$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/8d3519f2-b150-3ed4-9d1a-83843936d3fd.roa File: 8d3519f2-b150-3ed4-9d1a-83843936d3fd.roa (raw, json) Hash identifier: 86DM56f5I3utfUyHHUx/sYf9/QI1tcrHtv4WzjmsWIU= Subject key identifier: 9B:96:61:81:3E:58:B5:8E:66:70:1A:E8:F2:64:1A:04:1F:44:53:AB Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F43285848159FEAA5825A8BD85688F200 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/8d3519f2-b150-3ed4-9d1a-83843936d3fd.roa Signing time: Tue 03 Dec 2024 14:00:52 +0000 ROA not before: Tue 03 Dec 2024 14:00:52 +0000 ROA not after: Mon 03 Mar 2025 14:00:52 +0000 asID: 12129 IP address blocks: 66.51.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:15:9f:ea:a5:82:5a:8b:d8:56:88:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Dec 3 14:00:52 2024 GMT Not After : Mar 3 14:00:52 2025 GMT Subject: CN=fa539ff9-3088-4b4f-aab9-f1708d780d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0b:38:a1:18:9c:47:19:28:43:fb:a3:0a:01: 75:27:19:d0:c4:65:eb:4d:69:19:21:9b:27:9d:bf: 4e:75:3f:3a:5d:08:b6:42:56:e4:03:03:21:a9:5e: a2:8f:32:90:89:58:9f:9a:d0:6e:ad:c9:71:a1:ae: 8e:4f:75:73:cf:2e:2b:75:1e:52:6b:6d:9d:66:1a: e4:74:b6:e5:b3:ac:08:43:67:28:ae:bf:b6:6a:9f: 1a:81:5d:bf:8c:6b:10:60:14:ae:c9:45:15:84:1c: fa:46:b7:60:2e:fd:f1:04:85:2c:9f:ed:e7:7f:53: a2:87:b9:c5:4b:45:87:fe:27:07:89:0f:8d:03:fe: 7a:27:d1:aa:ce:ec:bc:2a:3d:53:dc:6c:f3:cd:b5: 77:40:e3:6c:75:9b:55:de:97:b3:1d:8d:86:5c:1f: de:ad:1e:fb:ea:93:d9:04:c5:86:eb:1c:1e:76:2f: c5:a5:30:5c:5f:92:4b:19:9c:b7:8f:d6:ec:83:ad: c6:44:cf:a3:08:c3:ab:a0:2c:f3:c4:09:b9:13:c6: 6c:d7:8c:8b:b6:13:5d:4c:53:37:63:fe:00:a6:9f: fa:4d:78:57:7c:a3:68:5a:93:d6:99:9c:fa:1d:e7: a8:6e:d6:f8:3f:54:5d:93:ef:6e:f6:19:23:a4:47: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:96:61:81:3E:58:B5:8E:66:70:1A:E8:F2:64:1A:04:1F:44:53:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/8d3519f2-b150-3ed4-9d1a-83843936d3fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 66.51.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:91:f6:38:21:f1:f2:34:c4:bf:9d:2e:ba:9c:14:3d:f1:ab: 94:f5:2d:54:ac:80:39:86:6e:39:b4:ad:77:95:c2:76:7c:de: d3:92:8e:8f:d4:4e:57:5d:1a:63:73:ac:49:a8:64:81:0b:3e: bd:4f:b8:02:4e:ba:74:d6:d6:44:f9:b4:d2:1a:0f:25:73:b7: f5:b1:e9:1b:80:a9:79:ac:f2:a9:28:f3:4f:0a:63:dd:09:8a: da:e4:1e:09:be:b8:ce:ac:56:4c:9a:4e:47:1f:2f:ca:3e:76: 61:4c:5e:44:de:ea:c2:26:35:16:fe:2d:c0:51:92:8a:8f:e9: cb:7e:61:2b:ec:53:3c:58:53:69:c1:61:ec:c3:ea:2a:74:8f: 6c:f1:17:7f:e0:8d:ee:56:e6:24:00:a3:54:a4:ee:15:25:6e: 03:0c:1d:98:ee:f4:e5:30:0c:08:17:01:dd:a4:7e:12:80:1a: a3:23:68:2b:12:0c:6f:13:c7:51:db:04:2e:aa:9f:a4:56:62: 83:d8:7c:50:cc:be:4a:29:7b:f2:39:ed:1b:b1:98:5e:17:ce: 48:9f:39:cf:26:22:df:5d:d5:c1:24:b7:4c:f3:fe:23:07:4e: c8:e2:f1:31:e4:09:3d:e7:ec:ca:76:d4:a7:12:54:ee:bf:06: c5:57:b7:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn+qlglqL2FaI8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk ZmE1MzlmZjktMzA4OC00YjRmLWFhYjktZjE3MDhkNzgwZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAs4oRicRxkoQ/ujCgF1JxnQxGXrTWkZIZsn nb9OdT86XQi2QlbkAwMhqV6ijzKQiVifmtBurclxoa6OT3Vzzy4rdR5Sa22dZhrk dLbls6wIQ2corr+2ap8agV2/jGsQYBSuyUUVhBz6RrdgLv3xBIUsn+3nf1Oih7nF S0WH/icHiQ+NA/56J9Gqzuy8Kj1T3GzzzbV3QONsdZtV3pezHY2GXB/erR776pPZ BMWG6xwedi/FpTBcX5JLGZy3j9bsg63GRM+jCMOroCzzxAm5E8Zs14yLthNdTFM3 Y/4App/6TXhXfKNoWpPWmZz6Heeobtb4P1Rdk+9u9hkjpEfhSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuWYYE+WLWOZnAa6PJkGgQfRFOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvOGQzNTE5ZjItYjE1MC0z ZWQ0LTlkMWEtODM4NDM5MzZkM2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQjOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqR9jgh8fI0xL+dLrqcFD3xq5T1LVSsgDmGbjm0rXeVwnZ83tOSjo/U TlddGmNzrEmoZIELPr1PuAJOunTW1kT5tNIaDyVzt/Wx6RuAqXms8qko808KY90J itrkHgm+uM6sVkyaTkcfL8o+dmFMXkTe6sImNRb+LcBRkoqP6ct+YSvsUzxYU2nB YezD6ip0j2zxF3/gje5W5iQAo1Sk7hUlbgMMHZju9OUwDAgXAd2kfhKAGqMjaCsS DG8Tx1HbBC6qn6RWYoPYfFDMvkope/I57RuxmF4XzkifOc8mIt9d1cEkt0zz/iMH Tsji8THkCT3n7Mp21KcSVO6/BsVXt1Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:02 2025 by rpki-client