$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/167071d7-0649-3013-aa5e-af1ce1d335da.roa File: 167071d7-0649-3013-aa5e-af1ce1d335da.roa (raw, json) Hash identifier: 4M6MYldDvGPQM/wj5VA/IxYV3fEW9xE8nf58mHXOlLA= Subject key identifier: 9E:F2:3F:F8:D8:AA:2F:F9:4C:C1:77:47:2F:73:A4:87:3F:E4:A0:64 Certificate issuer: /CN=5d1f7581-692a-467e-ae71-d3c4921d0765 Certificate serial: 010D0C9F432858482EC0025E8E35315CF2A38940 Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/167071d7-0649-3013-aa5e-af1ce1d335da.roa Signing time: Thu 12 Dec 2024 14:00:51 +0000 ROA not before: Thu 12 Dec 2024 14:00:51 +0000 ROA not after: Wed 12 Mar 2025 13:00:51 +0000 asID: 174 IP address blocks: 66.187.0.0/23 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2e:c0:02:5e:8e:35:31:5c:f2:a3:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765 Validity Not Before: Dec 12 14:00:51 2024 GMT Not After : Mar 12 13:00:51 2025 GMT Subject: CN=625fdf15-f7d4-4b1d-9620-35fdd9db74fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:60:3c:65:97:33:56:fd:4f:dd:5f:16:5f:68: d9:cc:01:de:58:68:31:19:ed:7c:88:21:f3:6c:71: cd:0c:30:1f:1a:0b:b8:a5:04:ed:b8:13:44:9a:0d: 99:7d:e9:a8:3c:f1:b8:3f:f2:24:f5:72:f2:17:50: 51:f0:ff:96:e7:14:7c:93:ae:7a:b5:47:fe:df:74: 82:c7:cb:d7:7f:f3:3c:a3:35:e8:26:95:52:b3:e5: 80:c3:e7:cb:61:79:9d:e9:79:cb:28:9a:69:29:3f: 5b:39:45:53:9f:1f:58:ef:34:3f:54:66:1c:4e:ce: af:7f:20:6c:fa:ca:36:31:28:ec:54:a8:be:39:53: d5:26:50:1d:8a:d4:40:1e:b5:cc:29:8b:0e:75:12: 82:9a:94:c8:a9:5b:19:92:f1:fe:ff:c8:e1:85:8a: 60:41:9e:01:68:99:6f:bb:fa:0e:ed:ea:5a:4d:79: 7c:d6:f4:42:3b:6d:83:4e:c1:b7:44:fd:bd:5a:cd: 58:b9:3d:3d:d2:83:c2:7b:cc:35:91:c4:75:8d:6a: 66:fd:15:08:09:a4:7d:b0:98:4e:c0:8e:33:e1:82: 3c:2c:56:0a:a7:84:cc:8b:60:d6:de:3f:03:eb:58: f8:86:01:56:30:aa:80:c8:90:e2:82:b1:db:9b:e5: 8c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F2:3F:F8:D8:AA:2F:F9:4C:C1:77:47:2F:73:A4:87:3F:E4:A0:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/167071d7-0649-3013-aa5e-af1ce1d335da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl X509v3 Authority Key Identifier: keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer sbgp-ipAddrBlock: critical IPv4: 66.187.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7e:97:17:55:f1:e7:04:fa:ff:8b:36:8a:b1:e0:27:68:af: a3:3d:5b:40:7e:02:19:fb:1c:47:df:5a:81:33:9e:dd:9c:63: cd:33:6a:69:6b:d0:03:8e:c4:d8:2b:4c:b9:fb:a7:b8:d6:0d: 34:a1:1b:2d:a9:60:97:3d:ba:ac:5b:98:4e:c2:c9:d1:0c:4d: 32:7e:9e:5d:0e:50:08:d8:7d:3b:11:59:31:23:22:28:43:ac: 60:b1:2b:7e:08:1e:37:43:fd:62:6f:15:cf:47:24:52:a4:f8: b9:76:f6:7d:4a:e7:10:4d:57:c1:1c:16:8c:8b:f5:fb:df:52: a7:d5:5d:26:73:47:93:a9:25:70:fa:25:95:35:75:0a:ad:d6: 13:8f:ba:4a:23:f9:5a:c1:d2:e8:9b:9b:f0:a6:38:f7:4f:17: 00:a1:d2:07:be:bc:e5:ea:21:fb:35:a8:26:fd:46:3d:a3:a0: b2:41:01:73:88:23:46:7d:87:a4:6d:0b:9c:53:5e:89:84:2b: d5:87:fc:66:e3:1c:d4:17:3c:bb:13:b2:87:57:e6:dd:95:d0: 4f:56:12:71:5b:a8:4d:00:ea:5b:af:e4:52:6e:6b:36:ba:21: 17:cd:d6:be:66:d0:e0:85:44:3f:0d:91:cb:0f:a1:d4:85:68: 0f:d2:08:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEguwAJejjUxXPKjiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQxZjc1ODEtNjkyYS00NjdlLWFlNzEtZDNjNDkyMWQw NzY1MB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk NjI1ZmRmMTUtZjdkNC00YjFkLTk2MjAtMzVmZGQ5ZGI3NGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12A8ZZczVv1P3V8WX2jZzAHeWGgxGe18iCHz bHHNDDAfGgu4pQTtuBNEmg2ZfemoPPG4P/Ik9XLyF1BR8P+W5xR8k656tUf+33SC x8vXf/M8ozXoJpVSs+WAw+fLYXmd6XnLKJppKT9bOUVTnx9Y7zQ/VGYcTs6vfyBs +so2MSjsVKi+OVPVJlAditRAHrXMKYsOdRKCmpTIqVsZkvH+/8jhhYpgQZ4BaJlv u/oO7epaTXl81vRCO22DTsG3RP29Ws1YuT090oPCe8w1kcR1jWpm/RUICaR9sJhO wI4z4YI8LFYKp4TMi2DW3j8D61j4hgFWMKqAyJDigrHbm+WMjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7yP/jYqi/5TMF3Ry9zpIc/5KBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFm NzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0OTIxZDA3NjUvMTY3MDcxZDctMDY0OS0z MDEzLWFhNWUtYWYxY2UxZDMzNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQxZjc1ODEtNjkyYS00NjdlLWFl NzEtZDNjNDkyMWQwNzY1LzVkMWY3NTgxLTY5MmEtNDY3ZS1hZTcxLWQzYzQ5MjFk MDc2NS5jcmwwHwYDVR0jBBgwFoAU/E+wVT9F4ouBttKQsjS83QRwJYYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFmNzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0 OTIxZDA3NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl+lxdV8ecE+v+LNoqx4Cdor6M9W0B+Ahn7HEffWoEznt2cY80zamlr 0AOOxNgrTLn7p7jWDTShGy2pYJc9uqxbmE7CydEMTTJ+nl0OUAjYfTsRWTEjIihD rGCxK34IHjdD/WJvFc9HJFKk+Ll29n1K5xBNV8EcFoyL9fvfUqfVXSZzR5OpJXD6 JZU1dQqt1hOPukoj+VrB0uibm/CmOPdPFwCh0ge+vOXqIfs1qCb9Rj2joLJBAXOI I0Z9h6RtC5xTXomEK9WH/GbjHNQXPLsTsodX5t2V0E9WEnFbqE0A6luv5FJuaza6 IRfN1r5m0OCFRD8NkcsPodSFaA/SCO8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:40 2025 by rpki-client