$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8711d8c2-0520-336c-9472-deae8c82d4d2.roa File: 8711d8c2-0520-336c-9472-deae8c82d4d2.roa (raw, json) Hash identifier: xegR8NJlQqYg9MxBE22KpBm+kVU4UBDbujbipie5e40= Subject key identifier: EC:DC:D6:4E:70:91:D1:EA:81:11:37:09:2C:B4:1F:AF:64:DA:9C:5C Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584832F035EA7635E3A32F1C8E80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8711d8c2-0520-336c-9472-deae8c82d4d2.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 13576 IP address blocks: 66.128.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:35:ea:76:35:e3:a3:2f:1c:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=3c579ade-ae7f-4799-a14a-f1e78bb2ba31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c4:66:9d:53:7f:a7:ae:12:8e:12:64:7c:3a: fd:5b:05:24:a3:de:81:79:37:48:a0:67:11:97:2e: 80:13:ec:7b:eb:e6:36:24:3a:e0:62:bd:e8:19:60: 9b:c9:0d:57:58:1b:f2:c8:d8:16:d7:51:3a:57:08: f3:7a:72:04:ad:70:6a:51:05:cb:01:de:22:0d:db: 52:e1:c5:4e:61:18:39:0d:38:34:71:23:3d:43:6b: 9a:2c:7d:9a:2a:33:e2:aa:c3:a6:f3:d5:73:cb:c8: d4:00:da:b1:a1:c6:22:a1:d1:89:53:eb:e8:18:5b: 07:ed:8d:c8:9b:d1:50:74:c1:5f:4f:92:0c:8a:1f: 44:03:14:f7:3f:2f:f7:cc:da:76:3d:3d:b4:e6:8b: e9:45:25:89:e9:7e:49:a5:65:3b:c3:00:5b:a6:b8: 51:26:2d:39:2f:42:f3:87:d4:40:11:9d:37:50:ac: ad:b1:e0:a3:93:a5:ec:9d:fb:c8:bc:55:83:71:25: 52:a2:25:33:4c:db:15:7d:bb:56:2b:47:e8:64:b1: 10:b8:ca:d0:32:88:0e:36:d9:dc:65:37:29:de:4a: 8d:92:fe:34:1d:31:55:78:d8:c7:c6:8c:7a:b7:51: 73:fa:b3:a9:3a:de:88:db:d7:5f:b8:f4:2b:5d:5a: ee:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DC:D6:4E:70:91:D1:EA:81:11:37:09:2C:B4:1F:AF:64:DA:9C:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8711d8c2-0520-336c-9472-deae8c82d4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:88:55:2d:36:a4:7e:c9:be:80:62:bb:6b:ae:5e:27:6d:8e: 20:1f:6d:e8:c7:dd:7b:9a:8f:06:95:08:4f:b3:b3:27:94:34: e3:cb:51:1d:bd:cf:0f:27:b4:fb:21:dd:4a:98:69:6d:a0:a9: 50:ce:5d:6e:a6:6e:0d:f3:33:18:55:3d:56:03:db:cf:5f:c7: a7:d3:ba:fd:ec:19:93:6b:8f:b3:37:ea:23:7b:de:5d:03:b7: 41:51:a8:58:58:40:a8:dc:4d:9d:64:0e:d5:28:76:5c:74:ca: 81:eb:14:2a:75:77:9d:47:4c:71:e1:48:15:8c:b8:40:c7:1f: c4:b5:86:68:b6:5e:44:80:a7:ef:14:bc:c6:56:c1:af:a1:65: 5f:93:cd:ba:bf:02:3d:b3:3a:50:75:30:c7:e8:28:5c:3e:9d: 1b:ad:41:67:9f:17:da:e5:03:cd:2e:36:6c:88:cc:76:cf:bb: 26:eb:64:d7:26:26:a8:a5:9f:fa:a5:51:04:cf:08:eb:15:87: 7b:88:85:1c:4d:de:5e:57:9f:e0:7f:80:a7:a4:ef:98:ec:99: ed:de:7c:1c:64:55:7e:b3:f7:4d:77:e9:7f:cf:64:0f:1f:7e: 5f:a8:ce:5e:66:ae:27:c4:7a:d0:c3:26:f4:7c:32:56:52:ab: 0d:a4:37:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DXqdjXjoy8cjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk M2M1NzlhZGUtYWU3Zi00Nzk5LWExNGEtZjFlNzhiYjJiYTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8RmnVN/p64SjhJkfDr9WwUko96BeTdIoGcR ly6AE+x76+Y2JDrgYr3oGWCbyQ1XWBvyyNgW11E6VwjzenIErXBqUQXLAd4iDdtS 4cVOYRg5DTg0cSM9Q2uaLH2aKjPiqsOm89Vzy8jUANqxocYiodGJU+voGFsH7Y3I m9FQdMFfT5IMih9EAxT3Py/3zNp2PT205ovpRSWJ6X5JpWU7wwBbprhRJi05L0Lz h9RAEZ03UKytseCjk6XsnfvIvFWDcSVSoiUzTNsVfbtWK0foZLEQuMrQMogONtnc ZTcp3kqNkv40HTFVeNjHxox6t1Fz+rOpOt6I29dfuPQrXVruewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzc1k5wkdHqgRE3CSy0H69k2pxcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODcxMWQ4YzItMDUyMC0z MzZjLTk0NzItZGVhZThjODJkNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoC3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKIVS02pH7JvoBiu2uuXidtjiAfbejH3XuajwaVCE+zsyeUNOPLUR29 zw8ntPsh3UqYaW2gqVDOXW6mbg3zMxhVPVYD289fx6fTuv3sGZNrj7M36iN73l0D t0FRqFhYQKjcTZ1kDtUodlx0yoHrFCp1d51HTHHhSBWMuEDHH8S1hmi2XkSAp+8U vMZWwa+hZV+Tzbq/Aj2zOlB1MMfoKFw+nRutQWefF9rlA80uNmyIzHbPuybrZNcm Jqiln/qlUQTPCOsVh3uIhRxN3l5Xn+B/gKek75jsme3efBxkVX6z90136X/PZA8f fl+ozl5mrifEetDDJvR8MlZSqw2kN0M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:36 2025 by rpki-client