwVfFepu1Y7K6xU/ERU82M4QulOtLUKYN KQJU5/3oL0ODaVYlx1pztHI3oaxPFUul0rQQV2yHDQXSiUk2JBWho059ctYchQnQ yqqGMTCbqgqG+CMCdQlswIP/s5+78CjuSOIMhdBXufhjuH9F2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtkuLrNxFguuWzHx1G6QeMiWlZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvN2U5NDUyYTUtYzZkYS0z OTVkLTg1NmUtMTIxNDJkMDFmZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQgsNst4qaFLTqPJNLtC+yisW0PhLuxwnppjVLHM03WrcRq2ybPNaWA wzRiJdwz3m05lrycP/omlHMScovNX30CQma+u0n1eaQPXr9jdNRVA+5tiYw8qR/h UvgJIWvpT/NEOx4gKhYfSwoQfWueo8w5TmIVfpkuluv+Fq40jjYrWvREfn75oQVv HmNcBnoM5FBSsAAQvZzhtfcaZ6Kl6IKS366LJ5U7ruAFe3RiEvYjYsvjH52xPH0h NdaMeF2XHr2awgZ0l6CFqqTsTtneF0afUQg77mRx9LUNIsuBIDuxpZ2EronsU1Z1 IwLe7QYkDtUKPoJiUm1F/crSwPSlERY= -----END CERTIFICATE-----Generated at Fri Mar 14 10:25:03 2025 by rpki-client