$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/516390e8-04f0-3f94-bdb3-0f15181ad62a.roa File: 516390e8-04f0-3f94-bdb3-0f15181ad62a.roa (raw, json) Hash identifier: ZaKy+Vc3RKwBQzRbWu0/cjFXOOFdAdkFu0qKdbUu5Sc= Subject key identifier: 97:47:01:0E:BD:EE:55:75:6B:F6:F0:98:35:4A:04:55:52:C4:1D:59 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BCB23113B646DF48C5F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/516390e8-04f0-3f94-bdb3-0f15181ad62a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 66.249.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:cb:23:11:3b:64:6d:f4:8c:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=626a573a-bb0d-437a-ba21-c693b7cea58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e1:ef:1e:bf:7a:48:87:ad:01:2e:86:9c:6c: 1a:e5:b7:78:89:55:14:9a:e0:7a:32:73:70:df:db: 5f:b9:a5:df:3b:a8:7e:15:e7:d7:88:42:ee:21:62: 94:3d:1c:19:ae:64:b9:82:e6:55:29:7a:8b:cb:c1: 36:96:0a:87:f8:f4:bd:b4:ea:44:c8:2d:bc:9d:d1: 4d:50:ff:9a:5b:fc:56:8f:fe:68:ac:d0:98:61:37: ed:bf:4b:1e:ea:e1:26:5b:2b:ef:a5:0c:9b:ee:8b: 3d:cc:60:22:c1:00:f5:e4:ed:d1:9d:87:0e:66:9f: 2c:31:b3:59:44:37:87:f0:e9:ef:60:0f:a6:ef:d3: 9b:a1:48:12:36:ed:22:55:70:65:c7:9d:f3:79:5e: 65:ad:9e:87:be:cf:bd:ea:18:c9:e7:8b:dd:75:5a: 6f:55:ed:fa:69:14:6d:23:d5:6f:66:26:36:f9:ac: f0:51:38:cc:21:60:16:3a:be:47:12:45:80:ce:b5: cd:6c:52:4b:7b:48:1d:66:c2:98:16:63:10:4d:92: 3a:5c:31:47:03:c8:21:eb:7e:9e:e1:47:09:2c:aa: a1:13:7d:7a:70:bb:af:9c:24:74:47:17:1a:ea:06: 02:00:12:1f:45:b0:7e:4f:99:cc:fd:6a:8c:cf:41: fd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:47:01:0E:BD:EE:55:75:6B:F6:F0:98:35:4A:04:55:52:C4:1D:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/516390e8-04f0-3f94-bdb3-0f15181ad62a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:bd:e6:1f:85:e3:b8:ac:24:71:28:c7:03:d6:f4:b9:14:e8: a0:ae:c4:a1:1a:68:7b:f6:2d:ee:90:c7:2c:3b:db:fe:5f:ec: 1e:c6:cb:ff:e7:c3:56:42:8a:94:94:fa:d9:e8:7d:88:69:c1: b0:03:a4:f0:87:27:03:31:82:5e:a1:6d:5f:91:3d:7f:b3:96: 79:0d:44:45:4c:2d:a4:b3:81:34:c6:49:2a:73:d1:61:a1:68: b5:a9:17:31:7c:42:73:91:96:82:e7:44:78:55:cb:f6:2d:7f: 9d:73:63:ec:59:6b:22:ca:61:1a:a2:07:01:a3:55:be:30:5d: 23:af:ac:f9:f2:84:46:c9:5b:b3:da:33:27:f5:af:a0:1b:f5: b7:3c:9c:a9:6b:ae:4f:a9:d1:cc:8b:fd:2d:7e:a3:ad:90:7b: b7:11:47:9e:75:c3:b2:5a:66:1a:8d:81:4e:61:6a:2a:d3:7c: 2a:0a:62:94:57:f1:31:7c:e8:34:0d:b7:e2:57:2f:58:5f:05: 10:c0:5e:bb:a2:cb:f1:96:ba:48:32:2b:d7:41:b2:7f:52:4a: 76:80:dd:45:b5:8a:0c:54:2d:a8:6f:e8:c8:97:41:8e:e3:02: e4:99:59:01:ac:02:20:fd:16:ca:43:40:ba:3e:d1:5b:e8:4f: fa:07:3c:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8sjETtkbfSMX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NjI2YTU3M2EtYmIwZC00MzdhLWJhMjEtYzY5M2I3Y2VhNThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieHvHr96SIetAS6GnGwa5bd4iVUUmuB6MnNw 39tfuaXfO6h+FefXiELuIWKUPRwZrmS5guZVKXqLy8E2lgqH+PS9tOpEyC28ndFN UP+aW/xWj/5orNCYYTftv0se6uEmWyvvpQyb7os9zGAiwQD15O3RnYcOZp8sMbNZ RDeH8OnvYA+m79OboUgSNu0iVXBlx53zeV5lrZ6Hvs+96hjJ54vddVpvVe36aRRt I9VvZiY2+azwUTjMIWAWOr5HEkWAzrXNbFJLe0gdZsKYFmMQTZI6XDFHA8gh636e 4UcJLKqhE316cLuvnCR0Rxca6gYCABIfRbB+T5nM/WqMz0H9IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdHAQ697lV1a/bwmDVKBFVSxB1ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTE2MzkwZTgtMDRmMC0z Zjk0LWJkYjMtMGYxNTE4MWFkNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQvlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG95h+F47isJHEoxwPW9LkU6KCuxKEaaHv2Le6Qxyw72/5f7B7Gy//n w1ZCipSU+tnofYhpwbADpPCHJwMxgl6hbV+RPX+zlnkNREVMLaSzgTTGSSpz0WGh aLWpFzF8QnORloLnRHhVy/Ytf51zY+xZayLKYRqiBwGjVb4wXSOvrPnyhEbJW7Pa Myf1r6Ab9bc8nKlrrk+p0cyL/S1+o62Qe7cRR551w7JaZhqNgU5hairTfCoKYpRX 8TF86DQNt+JXL1hfBRDAXruiy/GWukgyK9dBsn9SSnaA3UW1igxULahv6MiXQY7j AuSZWQGsAiD9FspDQLo+0VvoT/oHPA8= -----END CERTIFICATE-----Generated at Fri Mar 14 08:19:00 2025 by rpki-client