$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa File: 88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa (raw, json) Hash identifier: nD3OvB5YEd7rcRGm5yAyhv1Q3e25IdXea+sJFz1mR58= Subject key identifier: 4F:7A:50:4B:F1:5C:67:51:F7:ED:E9:62:55:CD:D1:E6:62:36:91:1C Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F43285848F65BE207FB9A2E128D9B02C0 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 12129 IP address blocks: 66.103.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Mar 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e2:07:fb:9a:2e:12:8d:9b:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=3a77465d-5aa3-4b79-a013-44dba5af0c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:63:8c:54:9f:fa:56:ca:89:cf:db:da:be:7d: a0:3f:08:92:da:76:95:c2:b0:ae:bc:03:d5:01:ba: 72:91:70:4f:5e:61:61:d8:27:aa:d1:15:b7:7f:66: 84:0f:0c:4b:12:4a:f1:9a:ee:ad:a2:65:20:35:b8: 46:1b:79:fc:be:50:1d:f9:bd:c6:70:77:15:15:c5: f4:4d:16:42:47:f5:7d:71:54:58:e0:eb:79:a5:70: 02:88:4b:bc:54:59:9c:f2:55:8f:c4:42:05:87:d3: 24:97:b8:f6:2e:36:7c:02:f1:f5:39:01:9d:d0:ec: c5:aa:74:bf:16:1a:68:07:cc:e8:85:7f:28:2a:80: 14:eb:85:67:72:9a:c0:e4:e4:87:7c:24:f5:c5:38: 05:24:d8:be:c0:bb:24:f8:31:57:65:f4:e2:38:fc: c1:40:49:7c:2e:38:69:3f:cb:b5:7b:53:11:2b:2b: ed:39:02:00:71:c0:17:18:cd:35:9f:7c:d4:12:da: ec:56:91:95:a2:02:49:35:2a:d1:30:ea:84:3c:86: 24:99:87:87:16:f2:04:2d:89:8e:fb:4f:bd:f3:24: 98:31:50:0d:09:01:d0:96:0a:eb:03:86:18:1b:24: fc:12:40:41:e6:d1:1f:03:43:a8:ff:28:7f:d2:12: 5f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7A:50:4B:F1:5C:67:51:F7:ED:E9:62:55:CD:D1:E6:62:36:91:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 66.103.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:b3:20:0c:6e:cf:1d:fe:70:23:f6:37:e7:76:cc:52:c9:55: 7a:4c:4c:6a:bd:0d:07:22:de:0b:d0:50:57:5a:2f:12:97:c7: d5:26:c6:66:7f:4d:36:7d:d9:29:62:c0:8a:42:14:09:0a:11: 26:be:4b:9f:d8:88:79:1e:17:5e:79:9f:c5:69:b8:2a:4b:ce: 13:37:7e:1b:91:7c:9c:56:e2:2b:1e:5f:03:2a:ee:bf:06:a5: 32:6c:0d:eb:97:8a:75:99:fd:53:63:0c:2e:1d:f6:0c:1b:6e: a3:36:77:56:7b:47:31:fe:7d:5c:9e:b1:08:5f:cf:56:72:94: 1e:25:43:3f:67:92:9b:69:1c:de:43:b7:72:44:51:cb:68:68: ec:49:5a:b4:77:96:75:ed:8f:14:cb:0e:8d:8f:26:59:21:be: ea:30:40:b7:a7:4e:2d:5e:41:7b:35:46:1d:b6:bb:fe:9a:c5: c7:67:46:6c:c0:7f:73:37:7e:03:8e:d3:5d:f5:12:6a:91:3f: 35:46:c1:af:2a:6f:42:d9:ce:72:8d:e4:c9:21:a1:7c:ae:d7: b8:82:98:0a:c5:07:c9:45:a9:a3:c5:99:6c:53:12:98:6b:47: c9:19:78:28:de:58:2c:c4:10:bb:10:b0:54:ae:82:ec:e5:f3: f9:d7:e5:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+IH+5ouEo2bAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk M2E3NzQ2NWQtNWFhMy00Yjc5LWEwMTMtNDRkYmE1YWYwYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWOMVJ/6VsqJz9vavn2gPwiS2naVwrCuvAPV AbpykXBPXmFh2Ceq0RW3f2aEDwxLEkrxmu6tomUgNbhGG3n8vlAd+b3GcHcVFcX0 TRZCR/V9cVRY4Ot5pXACiEu8VFmc8lWPxEIFh9Mkl7j2LjZ8AvH1OQGd0OzFqnS/ FhpoB8zohX8oKoAU64VncprA5OSHfCT1xTgFJNi+wLsk+DFXZfTiOPzBQEl8Ljhp P8u1e1MRKyvtOQIAccAXGM01n3zUEtrsVpGVogJJNSrRMOqEPIYkmYeHFvIELYmO +0+98ySYMVANCQHQlgrrA4YYGyT8EkBB5tEfA0Oo/yh/0hJfmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE96UEvxXGdR9+3pYlXN0eZiNpEcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvODhhY2RmYmMtYzNhNS0z NDU4LTkxMjUtZGZkYjViOGQ0MzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQmfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuzIAxuzx3+cCP2N+d2zFLJVXpMTGq9DQci3gvQUFdaLxKXx9UmxmZ/ TTZ92SliwIpCFAkKESa+S5/YiHkeF155n8VpuCpLzhM3fhuRfJxW4iseXwMq7r8G pTJsDeuXinWZ/VNjDC4d9gwbbqM2d1Z7RzH+fVyesQhfz1ZylB4lQz9nkptpHN5D t3JEUctoaOxJWrR3lnXtjxTLDo2PJlkhvuowQLenTi1eQXs1Rh22u/6axcdnRmzA f3M3fgOO0131EmqRPzVGwa8qb0LZznKN5MkhoXyu17iCmArFB8lFqaPFmWxTEphr R8kZeCjeWCzEELsQsFSuguzl8/nX5Z8= -----END CERTIFICATE-----Generated at Mon Mar 24 19:10:08 2025 by rpki-client