$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/d8a8428c-5d0e-350b-927e-fc78e6d2816b.roa File: d8a8428c-5d0e-350b-927e-fc78e6d2816b.roa (raw, json) Hash identifier: nGE4valRF8Vi2fqx7jynTca6hivvcUe1fVlaJvwk2vg= Subject key identifier: 1E:88:1B:0C:9A:26:EC:00:D5:C3:E5:91:B1:1E:95:69:1B:82:25:CE Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285848FD56CF03F143E8AA69E92800 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/d8a8428c-5d0e-350b-927e-fc78e6d2816b.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 198949 IP address blocks: 66.163.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:cf:03:f1:43:e8:aa:69:e9:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=7aa2ea51-2b04-4b86-911d-3f094a50a991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:db:cb:85:df:cf:30:ef:43:95:4f:6d:78: bb:0c:23:46:72:cc:6f:00:c1:f0:8d:06:dc:59:33: cc:27:79:ce:9e:ca:a9:fb:d6:34:a4:1e:54:f1:91: 55:f8:c0:32:f1:ed:a0:b9:04:24:61:16:72:ec:b0: 87:6b:ee:b4:71:88:fa:35:24:99:0a:af:13:ad:1d: 2d:5d:2e:0e:0e:b5:b3:a4:6f:61:5d:81:33:ba:ba: 72:6b:78:90:9a:93:8b:1c:50:b2:25:41:46:3a:bb: f1:41:39:f7:e4:7e:de:3f:7d:4f:b0:47:a7:9a:56: 75:e5:b4:62:d9:d8:15:04:cc:0b:5d:e3:3f:dc:fd: b1:01:c0:49:f1:7a:f4:7d:ae:ef:44:13:14:5f:c6: cd:0b:dc:ea:af:72:34:5c:c4:18:bc:01:83:0b:5a: f6:d3:41:37:7c:bd:a8:c1:c3:cd:98:ed:02:93:4b: 46:8c:ff:50:b6:61:d0:f2:76:f9:92:34:25:15:e3: 30:46:42:87:84:0d:f0:a6:07:f7:fc:84:61:a4:1f: 99:38:f3:83:66:4f:43:dd:2b:2e:56:30:e0:3a:1f: 55:d6:d7:57:90:da:41:df:94:14:83:a7:7c:e4:73: a6:8b:07:f8:70:0a:3f:7e:77:ed:74:bb:63:cd:46: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:88:1B:0C:9A:26:EC:00:D5:C3:E5:91:B1:1E:95:69:1B:82:25:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/d8a8428c-5d0e-350b-927e-fc78e6d2816b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 66.163.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:64:d4:4f:44:3c:1d:49:ba:ef:e9:3a:06:47:cc:4e:e2:f8: 34:d0:80:35:1a:37:78:dd:60:25:f6:c0:d4:3a:0a:9c:9c:df: 68:5f:06:ac:0d:e0:67:90:b6:17:fe:6b:fb:f2:e3:a0:91:76: d5:2f:8c:19:92:69:e6:d4:1e:a1:7a:c2:a2:f5:f3:1b:a1:ed: ae:da:71:81:be:49:7b:a5:91:02:18:36:8b:7e:cd:36:3b:7a: 68:ee:ce:25:fa:43:03:91:a7:8a:58:f4:09:52:0e:2e:1d:68: 52:89:e4:4d:04:44:5c:59:89:ad:67:2d:32:d2:f6:9f:16:af: eb:bc:72:1e:9d:06:4d:77:8d:a5:2f:39:2c:d7:ad:36:6d:46: af:6d:83:66:37:14:14:c2:02:4b:16:d2:e2:d4:0c:75:a8:78: 51:21:2d:22:66:36:63:42:9a:3f:3f:e2:a2:1a:eb:cf:06:46: c7:be:12:27:cb:57:77:13:3e:95:db:09:1b:f4:9a:02:95:7d: 94:10:5b:94:d8:a6:33:0b:7b:67:dd:31:e6:28:b5:4f:5e:46: 67:20:cf:88:d7:34:2e:5a:6b:8f:b0:b0:89:29:c5:d3:c1:25: c9:a1:b5:f7:b0:21:0d:c6:99:21:48:38:81:a9:2d:f3:9f:1b: 51:9c:b0:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vs8D8UPoqmnpKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk N2FhMmVhNTEtMmIwNC00Yjg2LTkxMWQtM2YwOTRhNTBhOTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjfby4XfzzDvQ5VPbXi7DCNGcsxvAMHwjQbc WTPMJ3nOnsqp+9Y0pB5U8ZFV+MAy8e2guQQkYRZy7LCHa+60cYj6NSSZCq8TrR0t XS4ODrWzpG9hXYEzurpya3iQmpOLHFCyJUFGOrvxQTn35H7eP31PsEenmlZ15bRi 2dgVBMwLXeM/3P2xAcBJ8Xr0fa7vRBMUX8bNC9zqr3I0XMQYvAGDC1r200E3fL2o wcPNmO0Ck0tGjP9QtmHQ8nb5kjQlFeMwRkKHhA3wpgf3/IRhpB+ZOPODZk9D3Ssu VjDgOh9V1tdXkNpB35QUg6d85HOmiwf4cAo/fnftdLtjzUZ2DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6IGwyaJuwA1cPlkbEelWkbgiXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZDhhODQyOGMtNWQwZS0z NTBiLTkyN2UtZmM3OGU2ZDI4MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVk1E9EPB1Juu/pOgZHzE7i+DTQgDUaN3jdYCX2wNQ6Cpyc32hfBqwN 4GeQthf+a/vy46CRdtUvjBmSaebUHqF6wqL18xuh7a7acYG+SXulkQIYNot+zTY7 emjuziX6QwORp4pY9AlSDi4daFKJ5E0ERFxZia1nLTLS9p8Wr+u8ch6dBk13jaUv OSzXrTZtRq9tg2Y3FBTCAksW0uLUDHWoeFEhLSJmNmNCmj8/4qIa688GRse+EifL V3cTPpXbCRv0mgKVfZQQW5TYpjMLe2fdMeYotU9eRmcgz4jXNC5aa4+wsIkpxdPB JcmhtfewIQ3GmSFIOIGpLfOfG1GcsLE= -----END CERTIFICATE-----Generated at Fri Mar 14 08:05:02 2025 by rpki-client