$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa File: 9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa (raw, json) Hash identifier: N4+K8fnozKJivbsWLxaYJRTygl8lp/VN2TM+SyZbsT8= Subject key identifier: B7:81:AA:B9:24:26:21:46:2A:3D:66:5F:4F:2B:42:1D:25:83:C9:8D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848E1B79ACAAF73CC877148A840 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa Signing time: Fri 14 Feb 2025 16:33:42 +0000 ROA not before: Fri 14 Feb 2025 16:33:42 +0000 ROA not after: Thu 15 May 2025 15:33:42 +0000 asID: 30036 IP address blocks: 108.166.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:b7:9a:ca:af:73:cc:87:71:48:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 14 16:33:42 2025 GMT Not After : May 15 15:33:42 2025 GMT Subject: CN=68137cde-8195-4e2b-bc1d-dfe1c1d40c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cc:bf:19:8d:9a:b2:b7:65:f3:f9:28:c6:fd: bd:b0:e6:6d:c6:46:9e:9a:37:74:1a:94:09:74:dc: 57:20:94:97:1c:eb:8b:44:ff:15:cf:7b:86:ce:f8: e3:8a:9c:53:6d:2c:3e:40:4a:89:d5:a9:7a:a9:35: 65:18:6b:86:f4:49:d2:74:ca:d1:68:8d:de:0f:f0: 61:10:cd:83:cc:74:35:60:74:e5:d2:4a:4f:62:8d: 2b:14:33:16:14:c6:83:8c:7b:df:53:43:20:46:63: 06:ff:f0:31:e6:f0:48:de:56:28:2d:f9:33:02:c3: e8:89:35:00:0e:a8:73:54:58:e6:07:f8:31:61:6e: 5b:b8:87:2f:66:8c:89:78:53:41:36:87:4f:be:7b: 7f:e3:cd:8e:95:e4:55:43:8a:ee:28:ef:f3:c8:35: 33:0d:f3:31:3f:f3:e8:2b:ae:f4:37:5a:05:bb:7d: 72:8f:55:b7:6e:7e:b4:3a:81:40:6e:ae:fd:af:0e: a0:16:fe:97:85:53:e6:d9:22:c9:ac:f6:d8:b6:9c: c4:75:2a:95:db:13:82:8a:45:4c:7a:78:19:54:c6: 02:29:a0:ae:09:a7:ff:e4:51:40:9d:d0:29:6a:51: 6a:4c:e7:05:5a:b3:ee:af:0e:2c:78:b9:e6:fb:8c: e6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:81:AA:B9:24:26:21:46:2A:3D:66:5F:4F:2B:42:1D:25:83:C9:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d1:d3:c3:93:d6:24:25:8f:6b:90:0b:2e:22:72:81:bc:04: 5c:ed:d8:76:c9:72:bf:5c:2b:df:43:c2:bd:ff:d5:56:23:9b: 0c:c7:a0:dd:41:93:e8:e6:a7:63:45:07:3f:05:e0:ed:f7:dc: 51:08:42:c9:e0:3e:ae:04:9c:2f:09:f5:6f:a4:b9:f5:6c:5d: 8d:58:42:59:67:3f:2f:ab:03:9d:90:f7:da:f6:69:38:55:1f: 2a:e1:70:ec:20:99:48:1e:b0:69:bf:4b:af:4a:b5:98:f5:b5: 80:19:12:64:8f:20:67:31:09:37:04:48:ab:6b:51:16:8e:7d: 51:45:26:f4:15:b6:cc:5b:7c:0f:0a:60:a4:33:40:3e:8a:95: 62:7c:6a:96:90:95:79:40:c5:60:8b:a0:22:ce:51:8c:6f:84: 3c:b5:65:cd:38:99:2e:33:f0:eb:a3:6b:f0:31:0b:8b:2d:b6: 30:dc:fe:3d:7a:9c:64:c0:67:07:12:47:9e:0e:24:a1:03:6e: 7b:a2:b0:97:d0:ae:be:e6:ab:be:d2:27:f2:8b:63:17:8f:df: a7:a5:92:10:d9:b2:92:8c:53:42:d7:f1:d9:0e:53:3f:78:83: c7:0e:71:ed:b6:7c:37:ed:d6:c2:10:7b:98:48:90:f6:dc:13: 10:a9:c0:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjht5rKr3PMh3FIqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIxNDE2MzM0MloXDTI1MDUxNTE1MzM0MlowLzEtMCsGA1UEAxMk NjgxMzdjZGUtODE5NS00ZTJiLWJjMWQtZGZlMWMxZDQwYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMy/GY2asrdl8/koxv29sOZtxkaemjd0GpQJ dNxXIJSXHOuLRP8Vz3uGzvjjipxTbSw+QEqJ1al6qTVlGGuG9EnSdMrRaI3eD/Bh EM2DzHQ1YHTl0kpPYo0rFDMWFMaDjHvfU0MgRmMG//Ax5vBI3lYoLfkzAsPoiTUA DqhzVFjmB/gxYW5buIcvZoyJeFNBNodPvnt/482OleRVQ4ruKO/zyDUzDfMxP/Po K670N1oFu31yj1W3bn60OoFAbq79rw6gFv6XhVPm2SLJrPbYtpzEdSqV2xOCikVM engZVMYCKaCuCaf/5FFAndApalFqTOcFWrPurw4seLnm+4zmTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeBqrkkJiFGKj1mX08rQh0lg8mNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWFhMzE1NGQtZjFmNS0z ZDZhLWFhMWYtYzc1OTk0ZTA4NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/R08OT1iQlj2uQCy4icoG8BFzt2HbJcr9cK99Dwr3/1VYjmwzHoN1B k+jmp2NFBz8F4O333FEIQsngPq4EnC8J9W+kufVsXY1YQllnPy+rA52Q99r2aThV HyrhcOwgmUgesGm/S69KtZj1tYAZEmSPIGcxCTcESKtrURaOfVFFJvQVtsxbfA8K YKQzQD6KlWJ8apaQlXlAxWCLoCLOUYxvhDy1Zc04mS4z8Ouja/AxC4sttjDc/j16 nGTAZwcSR54OJKEDbnuisJfQrr7mq77SJ/KLYxeP36elkhDZspKMU0LX8dkOUz94 g8cOce22fDft1sIQe5hIkPbcExCpwCQ= -----END CERTIFICATE-----Generated at Tue Apr 8 23:53:48 2025 by rpki-client