$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1bb297e1-20c0-3a49-8306-d88a0cef07a0.roa File: 1bb297e1-20c0-3a49-8306-d88a0cef07a0.roa (raw, json) Hash identifier: js/4QH+aMn01ejT+9wqxvHYZAaXJUZmfzBH8JgsJl3I= Subject key identifier: 7B:CB:BC:3B:4A:C8:27:DD:D9:86:09:91:8E:68:EC:A6:C8:95:84:EE Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848D6FD6494E7E8888364B81990 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1bb297e1-20c0-3a49-8306-d88a0cef07a0.roa Signing time: Mon 10 Feb 2025 20:20:26 +0000 ROA not before: Mon 10 Feb 2025 20:20:26 +0000 ROA not after: Sun 11 May 2025 19:20:26 +0000 asID: 401152 IP address blocks: 108.165.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:fd:64:94:e7:e8:88:83:64:b8:19:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 10 20:20:26 2025 GMT Not After : May 11 19:20:26 2025 GMT Subject: CN=9d10e6f9-c61a-4a8c-80ca-bec03ce640ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:57:4e:69:06:f4:17:82:a1:ff:14:d5:fe:81: 12:51:4c:7f:c4:25:5c:1f:d0:2c:b6:3d:b2:95:10: 9a:27:c6:32:1a:8e:36:c6:f0:ce:92:36:55:3a:55: 16:10:b2:85:60:05:1f:37:34:ce:e8:82:db:6f:45: 79:0d:19:14:db:7a:69:3e:42:52:af:80:26:04:67: 42:c3:11:81:97:07:57:09:14:a3:96:e5:58:48:69: c2:46:4a:63:97:f8:de:06:da:f2:93:28:e4:46:2a: 3c:e9:30:2d:9a:47:1d:9b:b3:2e:5d:ef:d8:fe:e6: bf:b4:43:76:5c:99:4f:62:10:cd:ec:40:b9:04:60: 70:51:aa:89:30:65:6c:3a:e5:65:04:9d:52:c1:43: e1:3a:52:9b:8b:95:57:92:d1:ca:a1:b4:01:4a:11: d4:30:01:de:fe:9a:94:5b:5a:b5:bf:bc:e4:72:d2: 72:90:bc:6e:83:38:13:c5:af:19:74:6f:c7:cc:f1: da:c5:3e:49:7e:aa:9b:e4:d6:b9:b2:d1:68:8c:fa: d2:a8:be:ac:b1:a0:93:53:f1:a4:82:ef:e0:96:1b: 06:4e:ec:0f:f2:a2:04:b1:47:79:c1:36:23:31:62: 35:90:e6:92:3b:53:dd:51:d5:40:98:ea:8d:5b:26: 5f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CB:BC:3B:4A:C8:27:DD:D9:86:09:91:8E:68:EC:A6:C8:95:84:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1bb297e1-20c0-3a49-8306-d88a0cef07a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5f:20:c9:84:13:78:58:26:55:c6:79:26:2b:68:25:90:bf: c7:b6:0f:94:03:07:06:ff:70:93:41:5f:c6:2f:08:52:96:49: 06:f3:35:f1:ba:c4:28:ef:4c:57:b5:41:ce:12:a8:6c:1f:c5: 2b:e9:35:97:08:6c:49:94:f4:8b:8b:07:cc:f9:42:d6:23:9b: ac:3d:01:1b:0d:e7:49:93:46:31:55:63:3e:2c:ea:22:b7:b3: 51:88:a3:42:07:0d:86:e0:e2:c1:97:42:33:98:2c:c5:4e:64: 22:f5:b8:f9:27:db:93:d5:65:55:67:24:ec:99:8a:9b:20:ce: 5a:52:34:b1:ae:49:4c:92:2f:01:78:c1:1b:69:bd:be:53:4d: 9c:a7:52:0f:3d:89:fb:9d:92:d7:bb:0c:6c:e6:da:44:3f:3e: 23:91:41:bd:5e:bb:9c:9c:8e:0b:45:a9:0c:1b:df:06:50:99: 44:ff:7d:7c:9c:81:5f:cd:18:b8:a9:80:0d:b6:e5:87:5d:dc: ba:2c:23:ec:5c:83:fe:bd:57:46:cb:c7:34:7a:1b:3c:b5:63: 21:a8:8b:16:a7:da:77:fe:64:ec:38:b1:34:ac:d4:e9:69:81: 79:4b:c9:4e:6c:65:35:e7:5a:17:a8:1a:0e:71:5c:37:30:44: ef:64:09:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjW/WSU5+iIg2S4GZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIxMDIwMjAyNloXDTI1MDUxMTE5MjAyNlowLzEtMCsGA1UEAxMk OWQxMGU2ZjktYzYxYS00YThjLTgwY2EtYmVjMDNjZTY0MGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFdOaQb0F4Kh/xTV/oESUUx/xCVcH9Astj2y lRCaJ8YyGo42xvDOkjZVOlUWELKFYAUfNzTO6ILbb0V5DRkU23ppPkJSr4AmBGdC wxGBlwdXCRSjluVYSGnCRkpjl/jeBtrykyjkRio86TAtmkcdm7MuXe/Y/ua/tEN2 XJlPYhDN7EC5BGBwUaqJMGVsOuVlBJ1SwUPhOlKbi5VXktHKobQBShHUMAHe/pqU W1q1v7zkctJykLxugzgTxa8ZdG/HzPHaxT5Jfqqb5Na5stFojPrSqL6ssaCTU/Gk gu/glhsGTuwP8qIEsUd5wTYjMWI1kOaSO1PdUdVAmOqNWyZfwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvLvDtKyCfd2YYJkY5o7KbIlYTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWJiMjk3ZTEtMjBjMC0z YTQ5LTgzMDYtZDg4YTBjZWYwN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1fIMmEE3hYJlXGeSYraCWQv8e2D5QDBwb/cJNBX8YvCFKWSQbzNfG6 xCjvTFe1Qc4SqGwfxSvpNZcIbEmU9IuLB8z5QtYjm6w9ARsN50mTRjFVYz4s6iK3 s1GIo0IHDYbg4sGXQjOYLMVOZCL1uPkn25PVZVVnJOyZipsgzlpSNLGuSUySLwF4 wRtpvb5TTZynUg89ifudkte7DGzm2kQ/PiORQb1eu5ycjgtFqQwb3wZQmUT/fXyc gV/NGLipgA225Ydd3LosI+xcg/69V0bLxzR6Gzy1YyGoixan2nf+ZOw4sTSs1Olp gXlLyU5sZTXnWheoGg5xXDcwRO9kCTc= -----END CERTIFICATE-----Generated at Sat Apr 5 09:44:54 2025 by rpki-client