$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f12323c-5fd1-37a6-acce-132960ca17c7.roa File: 0f12323c-5fd1-37a6-acce-132960ca17c7.roa (raw, json) Hash identifier: Ea+ikeTnLA3QBAkVMooMeEDEK/BXONs5YWsE3XFi1Ok= Subject key identifier: 48:AF:8D:82:2D:47:C3:36:1F:AF:A3:3F:D1:10:FA:AD:C5:E2:03:12 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BF72C96BA4ADC90E9C300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f12323c-5fd1-37a6-acce-132960ca17c7.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 66.249.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f7:2c:96:ba:4a:dc:90:e9:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=c67140ae-2c3f-4123-bc8c-32c55dd48101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:61:17:93:cd:e2:21:dd:af:fd:8f:5b:67:3e: 5d:2a:0d:2a:f5:4b:b3:dc:b5:f5:6b:17:34:3f:9d: f3:55:13:e3:42:b3:d7:20:db:26:39:51:a1:6d:48: 89:f9:1a:0a:ac:b3:ad:c1:5d:36:7b:b6:47:1b:fa: 7a:60:1a:e9:aa:d2:a6:b3:73:74:ad:ab:d1:b4:a4: b3:0d:3a:ce:34:99:0c:1f:b7:1a:52:05:2d:13:41: 5d:a9:aa:77:40:24:ba:24:aa:d7:c4:4b:73:6c:66: 07:3a:7b:bb:a0:4c:1d:e0:fe:fe:e0:d4:7b:85:9a: 41:f7:89:9d:2b:7b:60:0b:58:05:c8:f7:65:59:c5: 3d:3d:07:fb:a3:9e:92:6d:2d:4a:80:a1:39:29:6b: e2:39:f1:30:c5:f5:e8:da:1b:86:75:fc:37:3e:76: e9:f1:fc:7e:b3:1c:fa:88:a5:82:3c:e6:bc:f0:7e: 7a:6a:ca:64:b5:a7:c8:37:c8:be:61:23:3b:40:b9: af:be:1d:6e:bf:24:cb:d8:09:af:3f:86:e5:3f:fe: 62:75:58:aa:d8:6f:50:c6:c1:3a:1a:e4:9d:44:a3: 93:71:78:0a:13:46:35:54:54:c5:71:7f:a9:e3:a3: 6b:85:8e:7e:5c:37:58:d1:20:ef:60:77:01:1e:f1: f8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AF:8D:82:2D:47:C3:36:1F:AF:A3:3F:D1:10:FA:AD:C5:E2:03:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f12323c-5fd1-37a6-acce-132960ca17c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:79:9f:3f:e5:e3:07:53:cb:07:c6:a3:c3:96:3d:41:8c:70: b6:60:52:b8:04:4e:55:98:6f:6f:28:04:cb:e9:08:87:f6:fa: 42:79:98:27:22:2a:ef:de:2e:f8:9f:d2:96:c7:cf:12:79:9f: e9:27:2c:4a:5c:56:85:3c:0b:2e:56:6f:14:a3:e9:95:ce:10: 17:0e:9b:c3:68:04:8c:bd:31:52:c3:61:fb:95:21:33:e1:65: af:aa:9b:ef:de:b5:9a:3e:ad:31:37:33:1c:ac:b9:25:30:11: fc:99:21:1f:dd:78:d2:7a:90:d1:3d:4a:d9:45:4e:99:e6:d7: 6b:b0:ff:08:69:0b:0c:a9:40:04:81:33:c7:7e:27:c5:82:8c: 5a:56:fd:bb:96:1e:d9:8b:08:1f:58:5b:76:c0:a0:23:7a:aa: da:b7:74:e0:aa:73:0f:92:69:98:a5:21:75:64:38:c2:13:21: 21:2e:63:bb:ac:23:bf:85:c4:a5:8d:61:0f:75:8c:80:d8:14: c5:61:72:65:dc:0b:e3:85:f7:05:a2:4f:06:6c:d1:6a:0c:8e: 02:e7:43:b7:84:16:02:a7:d0:c9:c4:eb:81:4c:1b:41:87:cf: c7:5e:3f:7b:01:f9:57:20:0f:d7:49:10:53:60:79:7e:23:f5: 9e:71:3f:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/cslrpK3JDpwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YzY3MTQwYWUtMmMzZi00MTIzLWJjOGMtMzJjNTVkZDQ4MTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WEXk83iId2v/Y9bZz5dKg0q9Uuz3LX1axc0 P53zVRPjQrPXINsmOVGhbUiJ+RoKrLOtwV02e7ZHG/p6YBrpqtKms3N0ravRtKSz DTrONJkMH7caUgUtE0Fdqap3QCS6JKrXxEtzbGYHOnu7oEwd4P7+4NR7hZpB94md K3tgC1gFyPdlWcU9PQf7o56SbS1KgKE5KWviOfEwxfXo2huGdfw3Pnbp8fx+sxz6 iKWCPOa88H56aspktafIN8i+YSM7QLmvvh1uvyTL2AmvP4blP/5idViq2G9QxsE6 GuSdRKOTcXgKE0Y1VFTFcX+p46NrhY5+XDdY0SDvYHcBHvH4/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEivjYItR8M2H6+jP9EQ+q3F4gMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGYxMjMyM2MtNWZkMS0z N2E2LWFjY2UtMTMyOTYwY2ExN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvlYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx5nz/l4wdTywfGo8OWPUGMcLZgUrgETlWYb28oBMvpCIf2+kJ5mCci Ku/eLvif0pbHzxJ5n+knLEpcVoU8Cy5WbxSj6ZXOEBcOm8NoBIy9MVLDYfuVITPh Za+qm+/etZo+rTE3MxysuSUwEfyZIR/deNJ6kNE9StlFTpnm12uw/whpCwypQASB M8d+J8WCjFpW/buWHtmLCB9YW3bAoCN6qtq3dOCqcw+SaZilIXVkOMITISEuY7us I7+FxKWNYQ91jIDYFMVhcmXcC+OF9wWiTwZs0WoMjgLnQ7eEFgKn0MnE64FMG0GH z8deP3sB+VcgD9dJEFNgeX4j9Z5xP10= -----END CERTIFICATE-----Generated at Fri Apr 4 08:30:30 2025 by rpki-client