$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f506d380-df08-3663-931f-c5584deea84c.roa File: f506d380-df08-3663-931f-c5584deea84c.roa (raw, json) Hash identifier: ZcixCh3TFnE03/5JB+Lk0Ec+tRDXs0J0q2D7skg/qOM= Subject key identifier: 3F:2D:47:C3:FF:AD:8E:3E:FE:FB:32:09:F3:2A:5C:62:88:FB:79:DC Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858485CD02EAD3071957B42F8BFF0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f506d380-df08-3663-931f-c5584deea84c.roa Signing time: Sun 29 Dec 2024 02:00:39 +0000 ROA not before: Sun 29 Dec 2024 02:00:39 +0000 ROA not after: Sat 29 Mar 2025 01:00:39 +0000 asID: 13576 IP address blocks: 64.33.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5c:d0:2e:ad:30:71:95:7b:42:f8:bf:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Dec 29 02:00:39 2024 GMT Not After : Mar 29 01:00:39 2025 GMT Subject: CN=0f096c66-7b9f-488d-951b-324b776423ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:df:44:10:bf:c2:20:4d:f1:de:07:9a:41:f2: b0:fa:cd:7d:6e:f3:cf:d6:19:4e:eb:8e:2e:7d:78: ea:80:ce:0d:f0:1b:0d:24:4c:0b:11:61:9d:0b:f5: d5:35:9f:0f:a5:d0:a1:bf:63:17:02:ca:3c:dc:3a: b2:7c:b1:76:e1:7f:78:86:d4:c7:e9:bb:71:24:9f: 70:0a:e2:6f:fe:df:8f:77:4d:c7:38:1a:fb:fb:1e: 38:a9:9b:bd:4a:46:aa:7b:f3:90:47:92:84:c6:0e: b7:92:c6:e1:3c:a2:0f:14:03:a2:df:4a:da:78:b7: c4:63:39:df:43:e9:83:59:be:17:33:25:e4:77:1f: 88:ec:2d:1b:58:26:23:18:fc:99:aa:70:60:81:6a: c4:04:d7:e8:7b:6c:9c:7d:24:f1:2a:76:1a:5e:fa: fa:40:c3:cb:77:c5:18:1e:79:b0:72:c8:0e:7c:70: b0:e6:d4:1c:89:d3:c8:a7:a1:1a:1b:d3:a8:7f:87: 77:17:b2:db:d9:3e:63:22:a3:f7:23:ca:f8:06:4d: 69:37:b7:02:0d:47:b1:93:ae:14:79:8d:63:fd:af: 26:89:e7:dc:34:87:62:d0:8d:80:47:1e:62:76:e6: 5f:dc:79:83:33:68:2c:5b:6d:59:02:63:dd:37:4b: 05:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2D:47:C3:FF:AD:8E:3E:FE:FB:32:09:F3:2A:5C:62:88:FB:79:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f506d380-df08-3663-931f-c5584deea84c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:c4:b3:cc:46:cf:1e:1a:87:ac:fd:41:b1:07:07:aa:ce:02: f4:c3:7e:b8:f4:82:d0:f4:1f:3b:b8:f4:ac:fb:0b:57:d2:44: 6f:49:ac:bf:a1:27:28:a3:42:7f:12:c0:f8:7d:94:d5:1d:d4: 4b:0a:dc:23:c2:80:1c:7f:24:3d:60:6f:21:1b:40:05:48:d2: 69:11:9d:69:5c:c6:98:12:23:4c:19:d3:54:28:8f:b9:73:ba: dc:db:f2:c3:1a:cb:54:ac:fa:c2:12:94:ca:65:bb:74:c1:3a: a5:4e:03:c5:9c:90:36:be:58:07:ba:87:37:54:3f:41:c3:2b: 95:62:ac:21:bb:a5:d7:3c:79:37:4a:76:8d:78:c8:5e:2f:4d: 52:4a:3e:d5:bf:0c:dd:9f:ca:56:f3:16:db:84:67:86:be:d6: f7:0c:df:75:08:04:13:a3:cc:a1:ed:f0:6a:df:d0:2c:8f:58: b9:87:16:ef:82:12:6d:32:d3:4b:94:1e:4b:0e:4e:cf:38:a7: e1:9f:3d:94:4d:16:e9:f2:fa:eb:d7:1b:1a:d7:24:ab:cf:fe: 93:53:d0:47:c5:ee:23:c7:31:66:2b:f2:82:f6:45:9e:c3:65: f0:68:67:9a:4e:d1:04:c3:da:b0:2c:b0:cc:61:b8:8b:2b:60: ea:11:48:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0C6tMHGVe0L4v/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk MGYwOTZjNjYtN2I5Zi00ODhkLTk1MWItMzI0Yjc3NjQyM2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d9EEL/CIE3x3geaQfKw+s19bvPP1hlO644u fXjqgM4N8BsNJEwLEWGdC/XVNZ8PpdChv2MXAso83DqyfLF24X94htTH6btxJJ9w CuJv/t+Pd03HOBr7+x44qZu9Skaqe/OQR5KExg63ksbhPKIPFAOi30raeLfEYznf Q+mDWb4XMyXkdx+I7C0bWCYjGPyZqnBggWrEBNfoe2ycfSTxKnYaXvr6QMPLd8UY HnmwcsgOfHCw5tQcidPIp6EaG9Oof4d3F7Lb2T5jIqP3I8r4Bk1pN7cCDUexk64U eY1j/a8miefcNIdi0I2ARx5iduZf3HmDM2gsW21ZAmPdN0sFWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8tR8P/rY4+/vsyCfMqXGKI+3ncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZjUwNmQzODAtZGYwOC0z NjYzLTkzMWYtYzU1ODRkZWVhODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQCHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXEs8xGzx4ah6z9QbEHB6rOAvTDfrj0gtD0Hzu49Kz7C1fSRG9JrL+h JyijQn8SwPh9lNUd1EsK3CPCgBx/JD1gbyEbQAVI0mkRnWlcxpgSI0wZ01Qoj7lz utzb8sMay1Ss+sISlMplu3TBOqVOA8WckDa+WAe6hzdUP0HDK5VirCG7pdc8eTdK do14yF4vTVJKPtW/DN2fylbzFtuEZ4a+1vcM33UIBBOjzKHt8Grf0CyPWLmHFu+C Em0y00uUHksOTs84p+GfPZRNFuny+uvXGxrXJKvP/pNT0EfF7iPHMWYr8oL2RZ7D ZfBoZ5pO0QTD2rAssMxhuIsrYOoRSEY= -----END CERTIFICATE-----Generated at Fri Mar 14 13:21:52 2025 by rpki-client