$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa File: 8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa (raw, json) Hash identifier: eFt0JPMc9zszhOjHAWn2j2+ojV61mO1UM0bR6e5fgy4= Subject key identifier: 75:E1:91:76:61:58:FB:C3:2B:96:19:45:2F:22:CD:4C:63:F9:83:1B Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285848C150CEB3EF63619F600AF5A0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 931 IP address blocks: 66.118.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:ce:b3:ef:63:61:9f:60:0a:f5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=8d410ef3-4c91-40ae-bad9-98bcd2f6d93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7f:aa:36:90:e9:99:21:43:8b:d5:45:73:03: 9f:08:18:79:7d:4a:f5:16:c8:83:f1:e0:5d:df:c7: eb:c9:12:2d:0b:86:45:db:01:5e:d1:b4:09:9d:7f: 57:4a:6f:c0:ca:e0:07:11:a5:e0:16:5f:c3:03:60: f7:ba:ea:4c:a4:8c:66:9a:5f:fb:56:9e:f4:56:58: dc:95:18:96:b6:cd:fd:94:22:82:33:da:c2:dd:60: 01:e1:ef:e9:ee:75:e2:a0:67:87:52:9c:13:79:49: 05:17:97:b0:eb:0b:92:55:5c:fd:3c:5e:72:bd:e3: da:d1:f5:e9:57:ee:ce:37:18:4a:6e:11:54:ad:90: 94:5b:72:2c:55:c9:a5:f0:3d:da:69:d2:ff:ad:4c: ba:fd:e6:b5:05:3c:95:2c:b0:85:88:a7:0a:73:14: 06:5a:66:18:59:a3:8c:8c:fd:48:07:9e:ef:b5:c9: a1:37:c9:8d:5c:11:2a:6a:a0:33:b8:1c:10:9b:2f: 16:e3:e5:b4:54:e5:1c:c9:d3:ab:38:97:a8:25:ef: 6c:f5:42:fe:b7:8c:30:8c:b3:b4:53:e2:3d:40:aa: 7a:b0:2f:c0:bd:09:1e:32:6e:b9:39:65:b2:90:3f: 38:4d:27:96:1a:95:4f:8d:23:58:9e:63:43:74:46: 49:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E1:91:76:61:58:FB:C3:2B:96:19:45:2F:22:CD:4C:63:F9:83:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:32:07:fc:99:01:1a:62:79:a3:b3:23:d7:f5:2c:a1:6d:74: f2:1a:a2:78:00:be:31:b6:43:5a:50:f6:3d:49:38:dd:24:d1: fd:e0:e2:6f:95:c7:41:56:63:de:f7:e5:af:29:26:00:e0:01: 46:8c:44:0d:d2:52:2c:71:cc:5d:2f:e8:0d:db:4b:f9:4a:22: 0f:13:5e:21:34:f3:1a:15:9f:80:c7:63:04:2d:24:24:b7:68: 57:db:bc:48:d5:0b:85:e9:76:b9:3c:1b:c0:25:ca:8b:5f:c1: f2:23:36:7e:25:f8:9c:b5:dd:6c:48:df:64:86:5e:3e:47:a9: 60:7b:c9:e7:9c:08:b0:22:2b:8b:95:93:f6:cb:cf:2e:f3:27: 28:b1:66:c9:81:0a:9b:a6:75:c4:16:26:bc:cd:1f:56:3b:2c: c4:cf:a1:4f:15:38:31:78:03:96:ef:02:78:a4:e8:8b:5c:7b: 35:be:66:ec:f5:a7:dc:30:8b:d5:ec:0e:f3:8e:d9:e5:fd:10: 68:72:a0:ee:46:c3:e7:58:31:86:8b:02:a8:b0:bd:bb:63:72: b6:b7:f1:80:3e:0b:1a:c8:5c:fd:4b:56:66:20:01:a3:0b:57: 34:bb:68:dd:58:a4:ce:60:06:00:e3:e1:af:90:26:72:a1:9f: 14:ad:e0:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUM6z72Nhn2AK9aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk OGQ0MTBlZjMtNGM5MS00MGFlLWJhZDktOThiY2QyZjZkOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX+qNpDpmSFDi9VFcwOfCBh5fUr1FsiD8eBd 38fryRItC4ZF2wFe0bQJnX9XSm/AyuAHEaXgFl/DA2D3uupMpIxmml/7Vp70Vljc lRiWts39lCKCM9rC3WAB4e/p7nXioGeHUpwTeUkFF5ew6wuSVVz9PF5yvePa0fXp V+7ONxhKbhFUrZCUW3IsVcml8D3aadL/rUy6/ea1BTyVLLCFiKcKcxQGWmYYWaOM jP1IB57vtcmhN8mNXBEqaqAzuBwQmy8W4+W0VOUcydOrOJeoJe9s9UL+t4wwjLO0 U+I9QKp6sC/AvQkeMm65OWWykD84TSeWGpVPjSNYnmNDdEZJ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXhkXZhWPvDK5YZRS8izUxj+YMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvODQyMGY1NzAtMDRiYy0z ODdkLTliYjYtZDVmN2E0M2U3NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8yB/yZARpieaOzI9f1LKFtdPIaongAvjG2Q1pQ9j1JON0k0f3g4m+V x0FWY9735a8pJgDgAUaMRA3SUixxzF0v6A3bS/lKIg8TXiE08xoVn4DHYwQtJCS3 aFfbvEjVC4Xpdrk8G8AlyotfwfIjNn4l+Jy13WxI32SGXj5HqWB7yeecCLAiK4uV k/bLzy7zJyixZsmBCpumdcQWJrzNH1Y7LMTPoU8VODF4A5bvAnik6ItcezW+Zuz1 p9wwi9XsDvOO2eX9EGhyoO5Gw+dYMYaLAqiwvbtjcra38YA+CxrIXP1LVmYgAaML VzS7aN1YpM5gBgDj4a+QJnKhnxSt4DU= -----END CERTIFICATE-----Generated at Mon Apr 7 10:50:57 2025 by rpki-client