$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/21d08510-dd8e-342a-b532-ef562767db65.roa File: 21d08510-dd8e-342a-b532-ef562767db65.roa (raw, json) Hash identifier: RVEB581KRbV4mC3ep+WzJ+ubQ5tznkR5u8inSD6Sn+Y= Subject key identifier: 5F:C7:F9:A5:77:D7:52:55:1A:40:C4:91:E9:AA:BE:88:58:AD:E7:59 Certificate issuer: /CN=473aba48-e57f-40d4-b25e-8e59a1171ae8 Certificate serial: 010D0C9F43285848A400B7F28D689FAFA6FA06C0 Authority key identifier: 31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/21d08510-dd8e-342a-b532-ef562767db65.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 399331 IP address blocks: 66.220.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:b7:f2:8d:68:9f:af:a6:fa:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473aba48-e57f-40d4-b25e-8e59a1171ae8 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=6126c0d0-ba74-44d7-bdc1-81d604955d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6f:a4:50:e5:3a:96:ec:d7:0b:70:53:4c:ea: f8:e1:20:9a:97:70:f7:b4:b0:af:a1:dd:45:9e:a7: c8:72:99:12:66:5e:5e:5b:5d:dc:c4:c3:c8:34:11: ba:a1:bc:1e:da:4b:12:1e:3b:c7:51:ce:12:7b:8d: 91:11:c8:42:2f:95:9a:ab:5a:b8:2d:e6:99:63:18: 1e:22:e7:03:9d:de:b0:99:5f:bc:6d:29:7a:d0:cf: 39:8b:81:0a:f1:25:dd:d1:79:6b:f4:80:30:27:ac: ef:01:3f:ef:e8:4f:00:a5:61:e5:a0:b8:a3:a6:d9: ec:86:51:a8:41:77:f3:94:5c:4b:e5:c0:6c:12:5f: 4c:c3:d6:91:de:a5:00:47:b3:14:5e:c5:08:81:f5: 6f:fd:2a:d7:23:14:57:f1:f9:a0:ef:a6:b7:fe:bb: bb:9e:c3:75:20:07:da:16:3e:ff:ce:5d:3f:c2:20: 4e:5b:91:c8:0c:53:0c:d3:75:51:bb:3b:1d:00:3a: ea:30:9c:8d:84:a1:de:1d:ab:2a:54:75:0e:28:09: ad:43:39:07:21:58:48:b8:e4:68:98:10:e8:78:9f: ba:ba:64:9c:94:d4:c0:81:66:32:c1:78:d2:df:3c: 61:41:af:47:b2:c7:ea:3c:ff:fe:06:e4:11:98:2e: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C7:F9:A5:77:D7:52:55:1A:40:C4:91:E9:AA:BE:88:58:AD:E7:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/21d08510-dd8e-342a-b532-ef562767db65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl X509v3 Authority Key Identifier: keyid:31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer sbgp-ipAddrBlock: critical IPv4: 66.220.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:0c:2c:8b:20:94:a9:36:c8:d5:a5:87:96:e2:d8:76:55:90: d5:f3:ec:ca:83:b9:22:22:48:3c:6c:15:37:4a:51:5d:04:e0: 79:3c:ba:05:a4:5d:f5:7e:c8:2d:a2:d7:2f:24:2b:8c:06:7d: 61:55:c6:f4:8e:6e:2a:b7:48:4a:91:35:de:3e:70:73:b9:2e: 7e:c4:15:6f:f3:5a:d2:21:b0:a7:5e:82:02:07:6d:42:e0:62: af:a6:f7:bb:1b:a1:39:b5:83:66:5f:67:33:0b:94:b7:e2:73: 26:b0:26:b8:7f:9f:7c:59:b5:fc:f7:21:fb:ad:13:44:e2:eb: 44:0c:da:e5:48:c9:9c:bd:ce:c6:5e:5f:7e:86:b5:bf:89:ef: 93:9d:a3:fc:0d:c1:bb:6f:58:42:a4:ed:81:bd:7e:f0:2b:41: 29:6b:e8:10:48:67:f2:b8:ce:68:bd:da:6c:04:b1:86:21:1b: f7:82:fe:0d:de:c5:88:13:6b:c5:e2:5a:18:62:15:4a:3e:98: 17:d2:dc:39:b8:15:49:74:43:b5:6d:bd:0c:b3:37:dd:76:9b: bf:2d:5b:40:45:b7:22:14:a9:ea:33:c6:4b:c0:62:af:7c:5c: cb:2f:cf:5d:04:2e:30:b7:c4:9f:a6:e0:23:57:57:9a:f4:2d: e5:bd:d1:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikALfyjWifr6b6BsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDczYWJhNDgtZTU3Zi00MGQ0LWIyNWUtOGU1OWExMTcx YWU4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk NjEyNmMwZDAtYmE3NC00NGQ3LWJkYzEtODFkNjA0OTU1ZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2+kUOU6luzXC3BTTOr44SCal3D3tLCvod1F nqfIcpkSZl5eW13cxMPINBG6obwe2ksSHjvHUc4Se42REchCL5Waq1q4LeaZYxge IucDnd6wmV+8bSl60M85i4EK8SXd0Xlr9IAwJ6zvAT/v6E8ApWHloLijptnshlGo QXfzlFxL5cBsEl9Mw9aR3qUAR7MUXsUIgfVv/SrXIxRX8fmg76a3/ru7nsN1IAfa Fj7/zl0/wiBOW5HIDFMM03VRuzsdADrqMJyNhKHeHasqVHUOKAmtQzkHIVhIuORo mBDoeJ+6umSclNTAgWYywXjS3zxhQa9HssfqPP/+BuQRmC5/2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/H+aV311JVGkDEkemqvohYredZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NzNh YmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5YTExNzFhZTgvMjFkMDg1MTAtZGQ4ZS0z NDJhLWI1MzItZWY1NjI3NjdkYjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDczYWJhNDgtZTU3Zi00MGQ0LWIy NWUtOGU1OWExMTcxYWU4LzQ3M2FiYTQ4LWU1N2YtNDBkNC1iMjVlLThlNTlhMTE3 MWFlOC5jcmwwHwYDVR0jBBgwFoAUMdjkie+CWnvpNwSr5rNg8TySHUowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NzNhYmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5 YTExNzFhZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtw7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4MLIsglKk2yNWlh5bi2HZVkNXz7MqDuSIiSDxsFTdKUV0E4Hk8ugWk XfV+yC2i1y8kK4wGfWFVxvSObiq3SEqRNd4+cHO5Ln7EFW/zWtIhsKdeggIHbULg Yq+m97sboTm1g2ZfZzMLlLficyawJrh/n3xZtfz3IfutE0Ti60QM2uVIyZy9zsZe X36Gtb+J75Odo/wNwbtvWEKk7YG9fvArQSlr6BBIZ/K4zmi92mwEsYYhG/eC/g3e xYgTa8XiWhhiFUo+mBfS3Dm4FUl0Q7VtvQyzN912m78tW0BFtyIUqeozxkvAYq98 XMsvz10ELjC3xJ+m4CNXV5r0LeW90V0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:20 2025 by rpki-client