$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a18f8044-b563-373a-a998-d53ff979cbc4.roa File: a18f8044-b563-373a-a998-d53ff979cbc4.roa (raw, json) Hash identifier: SROGefypxKTFjNX/E1Nqd0fFO/pdu+Q+VgcW7CvAE+E= Subject key identifier: F7:D9:EB:DC:B5:48:56:0F:E2:32:8F:B0:65:E4:C2:0E:FE:94:3D:B0 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584554981DFBAFE9EB0658314D80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a18f8044-b563-373a-a998-d53ff979cbc4.roa Signing time: Tue 26 Mar 2024 01:00:25 +0000 ROA not before: Tue 26 Mar 2024 01:00:25 +0000 ROA not after: Mon 24 Jun 2024 01:00:25 +0000 asID: 19437 IP address blocks: 108.165.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:54:98:1d:fb:af:e9:eb:06:58:31:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 26 01:00:25 2024 GMT Not After : Jun 24 01:00:25 2024 GMT Subject: CN=4f1bab2c-41c8-4e9d-939f-e5a4e3b89342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cf:f8:64:55:75:d8:f0:34:f1:f2:41:f3:43: b3:85:07:51:09:d1:9b:ef:9d:00:33:98:46:68:c1: f1:fb:6f:2c:58:80:41:a2:d6:81:39:d3:3b:56:36: 69:61:dc:59:e8:77:65:c1:74:a0:cc:bd:f8:7f:80: d6:15:cf:05:14:15:f0:65:c3:cf:c8:fc:7a:fd:77: a9:7e:df:a2:32:31:55:d2:7b:0f:a3:f3:fb:b1:a6: e8:70:58:2c:fc:70:92:cc:d7:13:13:b8:97:1b:6b: ee:c9:22:00:64:0e:64:d6:d8:db:5c:17:f7:48:27: 02:02:27:68:d4:b3:fe:ae:06:b2:37:de:3b:a7:53: e4:d8:ac:84:76:06:f1:d7:e0:50:9a:c2:11:cf:99: a8:41:33:c2:9a:e4:e1:ac:bc:1d:ea:79:60:0a:7a: 29:00:dc:ee:49:a0:11:b2:a5:a7:e9:4f:07:2e:fe: 0a:d7:eb:e8:ed:c6:21:33:0a:a4:5e:8c:d0:e9:d5: ed:7a:aa:18:df:48:e1:df:d0:2a:63:7e:cb:10:fc: 04:52:d9:c6:d6:62:89:64:6c:ab:7f:58:2b:54:4f: 52:50:8a:c6:6c:58:82:44:aa:12:39:58:4f:f2:75: 76:97:69:6f:66:04:84:32:e1:a6:ae:0e:3a:3a:3a: 8d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D9:EB:DC:B5:48:56:0F:E2:32:8F:B0:65:E4:C2:0E:FE:94:3D:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a18f8044-b563-373a-a998-d53ff979cbc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ca:11:fb:f0:8f:3d:fb:9e:4d:5c:89:02:77:06:52:f9:7e: ac:f6:61:a5:05:5b:57:e4:8e:1b:9b:7a:53:cd:76:7b:ad:b4: 99:fb:00:d7:1c:e4:cd:dd:9e:18:ee:d8:b6:16:1b:49:94:26: b3:7a:34:41:65:13:dd:68:b6:3f:62:87:d1:f5:36:c3:df:c9: f5:d5:35:54:67:b3:65:d8:52:4d:94:78:9a:6e:fe:cd:5c:e5: 84:03:5e:19:77:5b:3c:03:74:27:09:50:e8:6c:d0:9e:de:b2: e7:67:f2:94:5f:08:30:f9:0f:ab:95:4a:01:40:94:9b:83:99: b2:ab:c8:96:e4:58:c9:24:e3:f4:9c:33:09:b4:b0:c2:03:26: e6:54:2c:1a:aa:f5:37:62:21:4b:63:6c:38:cd:2e:3f:d7:fb: 5c:8b:50:7e:e7:ec:b4:b1:61:d6:58:ef:0e:ac:38:79:dd:0d: eb:77:22:71:ca:2c:cb:ed:01:dd:69:fb:e7:5b:3b:78:57:9c: 57:ea:3e:b1:55:1a:67:21:5b:f0:25:1d:80:e9:85:c8:67:83: 30:af:dc:06:6c:ad:5f:7a:4a:4a:06:81:8a:17:d5:f1:4f:fe: f1:f3:c1:ee:51:fd:4a:95:92:d6:22:43:9b:3f:ac:68:d2:9f: 77:bf:56:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVUmB37r+nrBlgxTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI0MDMyNjAxMDAyNVoXDTI0MDYyNDAxMDAyNVowLzEtMCsGA1UEAxMk NGYxYmFiMmMtNDFjOC00ZTlkLTkzOWYtZTVhNGUzYjg5MzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms/4ZFV12PA08fJB80OzhQdRCdGb750AM5hG aMHx+28sWIBBotaBOdM7VjZpYdxZ6HdlwXSgzL34f4DWFc8FFBXwZcPPyPx6/Xep ft+iMjFV0nsPo/P7sabocFgs/HCSzNcTE7iXG2vuySIAZA5k1tjbXBf3SCcCAido 1LP+rgayN947p1Pk2KyEdgbx1+BQmsIRz5moQTPCmuThrLwd6nlgCnopANzuSaAR sqWn6U8HLv4K1+vo7cYhMwqkXozQ6dXteqoY30jh39AqY37LEPwEUtnG1mKJZGyr f1grVE9SUIrGbFiCRKoSOVhP8nV2l2lvZgSEMuGmrg46OjqNLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfZ69y1SFYP4jKPsGXkwg7+lD2wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTE4ZjgwNDQtYjU2My0z NzNhLWE5OTgtZDUzZmY5NzljYmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPKEfvwjz37nk1ciQJ3BlL5fqz2YaUFW1fkjhubelPNdnuttJn7ANcc 5M3dnhju2LYWG0mUJrN6NEFlE91otj9ih9H1NsPfyfXVNVRns2XYUk2UeJpu/s1c 5YQDXhl3WzwDdCcJUOhs0J7esudn8pRfCDD5D6uVSgFAlJuDmbKryJbkWMkk4/Sc Mwm0sMIDJuZULBqq9TdiIUtjbDjNLj/X+1yLUH7n7LSxYdZY7w6sOHndDet3InHK LMvtAd1p++dbO3hXnFfqPrFVGmchW/AlHYDphchngzCv3AZsrV96SkoGgYoX1fFP /vHzwe5R/UqVktYiQ5s/rGjSn3e/VnA= -----END CERTIFICATE-----Generated at Sat May 4 02:55:53 2024 by rpki-client on console-fra.rpki-client.org