$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/8d3519f2-b150-3ed4-9d1a-83843936d3fd.roa File: 8d3519f2-b150-3ed4-9d1a-83843936d3fd.roa (raw, json) Hash identifier: ivkyB3GXiS+cUFXhTa6MHOfuOp+eXyG8D1LDVjYwOyM= Subject key identifier: 39:B1:B1:E7:2D:E5:0E:3E:AB:CA:94:4B:DB:2B:02:86:96:CB:F4:FE Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F43285848F65BDCB8F48283C1B93EC680 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/8d3519f2-b150-3ed4-9d1a-83843936d3fd.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 12129 IP address blocks: 66.51.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:dc:b8:f4:82:83:c1:b9:3e:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=2e669030-409b-4ff7-b354-0e77397646f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:7f:7f:4e:c0:93:4b:66:4d:b3:72:ed:19: 5a:48:00:40:02:4b:08:f0:15:cf:a4:3d:53:5a:15: 32:e5:77:e5:8e:3f:06:da:ac:c8:a0:e0:cc:13:b7: ea:90:2f:35:03:86:66:d1:7c:b5:f5:cd:8d:6b:3c: d3:57:cf:23:cc:89:e5:4b:7c:ea:56:4c:86:6e:15: bd:f8:5d:10:21:b4:3e:71:dd:1b:cf:f5:c8:4f:77: 41:16:b5:ef:7a:9b:4f:da:15:20:ab:69:53:86:b0: 07:a4:1f:07:6f:d4:de:b8:6f:ad:2d:7e:5e:5a:0d: 43:43:11:9a:5f:49:97:4d:a3:6a:f9:a6:2f:27:5f: 88:30:b4:b9:ab:6b:40:46:a7:de:5a:ff:10:df:89: ec:f8:a4:d7:aa:1f:04:a8:29:2e:31:cb:2f:77:c1: 8c:f0:f1:14:1a:86:b9:99:e3:6c:33:46:fa:7a:fb: 9d:86:6f:d3:af:07:ad:7e:4a:60:a9:7a:0c:1b:c0: 6b:9c:e0:e6:17:cb:39:89:8f:ca:ee:55:89:9a:de: 20:23:97:4c:fe:96:a1:63:83:38:18:b3:1d:a3:b5: d2:db:0d:4d:ad:65:01:5e:4b:7a:3e:29:2d:a0:98: 8e:0f:8c:87:94:50:24:aa:62:89:cd:6d:3e:34:0f: bc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B1:B1:E7:2D:E5:0E:3E:AB:CA:94:4B:DB:2B:02:86:96:CB:F4:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/8d3519f2-b150-3ed4-9d1a-83843936d3fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 66.51.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e3:f5:98:a3:9e:f5:5e:74:06:c8:31:c9:87:93:80:03:94: 8d:29:60:d1:ad:fb:65:5b:a6:f5:2c:39:c1:5d:f2:a9:45:b1: 17:ec:6a:48:09:b5:fc:b6:ca:b9:2d:2c:f2:19:1f:cf:dc:3c: d9:3c:ee:75:2b:09:cb:e5:01:33:57:44:ca:19:28:22:89:cd: 31:9a:8a:99:65:a8:28:19:7c:fe:c9:65:12:d9:21:3d:45:98: cd:ef:37:53:64:d6:d5:64:f6:a2:56:a0:3d:05:29:ff:2c:be: 48:db:79:1e:93:33:10:29:d1:f3:72:7e:33:fc:31:71:87:c9: 1c:a7:a6:3c:a1:98:7f:88:be:6f:76:25:57:45:9c:7f:b9:a3: 61:76:6d:96:5c:d2:ea:4e:8a:b5:bb:1f:4a:0a:76:43:53:ca: c7:52:d8:1d:b3:42:e1:32:a5:dd:54:93:65:d0:8a:81:5c:74: c6:d0:06:96:86:16:b5:f1:2d:5f:c2:b4:88:81:74:7b:f6:21: 0d:4a:1c:47:ae:a3:50:86:a0:c7:03:e6:3d:47:f0:31:83:3a: 1a:bc:2b:8d:43:b4:e0:c6:f5:ae:66:01:b7:e7:0d:64:a6:a8: 0d:47:89:97:8b:e7:85:17:24:cb:0a:bd:e0:a1:d6:10:f1:34: 73:dd:39:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9y49IKDwbk+xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MmU2NjkwMzAtNDA5Yi00ZmY3LWIzNTQtMGU3NzM5NzY0NmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLB/f07Ak0tmTbNy7RlaSABAAksI8BXPpD1T WhUy5Xfljj8G2qzIoODME7fqkC81A4Zm0Xy19c2NazzTV88jzInlS3zqVkyGbhW9 +F0QIbQ+cd0bz/XIT3dBFrXveptP2hUgq2lThrAHpB8Hb9TeuG+tLX5eWg1DQxGa X0mXTaNq+aYvJ1+IMLS5q2tARqfeWv8Q34ns+KTXqh8EqCkuMcsvd8GM8PEUGoa5 meNsM0b6evudhm/TrwetfkpgqXoMG8BrnODmF8s5iY/K7lWJmt4gI5dM/pahY4M4 GLMdo7XS2w1NrWUBXkt6PiktoJiOD4yHlFAkqmKJzW0+NA+8zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmxsect5Q4+q8qUS9srAoaWy/T+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvOGQzNTE5ZjItYjE1MC0z ZWQ0LTlkMWEtODM4NDM5MzZkM2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQjOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHj9ZijnvVedAbIMcmHk4ADlI0pYNGt+2VbpvUsOcFd8qlFsRfsakgJ tfy2yrktLPIZH8/cPNk87nUrCcvlATNXRMoZKCKJzTGaipllqCgZfP7JZRLZIT1F mM3vN1Nk1tVk9qJWoD0FKf8svkjbeR6TMxAp0fNyfjP8MXGHyRynpjyhmH+Ivm92 JVdFnH+5o2F2bZZc0upOirW7H0oKdkNTysdS2B2zQuEypd1Uk2XQioFcdMbQBpaG FrXxLV/CtIiBdHv2IQ1KHEeuo1CGoMcD5j1H8DGDOhq8K41DtODG9a5mAbfnDWSm qA1HiZeL54UXJMsKveCh1hDxNHPdOUI= -----END CERTIFICATE-----Generated at Fri Mar 14 13:18:46 2025 by rpki-client