$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/896c1764-be24-3bf8-8415-b2e89ca224dc.roa File: 896c1764-be24-3bf8-8415-b2e89ca224dc.roa (raw, json) Hash identifier: dwztAxxkkQ5o/nBzAsdtljBNSd3L3SJpOlPcM1NCX7U= Subject key identifier: C6:D3:97:AC:EE:E6:37:80:B9:44:BC:6C:F0:FA:49:8C:7F:26:50:51 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BDD44881CD99A3FF2A480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/896c1764-be24-3bf8-8415-b2e89ca224dc.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 66.249.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:dd:44:88:1c:d9:9a:3f:f2:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=47154d6a-6fae-4456-ac08-9c38e8b578aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:27:50:af:ee:8b:f0:b0:f0:15:d1:a8:a2:a7: 4c:c4:a7:cf:db:28:06:dc:51:07:16:5f:75:a4:1b: be:a5:38:80:8b:4c:2b:82:a5:43:7e:cc:08:8b:9b: 45:69:30:3a:bd:35:2f:43:1c:ac:f4:13:a7:52:9d: 33:7a:a4:1e:b2:fc:e1:a9:3f:8e:a5:f4:00:18:25: 9d:89:d5:44:15:23:d2:ee:a2:a8:eb:e5:32:4c:58: c5:e8:e0:dc:aa:b1:dc:8c:73:91:a7:94:88:77:3f: f5:d4:c9:28:d8:2f:c6:e1:f8:f9:62:e3:26:9a:ef: a0:77:cc:87:65:69:c6:44:4e:9d:02:ab:9a:f2:d4: 7e:de:30:28:ea:fd:23:3e:b1:2d:8d:42:33:51:ce: 2f:cb:35:4c:f7:6d:01:e2:20:c5:cc:78:65:48:a6: 59:d5:63:c5:41:ac:d9:1f:c5:78:53:3f:18:d6:6c: 14:39:15:ee:1d:dd:a7:da:8c:d8:70:ef:e0:9b:5e: 79:51:b7:c4:f4:15:4a:79:12:d8:77:a5:4c:cd:87: 00:ad:8d:2d:98:df:85:e1:0e:2e:0e:97:38:b3:4b: 80:03:cb:8c:cf:aa:7e:d1:9f:6b:08:45:1f:50:0c: 62:f7:c6:b2:c1:6c:e6:d0:92:ad:bb:65:17:2e:c5: 7f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D3:97:AC:EE:E6:37:80:B9:44:BC:6C:F0:FA:49:8C:7F:26:50:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/896c1764-be24-3bf8-8415-b2e89ca224dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:09:5c:12:62:67:00:34:09:90:36:20:13:77:bd:4f:6c:96: 71:e2:97:16:67:19:ae:d1:d7:ce:61:d1:a9:9a:93:ba:a7:9d: fa:b9:5c:ff:8d:7b:c1:b1:b8:8b:cb:50:1a:8c:4b:97:b9:aa: 9f:40:a1:67:0c:5c:fb:08:8d:87:50:19:61:97:04:48:42:63: 6e:c4:90:a8:94:3b:c9:71:b7:7a:88:ca:97:06:ff:99:2c:fe: c7:ed:4f:3d:8f:76:6a:25:64:1f:1e:33:e3:ba:77:72:9d:83: 14:e9:de:6b:00:72:ac:11:0b:2b:ec:b9:3f:69:65:c5:f5:9b: 24:97:02:17:74:98:6d:0b:85:69:6a:1d:38:0e:07:57:e8:1d: cf:0c:fb:8a:43:07:1e:fe:4f:4d:11:74:03:ac:e7:a0:52:b6: 30:62:e6:da:a1:ef:8e:6a:6a:bc:9e:09:f8:ca:2b:fb:9c:3f: 8f:4a:9a:f3:9b:a6:b6:1a:42:3a:61:6c:4a:f7:33:df:22:65: 2c:a8:de:ed:de:37:df:6e:02:f5:7a:4f:fc:fc:f2:60:0d:5f: f8:4c:ab:a6:08:fc:bf:96:4a:ab:4a:46:ee:73:fb:8b:37:8d: 21:45:43:15:7b:fa:01:04:42:11:14:8a:8e:92:7b:44:a5:df: 0e:21:8f:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS91EiBzZmj/ypIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NDcxNTRkNmEtNmZhZS00NDU2LWFjMDgtOWMzOGU4YjU3OGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoidQr+6L8LDwFdGooqdMxKfP2ygG3FEHFl91 pBu+pTiAi0wrgqVDfswIi5tFaTA6vTUvQxys9BOnUp0zeqQesvzhqT+OpfQAGCWd idVEFSPS7qKo6+UyTFjF6ODcqrHcjHORp5SIdz/11Mko2C/G4fj5YuMmmu+gd8yH ZWnGRE6dAqua8tR+3jAo6v0jPrEtjUIzUc4vyzVM920B4iDFzHhlSKZZ1WPFQazZ H8V4Uz8Y1mwUORXuHd2n2ozYcO/gm155UbfE9BVKeRLYd6VMzYcArY0tmN+F4Q4u Dpc4s0uAA8uMz6p+0Z9rCEUfUAxi98aywWzm0JKtu2UXLsV/tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbTl6zu5jeAuUS8bPD6SYx/JlBRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODk2YzE3NjQtYmUyNC0z YmY4LTg0MTUtYjJlODljYTIyNGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQvlUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4JXBJiZwA0CZA2IBN3vU9slnHilxZnGa7R185h0amak7qnnfq5XP+N e8GxuIvLUBqMS5e5qp9AoWcMXPsIjYdQGWGXBEhCY27EkKiUO8lxt3qIypcG/5ks /sftTz2PdmolZB8eM+O6d3KdgxTp3msAcqwRCyvsuT9pZcX1mySXAhd0mG0LhWlq HTgOB1foHc8M+4pDBx7+T00RdAOs56BStjBi5tqh745qaryeCfjKK/ucP49KmvOb prYaQjphbEr3M98iZSyo3u3eN99uAvV6T/z88mANX/hMq6YI/L+WSqtKRu5z+4s3 jSFFQxV7+gEEQhEUio6Se0Sl3w4hj+A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:37 2025 by rpki-client