$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf7c8d7-e2a6-3ba8-a84a-052510cb46ee.roa File: daf7c8d7-e2a6-3ba8-a84a-052510cb46ee.roa (raw, json) Hash identifier: rlNjOxw8oirFJpmVOfNHl70lC5x0HZjRfrIioEviCM0= Subject key identifier: FA:D1:CC:41:CD:4C:9D:1B:FF:B4:F2:DB:5F:EB:B4:F2:C5:A4:B5:73 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BF24B15ABB460C7850F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf7c8d7-e2a6-3ba8-a84a-052510cb46ee.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 66.249.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f2:4b:15:ab:b4:60:c7:85:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=9b1bdd8e-8a02-42b1-8c5b-94477e5c71ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a3:8b:d4:a8:18:b5:84:3a:d1:a5:91:bb:c7: e2:b6:d9:35:56:fb:62:f7:37:4f:5e:0f:e9:20:08: b3:eb:b3:2a:b6:cc:10:b5:2f:6a:f4:de:7e:ec:3e: 79:4d:7d:a9:7c:bf:96:e8:52:b2:77:ae:41:05:f7: 9e:9f:fe:1a:35:34:78:2e:59:ab:9f:97:c8:4e:ff: 1e:c4:ca:ba:1c:d8:ab:59:cb:00:ca:82:99:d5:52: 9c:c3:27:27:8a:19:68:be:97:24:4f:c8:52:13:3b: 2f:71:4f:28:7f:1f:23:f7:5a:a1:98:4d:00:39:32: 79:54:4f:30:d8:48:da:e7:7f:2c:a0:5d:c9:47:ce: f3:eb:57:2c:bc:50:ec:43:b4:4a:a9:b0:96:29:05: fb:59:00:5d:5a:79:23:d9:36:81:99:15:e8:c7:d9: e1:36:21:a6:18:95:24:df:71:91:9e:cf:c8:0c:40: 4e:3c:b5:78:99:dd:49:3e:72:8b:ba:00:c3:da:b6: bc:c5:0c:c1:f8:72:11:a5:ef:07:f2:8e:70:06:0c: 24:32:fa:c7:c0:88:18:96:4a:4a:ed:81:85:80:ba: 0a:1a:90:11:97:42:e9:8b:d6:46:1b:24:01:5d:5d: 03:44:f9:7c:6e:c9:a3:a9:76:16:19:f4:22:f2:14: 07:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D1:CC:41:CD:4C:9D:1B:FF:B4:F2:DB:5F:EB:B4:F2:C5:A4:B5:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf7c8d7-e2a6-3ba8-a84a-052510cb46ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:84:a1:8e:cc:c9:21:31:e5:31:14:8e:e6:6d:0b:5b:e3:eb: 21:14:35:a8:f8:33:a8:b8:40:98:97:80:59:b4:21:a8:be:c9: 2f:e5:81:ee:15:ae:bd:37:18:32:c7:79:31:e6:6f:d6:eb:8a: e7:2b:4a:1c:09:17:50:89:c8:29:ea:ba:20:18:d4:59:95:d9: 68:31:56:2e:ae:a5:a5:f6:c7:1d:e9:da:ae:08:a1:b6:85:94: 4d:e2:55:c4:70:99:af:95:9c:06:f8:d0:d4:06:99:aa:ef:e5: 5d:38:0f:c9:16:ce:f3:ba:f5:03:75:25:5d:91:c4:64:ce:62: 7a:0d:eb:16:a0:c1:33:9f:d7:e5:d5:fe:18:36:76:e2:af:10: 79:65:1b:ee:b6:d9:fc:57:90:f2:66:63:81:c3:b9:e2:e1:90: 2b:16:0f:e0:27:ec:1c:bb:2f:34:f3:4a:b9:2a:9b:43:30:12: b4:de:64:30:5e:4b:d0:ff:d8:27:bd:2f:85:50:34:1f:ed:aa: 41:f1:03:e8:b9:cb:ad:51:f6:2c:4a:70:f5:1b:ae:55:00:3d: 9d:e9:bc:41:9e:c2:6e:b1:0d:62:5b:5a:aa:ce:a0:0f:13:a0: 6b:af:13:28:8e:af:ad:dc:9c:b2:bd:6b:1a:2c:dc:03:f9:3b: 3a:23:96:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/JLFau0YMeFDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OWIxYmRkOGUtOGEwMi00MmIxLThjNWItOTQ0NzdlNWM3MWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqOL1KgYtYQ60aWRu8fittk1Vvti9zdPXg/p IAiz67MqtswQtS9q9N5+7D55TX2pfL+W6FKyd65BBfeen/4aNTR4Llmrn5fITv8e xMq6HNirWcsAyoKZ1VKcwycnihlovpckT8hSEzsvcU8ofx8j91qhmE0AOTJ5VE8w 2Eja538soF3JR87z61csvFDsQ7RKqbCWKQX7WQBdWnkj2TaBmRXox9nhNiGmGJUk 33GRns/IDEBOPLV4md1JPnKLugDD2ra8xQzB+HIRpe8H8o5wBgwkMvrHwIgYlkpK 7YGFgLoKGpARl0Lpi9ZGGyQBXV0DRPl8bsmjqXYWGfQi8hQHRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrRzEHNTJ0b/7Ty21/rtPLFpLVzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGFmN2M4ZDctZTJhNi0z YmE4LWE4NGEtMDUyNTEwY2I0NmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmEoY7MySEx5TEUjuZtC1vj6yEUNaj4M6i4QJiXgFm0Iai+yS/lge4V rr03GDLHeTHmb9briucrShwJF1CJyCnquiAY1FmV2WgxVi6upaX2xx3p2q4IobaF lE3iVcRwma+VnAb40NQGmarv5V04D8kWzvO69QN1JV2RxGTOYnoN6xagwTOf1+XV /hg2duKvEHllG+622fxXkPJmY4HDueLhkCsWD+An7By7LzTzSrkqm0MwErTeZDBe S9D/2Ce9L4VQNB/tqkHxA+i5y61R9ixKcPUbrlUAPZ3pvEGewm6xDWJbWqrOoA8T oGuvEyiOr63cnLK9axos3AP5OzojltY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:59 2025 by rpki-client