$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/d46d8569-5b81-3f6c-b7a8-027002156fc2.roa File: d46d8569-5b81-3f6c-b7a8-027002156fc2.roa (raw, json) Hash identifier: b9BWFcPlxbKYbU8k22kOCzZL5bySuncs//ygb6S/cqM= Subject key identifier: 9B:74:C6:0D:E6:EE:47:8D:B9:C5:86:99:E9:D1:CD:D0:B9:16:AC:E1 Certificate issuer: /CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Certificate serial: 010D0C9F432858488F107DF0664E840B95BB4500 Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/d46d8569-5b81-3f6c-b7a8-027002156fc2.roa Signing time: Thu 16 Jan 2025 02:00:39 +0000 ROA not before: Thu 16 Jan 2025 02:00:39 +0000 ROA not after: Wed 16 Apr 2025 01:00:39 +0000 asID: 40545 IP address blocks: 66.115.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8f:10:7d:f0:66:4e:84:0b:95:bb:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Validity Not Before: Jan 16 02:00:39 2025 GMT Not After : Apr 16 01:00:39 2025 GMT Subject: CN=9f5d82e5-805c-45ad-bf58-668ca431fd85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e6:cc:05:ef:8e:a9:49:03:59:34:63:f7:90: f5:39:dd:4a:20:52:ed:b8:0e:f0:91:f2:70:ac:1a: d2:f4:5f:f5:d9:20:52:f3:79:2d:5d:60:81:45:19: fe:64:75:04:8e:ac:6d:31:62:a4:89:28:c8:fb:84: 03:17:0a:48:67:f7:5d:f3:ca:08:4e:23:71:20:0e: 4c:e2:47:4b:9f:95:5a:59:b9:15:d7:ce:e7:36:8d: 2f:65:f1:0d:2b:91:e9:c9:c5:af:15:cd:7e:2e:05: a1:3e:bd:a6:54:b9:48:18:59:9f:02:56:ed:68:d8: f4:76:4e:34:18:08:e8:99:b5:88:8e:c2:78:b2:aa: 18:41:0f:d3:d0:b1:72:4e:be:45:59:e8:e8:0f:a4: 37:5c:9d:71:05:1a:96:06:a2:f4:73:85:b3:40:7c: 16:93:a9:0e:66:7f:26:1e:a2:2c:cd:3b:07:40:1e: f3:60:bc:70:96:81:d8:bf:dd:e8:9e:43:89:be:75: 4c:dc:1a:63:f5:d6:56:b7:83:a9:d0:2f:de:c8:af: 74:10:32:6f:f8:e7:b1:f5:64:55:23:f9:f8:1b:af: bc:88:d9:83:b0:b8:37:f9:6c:d6:82:59:19:a8:6e: 57:35:fe:54:da:2b:15:88:46:1c:14:8a:9c:ca:5d: b0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:74:C6:0D:E6:EE:47:8D:B9:C5:86:99:E9:D1:CD:D0:B9:16:AC:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/d46d8569-5b81-3f6c-b7a8-027002156fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl X509v3 Authority Key Identifier: keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer sbgp-ipAddrBlock: critical IPv4: 66.115.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:cf:e9:47:ef:2d:55:10:5b:6a:4d:ab:fa:a5:24:71:cc:42: a9:9c:9a:7a:d8:ce:16:99:f0:5a:eb:d8:c4:56:99:48:c8:d5: b5:01:90:af:16:53:f4:0d:56:74:03:6f:b2:cf:09:d9:3b:23: 93:9c:2b:37:8f:7f:92:10:38:71:26:43:07:b9:60:a7:7f:95: 41:8a:a7:a0:8c:a7:94:03:d0:d1:1c:4e:29:ee:6b:8f:19:d8: 5a:79:18:d2:48:b1:72:ac:6f:bc:be:7a:34:5c:52:64:f9:80: 66:c4:a5:c3:87:25:07:d0:ea:cc:2f:2f:f2:5f:59:bb:de:7d: b2:5d:2a:69:5c:53:ee:fc:8b:5c:e3:17:9f:36:70:90:1b:8d: 07:6f:f9:eb:af:b4:8f:a4:f1:fa:0b:77:bf:02:cc:1a:b7:c5: 5b:00:a7:79:da:f9:ac:7b:9d:76:95:ba:e0:2b:76:08:bb:ea: 61:4b:4f:12:cc:ba:d1:23:74:6b:5d:9e:ff:6d:31:57:cf:23: 70:d7:2a:b9:7f:90:9a:6b:d4:7c:bd:bd:1c:8d:4c:65:03:d9: a2:20:b9:c0:fa:eb:c9:15:3e:eb:62:03:bc:2a:cd:2a:a7:4d: 13:90:02:be:2b:5d:6e:e4:e7:5a:be:cb:06:ac:99:68:a8:8d: bc:6c:75:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiPEH3wZk6EC5W7RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkMzdiZjYtNjk1NS00ZWQ1LTgzNDctMjg5Njc2N2Fm YWIwMB4XDTI1MDExNjAyMDAzOVoXDTI1MDQxNjAxMDAzOVowLzEtMCsGA1UEAxMk OWY1ZDgyZTUtODA1Yy00NWFkLWJmNTgtNjY4Y2E0MzFmZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkubMBe+OqUkDWTRj95D1Od1KIFLtuA7wkfJw rBrS9F/12SBS83ktXWCBRRn+ZHUEjqxtMWKkiSjI+4QDFwpIZ/dd88oITiNxIA5M 4kdLn5VaWbkV187nNo0vZfENK5HpycWvFc1+LgWhPr2mVLlIGFmfAlbtaNj0dk40 GAjombWIjsJ4sqoYQQ/T0LFyTr5FWejoD6Q3XJ1xBRqWBqL0c4WzQHwWk6kOZn8m HqIszTsHQB7zYLxwloHYv93onkOJvnVM3Bpj9dZWt4Op0C/eyK90EDJv+Oex9WRV I/n4G6+8iNmDsLg3+WzWglkZqG5XNf5U2isViEYcFIqcyl2wcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJt0xg3m7keNucWGmenRzdC5FqzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQz N2JmNi02OTU1LTRlZDUtODM0Ny0yODk2NzY3YWZhYjAvZDQ2ZDg1NjktNWI4MS0z ZjZjLWI3YTgtMDI3MDAyMTU2ZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZkMzdiZjYtNjk1NS00ZWQ1LTgz NDctMjg5Njc2N2FmYWIwLzNmZDM3YmY2LTY5NTUtNGVkNS04MzQ3LTI4OTY3Njdh ZmFiMC5jcmwwHwYDVR0jBBgwFoAULNrtwbJ3wcnBT6n58z0s7qVZ2y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQzN2JmNi02OTU1LTRlZDUtODM0Ny0yODk2 NzY3YWZhYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/P6UfvLVUQW2pNq/qlJHHMQqmcmnrYzhaZ8Frr2MRWmUjI1bUBkK8W U/QNVnQDb7LPCdk7I5OcKzePf5IQOHEmQwe5YKd/lUGKp6CMp5QD0NEcTinua48Z 2Fp5GNJIsXKsb7y+ejRcUmT5gGbEpcOHJQfQ6swvL/JfWbvefbJdKmlcU+78i1zj F582cJAbjQdv+euvtI+k8foLd78CzBq3xVsAp3na+ax7nXaVuuArdgi76mFLTxLM utEjdGtdnv9tMVfPI3DXKrl/kJpr1Hy9vRyNTGUD2aIgucD668kVPutiA7wqzSqn TROQAr4rXW7k51q+ywasmWiojbxsdVo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:06 2025 by rpki-client