$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/a9a5a9f9-8a59-333d-91e4-284e3e2db0a8.roa File: a9a5a9f9-8a59-333d-91e4-284e3e2db0a8.roa (raw, json) Hash identifier: LF23yKuX/dZABEP6hyiuDSzQUI+hdoixQvfsm5ApCkA= Subject key identifier: 79:A0:D3:5C:BB:B4:D0:D3:1C:A5:B9:0A:66:77:07:8B:2F:7F:6A:D2 Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Certificate serial: 010D0C9F43285848159FDE738A68953A5A9D0280 Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/a9a5a9f9-8a59-333d-91e4-284e3e2db0a8.roa Signing time: Tue 03 Dec 2024 14:00:52 +0000 ROA not before: Tue 03 Dec 2024 14:00:52 +0000 ROA not after: Mon 03 Mar 2025 14:00:52 +0000 asID: 36678 IP address blocks: 66.102.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:15:9f:de:73:8a:68:95:3a:5a:9d:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Validity Not Before: Dec 3 14:00:52 2024 GMT Not After : Mar 3 14:00:52 2025 GMT Subject: CN=ba1c4e16-4cbd-42c7-9140-8a589688eafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:80:4b:90:6c:fe:ae:f5:36:e4:ec:32:9f:d9: 75:1d:50:25:d5:9f:cb:46:ce:3a:ad:f5:19:f3:5f: 33:98:d8:31:46:b7:d4:ad:5f:a2:66:e8:ac:c0:0e: e8:13:c5:ea:9e:01:f0:03:c5:9c:f1:a6:28:0d:a0: f4:12:55:ab:89:4b:f0:5a:d5:f9:42:d9:59:ae:6c: eb:ea:67:d8:31:74:54:c1:7e:54:90:f9:3e:a6:6a: 6a:a6:80:ab:47:85:a8:09:62:43:51:43:3f:19:0c: f4:b8:42:51:23:f5:9d:a9:64:6d:40:bf:57:08:fb: 15:44:02:bb:af:b9:49:6c:c8:22:29:2c:f7:f9:28: bb:45:3f:ef:fb:35:09:22:75:a2:fe:10:78:23:83: 1b:67:c8:3c:9d:40:49:56:a8:34:c3:07:0f:81:cd: 7f:d0:96:2e:31:26:3f:1c:c6:03:ff:30:17:23:65: cd:66:e0:d6:ca:94:2a:62:9a:b2:26:0a:5d:42:ae: 32:c6:f2:b2:ef:a5:4f:5e:66:57:55:d6:34:18:b2: d0:8d:51:cd:bd:00:7f:34:5c:71:5f:fa:2f:11:64: 35:8d:4e:e5:31:7e:46:06:71:90:12:75:98:1b:00: 9e:11:84:07:2a:1d:6a:3e:11:6c:a4:3c:52:51:9e: 4c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A0:D3:5C:BB:B4:D0:D3:1C:A5:B9:0A:66:77:07:8B:2F:7F:6A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/a9a5a9f9-8a59-333d-91e4-284e3e2db0a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl X509v3 Authority Key Identifier: keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer sbgp-ipAddrBlock: critical IPv4: 66.102.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:09:67:71:f3:6c:c9:b6:de:55:e9:5c:0f:10:f5:67:91:b4: 2f:ab:0c:e9:f9:e5:99:fd:b9:c0:ea:49:a3:5d:68:0a:4f:6a: 4f:7e:e3:dd:23:f6:3d:21:c9:75:16:eb:7a:cf:9d:dd:2b:d0: 3a:91:da:e3:37:94:3a:e7:ab:a5:0f:c8:cd:ea:d0:5f:e4:ee: 84:16:2e:b4:b7:4e:db:d6:31:45:94:23:8b:0d:2c:40:82:6e: f7:19:08:2c:96:c8:99:53:b0:d7:b1:71:04:71:82:61:80:c9: 80:36:0a:56:3d:42:a5:64:c5:87:1e:da:03:15:42:72:dc:8c: f9:31:b0:a0:3b:29:b9:df:cb:2d:07:94:98:7e:74:fc:81:cf: 7b:44:03:fc:ad:3e:a6:24:0f:fa:af:21:8f:73:3c:f4:ed:a8: 5f:18:d8:a5:50:2f:d8:55:b6:f6:7d:28:1c:00:aa:7a:72:2a: f2:59:a4:db:49:9c:65:23:82:e6:30:40:6c:ef:ab:42:f2:f6: 6c:55:70:6d:fc:b7:2f:a3:53:88:1c:c4:72:61:bd:bf:95:0a: 1f:30:73:fd:71:47:2c:de:d2:bb:85:b0:e6:89:c0:eb:19:29: a7:a4:0f:ea:24:d6:62:71:dd:27:34:27:ed:55:93:52:bb:99: b3:db:8a:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn95zimiVOlqdAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl Y2FmMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk YmExYzRlMTYtNGNiZC00MmM3LTkxNDAtOGE1ODk2ODhlYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooBLkGz+rvU25Owyn9l1HVAl1Z/LRs46rfUZ 818zmNgxRrfUrV+iZuiswA7oE8XqngHwA8Wc8aYoDaD0ElWriUvwWtX5QtlZrmzr 6mfYMXRUwX5UkPk+pmpqpoCrR4WoCWJDUUM/GQz0uEJRI/WdqWRtQL9XCPsVRAK7 r7lJbMgiKSz3+Si7RT/v+zUJInWi/hB4I4MbZ8g8nUBJVqg0wwcPgc1/0JYuMSY/ HMYD/zAXI2XNZuDWypQqYpqyJgpdQq4yxvKy76VPXmZXVdY0GLLQjVHNvQB/NFxx X/ovEWQ1jU7lMX5GBnGQEnWYGwCeEYQHKh1qPhFspDxSUZ5MaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmg01y7tNDTHKW5CmZ3B4svf2rSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvYTlhNWE5ZjktOGE1OS0z MzNkLTkxZTQtMjg0ZTNlMmRiMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5 NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4 ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1 ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmb9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQJZ3HzbMm23lXpXA8Q9WeRtC+rDOn55Zn9ucDqSaNdaApPak9+490j 9j0hyXUW63rPnd0r0DqR2uM3lDrnq6UPyM3q0F/k7oQWLrS3TtvWMUWUI4sNLECC bvcZCCyWyJlTsNexcQRxgmGAyYA2ClY9QqVkxYce2gMVQnLcjPkxsKA7Kbnfyy0H lJh+dPyBz3tEA/ytPqYkD/qvIY9zPPTtqF8Y2KVQL9hVtvZ9KBwAqnpyKvJZpNtJ nGUjguYwQGzvq0Ly9mxVcG38ty+jU4gcxHJhvb+VCh8wc/1xRyze0ruFsOaJwOsZ KaekD+ok1mJx3Sc0J+1Vk1K7mbPbitM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:41 2025 by rpki-client