$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/290ab259-479e-3f0a-9599-f56f6118abc2.roa File: 290ab259-479e-3f0a-9599-f56f6118abc2.roa (raw, json) Hash identifier: qlVjCtowmCdh/mW+Kzv+iNO+9Gj/TBVZpXaTh8TP+V0= Subject key identifier: EB:60:BF:78:0E:B6:87:D2:4F:B3:E9:C6:D1:18:7C:80:83:3F:EB:66 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584827C53CCF761C2BD8BC641280 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/290ab259-479e-3f0a-9599-f56f6118abc2.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 3356 IP address blocks: 108.165.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:3c:cf:76:1c:2b:d8:bc:64:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=bd3a0623-4f34-4c4f-a007-1804ed78e728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9f:a8:29:fc:b5:c8:5a:a0:d4:42:1e:b5:f3: 74:f5:61:35:38:1a:ca:00:4f:2d:0f:d4:35:08:d5: 95:79:98:f3:61:40:52:7f:b4:e5:9a:3f:e2:e9:87: 84:16:44:a7:6b:35:6d:3f:78:d0:c2:94:65:6b:79: b4:06:87:da:a2:f1:2d:c4:e8:c9:13:09:0c:a8:f1: 37:f1:b1:4c:74:d2:f6:3b:af:63:0e:78:02:f3:0c: 5d:07:6d:8f:2a:c6:33:8e:b7:67:f2:bf:38:87:a0: 06:86:e8:a8:b8:ef:0c:dd:70:12:42:0c:3f:32:2a: c6:bb:1e:1b:a4:66:42:e7:f7:2f:01:1d:a7:f6:b6: 91:10:21:af:fb:cd:b7:e0:61:5f:b8:33:c9:c2:83: 97:57:83:31:9f:04:ac:fd:2d:48:81:2e:24:6c:16: 50:8f:8a:fd:0c:2c:79:20:b8:71:3b:15:14:45:c4: 1a:ca:f8:d7:98:d6:54:7c:7d:cc:94:45:25:d7:9c: 0b:b3:73:de:16:a0:56:5f:ff:37:fc:8b:c2:1b:71: b3:14:a7:c2:45:db:58:66:56:0e:85:54:e8:8c:ca: 0d:19:64:e1:0c:4c:d3:16:51:bc:09:ca:3e:aa:1e: 74:93:4a:ed:6e:0e:a9:82:96:51:20:37:fe:a4:a6: 07:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:60:BF:78:0E:B6:87:D2:4F:B3:E9:C6:D1:18:7C:80:83:3F:EB:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/290ab259-479e-3f0a-9599-f56f6118abc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:09:c0:ff:b7:08:58:e1:4c:62:92:3b:2a:f4:b9:13:50:66: c4:a9:2d:10:03:fd:95:65:f8:e0:a5:16:94:6b:19:2f:ee:18: 99:1a:7d:86:0e:30:ff:1f:3b:3a:61:1b:08:40:c5:2f:5b:03: c0:8b:ec:1d:40:56:fa:db:e9:08:76:0a:8d:43:64:f6:8e:7d: 78:94:25:c9:ba:b2:b4:ae:95:9a:b3:a5:12:a4:57:90:06:41: ac:1e:ea:cc:8c:a1:d4:4a:61:3d:96:72:6d:89:93:fb:34:ae: a0:55:c7:5c:28:d6:b8:41:94:bd:2c:b3:84:f6:10:2f:78:84: 7f:eb:6b:e2:d4:b7:52:a1:fd:d3:08:b6:68:ba:7a:a7:d6:bf: bc:2b:3a:fc:d4:8d:22:96:33:86:24:23:e3:e0:3f:1d:4f:65: 46:e6:10:45:91:ab:23:35:16:f8:90:3c:5b:11:57:da:3e:ec: 40:1d:85:4e:fc:76:75:e0:ca:0b:e3:89:5f:76:a5:2b:75:dc: 4e:9f:4f:71:49:3c:e5:3b:17:6d:42:eb:a3:a5:d7:44:c5:b4: 7d:77:27:2d:67:2e:82:0d:d1:b6:e0:9c:30:e6:ef:1b:06:82: b0:34:72:2b:50:5b:b0:7b:63:41:d1:e4:df:a6:37:d6:85:2a: 6e:1e:3b:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnxTzPdhwr2LxkEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk YmQzYTA2MjMtNGYzNC00YzRmLWEwMDctMTgwNGVkNzhlNzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65+oKfy1yFqg1EIetfN09WE1OBrKAE8tD9Q1 CNWVeZjzYUBSf7Tlmj/i6YeEFkSnazVtP3jQwpRla3m0BofaovEtxOjJEwkMqPE3 8bFMdNL2O69jDngC8wxdB22PKsYzjrdn8r84h6AGhuiouO8M3XASQgw/MirGux4b pGZC5/cvAR2n9raRECGv+8234GFfuDPJwoOXV4MxnwSs/S1IgS4kbBZQj4r9DCx5 ILhxOxUURcQayvjXmNZUfH3MlEUl15wLs3PeFqBWX/83/IvCG3GzFKfCRdtYZlYO hVTojMoNGWThDEzTFlG8Cco+qh50k0rtbg6pgpZRIDf+pKYHGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtgv3gOtofST7PpxtEYfICDP+tmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjkwYWIyNTktNDc5ZS0z ZjBhLTk1OTktZjU2ZjYxMThhYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkJwP+3CFjhTGKSOyr0uRNQZsSpLRAD/ZVl+OClFpRrGS/uGJkafYYO MP8fOzphGwhAxS9bA8CL7B1AVvrb6Qh2Co1DZPaOfXiUJcm6srSulZqzpRKkV5AG Qawe6syModRKYT2Wcm2Jk/s0rqBVx1wo1rhBlL0ss4T2EC94hH/ra+LUt1Kh/dMI tmi6eqfWv7wrOvzUjSKWM4YkI+PgPx1PZUbmEEWRqyM1FviQPFsRV9o+7EAdhU78 dnXgygvjiV92pSt13E6fT3FJPOU7F21C66Ol10TFtH13Jy1nLoIN0bbgnDDm7xsG grA0citQW7B7Y0HR5N+mN9aFKm4eO9A= -----END CERTIFICATE-----Generated at Fri Feb 7 11:16:26 2025 by rpki-client