$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e20323132353038.roa File: 36362e3131382e3234352e302f32342d3234203d3e20323132353038.roa (raw, json) Hash identifier: Jx4nGqr92uWqq2m5bNoo+ASLyAb96UsSCwvvnr8gXm0= Subject key identifier: A3:AB:67:D2:4D:95:99:81:EC:8F:29:59:6D:84:09:E3:DB:E5:AF:F9 Certificate issuer: /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2 Certificate serial: 1C41A5C881F6CF225DA0AFAEFA6A9E55B9EAF48E Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e20323132353038.roa Signing time: Fri 10 Jan 2025 23:25:32 +0000 ROA not before: Fri 10 Jan 2025 23:20:32 +0000 ROA not after: Fri 09 Jan 2026 23:25:32 +0000 asID: 212508 IP address blocks: 66.118.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:41:a5:c8:81:f6:cf:22:5d:a0:af:ae:fa:6a:9e:55:b9:ea:f4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2 Validity Not Before: Jan 10 23:20:32 2025 GMT Not After : Jan 9 23:25:32 2026 GMT Subject: CN=A3AB67D24D959981EC8F29596D8409E3DBE5AFF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:45:c7:24:0d:91:59:58:a5:b8:3f:83:f9:ef: 25:df:b8:dd:36:2f:be:aa:f7:ca:97:ad:dd:63:ba: 23:75:98:67:51:ee:9b:8a:cf:09:51:d0:b2:88:66: 32:0a:01:ed:a4:ed:14:de:18:e5:28:83:0e:5a:8f: bf:da:2a:17:89:47:d8:6c:ed:2e:46:c2:bf:89:51: e2:2e:ec:23:39:e8:82:66:8a:c7:b9:4d:33:da:7a: 68:e8:4a:6a:ca:48:2e:e3:10:8d:1c:61:18:e9:31: ac:cd:37:8f:20:12:97:57:eb:77:21:c0:b2:68:5d: a5:ab:dd:cf:58:4c:f8:55:f8:f3:ab:4c:b1:d4:48: f6:3c:a6:40:d8:c1:f8:5f:09:4b:fc:fa:ef:f9:18: 3c:72:0a:63:5d:c6:c1:02:18:31:57:4c:64:9e:f2: 08:70:b0:ef:d7:01:0b:f2:6d:95:8e:70:6c:a9:61: 30:1d:f8:b8:ca:98:c5:2b:6d:5e:70:94:f0:ca:b9: 29:ec:9d:35:0a:b8:64:c3:d8:41:40:22:60:e0:40: 38:36:9d:30:10:de:d7:2d:55:5a:a0:66:36:a0:79: 78:74:ae:b8:38:80:be:9a:01:c0:64:ff:5c:b5:49: 38:f7:45:8d:d9:68:e0:80:f5:7e:11:5f:b0:08:89: 3d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AB:67:D2:4D:95:99:81:EC:8F:29:59:6D:84:09:E3:DB:E5:AF:F9 X509v3 Authority Key Identifier: keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e20323132353038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.118.245.0/24 Signature Algorithm: sha256WithRSAEncryption 36:57:1c:22:d6:7c:09:ba:e0:63:76:38:4e:21:d6:75:27:1a: 61:09:97:4e:e7:8d:a4:23:68:0b:74:da:ca:8f:62:fb:b6:d4: 4b:9f:24:50:31:92:13:cb:18:fd:f0:a8:a3:16:57:f9:ea:a6: 48:c5:04:ac:19:e0:a6:fa:23:77:28:5d:48:87:d1:00:34:34: b2:15:d6:a2:f3:cb:cb:94:5b:09:9a:95:91:d7:de:35:1b:5c: 35:23:a7:3f:22:8c:81:2d:16:ac:71:fd:95:67:b3:6b:95:76: 2f:c8:0e:0c:ba:af:14:7a:0f:ee:93:69:92:4b:9b:cf:54:12: a8:18:8f:9c:4e:75:41:97:b8:e0:c2:57:e6:bd:02:ef:92:75: 88:5d:b1:0e:64:cf:de:0b:0f:d3:e0:f1:2a:87:c7:a0:54:58: 7d:3c:86:ef:2f:42:10:40:fb:28:0a:9e:67:a7:f6:af:8a:f3: a6:58:97:bc:d1:98:62:6b:92:e7:93:c5:08:dd:d5:a0:e4:0a: 59:f9:bc:cb:f8:30:9f:9e:4d:da:a5:ab:73:f0:d1:f5:6d:f6: 8e:d0:ee:a5:4d:53:e6:ba:83:32:6f:7b:a4:8d:e2:7b:c4:22: 5a:2f:43:58:f0:40:1d:1f:c3:8d:3d:f5:f7:7a:3a:f0:95:32: ff:68:c6:73 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUHEGlyIH2zyJdoK+u+mqeVbnq9I4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy ODczNzg3MDM5YmI2YjI3YjIwHhcNMjUwMTEwMjMyMDMyWhcNMjYwMTA5MjMyNTMy WjAzMTEwLwYDVQQDEyhBM0FCNjdEMjREOTU5OTgxRUM4RjI5NTk2RDg0MDlFM0RC RTVBRkY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUXHJA2RWVil uD+D+e8l37jdNi++qvfKl63dY7ojdZhnUe6bis8JUdCyiGYyCgHtpO0U3hjlKIMO Wo+/2ioXiUfYbO0uRsK/iVHiLuwjOeiCZorHuU0z2npo6Epqykgu4xCNHGEY6TGs zTePIBKXV+t3IcCyaF2lq93PWEz4Vfjzq0yx1Ej2PKZA2MH4XwlL/Prv+Rg8cgpj XcbBAhgxV0xknvIIcLDv1wEL8m2VjnBsqWEwHfi4ypjFK21ecJTwyrkp7J01Crhk w9hBQCJg4EA4Np0wEN7XLVVaoGY2oHl4dK64OIC+mgHAZP9ctUk490WN2WjggPV+ EV+wCIk9QQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFKOrZ9JNlZmB7I8pWW2ECePb 5a/5MB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1 ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MTcz M2M1YzVmNmI1Yi8wLzM2MzYyZTMxMzEzODJlMzIzNDM1MmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzIzMTMyMzUzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnb1MA0GCSqGSIb3DQEB CwUAA4IBAQA2Vxwi1nwJuuBjdjhOIdZ1JxphCZdO542kI2gLdNrKj2L7ttRLnyRQ MZITyxj98KijFlf56qZIxQSsGeCm+iN3KF1Ih9EANDSyFdai88vLlFsJmpWR1941 G1w1I6c/IoyBLRascf2VZ7NrlXYvyA4Muq8Ueg/uk2mSS5vPVBKoGI+cTnVBl7jg wlfmvQLvknWIXbEOZM/eCw/T4PEqh8egVFh9PIbvL0IQQPsoCp5np/avivOmWJe8 0Zhia5Lnk8UI3dWg5ApZ+bzL+DCfnk3apatz8NH1bfaO0O6lTVPmuoMyb3ukjeJ7 xCJaL0NY8EAdH8ONPfX3ejrwlTL/aMZz -----END CERTIFICATE-----Generated at Mon Apr 7 01:15:18 2025 by rpki-client