$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f2265bc6-356a-33b9-b75b-be1248521091.roa File: f2265bc6-356a-33b9-b75b-be1248521091.roa (raw, json) Hash identifier: g44U9TCKgjcmkomKDydTczCTqfoUatEtzL2O1+3V2EI= Subject key identifier: E5:95:5A:61:6B:D3:06:E3:EE:A2:43:84:E7:D9:F4:D9:36:EE:F2:8D Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858485CD02E34D91C8BCC15CC8F00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f2265bc6-356a-33b9-b75b-be1248521091.roa Signing time: Sun 29 Dec 2024 02:00:39 +0000 ROA not before: Sun 29 Dec 2024 02:00:39 +0000 ROA not after: Sat 29 Mar 2025 01:00:39 +0000 asID: 15204 IP address blocks: 66.128.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5c:d0:2e:34:d9:1c:8b:cc:15:cc:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 29 02:00:39 2024 GMT Not After : Mar 29 01:00:39 2025 GMT Subject: CN=72a11b7a-314b-4175-8859-ec4ef43f27c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a9:e1:da:48:25:65:e8:aa:9a:52:99:53:75: 7a:bc:f0:2c:3c:bd:f1:34:35:87:b0:a3:cc:99:9a: 6a:65:29:3e:a8:12:43:09:10:ea:7c:7a:15:43:08: 1e:b0:6a:95:ad:d1:10:17:47:68:37:82:4b:c4:22: 88:57:c6:16:ed:4c:d6:da:0b:fb:bb:a0:8f:71:54: bd:ec:94:5d:6b:6a:fb:33:d7:ac:a5:26:79:a5:de: a5:f4:26:0f:b1:64:8a:fe:8b:ee:91:42:89:eb:14: f0:46:d2:72:9d:b8:07:e9:02:eb:5a:98:97:19:9b: 13:16:03:67:d3:82:e9:8b:01:8f:6c:ce:64:8b:39: c4:11:35:40:71:ad:18:c4:a0:cd:81:89:6e:dc:91: e8:dd:10:58:3e:8e:d3:ea:4c:dc:8c:f3:af:86:e5: b5:7f:9a:b9:97:a8:82:3f:96:0e:4b:b1:3b:a0:59: 68:60:61:ca:7a:0f:ca:5a:31:77:ca:1c:95:e1:58: 92:6c:e0:2c:63:ba:c0:ac:3d:41:0b:b6:b2:08:14: df:49:f2:e0:d0:a0:84:35:25:da:a5:63:33:c9:ba: 0b:b2:83:f4:30:bc:b4:e9:ed:0b:07:bb:0e:dc:64: f8:b0:5b:75:f1:22:3f:66:12:61:d2:34:02:ad:cb: a2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:95:5A:61:6B:D3:06:E3:EE:A2:43:84:E7:D9:F4:D9:36:EE:F2:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f2265bc6-356a-33b9-b75b-be1248521091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:fb:41:2b:c6:db:8d:0c:3f:4c:21:cb:00:3b:37:1d:69:b8: 38:27:9d:8f:dd:08:8e:1f:74:3c:40:f9:38:07:c4:bf:3e:d1: d1:45:01:7f:1b:e4:c3:c1:b4:95:f7:3d:16:07:7d:e8:6b:3b: 29:12:21:24:ce:3b:da:32:bf:32:73:75:b3:84:fe:09:bf:67: 7a:60:c0:82:08:d1:57:77:31:92:e1:07:ae:61:fe:fb:84:c4: ff:f2:74:d1:cb:c7:4f:a5:b4:91:5b:26:66:68:25:25:f9:4a: 54:60:f7:27:9c:26:90:98:3a:e2:df:6d:c4:f9:1b:e1:51:70: 6e:c5:20:46:e9:54:e0:d0:68:20:c8:0f:8d:d6:94:69:07:44: 6b:ce:3e:ab:a6:47:58:a9:f8:1f:99:84:4c:19:ed:54:2c:1d: 71:da:fc:fb:a1:0e:65:a0:a6:ea:ec:9c:bc:9f:34:bf:fd:83: f9:70:4f:61:8e:98:93:10:6f:60:ac:4d:1c:29:6f:0d:5f:dc: 96:d1:21:e8:a2:a1:b8:2a:83:46:fd:37:1b:6e:71:e9:5f:de: d4:78:72:78:0b:25:fb:ba:1e:6e:8f:3b:33:f5:75:98:bb:9a: 80:76:0a:71:fe:41:f1:ff:1d:ef:85:96:10:8a:00:49:46:b1: 22:00:2a:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0C402RyLzBXMjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk NzJhMTFiN2EtMzE0Yi00MTc1LTg4NTktZWM0ZWY0M2YyN2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1anh2kglZeiqmlKZU3V6vPAsPL3xNDWHsKPM mZpqZSk+qBJDCRDqfHoVQwgesGqVrdEQF0doN4JLxCKIV8YW7UzW2gv7u6CPcVS9 7JRda2r7M9espSZ5pd6l9CYPsWSK/ovukUKJ6xTwRtJynbgH6QLrWpiXGZsTFgNn 04LpiwGPbM5kiznEETVAca0YxKDNgYlu3JHo3RBYPo7T6kzcjPOvhuW1f5q5l6iC P5YOS7E7oFloYGHKeg/KWjF3yhyV4ViSbOAsY7rArD1BC7ayCBTfSfLg0KCENSXa pWMzyboLsoP0MLy06e0LB7sO3GT4sFt18SI/ZhJh0jQCrcuixQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWVWmFr0wbj7qJDhOfZ9Nk27vKNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZjIyNjViYzYtMzU2YS0z M2I5LWI3NWItYmUxMjQ4NTIxMDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQoCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ77QSvG240MP0whywA7Nx1puDgnnY/dCI4fdDxA+TgHxL8+0dFFAX8b 5MPBtJX3PRYHfehrOykSISTOO9oyvzJzdbOE/gm/Z3pgwIII0Vd3MZLhB65h/vuE xP/ydNHLx0+ltJFbJmZoJSX5SlRg9yecJpCYOuLfbcT5G+FRcG7FIEbpVODQaCDI D43WlGkHRGvOPqumR1ip+B+ZhEwZ7VQsHXHa/PuhDmWgpursnLyfNL/9g/lwT2GO mJMQb2CsTRwpbw1f3JbRIeiiobgqg0b9Nxtucelf3tR4cngLJfu6Hm6POzP1dZi7 moB2CnH+QfH/He+FlhCKAElGsSIAKi8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:47 2025 by rpki-client