$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/ff05b1d6-4b8a-304c-b183-c4f68d99f365.roa File: ff05b1d6-4b8a-304c-b183-c4f68d99f365.roa (raw, json) Hash identifier: +ao6tQ7yU8QW3+tjLVMGku85a4D1Xprz5Mw3xLH1OTU= Subject key identifier: 70:1F:56:B5:86:62:E6:44:BD:98:6E:A9:55:A5:D0:F3:FE:CA:67:E3 Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Certificate serial: 010D0C9F432858480BDA68EED25FC507AA8A8980 Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/ff05b1d6-4b8a-304c-b183-c4f68d99f365.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 36678 IP address blocks: 66.102.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:68:ee:d2:5f:c5:07:aa:8a:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=409862b1-a952-4d87-a24d-7e6e0a97d89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:72:10:98:42:2a:71:3c:5d:74:73:40:fd:8f: a7:28:ba:f1:ec:77:65:5e:e3:8c:09:55:55:32:0e: 14:af:e5:70:f7:17:96:18:f8:db:99:38:b4:49:cf: 41:29:04:95:92:6b:ef:fa:cb:4b:82:73:1f:31:06: a4:a9:7f:98:e4:6d:36:76:35:37:79:de:71:30:97: 85:f8:c2:e9:9d:bb:d1:ed:16:86:52:33:46:d8:88: c2:5b:17:ca:65:a9:b7:21:b9:85:34:0c:6a:86:22: fe:56:45:35:9f:5d:32:28:8e:3f:75:20:c6:aa:a8: 2e:88:a4:9c:cb:f5:1d:14:03:c1:18:e0:1c:1f:b8: be:5e:e5:6c:88:b1:00:85:cd:99:cb:ac:fc:bf:20: cb:5b:fb:82:42:c7:c3:83:a6:33:0c:7d:a6:26:6e: 88:0b:39:8a:2b:2c:4d:fc:4e:7d:30:82:d8:d1:2a: 46:64:9c:6b:7c:64:f5:2f:ea:25:1d:87:9f:31:91: 3e:f3:fe:5a:31:9b:9c:5c:c9:f4:b8:83:af:78:ae: 21:46:20:74:21:b2:b0:82:96:21:e8:06:5a:74:cc: 89:0f:91:61:1a:00:71:93:c0:e3:bb:dc:bb:29:8f: 67:33:84:9b:df:64:31:9a:dc:0b:34:4b:2a:0d:e4: c1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1F:56:B5:86:62:E6:44:BD:98:6E:A9:55:A5:D0:F3:FE:CA:67:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/ff05b1d6-4b8a-304c-b183-c4f68d99f365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl X509v3 Authority Key Identifier: keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer sbgp-ipAddrBlock: critical IPv4: 66.102.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:07:92:5f:c7:40:f3:72:04:cc:a8:91:6c:9f:05:2c:1b:be: a5:f6:94:8a:8b:9c:3b:7c:70:cf:cb:65:51:87:be:53:f8:d6: 7d:a3:84:23:8c:8a:1b:b9:38:7c:b5:76:28:75:12:8c:32:2c: fb:92:9b:c9:59:08:d5:ae:59:9a:aa:11:98:19:21:9f:0d:43: 85:d3:d0:5e:00:cd:ea:e7:10:0e:a6:5c:ee:54:85:5f:33:de: 62:52:d5:76:e0:1b:c3:8f:a8:60:0a:5b:37:dd:b6:89:bb:0d: 2e:3a:e7:c6:0b:ef:a6:c1:f0:ee:6c:d6:a6:62:58:1e:44:f6: 69:f2:3a:f9:2d:67:32:43:f6:a2:91:a0:c1:a4:37:21:ac:29: e4:98:69:3d:a4:ba:05:51:3e:db:19:25:59:f2:49:2e:dd:06: a5:a9:50:f1:f8:93:62:02:4c:5b:25:45:88:ad:be:df:70:19: 10:ca:83:17:95:75:06:40:9e:7c:f0:10:27:13:c5:22:f3:ae: 4e:ee:1b:9f:cf:8f:be:14:80:da:a9:f1:cb:45:57:65:02:c3: 6b:35:13:e1:97:fc:3a:bf:66:89:54:6f:59:1c:1f:05:e5:10: 8d:57:09:39:6a:77:2f:b5:12:f4:9d:6d:58:ee:de:67:75:b5: fa:bb:9b:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2mju0l/FB6qKiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl Y2FmMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk NDA5ODYyYjEtYTk1Mi00ZDg3LWEyNGQtN2U2ZTBhOTdkODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHIQmEIqcTxddHNA/Y+nKLrx7HdlXuOMCVVV Mg4Ur+Vw9xeWGPjbmTi0Sc9BKQSVkmvv+stLgnMfMQakqX+Y5G02djU3ed5xMJeF +MLpnbvR7RaGUjNG2IjCWxfKZam3IbmFNAxqhiL+VkU1n10yKI4/dSDGqqguiKSc y/UdFAPBGOAcH7i+XuVsiLEAhc2Zy6z8vyDLW/uCQsfDg6YzDH2mJm6ICzmKKyxN /E59MILY0SpGZJxrfGT1L+olHYefMZE+8/5aMZucXMn0uIOveK4hRiB0IbKwgpYh 6AZadMyJD5FhGgBxk8Dju9y7KY9nM4Sb32QxmtwLNEsqDeTBBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAfVrWGYuZEvZhuqVWl0PP+ymfjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvZmYwNWIxZDYtNGI4YS0z MDRjLWIxODMtYzRmNjhkOTlmMzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5 NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4 ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1 ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmb7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYHkl/HQPNyBMyokWyfBSwbvqX2lIqLnDt8cM/LZVGHvlP41n2jhCOM ihu5OHy1dih1EowyLPuSm8lZCNWuWZqqEZgZIZ8NQ4XT0F4AzernEA6mXO5UhV8z 3mJS1XbgG8OPqGAKWzfdtom7DS4658YL76bB8O5s1qZiWB5E9mnyOvktZzJD9qKR oMGkNyGsKeSYaT2kugVRPtsZJVnySS7dBqWpUPH4k2ICTFslRYitvt9wGRDKgxeV dQZAnnzwECcTxSLzrk7uG5/Pj74UgNqp8ctFV2UCw2s1E+GX/Dq/ZolUb1kcHwXl EI1XCTlqdy+1EvSdbVju3md1tfq7my0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:37 2025 by rpki-client