$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0c51f89d-004c-33c1-9f52-b0b9c3227393.roa File: 0c51f89d-004c-33c1-9f52-b0b9c3227393.roa (raw, json) Hash identifier: rqtM2BFvvJYEruev2JJ8+7zOzgfupUlYCGv6Ghur8qA= Subject key identifier: 0D:89:C5:3D:5B:B1:4C:AC:86:F3:C6:0B:25:CC:EE:78:42:7E:6B:11 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858484DA636C986CE67BC71966B60 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0c51f89d-004c-33c1-9f52-b0b9c3227393.roa Signing time: Mon 23 Dec 2024 15:39:02 +0000 ROA not before: Mon 23 Dec 2024 15:39:02 +0000 ROA not after: Sun 23 Mar 2025 14:39:02 +0000 asID: 30058 IP address blocks: 66.90.75.0/24 maxlen: 24 66.90.76.0/23 maxlen: 23 66.90.125.0/24 maxlen: 24 2001:49f0:d0fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:a6:36:c9:86:ce:67:bc:71:96:6b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Dec 23 15:39:02 2024 GMT Not After : Mar 23 14:39:02 2025 GMT Subject: CN=02ac882f-0584-4dff-9ca5-da80275dd7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:7d:be:73:93:86:4e:d7:02:44:1a:12:67: e1:fc:d0:89:ec:ef:62:93:4b:a8:c7:b9:62:4a:92: 74:fd:fa:10:b7:68:19:c4:62:af:19:ad:ed:0f:d8: ba:f2:58:19:6c:27:12:ec:dd:63:3c:ff:00:f2:9d: c6:56:15:2e:52:62:8f:ec:a4:18:37:4c:c7:14:6b: 03:fb:33:2d:03:ba:29:82:ab:b8:1b:84:bc:fe:e7: d7:96:ad:5c:ca:ae:cf:fc:e2:d4:56:35:c5:95:57: 2c:bb:1c:1c:8b:8c:43:79:9e:eb:fc:c1:fe:2c:ae: 2a:f7:9a:7a:a2:38:77:16:dc:bc:24:76:65:6e:9e: b3:0f:ab:99:db:7f:5e:fc:5d:a3:7a:59:e7:8f:8c: b5:09:d0:40:9f:26:1d:87:be:c1:06:9c:4f:ab:a2: 78:d1:ba:e7:e4:a8:dc:5f:ea:9b:bf:1c:6f:33:c5: c7:e1:ca:22:d2:91:93:f2:20:ee:7f:c6:c8:a1:10: 75:bc:ac:99:6a:2f:4c:81:b1:31:0a:7c:fa:00:8c: fd:67:3e:6d:02:1c:0b:5c:c8:e6:c0:05:f7:b8:24: 31:4d:ff:c8:46:ad:63:f8:d8:79:d4:8c:d4:4c:c6: 2a:36:00:90:a4:9b:95:eb:1b:c1:52:bb:09:32:65: 5b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:89:C5:3D:5B:B1:4C:AC:86:F3:C6:0B:25:CC:EE:78:42:7E:6B:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0c51f89d-004c-33c1-9f52-b0b9c3227393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 66.90.75.0-66.90.77.255 66.90.125.0/24 IPv6: 2001:49f0:d0fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:03:34:a0:4e:6b:05:8c:e7:88:87:ab:8d:10:b4:d9:84:34: 6a:d2:53:f8:4c:3a:54:56:ed:36:f7:42:0d:6d:ba:3c:55:d6: 2f:14:67:2d:d8:5e:74:61:d8:3a:b6:69:5e:f4:9a:2a:2b:e0: d2:65:22:04:bb:58:d7:3d:a4:98:ca:69:8c:d1:7a:52:e6:ee: 56:df:8b:74:88:ec:73:a1:60:ad:90:84:83:ce:c5:93:b7:78: 54:f0:24:cd:29:8f:89:7f:9f:fc:06:06:98:8b:f3:27:1d:19: 8c:f2:13:9d:8d:b7:fd:66:03:e6:cf:6e:45:96:d7:11:af:ee: f4:8a:5a:32:dc:13:56:4d:02:6e:84:20:e0:6b:b2:97:58:8a: 78:fd:db:3d:c0:ff:60:a2:30:80:9f:8f:02:52:27:01:ad:3b: eb:eb:e8:fc:8d:6e:1c:23:db:6f:ff:62:27:c3:a1:5e:8c:14: cb:60:4b:c2:90:af:e2:f4:18:87:d1:8e:d4:9f:c8:ec:1b:88: be:36:17:0a:74:77:f4:0d:29:ae:47:3d:00:ae:19:af:bf:19: b5:32:07:9c:67:bc:e7:44:64:f6:02:0e:91:4b:f9:86:7c:ee: 3e:7a:98:66:81:80:26:83:b7:00:0e:f5:b8:8c:1f:30:1e:1d: 92:ce:16:58 -----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgIUAQ0Mn0MoWEhNpjbJhs5nvHGWa2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTIyMzE1MzkwMloXDTI1MDMyMzE0MzkwMlowLzEtMCsGA1UEAxMk MDJhYzg4MmYtMDU4NC00ZGZmLTljYTUtZGE4MDI3NWRkN2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiJ9vnOThk7XAkQaEmfh/NCJ7O9ik0uox7li SpJ0/foQt2gZxGKvGa3tD9i68lgZbCcS7N1jPP8A8p3GVhUuUmKP7KQYN0zHFGsD +zMtA7opgqu4G4S8/ufXlq1cyq7P/OLUVjXFlVcsuxwci4xDeZ7r/MH+LK4q95p6 ojh3Fty8JHZlbp6zD6uZ239e/F2jelnnj4y1CdBAnyYdh77BBpxPq6J40brn5Kjc X+qbvxxvM8XH4coi0pGT8iDuf8bIoRB1vKyZai9MgbExCnz6AIz9Zz5tAhwLXMjm wAX3uCQxTf/IRq1j+Nh51IzUTMYqNgCQpJuV6xvBUrsJMmVbiwIDAQABo4IDdDCC A3AwHQYDVR0OBBYEFA2JxT1bsUyshvPGCyXM7nhCfmsRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMGM1MWY4OWQtMDA0Yy0z M2MxLTlmNTItYjBiOWMzMjI3MzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBABCWksD BAFCWkwDBABCWn0wDwQCAAIwCQMHACABSfDQ/TBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcAzSgTmsFjOeI h6uNELTZhDRq0lP4TDpUVu0290INbbo8VdYvFGct2F50Ydg6tmle9JoqK+DSZSIE u1jXPaSYymmM0XpS5u5W34t0iOxzoWCtkISDzsWTt3hU8CTNKY+Jf5/8BgaYi/Mn HRmM8hOdjbf9ZgPmz25FltcRr+70iloy3BNWTQJuhCDga7KXWIp4/ds9wP9gojCA n48CUicBrTvr6+j8jW4cI9tv/2Inw6FejBTLYEvCkK/i9BiH0Y7Un8jsG4i+NhcK dHf0DSmuRz0Arhmvvxm1MgecZ7znRGT2Ag6RS/mGfO4+ephmgYAmg7cADvW4jB8w Hh2SzhZY -----END CERTIFICATE-----Generated at Wed Feb 19 20:44:24 2025 by rpki-client