$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2c53b348-0209-3f66-866a-b32152c4895b.roa File: 2c53b348-0209-3f66-866a-b32152c4895b.roa (raw, json) Hash identifier: aaJiY/u5+y5/XGy7AidtADnfT+hoi5t4sndCmRvwLyM= Subject key identifier: 9A:3C:98:1E:31:3A:4F:A1:B0:E3:14:32:8D:42:13:1C:F0:81:B8:AE Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584886B080C7365F8A9DE436ACC0 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2c53b348-0209-3f66-866a-b32152c4895b.roa Signing time: Mon 13 Jan 2025 02:00:40 +0000 ROA not before: Mon 13 Jan 2025 02:00:40 +0000 ROA not after: Sun 13 Apr 2025 01:00:40 +0000 asID: 14711 IP address blocks: 66.103.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Mar 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:b0:80:c7:36:5f:8a:9d:e4:36:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Jan 13 02:00:40 2025 GMT Not After : Apr 13 01:00:40 2025 GMT Subject: CN=cb13750a-df60-469b-b2c0-a19914d452a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f4:0b:11:96:6c:85:3a:db:4a:3f:91:e9:b9: b4:c6:11:b9:99:be:e0:ab:f7:c0:7d:1a:db:7d:74: dd:f5:52:73:c7:72:32:2e:fa:d8:96:4f:59:fa:fb: 53:48:7b:d7:f4:00:50:23:b4:fc:f6:04:3b:90:60: 5e:5e:44:60:45:3b:19:0f:56:e7:be:be:d5:cb:ed: d3:df:b0:15:1a:ad:d7:ab:e8:d8:4a:31:88:3a:8f: 6c:27:9c:09:a5:1a:09:76:25:c1:04:c7:fb:1f:22: c0:7b:bc:f5:25:1b:99:f7:07:44:1e:bc:48:ec:38: 5e:d8:f1:ef:90:af:5a:b7:ce:1f:e6:ab:f9:af:59: 94:8d:d4:b6:20:33:ab:f3:3e:b7:7c:e9:d9:5f:f5: de:9d:a0:1d:32:0c:c6:15:86:a7:1e:6f:4c:26:1f: 80:dd:c6:4d:15:88:fe:e0:86:d1:c6:63:80:59:23: 1a:bd:94:9b:94:26:38:f7:71:65:10:9a:d5:55:08: b6:3c:51:1c:91:7c:9e:a6:4d:70:15:a4:3f:c8:2f: e9:33:80:0d:40:9c:35:fd:0e:82:5d:da:db:14:e3: 2e:58:d5:2a:e8:a0:d3:ae:b6:2d:00:16:0e:cf:88: 54:5f:d1:83:19:52:d5:77:ec:f1:97:3c:c9:68:90: 08:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3C:98:1E:31:3A:4F:A1:B0:E3:14:32:8D:42:13:1C:F0:81:B8:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2c53b348-0209-3f66-866a-b32152c4895b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 66.103.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f9:6f:cd:71:e1:1e:d5:e0:87:13:ca:52:10:a1:92:c7:8d: 84:0f:db:0c:9d:48:fb:57:29:db:f9:f1:7e:9a:8b:7c:71:0c: 2b:66:66:ae:c8:07:01:a7:32:18:6d:29:f4:04:15:ca:75:5d: 26:47:e8:a9:51:d6:29:91:b4:c7:a8:b4:fd:ce:f0:fb:9a:31: d4:aa:7a:51:b7:aa:9f:84:33:ca:48:8f:d6:8a:98:bd:5e:23: cd:5e:b3:10:ab:c7:d4:7c:f8:24:ea:53:91:af:8e:76:00:bb: 49:0c:63:23:d2:60:a7:35:39:43:89:f7:d0:6d:e1:e1:9a:91: bd:d2:90:63:5e:26:6b:ba:20:41:18:be:61:ff:ca:9b:36:38: 38:de:ec:b8:02:a4:82:e3:5b:f6:ae:f6:1f:07:cf:6d:53:d5: 14:a8:ae:a5:54:af:36:e7:b9:70:93:d2:cb:38:fd:e5:3b:64: 79:81:5e:32:ef:3b:94:05:cc:e5:08:8e:b5:db:8e:08:8a:fa: f6:1c:7c:4f:cf:b8:e9:d1:43:5c:24:22:23:cd:a8:6f:db:8f: 1a:00:7e:33:9a:f3:a7:df:1d:90:b7:47:c1:e9:2a:2f:02:6b: 1d:cf:5e:a1:d5:ed:29:18:70:ef:4f:3f:ea:97:08:df:84:ed: ad:f0:63:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiGsIDHNl+KneQ2rMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk Y2IxMzc1MGEtZGY2MC00NjliLWIyYzAtYTE5OTE0ZDQ1MmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfQLEZZshTrbSj+R6bm0xhG5mb7gq/fAfRrb fXTd9VJzx3IyLvrYlk9Z+vtTSHvX9ABQI7T89gQ7kGBeXkRgRTsZD1bnvr7Vy+3T 37AVGq3Xq+jYSjGIOo9sJ5wJpRoJdiXBBMf7HyLAe7z1JRuZ9wdEHrxI7Dhe2PHv kK9at84f5qv5r1mUjdS2IDOr8z63fOnZX/XenaAdMgzGFYanHm9MJh+A3cZNFYj+ 4IbRxmOAWSMavZSblCY493FlEJrVVQi2PFEckXyepk1wFaQ/yC/pM4ANQJw1/Q6C XdrbFOMuWNUq6KDTrrYtABYOz4hUX9GDGVLVd+zxlzzJaJAIPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJo8mB4xOk+hsOMUMo1CExzwgbiuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvMmM1M2IzNDgtMDIwOS0z ZjY2LTg2NmEtYjMyMTUyYzQ4OTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmf+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb5b81x4R7V4IcTylIQoZLHjYQP2wydSPtXKdv58X6ai3xxDCtmZq7I BwGnMhhtKfQEFcp1XSZH6KlR1imRtMeotP3O8PuaMdSqelG3qp+EM8pIj9aKmL1e I81esxCrx9R8+CTqU5GvjnYAu0kMYyPSYKc1OUOJ99Bt4eGakb3SkGNeJmu6IEEY vmH/yps2ODje7LgCpILjW/au9h8Hz21T1RSorqVUrzbnuXCT0ss4/eU7ZHmBXjLv O5QFzOUIjrXbjgiK+vYcfE/PuOnRQ1wkIiPNqG/bjxoAfjOa86ffHZC3R8HpKi8C ax3PXqHV7SkYcO9PP+qXCN+E7a3wY7Y= -----END CERTIFICATE-----Generated at Mon Mar 24 20:38:48 2025 by rpki-client