$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/476bd808-22ee-3fb9-a672-04b849f47ec4.roa File: 476bd808-22ee-3fb9-a672-04b849f47ec4.roa (raw, json) Hash identifier: ksUeCqPEBS6jYJepAMpHpCVjDuB7jRYsr2aiT9sLmnc= Subject key identifier: C3:DF:49:36:CA:33:9B:25:61:80:60:4D:A6:82:36:96:4F:29:35:E5 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848CB1662A9593B0509C9DB3AF8 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/476bd808-22ee-3fb9-a672-04b849f47ec4.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 20068 IP address blocks: 108.165.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:62:a9:59:3b:05:09:c9:db:3a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=6cfd346b-2005-4415-8ae3-f3e2dab17e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b1:ee:7b:f6:05:51:29:f7:c5:3d:04:a4:a9: b0:bc:f6:ce:01:31:58:d5:52:f8:21:7e:53:98:0a: 59:b2:dc:91:d4:8a:75:2b:f1:ff:3e:c0:59:2b:8b: 53:60:c6:52:dd:55:62:59:42:cd:06:d9:ee:6f:8e: 38:98:aa:60:6e:02:a6:c6:27:11:d5:ba:69:26:ce: 71:e4:6e:4e:3e:19:ad:8f:45:db:80:e2:0d:95:cb: 33:66:64:bb:85:b9:3e:ef:52:b4:ba:cc:73:19:fd: d9:8a:b3:b4:50:dc:ac:6f:61:69:d2:90:b9:12:7e: 99:d7:5c:e4:39:e6:00:6a:77:3f:40:5c:a6:93:98: ba:03:54:46:1e:da:80:6b:74:10:81:c5:84:f1:c5: 1c:30:f7:9e:d0:db:31:02:06:41:3a:01:be:81:0f: 46:4c:d8:fb:0a:e6:9d:2f:57:c3:7c:a1:e0:73:a9: 92:d5:53:51:5b:62:a1:f7:e0:65:0b:74:a2:a9:c2: df:33:27:21:45:62:26:e2:cc:09:65:8d:c4:59:36: 2c:4d:21:a1:21:1d:20:ab:ba:3e:79:11:bc:45:bb: 73:70:f8:cb:24:8d:04:c8:a2:26:61:7b:0e:02:fb: ba:b4:a1:ce:2a:70:3b:72:34:8c:65:76:43:05:42: a0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DF:49:36:CA:33:9B:25:61:80:60:4D:A6:82:36:96:4F:29:35:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/476bd808-22ee-3fb9-a672-04b849f47ec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:21:25:dc:1e:6c:0f:04:e6:70:8a:77:2c:6c:47:ff:0a:df: 71:9c:86:e8:e5:56:5b:c5:ea:6d:96:ed:0a:b5:78:d9:38:f4: db:f1:c2:cc:86:61:b1:c2:e3:cd:f2:4a:4b:14:a8:fd:6c:2e: e4:01:80:d4:db:f7:c1:9b:df:c2:16:bd:67:38:0a:76:31:d1: 78:20:e2:a3:1d:06:4c:3e:fe:fb:16:6f:00:7a:69:d0:12:a6: 9c:3b:77:38:98:ac:85:ed:18:95:37:db:b6:e0:3c:50:33:40: c0:c6:82:45:50:41:2b:14:c6:26:9f:bb:b1:ab:84:26:16:a2: 41:4f:35:5b:fb:1e:e8:0d:55:f0:73:18:14:f6:cd:bb:49:b4: 11:56:e4:c5:fd:1d:ef:82:e2:1f:5e:5e:05:30:6f:89:cb:28: 68:ad:ea:2d:a5:ea:75:4f:f5:79:dd:d9:53:54:2e:42:34:21: a9:b1:26:ed:ff:6b:79:42:55:61:36:a5:19:95:82:de:f9:50: cb:ba:83:61:d6:34:85:e8:8e:3b:bf:a7:7b:9b:f7:35:76:79: a9:f5:86:66:4c:c4:b7:18:be:55:13:10:3f:14:18:cd:86:f8: cd:fc:58:c7:c1:06:c2:4b:e5:6d:45:49:27:f2:18:b8:6d:23: 62:37:d1:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFmKpWTsFCcnbOvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk NmNmZDM0NmItMjAwNS00NDE1LThhZTMtZjNlMmRhYjE3ZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Hue/YFUSn3xT0EpKmwvPbOATFY1VL4IX5T mApZstyR1Ip1K/H/PsBZK4tTYMZS3VViWULNBtnub444mKpgbgKmxicR1bppJs5x 5G5OPhmtj0XbgOINlcszZmS7hbk+71K0usxzGf3ZirO0UNysb2Fp0pC5En6Z11zk OeYAanc/QFymk5i6A1RGHtqAa3QQgcWE8cUcMPee0NsxAgZBOgG+gQ9GTNj7Cuad L1fDfKHgc6mS1VNRW2Kh9+BlC3SiqcLfMychRWIm4swJZY3EWTYsTSGhIR0gq7o+ eRG8RbtzcPjLJI0EyKImYXsOAvu6tKHOKnA7cjSMZXZDBUKgVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPfSTbKM5slYYBgTaaCNpZPKTXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDc2YmQ4MDgtMjJlZS0z ZmI5LWE2NzItMDRiODQ5ZjQ3ZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4hJdwebA8E5nCKdyxsR/8K33GchujlVlvF6m2W7Qq1eNk49NvxwsyG YbHC483ySksUqP1sLuQBgNTb98Gb38IWvWc4CnYx0Xgg4qMdBkw+/vsWbwB6adAS ppw7dziYrIXtGJU327bgPFAzQMDGgkVQQSsUxiafu7GrhCYWokFPNVv7HugNVfBz GBT2zbtJtBFW5MX9He+C4h9eXgUwb4nLKGit6i2l6nVP9Xnd2VNULkI0IamxJu3/ a3lCVWE2pRmVgt75UMu6g2HWNIXojju/p3ub9zV2ean1hmZMxLcYvlUTED8UGM2G +M38WMfBBsJL5W1FSSfyGLhtI2I30Ro= -----END CERTIFICATE-----Generated at Fri Feb 7 11:24:44 2025 by rpki-client