$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2c4bedad-c8e4-37be-a4e4-38ba77694658.roa File: 2c4bedad-c8e4-37be-a4e4-38ba77694658.roa (raw, json) Hash identifier: upWdsWUbg6w+V79V3ITTB/tLFGSffpC//372HLn58uo= Subject key identifier: 02:B8:FA:57:FB:35:6A:1C:1F:96:A6:B9:FB:E1:07:F7:BD:EA:0A:5A Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584900216CAB1C90A02B1DA34F80 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2c4bedad-c8e4-37be-a4e4-38ba77694658.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 13445 IP address blocks: 66.114.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:6c:ab:1c:90:a0:2b:1d:a3:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=5b5ac645-7b6b-4347-a66c-ba4b6578690e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:7e:a9:11:38:e8:04:49:61:c5:5c:f7:19: a1:88:d6:41:8f:12:3d:32:90:e6:ff:1d:32:5d:73: 20:ae:26:d5:2d:90:f2:43:3d:3c:18:8f:5c:76:f8: 0f:68:21:a7:7a:f0:02:11:bf:ce:bc:70:88:fa:b6: eb:ea:b0:01:18:fd:f5:0c:57:13:a3:8b:da:4b:ff: 5d:03:60:50:f7:97:98:c1:80:eb:ee:93:c3:fa:7e: fa:83:d5:f7:6f:e8:33:c0:e0:6f:64:c1:f6:01:ee: d3:69:00:e1:d5:aa:e6:de:b6:89:18:09:49:38:b7: be:79:3e:7f:c4:e9:21:90:09:18:77:22:c0:15:88: 3d:ac:f5:b8:f2:a5:e6:f4:d0:9f:93:b5:e6:b1:b0: b8:1f:4e:ab:0d:95:4f:e2:f1:33:4a:ea:96:cd:84: 65:90:3b:c7:5f:f5:b8:e0:07:98:5a:8e:60:67:88: 57:17:42:11:b5:e8:48:58:60:12:b7:be:5a:c5:e7: 58:08:cd:b6:15:9b:da:06:72:47:cf:86:7a:25:50: 56:3f:0f:f3:a2:30:02:ea:69:34:79:91:ee:89:d0: e0:d3:1b:df:59:0b:43:8d:90:c8:0e:25:c0:8c:8e: c7:55:be:51:15:a7:ff:37:27:58:cb:c0:67:21:3f: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B8:FA:57:FB:35:6A:1C:1F:96:A6:B9:FB:E1:07:F7:BD:EA:0A:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2c4bedad-c8e4-37be-a4e4-38ba77694658.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 66.114.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:fd:9d:e3:00:8a:72:5b:e4:49:a0:df:5e:14:bb:2a:99:f2: 38:99:e4:5c:e5:2c:23:6c:ca:f1:89:61:fc:0a:18:03:74:af: 20:b8:d0:cd:ff:3d:3d:02:01:be:b3:59:54:d9:94:86:57:f6: ca:c5:63:47:35:78:00:2f:4e:51:2a:1c:e2:40:ac:c8:62:bc: 4b:63:3f:e7:ee:a8:25:44:3c:3d:68:d0:9f:ce:56:a0:92:7f: 52:78:0c:d5:53:4f:f3:b9:44:a5:09:08:5c:d7:37:74:6b:9a: af:00:c0:ae:ef:85:25:df:bf:eb:36:a9:08:dd:66:99:2d:9b: ed:88:54:7d:8d:96:3b:d8:da:21:d8:af:03:71:4a:d1:13:e5: 5f:6b:3a:e3:29:e7:6a:6e:2f:97:6a:02:97:5a:d5:81:e9:6b: 69:be:ea:c3:59:5a:11:06:c0:61:e5:17:03:80:03:8c:2c:e9: f4:cd:16:83:86:78:d9:85:dc:95:94:7a:b9:52:97:11:e5:b4: 1d:97:f4:f0:70:27:76:24:45:70:a3:ed:81:44:6a:b2:9a:de: 5b:cf:42:42:65:1e:dd:83:b3:bc:3e:02:73:21:53:92:a4:9c: 32:44:0c:4f:59:65:43:7e:d8:2e:9f:b3:47:07:ee:c0:ad:7f: e8:46:99:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWyrHJCgKx2jT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk NWI1YWM2NDUtN2I2Yi00MzQ3LWE2NmMtYmE0YjY1Nzg2OTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTV+qRE46ARJYcVc9xmhiNZBjxI9MpDm/x0y XXMgribVLZDyQz08GI9cdvgPaCGnevACEb/OvHCI+rbr6rABGP31DFcTo4vaS/9d A2BQ95eYwYDr7pPD+n76g9X3b+gzwOBvZMH2Ae7TaQDh1arm3raJGAlJOLe+eT5/ xOkhkAkYdyLAFYg9rPW48qXm9NCfk7XmsbC4H06rDZVP4vEzSuqWzYRlkDvHX/W4 4AeYWo5gZ4hXF0IRtehIWGASt75axedYCM22FZvaBnJHz4Z6JVBWPw/zojAC6mk0 eZHuidDg0xvfWQtDjZDIDiXAjI7HVb5RFaf/NydYy8BnIT+iMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAK4+lf7NWocH5amufvhB/e96gpaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvMmM0YmVkYWQtYzhlNC0z N2JlLWE0ZTQtMzhiYTc3Njk0NjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANH9neMAinJb5Emg314UuyqZ8jiZ5FzlLCNsyvGJYfwKGAN0ryC40M3/ PT0CAb6zWVTZlIZX9srFY0c1eAAvTlEqHOJArMhivEtjP+fuqCVEPD1o0J/OVqCS f1J4DNVTT/O5RKUJCFzXN3Rrmq8AwK7vhSXfv+s2qQjdZpktm+2IVH2NljvY2iHY rwNxStET5V9rOuMp52puL5dqApda1YHpa2m+6sNZWhEGwGHlFwOAA4ws6fTNFoOG eNmF3JWUerlSlxHltB2X9PBwJ3YkRXCj7YFEarKa3lvPQkJlHt2Ds7w+AnMhU5Kk nDJEDE9ZZUN+2C6fs0cH7sCtf+hGmXE= -----END CERTIFICATE-----Generated at Sat Apr 5 19:11:07 2025 by rpki-client