$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cbd84ef9-7935-35c0-a038-09d0d75c4bb1.roa File: cbd84ef9-7935-35c0-a038-09d0d75c4bb1.roa (raw, json) Hash identifier: FsaMfIEVaI3pCe8BYksC0gKW2wZA8TID76VUtQfttQY= Subject key identifier: 0E:87:A9:15:18:C2:74:D4:9C:F1:7A:C7:D0:04:68:D4:5B:8D:D6:4B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12B97C28069B3F09B3600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cbd84ef9-7935-35c0-a038-09d0d75c4bb1.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 66.102.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2b:97:c2:80:69:b3:f0:9b:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=5ca8d5e6-8b45-490c-a3b2-52fe75847ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:27:70:20:29:6a:94:14:5e:fa:8d:6f:d5:95: 7c:11:5f:f0:ab:2e:70:04:30:9b:4c:57:f3:07:c9: 3a:9c:e1:b6:21:52:3e:1a:81:1d:c2:87:b0:dc:ac: 45:99:4e:d2:6b:7d:a3:b7:5a:9a:fc:66:93:75:2e: 9a:af:79:7a:10:06:c8:92:ad:4f:b8:23:11:4e:5e: 06:ba:34:17:4a:e2:24:15:1e:f6:f1:a1:ae:13:c1: 30:ae:07:ed:a6:c0:e5:b1:e9:47:06:4d:c9:55:49: 3b:5a:f7:82:51:0f:3d:f3:c0:d2:4b:33:e9:77:85: 2f:1a:b0:05:ac:41:a8:0c:39:eb:ee:2b:6a:d7:60: db:b0:b3:78:21:66:9b:40:93:d9:48:c9:5c:64:8f: 5e:05:67:8a:99:fe:4e:cd:55:78:0b:a0:af:8b:f4: 2d:09:3a:cf:05:72:e9:db:84:de:32:c8:1d:bd:74: 27:dc:8e:72:91:a3:19:11:44:f1:d7:84:d0:98:29: 59:57:4f:39:ed:d5:d6:c5:26:1b:28:7d:3c:d7:c3: f6:e8:38:61:36:6e:30:be:e1:10:1f:bf:4f:fc:43: 82:17:91:97:b7:80:70:74:d1:c2:93:f4:24:b3:17: 68:6f:6d:92:93:55:ef:ed:0b:f7:6d:e3:ce:43:2b: 78:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:87:A9:15:18:C2:74:D4:9C:F1:7A:C7:D0:04:68:D4:5B:8D:D6:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cbd84ef9-7935-35c0-a038-09d0d75c4bb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.102.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:69:30:bb:96:79:c3:5f:56:2f:df:d9:d3:9c:84:4c:da:90: 66:5e:3c:46:42:1a:82:69:f8:b9:a0:2d:7e:8a:3f:28:64:8b: 9b:f0:3e:5d:59:f3:09:20:00:b2:1f:07:6e:e5:8f:fb:43:5d: 7a:c0:0c:9b:34:32:5f:9c:2e:6e:ab:8b:78:07:b1:d8:43:e3: 2f:dc:89:bd:6c:ff:c2:c6:b0:06:f9:71:15:1a:0b:32:3f:ff: 66:a8:96:00:ea:31:10:f7:b7:98:fc:65:11:b9:6f:de:8b:bc: c2:50:3a:65:36:6d:27:2e:88:dc:90:4c:e1:86:a0:90:4c:95: 47:0f:2c:60:3a:80:2d:b2:44:82:99:66:ee:f1:a3:ca:ad:c0: 78:f0:2a:a9:89:d8:8d:e7:75:e2:92:f7:b3:9d:d1:c7:8c:cf: 1c:76:56:f4:d7:15:f0:3a:5d:8a:7a:e0:2c:6a:05:14:c2:87: 91:6e:41:1e:f1:52:5d:6b:a4:07:97:7b:8d:5f:96:7d:a5:63: 70:0a:10:46:de:e6:55:50:c5:a7:ce:8c:24:48:28:ca:59:77: d6:1c:2e:4e:85:f2:52:cb:89:bc:3c:aa:d5:f9:bd:d9:cd:bf: 13:3f:bf:7f:25:91:d6:91:81:18:3b:40:29:17:f8:80:d0:cc: 0e:55:00:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSuXwoBps/CbNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NWNhOGQ1ZTYtOGI0NS00OTBjLWEzYjItNTJmZTc1ODQ3ZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSdwIClqlBRe+o1v1ZV8EV/wqy5wBDCbTFfz B8k6nOG2IVI+GoEdwoew3KxFmU7Sa32jt1qa/GaTdS6ar3l6EAbIkq1PuCMRTl4G ujQXSuIkFR728aGuE8EwrgftpsDlselHBk3JVUk7WveCUQ8988DSSzPpd4UvGrAF rEGoDDnr7itq12DbsLN4IWabQJPZSMlcZI9eBWeKmf5OzVV4C6Cvi/QtCTrPBXLp 24TeMsgdvXQn3I5ykaMZEUTx14TQmClZV0857dXWxSYbKH0818P26DhhNm4wvuEQ H79P/EOCF5GXt4BwdNHCk/Qksxdob22Sk1Xv7Qv3bePOQyt4dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6HqRUYwnTUnPF6x9AEaNRbjdZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2JkODRlZjktNzkzNS0z NWMwLWEwMzgtMDlkMGQ3NWM0YmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5pMLuWecNfVi/f2dOchEzakGZePEZCGoJp+LmgLX6KPyhki5vwPl1Z 8wkgALIfB27lj/tDXXrADJs0Ml+cLm6ri3gHsdhD4y/cib1s/8LGsAb5cRUaCzI/ /2aolgDqMRD3t5j8ZRG5b96LvMJQOmU2bScuiNyQTOGGoJBMlUcPLGA6gC2yRIKZ Zu7xo8qtwHjwKqmJ2I3ndeKS97Od0ceMzxx2VvTXFfA6XYp64CxqBRTCh5FuQR7x Ul1rpAeXe41fln2lY3AKEEbe5lVQxafOjCRIKMpZd9YcLk6F8lLLibw8qtX5vdnN vxM/v38lkdaRgRg7QCkX+IDQzA5VAIY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:03 2025 by rpki-client