$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77dd14d3-b048-3018-8e12-cf80d2a45d9a.roa File: 77dd14d3-b048-3018-8e12-cf80d2a45d9a.roa (raw, json) Hash identifier: KtWcvZcWt+ZHY3KE/W2HFb1U68fwjmxNhAkODlmGhHo= Subject key identifier: 44:DD:37:69:8B:9E:B3:85:26:2C:BD:56:CE:68:DC:9B:F1:EF:58:14 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BFB51826BCA3BDF53CF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77dd14d3-b048-3018-8e12-cf80d2a45d9a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 66.102.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:fb:51:82:6b:ca:3b:df:53:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ded77b66-3833-4b17-b19d-887fb635808b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:8a:64:c1:70:8f:2e:f2:7c:c1:af:8f:8a: db:e7:b1:e1:3c:fb:ef:11:08:35:e6:f0:e4:c6:d3: 95:ed:91:c5:d7:7b:09:52:d7:03:02:e0:ea:53:c0: ce:47:9d:22:f1:b9:84:b5:61:74:79:75:a7:cf:66: d4:98:bc:73:22:1f:5c:e8:15:8f:0d:1f:50:ea:40: 37:fd:e8:dd:11:97:5b:71:f6:6a:4d:a1:97:97:32: 60:16:b0:23:cf:1f:07:5f:83:90:29:8b:36:42:6c: c2:44:e6:dd:c9:1e:ae:bf:cc:61:59:aa:90:83:dc: 49:0e:b7:46:b1:36:11:5a:79:86:4d:98:6b:50:2b: 19:d6:50:dc:e3:45:d5:dc:4d:c3:49:c5:0a:d8:2c: 6c:ce:ae:0b:7e:69:95:14:56:fe:03:27:32:44:56: cd:d7:f0:99:ab:9e:20:b8:92:5b:13:3f:9d:9a:7d: c5:5c:5c:28:59:50:e1:4e:84:8b:84:ca:73:e3:ed: 6d:78:43:b8:fa:0f:a0:6d:67:87:7c:65:92:2e:1b: db:4d:88:f3:fb:73:fe:6a:7f:47:c5:f9:33:41:44: 4e:76:65:0a:b1:ab:a6:ab:cd:90:5e:3d:1c:f4:ba: 05:0f:65:fe:eb:ce:6a:38:2e:c3:b0:ce:d9:fe:85: a9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DD:37:69:8B:9E:B3:85:26:2C:BD:56:CE:68:DC:9B:F1:EF:58:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77dd14d3-b048-3018-8e12-cf80d2a45d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.102.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:9a:8c:f9:91:1c:b4:2d:a8:ef:eb:71:e3:5c:ae:9b:e1:84: 5e:aa:d4:0f:f3:f3:33:b2:d4:d9:d8:78:2a:f9:2e:18:54:a5: 32:59:06:98:f2:56:9f:9c:93:5b:77:4d:11:9d:bc:8a:14:a0: dd:f9:25:33:51:10:a8:12:c8:10:65:b8:7e:03:89:8b:dc:df: fa:ae:10:8f:c8:cd:7c:b1:62:68:19:64:37:6e:22:42:1f:c4: 06:9c:7e:e7:4b:d2:78:bc:1f:ef:41:de:17:c4:41:d6:f7:8c: 8e:40:46:c9:9b:76:58:c4:8a:ea:ed:a9:dd:e5:b9:ea:b8:b7: 17:6e:3f:41:8d:5e:28:16:da:cc:9f:f8:fe:d4:c5:ef:9c:e2: 88:4a:c1:a6:42:99:78:b0:ae:63:10:87:10:b2:be:16:c0:f9: a3:7d:73:4a:d3:82:94:68:d3:e5:48:ac:1c:12:7f:e7:4e:2f: ee:7a:db:a3:55:9b:f6:ef:1b:81:11:1f:1b:da:a4:b1:c2:e7: 92:25:9d:20:4a:c2:05:fd:64:d6:df:92:b0:42:b6:b6:59:00: 08:22:96:0a:6e:49:68:8d:8a:6b:ce:16:48:2a:75:1a:82:d2: 34:e9:0e:f7:41:f9:2e:67:88:38:4f:d1:46:ed:0a:6e:6f:36: bd:5f:b4:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/tRgmvKO99TzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZGVkNzdiNjYtMzgzMy00YjE3LWIxOWQtODg3ZmI2MzU4MDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJqKZMFwjy7yfMGvj4rb57HhPPvvEQg15vDk xtOV7ZHF13sJUtcDAuDqU8DOR50i8bmEtWF0eXWnz2bUmLxzIh9c6BWPDR9Q6kA3 /ejdEZdbcfZqTaGXlzJgFrAjzx8HX4OQKYs2QmzCRObdyR6uv8xhWaqQg9xJDrdG sTYRWnmGTZhrUCsZ1lDc40XV3E3DScUK2Cxszq4LfmmVFFb+AycyRFbN1/CZq54g uJJbEz+dmn3FXFwoWVDhToSLhMpz4+1teEO4+g+gbWeHfGWSLhvbTYjz+3P+an9H xfkzQUROdmUKsaumq82QXj0c9LoFD2X+685qOC7DsM7Z/oWpiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETdN2mLnrOFJiy9Vs5o3Jvx71gUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzdkZDE0ZDMtYjA0OC0z MDE4LThlMTItY2Y4MGQyYTQ1ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSajPmRHLQtqO/rceNcrpvhhF6q1A/z8zOy1NnYeCr5LhhUpTJZBpjy Vp+ck1t3TRGdvIoUoN35JTNREKgSyBBluH4DiYvc3/quEI/IzXyxYmgZZDduIkIf xAacfudL0ni8H+9B3hfEQdb3jI5ARsmbdljEiurtqd3lueq4txduP0GNXigW2syf +P7Uxe+c4ohKwaZCmXiwrmMQhxCyvhbA+aN9c0rTgpRo0+VIrBwSf+dOL+5626NV m/bvG4ERHxvapLHC55IlnSBKwgX9ZNbfkrBCtrZZAAgilgpuSWiNimvOFkgqdRqC 0jTpDvdB+S5niDhP0UbtCm5vNr1ftM8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:33 2025 by rpki-client