$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/cb8fec23-e2ec-3003-86a2-c723d77d395e.roa File: cb8fec23-e2ec-3003-86a2-c723d77d395e.roa (raw, json) Hash identifier: lJHBbEjoDnxZ5RNFfZmTg9jX0EOuP2WnfgKx9wQG8jc= Subject key identifier: FD:E2:A3:8B:2A:6E:5A:C4:A6:90:1F:D0:6D:DC:39:42:24:7E:09:B3 Certificate issuer: /CN=57f9cfef-e787-4c93-b24d-29ad31dc2128 Certificate serial: 010D0C9F432858495EEEECC6C73F7F4ECD9A7080 Authority key identifier: D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/cb8fec23-e2ec-3003-86a2-c723d77d395e.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 398291 IP address blocks: 66.179.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:ec:c6:c7:3f:7f:4e:cd:9a:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57f9cfef-e787-4c93-b24d-29ad31dc2128 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=2c08c4f8-9d95-4f25-ae5d-43f9e2794b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:e2:9e:5f:1e:18:22:31:87:bc:5f:38:0a: 8b:b6:39:e9:5d:ee:6a:cc:eb:64:31:be:b4:d4:69: 2a:ca:00:85:1e:fa:c9:19:dc:68:fc:ba:5d:ce:c4: dd:61:42:9a:fb:08:0e:b8:6b:1f:6b:1b:00:fb:50: 75:8b:c6:c2:00:ec:8d:52:70:e7:bd:3f:2e:ae:78: 01:5a:b7:27:fd:aa:fe:5f:99:8f:31:66:e5:88:f2: 86:2b:a8:44:3e:50:c8:fc:8e:0f:58:69:c2:d4:3c: 00:15:85:08:78:5f:0c:82:24:ac:16:53:6a:10:6f: 59:15:55:ac:b6:2b:59:e6:7c:7d:ef:c2:e1:d7:ba: 6b:42:4f:00:cb:df:c0:a6:b3:9f:26:bb:2b:90:88: 93:87:b7:db:ab:9b:6a:5b:17:dd:a5:43:02:9a:7f: 98:a1:63:17:d7:77:42:ab:28:4b:95:a4:6f:d5:65: 56:3b:6d:49:78:36:f3:83:69:86:4d:d0:93:69:ff: 7d:b0:b5:90:ac:f5:23:ad:2d:c6:38:de:65:e5:a9: 53:f8:ad:58:11:16:a0:5a:80:15:ff:38:d7:8b:e4: 9f:78:d8:38:d0:36:d3:84:d8:5c:77:44:df:8c:85: dc:88:a9:01:eb:b6:dd:1f:a2:6f:0e:67:08:bf:40: 22:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E2:A3:8B:2A:6E:5A:C4:A6:90:1F:D0:6D:DC:39:42:24:7E:09:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/cb8fec23-e2ec-3003-86a2-c723d77d395e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl X509v3 Authority Key Identifier: keyid:D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer sbgp-ipAddrBlock: critical IPv4: 66.179.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ee:49:4d:48:18:dc:64:52:fd:44:82:88:14:86:9c:2b:c2: a3:58:0a:0a:0f:a5:9c:36:6a:7f:58:84:1b:42:8f:b8:6a:87: b4:e0:90:03:9a:1d:32:a4:a1:a9:2e:c9:31:65:49:73:62:43: e5:ef:9b:81:45:ad:ca:77:ad:ba:ff:38:f5:c4:e7:4f:eb:15: 87:da:3c:fb:fc:c5:3d:1b:fa:c7:10:c7:56:af:bb:82:bd:6b: a6:29:9b:21:3e:f9:e4:c5:a3:63:c6:fb:ad:02:c3:12:75:3f: a7:18:8c:2f:c6:17:43:d0:12:e1:d8:77:dc:8b:af:69:0c:f4: e1:f6:08:29:bb:ef:91:97:69:93:da:ee:65:6d:32:e6:b1:c5: 67:4c:3c:44:74:5e:5d:72:15:8b:88:d0:79:7c:1d:de:7b:12: 4b:5e:2a:65:50:86:0a:da:4d:63:21:66:fc:af:2f:c0:1c:0c: 7b:6c:39:67:50:68:e6:ad:d1:02:98:ea:0d:6f:f8:52:f9:45: d2:a2:98:6f:a1:42:72:c1:52:ae:89:9c:b6:1a:47:85:ad:77: a8:00:d5:0e:da:02:39:a7:35:58:d5:1e:48:8b:db:51:86:e7: 99:4a:c6:9c:5c:1f:7c:08:f5:b7:8a:21:55:ff:42:54:68:bf: 41:9f:c0:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7uzGxz9/Ts2acIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdmOWNmZWYtZTc4Ny00YzkzLWIyNGQtMjlhZDMxZGMy MTI4MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MmMwOGM0ZjgtOWQ5NS00ZjI1LWFlNWQtNDNmOWUyNzk0YjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkHinl8eGCIxh7xfOAqLtjnpXe5qzOtkMb60 1GkqygCFHvrJGdxo/LpdzsTdYUKa+wgOuGsfaxsA+1B1i8bCAOyNUnDnvT8urngB Wrcn/ar+X5mPMWbliPKGK6hEPlDI/I4PWGnC1DwAFYUIeF8MgiSsFlNqEG9ZFVWs titZ5nx978Lh17prQk8Ay9/AprOfJrsrkIiTh7fbq5tqWxfdpUMCmn+YoWMX13dC qyhLlaRv1WVWO21JeDbzg2mGTdCTaf99sLWQrPUjrS3GON5l5alT+K1YERagWoAV /zjXi+SfeNg40DbThNhcd0TfjIXciKkB67bdH6JvDmcIv0AicwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3io4sqblrEppAf0G3cOUIkfgmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81N2Y5 Y2ZlZi1lNzg3LTRjOTMtYjI0ZC0yOWFkMzFkYzIxMjgvY2I4ZmVjMjMtZTJlYy0z MDAzLTg2YTItYzcyM2Q3N2QzOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTdmOWNmZWYtZTc4Ny00YzkzLWIy NGQtMjlhZDMxZGMyMTI4LzU3ZjljZmVmLWU3ODctNGM5My1iMjRkLTI5YWQzMWRj MjEyOC5jcmwwHwYDVR0jBBgwFoAU1Jbrjae1o6PE5bukLOguVy3dhaEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81N2Y5Y2ZlZi1lNzg3LTRjOTMtYjI0ZC0yOWFk MzFkYzIxMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfuSU1IGNxkUv1EgogUhpwrwqNYCgoPpZw2an9YhBtCj7hqh7TgkAOa HTKkoakuyTFlSXNiQ+Xvm4FFrcp3rbr/OPXE50/rFYfaPPv8xT0b+scQx1avu4K9 a6YpmyE++eTFo2PG+60CwxJ1P6cYjC/GF0PQEuHYd9yLr2kM9OH2CCm775GXaZPa 7mVtMuaxxWdMPER0Xl1yFYuI0Hl8Hd57EkteKmVQhgraTWMhZvyvL8AcDHtsOWdQ aOat0QKY6g1v+FL5RdKimG+hQnLBUq6JnLYaR4Wtd6gA1Q7aAjmnNVjVHkiL21GG 55lKxpxcH3wI9beKIVX/QlRov0GfwGs= -----END CERTIFICATE-----Generated at Sat Apr 5 23:23:29 2025 by rpki-client