$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d98475fd-7b34-3930-9591-32129c349999.roa File: d98475fd-7b34-3930-9591-32129c349999.roa (raw, json) Hash identifier: XHJ6xY93p282khZA3wRE5dajXSOFOK8c2fE3pW9Ly8U= Subject key identifier: 6D:12:94:E8:19:CD:72:87:B7:4F:29:08:94:1E:38:5B:86:C5:99:48 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84C126AB742CC371C8325C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d98475fd-7b34-3930-9591-32129c349999.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 64.233.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:12:6a:b7:42:cc:37:1c:83:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ce427460-80e2-442d-83c5-54c45937148f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:be:0c:c9:06:56:ad:e5:6e:24:69:1b:8f: a7:6b:25:32:73:4f:82:23:62:2d:eb:2d:41:30:88: ce:f5:3c:fa:eb:2a:ea:a0:2c:31:d6:72:44:b7:a2: 8c:0b:c5:a6:8b:c3:38:22:92:ce:19:75:6b:4c:a8: 32:95:26:ea:6e:5c:6f:ac:d9:82:75:b8:14:f6:af: 81:28:31:67:44:02:ed:25:24:78:9a:1b:b7:4a:42: 88:6b:f2:c4:52:c9:cd:78:f2:e8:a7:30:a9:05:bb: dd:0f:cc:1a:9d:ee:68:e9:42:61:76:d3:80:7d:df: 11:02:15:f8:e4:80:83:fc:12:d0:4c:3b:e0:4b:1a: e9:d6:fb:90:1e:cc:8f:b6:64:7f:45:89:07:35:16: 53:51:96:46:12:a2:8f:13:51:f2:b2:b7:b5:04:45: 50:46:3f:96:b6:d2:cc:1c:ab:a8:cf:97:c5:2d:1f: ae:70:9e:29:0a:88:17:a5:49:6d:50:d7:10:01:b0: 2c:92:0b:04:24:b6:4c:84:89:eb:50:b9:59:c3:26: b5:da:6b:20:12:e3:8e:a5:56:f8:5a:0f:0a:32:0f: b2:b9:94:5d:3c:1e:27:a2:23:50:e3:c4:ec:85:03: f1:6b:cc:01:6d:8f:31:32:2d:b9:99:16:b9:94:92: d6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:12:94:E8:19:CD:72:87:B7:4F:29:08:94:1E:38:5B:86:C5:99:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d98475fd-7b34-3930-9591-32129c349999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e3:31:fb:e4:77:a7:9a:13:88:d4:60:ad:b2:34:f8:76:d0: c5:fa:f1:d8:23:c2:65:13:a3:53:7b:7c:e6:9f:b4:56:bc:43: 07:b5:5a:5c:8c:a9:72:84:6b:da:cf:b5:c1:45:2f:1f:88:5e: 6a:65:dc:68:7a:d6:a5:9e:8a:2c:59:03:b3:31:0a:f0:a5:84: b8:a1:5f:03:5a:32:27:37:e4:72:7f:03:98:21:70:09:d3:e4: 79:c0:32:e8:16:9f:de:e1:bd:49:6c:b4:e2:d0:14:ea:13:fa: 1e:39:72:1e:eb:17:19:e2:02:8c:1a:a9:04:b4:99:d8:3e:b6: ca:67:c3:4d:a2:56:eb:3b:99:f8:c9:73:6e:4c:da:48:8b:22: c4:61:bb:3e:b1:70:31:d5:53:f0:00:f4:65:b6:4f:d2:21:20: 71:d3:7f:8b:82:8a:51:a2:42:a7:a3:0a:a7:46:14:42:fc:a4: 36:22:bd:34:e2:cb:f4:df:f5:b2:67:be:c0:bb:86:5e:1e:5c: dc:5a:dc:5e:17:4c:3f:27:b8:15:4d:14:81:6a:b8:f4:eb:4b: 34:f3:de:ed:d5:36:6b:bd:39:f7:ee:c7:2d:b2:2c:41:41:ee: 27:0d:ec:ed:55:0d:6c:47:fc:57:34:6f:a5:5a:79:0a:7d:80: d3:f8:01:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBJqt0LMNxyDJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Y2U0Mjc0NjAtODBlMi00NDJkLTgzYzUtNTRjNDU5MzcxNDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFy+DMkGVq3lbiRpG4+nayUyc0+CI2It6y1B MIjO9Tz66yrqoCwx1nJEt6KMC8Wmi8M4IpLOGXVrTKgylSbqblxvrNmCdbgU9q+B KDFnRALtJSR4mhu3SkKIa/LEUsnNePLopzCpBbvdD8wane5o6UJhdtOAfd8RAhX4 5ICD/BLQTDvgSxrp1vuQHsyPtmR/RYkHNRZTUZZGEqKPE1Hysre1BEVQRj+WttLM HKuoz5fFLR+ucJ4pCogXpUltUNcQAbAskgsEJLZMhInrULlZwya12msgEuOOpVb4 Wg8KMg+yuZRdPB4noiNQ48TshQPxa8wBbY8xMi25mRa5lJLWoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0SlOgZzXKHt08pCJQeOFuGxZlIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDk4NDc1ZmQtN2IzNC0z OTMwLTk1OTEtMzIxMjljMzQ5OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHjMfvkd6eaE4jUYK2yNPh20MX68dgjwmUTo1N7fOaftFa8Qwe1WlyM qXKEa9rPtcFFLx+IXmpl3Gh61qWeiixZA7MxCvClhLihXwNaMic35HJ/A5ghcAnT 5HnAMugWn97hvUlstOLQFOoT+h45ch7rFxniAowaqQS0mdg+tspnw02iVus7mfjJ c25M2kiLIsRhuz6xcDHVU/AA9GW2T9IhIHHTf4uCilGiQqejCqdGFEL8pDYivTTi y/Tf9bJnvsC7hl4eXNxa3F4XTD8nuBVNFIFquPTrSzTz3u3VNmu9Offuxy2yLEFB 7icN7O1VDWxH/Fc0b6VaeQp9gNP4AT8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:37 2025 by rpki-client