$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c0f169b-42c4-3f18-85ec-9872dd21a88b.roa File: 0c0f169b-42c4-3f18-85ec-9872dd21a88b.roa (raw, json) Hash identifier: 8a4RQ4r0gASHloD/s9VeStxmPMf2w1PboOV3YZLBHO4= Subject key identifier: 59:E4:7A:87:A5:84:C8:AC:5B:9B:4B:47:6B:9F:4B:39:20:26:5E:B8 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848CEE25D0ACB98B227C33C8210 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c0f169b-42c4-3f18-85ec-9872dd21a88b.roa Signing time: Fri 07 Feb 2025 22:39:30 +0000 ROA not before: Fri 07 Feb 2025 22:39:30 +0000 ROA not after: Thu 08 May 2025 21:39:30 +0000 asID: 401152 IP address blocks: 108.165.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ce:e2:5d:0a:cb:98:b2:27:c3:3c:82:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 7 22:39:30 2025 GMT Not After : May 8 21:39:30 2025 GMT Subject: CN=9f4451f8-49f4-434f-9a25-7ea01002454b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:59:2e:e2:56:c9:b8:8a:07:f7:19:13:3c:7f: 18:8b:db:80:27:ba:20:88:3b:4f:ae:fc:fa:2c:1b: 0d:b9:6a:10:29:18:05:c4:d9:05:e3:d8:bf:a3:a7: 93:da:d9:22:fb:67:a3:4d:d1:57:87:0a:9e:23:4b: 98:92:57:a7:49:50:f5:26:f0:00:64:af:52:4d:01: 1a:a5:fd:5e:df:46:88:ea:66:8a:e3:b9:50:b0:22: ff:ac:bc:42:41:37:1e:d8:94:48:39:22:d4:a6:06: 5d:36:ba:48:f8:23:68:61:dd:38:e6:d7:13:65:69: 5f:06:66:66:78:8d:fc:5e:e8:09:ea:fd:2d:b7:81: 11:17:5e:96:04:df:09:4c:c2:11:f9:fc:b9:8f:63: c3:66:26:49:c8:ea:24:c9:c7:fd:67:ad:33:8a:d9: 65:0c:1a:5c:1f:db:89:58:fc:d0:c6:2c:d9:df:23: 8f:93:2e:ce:c1:8e:5b:54:e2:05:b4:4a:25:56:be: 8a:3f:ae:06:c5:53:18:71:b6:0e:4f:3a:6b:55:19: 9f:3e:5a:6e:1f:c2:17:c3:f4:0e:4b:48:cd:e8:d6: a5:a6:9c:02:2c:40:bc:af:22:f5:d0:30:4e:7e:51: 19:c0:bd:c0:57:c6:b6:5d:7c:6e:2a:ae:7f:40:8e: ad:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E4:7A:87:A5:84:C8:AC:5B:9B:4B:47:6B:9F:4B:39:20:26:5E:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c0f169b-42c4-3f18-85ec-9872dd21a88b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:29:03:90:c9:3f:a3:14:ca:c0:28:3a:a1:a8:07:7c:69:e8: b6:7d:54:d9:af:47:2c:3e:01:6a:a7:90:56:76:28:c7:b4:85: 15:a4:fd:16:b6:5f:4c:b9:4d:f9:df:10:d3:3b:93:9d:34:44: 41:3f:42:37:18:03:a8:ef:7f:fe:05:a2:24:f4:83:26:1f:d2: 6a:4d:79:e3:3c:c4:ed:e2:a9:f8:8c:a8:8c:65:6c:82:82:52: 03:49:f8:b3:0c:f3:dc:a8:e1:f1:60:11:37:6d:b4:a1:a1:3c: cb:2e:cf:ae:4e:3d:6f:fa:33:b1:c7:75:00:bf:72:14:bf:dc: a2:c3:fd:22:e3:73:f4:62:ec:cb:8d:9c:31:63:92:fa:25:70: e2:d5:5e:66:f2:1e:66:77:a3:70:4a:2b:dc:b2:d4:5c:d8:e9: 52:52:2a:c0:40:fb:6c:7e:06:f2:f6:33:fa:f6:cc:ab:01:0c: 45:71:43:83:fa:07:40:e4:85:85:d3:20:26:0b:d1:3c:e9:a7: e7:1a:e4:79:d1:20:e4:b7:fa:31:4e:2a:3c:e9:44:93:ba:06: fc:75:cb:87:00:81:aa:51:d7:ef:02:c0:6a:d8:16:ee:20:bb: f4:79:5b:e0:80:69:79:09:72:98:72:a8:fd:43:d8:02:b2:93: f1:9a:9d:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjO4l0Ky5iyJ8M8ghAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIwNzIyMzkzMFoXDTI1MDUwODIxMzkzMFowLzEtMCsGA1UEAxMk OWY0NDUxZjgtNDlmNC00MzRmLTlhMjUtN2VhMDEwMDI0NTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFku4lbJuIoH9xkTPH8Yi9uAJ7ogiDtPrvz6 LBsNuWoQKRgFxNkF49i/o6eT2tki+2ejTdFXhwqeI0uYklenSVD1JvAAZK9STQEa pf1e30aI6maK47lQsCL/rLxCQTce2JRIOSLUpgZdNrpI+CNoYd045tcTZWlfBmZm eI38XugJ6v0tt4ERF16WBN8JTMIR+fy5j2PDZiZJyOokycf9Z60zitllDBpcH9uJ WPzQxizZ3yOPky7OwY5bVOIFtEolVr6KP64GxVMYcbYOTzprVRmfPlpuH8IXw/QO S0jN6NalppwCLEC8ryL10DBOflEZwL3AV8a2XXxuKq5/QI6ttQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnkeoelhMisW5tLR2ufSzkgJl64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGMwZjE2OWItNDJjNC0z ZjE4LTg1ZWMtOTg3MmRkMjFhODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYpA5DJP6MUysAoOqGoB3xp6LZ9VNmvRyw+AWqnkFZ2KMe0hRWk/Ra2 X0y5TfnfENM7k500REE/QjcYA6jvf/4FoiT0gyYf0mpNeeM8xO3iqfiMqIxlbIKC UgNJ+LMM89yo4fFgETdttKGhPMsuz65OPW/6M7HHdQC/chS/3KLD/SLjc/Ri7MuN nDFjkvolcOLVXmbyHmZ3o3BKK9yy1FzY6VJSKsBA+2x+BvL2M/r2zKsBDEVxQ4P6 B0DkhYXTICYL0Tzpp+ca5HnRIOS3+jFOKjzpRJO6Bvx1y4cAgapR1+8CwGrYFu4g u/R5W+CAaXkJcphyqP1D2AKyk/GanSw= -----END CERTIFICATE-----Generated at Sat Apr 5 09:50:02 2025 by rpki-client