$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/932614f9-93ff-322c-895f-a209b9bdba38.roa File: 932614f9-93ff-322c-895f-a209b9bdba38.roa (raw, json) Hash identifier: GLQDjhGdLP4ATSxIrn9iRxkSCMkaN3iKsKkWCpkc9pk= Subject key identifier: C1:B5:FA:F6:3B:A0:4B:6A:4D:BD:9B:17:DC:73:2E:B3:80:18:A7:3A Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858490021622454A150654890FA80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/932614f9-93ff-322c-895f-a209b9bdba38.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 20014 IP address blocks: 66.115.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:62:24:54:a1:50:65:48:90:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=246ab6a4-8de1-4a82-bdb6-1c89e46cf07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f3:48:01:b9:fb:f5:dd:8b:45:6c:e5:99:19: 4c:d1:6e:4d:ff:97:0c:1d:70:97:0b:3a:8b:96:3f: 77:5b:85:92:1b:14:2e:a7:d2:b1:e0:91:c0:42:2c: 92:33:e7:35:21:b3:cf:0a:0f:5e:73:5d:71:fd:e0: 5b:aa:e9:f6:04:d8:ac:47:b7:d7:a3:e5:7c:7d:57: 7d:98:60:70:a5:93:0f:74:9b:13:55:1c:11:df:48: c3:67:3e:56:d1:31:b0:a0:38:c6:16:57:ed:c7:6f: 3f:f7:c9:8e:d1:d5:3c:ca:61:83:12:22:aa:07:50: 1c:19:21:07:17:31:e5:8e:83:57:95:c0:44:88:40: ae:04:12:40:d6:a0:6c:69:23:20:97:cd:22:08:44: f4:00:bf:4e:86:eb:72:0d:8f:f0:cb:2e:20:12:53: 12:e2:53:63:b3:ec:bb:1b:61:b7:a3:93:69:53:ea: f7:90:0d:85:0f:01:64:0e:ad:0b:95:0e:52:66:9b: 78:72:65:81:64:3e:a3:2e:9a:cf:c2:f0:e5:cc:31: 70:35:c5:64:c5:76:07:35:3f:a7:b6:25:e9:9b:cc: 7e:06:f3:82:63:ec:d1:cb:0f:67:3d:e0:c5:33:22: 94:b4:20:05:de:27:a2:d2:32:73:1c:20:b3:a6:c4: 30:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B5:FA:F6:3B:A0:4B:6A:4D:BD:9B:17:DC:73:2E:B3:80:18:A7:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/932614f9-93ff-322c-895f-a209b9bdba38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:38:bc:c1:22:0b:9d:7f:a3:b7:56:25:40:93:d2:58:d3:3e: ea:14:ef:27:9c:fe:4b:6c:60:9a:45:74:bb:20:e2:0a:31:34: c0:02:3f:67:38:b7:6c:8a:d7:ae:e9:09:73:8a:b8:68:04:d0: 32:70:1e:1b:67:83:c9:9f:10:96:c9:84:80:49:59:95:cb:cd: 2f:0c:c6:d4:03:cc:33:ed:00:63:86:2b:81:f7:6e:6e:e2:b0: 2f:4c:f5:86:5d:d7:0f:85:b4:f9:1d:63:88:7b:85:52:e0:23: 2f:a9:f8:12:43:88:df:fc:db:a5:96:1e:8c:70:2e:67:1c:6a: d9:30:15:53:c3:32:25:90:d8:98:e7:ae:12:74:44:e7:a9:ee: 89:c7:26:1a:9b:5b:6b:cb:c7:61:1b:9f:e6:90:b4:20:89:81: 2a:67:8f:14:7d:06:10:d8:46:28:c2:c9:a8:f2:74:54:2c:41: 54:f4:0f:4d:d7:64:37:a7:17:2b:71:65:04:ac:a0:97:28:af: 2c:db:26:e5:df:c3:01:ca:ec:38:c2:2c:ee:9b:b2:24:50:f1: 53:52:86:49:89:30:59:ad:4b:38:8c:2e:65:1f:20:9c:a6:2d: ce:d4:73:ae:8f:54:0a:77:83:38:7e:34:84:45:6c:0b:a0:6a: 56:95:bf:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWIkVKFQZUiQ+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MjQ2YWI2YTQtOGRlMS00YTgyLWJkYjYtMWM4OWU0NmNmMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/NIAbn79d2LRWzlmRlM0W5N/5cMHXCXCzqL lj93W4WSGxQup9Kx4JHAQiySM+c1IbPPCg9ec11x/eBbqun2BNisR7fXo+V8fVd9 mGBwpZMPdJsTVRwR30jDZz5W0TGwoDjGFlftx28/98mO0dU8ymGDEiKqB1AcGSEH FzHljoNXlcBEiECuBBJA1qBsaSMgl80iCET0AL9OhutyDY/wyy4gElMS4lNjs+y7 G2G3o5NpU+r3kA2FDwFkDq0LlQ5SZpt4cmWBZD6jLprPwvDlzDFwNcVkxXYHNT+n tiXpm8x+BvOCY+zRyw9nPeDFMyKUtCAF3iei0jJzHCCzpsQwWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMG1+vY7oEtqTb2bF9xzLrOAGKc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvOTMyNjE0ZjktOTNmZi0z MjJjLTg5NWYtYTIwOWI5YmRiYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMU4vMEiC51/o7dWJUCT0ljTPuoU7yec/ktsYJpFdLsg4goxNMACP2c4 t2yK167pCXOKuGgE0DJwHhtng8mfEJbJhIBJWZXLzS8MxtQDzDPtAGOGK4H3bm7i sC9M9YZd1w+FtPkdY4h7hVLgIy+p+BJDiN/826WWHoxwLmccatkwFVPDMiWQ2Jjn rhJ0ROep7onHJhqbW2vLx2Ebn+aQtCCJgSpnjxR9BhDYRijCyajydFQsQVT0D03X ZDenFytxZQSsoJcoryzbJuXfwwHK7DjCLO6bsiRQ8VNShkmJMFmtSziMLmUfIJym Lc7Uc66PVAp3gzh+NIRFbAugalaVv5M= -----END CERTIFICATE-----Generated at Mon May 5 06:22:33 2025 by rpki-client