$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a8af6df3-99a0-3748-86f7-c8d5935855ee.roa File: a8af6df3-99a0-3748-86f7-c8d5935855ee.roa (raw, json) Hash identifier: 2TyJnZmsWHvhRxLVuQ6aUKqd0kdAOc1/kNbJleDmMAc= Subject key identifier: 0B:F4:2E:04:A5:75:27:51:C5:68:37:6B:51:70:54:4E:F8:40:1D:1C Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858481310F05EE8E2270703CDCA00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a8af6df3-99a0-3748-86f7-c8d5935855ee.roa Signing time: Mon 02 Dec 2024 16:01:23 +0000 ROA not before: Mon 02 Dec 2024 16:01:23 +0000 ROA not after: Sun 02 Mar 2025 16:01:23 +0000 asID: 401152 IP address blocks: 108.165.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:13:10:f0:5e:e8:e2:27:07:03:cd:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Dec 2 16:01:23 2024 GMT Not After : Mar 2 16:01:23 2025 GMT Subject: CN=0963aaec-240d-4ac0-950a-e3547e619a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:02:43:b7:05:ac:a3:fb:bd:88:58:29:9c:e9: 9e:59:03:7a:5c:60:fb:05:67:13:e4:2f:16:28:8a: 99:84:03:23:ee:e9:14:3c:1e:a2:49:13:bb:50:74: 1f:e2:b7:0f:7b:9b:29:93:c2:63:07:80:25:62:68: 95:25:98:3f:f6:e3:82:75:5b:6c:97:67:45:d4:1d: d1:c2:ae:78:17:20:0e:82:40:d1:ad:17:01:bb:d5: 71:d8:bb:a6:fd:90:28:7b:fc:a7:c2:2e:4b:d8:ab: b6:79:17:99:45:e6:d3:5d:59:5d:93:ef:34:35:3e: 82:fc:08:c3:f5:c8:33:a4:69:c8:4a:fd:ab:12:35: a7:17:ba:85:55:e9:f6:76:bb:b2:dc:a6:2c:e7:3f: 84:62:d0:29:9a:b1:5d:43:9a:aa:d5:20:46:63:24: ab:5c:c9:8d:34:06:b5:d9:18:2d:ee:3f:b6:e4:65: 84:c5:ca:df:48:c1:39:df:3b:96:af:8a:d9:62:e6: 1f:d8:c5:b4:9b:28:43:18:57:c7:e3:02:14:c1:65: b4:1c:22:3a:9c:10:d9:f7:71:d6:c1:a8:42:8f:95: dc:61:82:ff:7e:28:10:05:2a:83:a5:3b:ec:b2:04: 20:34:70:d1:19:45:6f:7d:3b:9f:5d:38:f0:28:4d: 65:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F4:2E:04:A5:75:27:51:C5:68:37:6B:51:70:54:4E:F8:40:1D:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a8af6df3-99a0-3748-86f7-c8d5935855ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6b:51:ec:14:43:fd:10:4f:18:b4:33:a3:82:1c:ec:da:a6: ad:77:b8:a5:2a:9d:58:a7:39:0f:e4:68:70:19:f9:1b:67:0f: 5f:3d:92:67:2b:27:0f:53:6b:60:99:a4:f4:72:52:5a:73:7b: d4:28:34:c5:4a:3a:39:af:03:c5:2a:fb:9e:74:66:f6:32:28: 17:da:98:41:ac:6a:f4:b4:7d:2f:37:8d:23:a5:80:b7:6a:f3: 48:db:6b:cc:35:24:60:82:9c:e3:12:1b:75:21:85:e1:b7:be: dd:30:76:70:b4:5b:0c:99:d0:6c:65:92:b9:fd:28:a8:01:43: 02:9c:7c:42:87:c4:f5:90:62:4c:a3:fc:20:64:cf:e6:ad:79: 34:20:66:59:dd:3c:ed:01:53:27:21:53:cf:09:aa:04:c1:1c: 53:3e:8a:37:4c:80:98:ef:f8:e8:a4:9a:84:77:2d:a6:6d:fa: 4d:ec:97:80:6b:59:36:1b:0e:c1:10:a3:c5:cd:6c:75:a0:16: 7b:38:94:2f:e5:b1:61:96:e7:75:ec:49:64:97:f8:7d:ea:eb: 28:3c:9c:03:be:51:04:4d:f7:bc:13:56:86:2e:f4:31:48:c5: 1c:f5:49:a6:8f:aa:67:a8:5e:27:89:2b:c3:ae:d1:55:72:d4: fd:ab:43:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgTEPBe6OInBwPNygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI0MTIwMjE2MDEyM1oXDTI1MDMwMjE2MDEyM1owLzEtMCsGA1UEAxMk MDk2M2FhZWMtMjQwZC00YWMwLTk1MGEtZTM1NDdlNjE5YTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggJDtwWso/u9iFgpnOmeWQN6XGD7BWcT5C8W KIqZhAMj7ukUPB6iSRO7UHQf4rcPe5spk8JjB4AlYmiVJZg/9uOCdVtsl2dF1B3R wq54FyAOgkDRrRcBu9Vx2Lum/ZAoe/ynwi5L2Ku2eReZRebTXVldk+80NT6C/AjD 9cgzpGnISv2rEjWnF7qFVen2druy3KYs5z+EYtApmrFdQ5qq1SBGYySrXMmNNAa1 2Rgt7j+25GWExcrfSME53zuWr4rZYuYf2MW0myhDGFfH4wIUwWW0HCI6nBDZ93HW wahCj5XcYYL/figQBSqDpTvssgQgNHDRGUVvfTufXTjwKE1lVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAv0LgSldSdRxWg3a1FwVE74QB0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYThhZjZkZjMtOTlhMC0z NzQ4LTg2ZjctYzhkNTkzNTg1NWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5rUewUQ/0QTxi0M6OCHOzapq13uKUqnVinOQ/kaHAZ+RtnD189kmcr Jw9Ta2CZpPRyUlpze9QoNMVKOjmvA8Uq+550ZvYyKBfamEGsavS0fS83jSOlgLdq 80jba8w1JGCCnOMSG3UhheG3vt0wdnC0WwyZ0Gxlkrn9KKgBQwKcfEKHxPWQYkyj /CBkz+ateTQgZlndPO0BUychU88JqgTBHFM+ijdMgJjv+OikmoR3LaZt+k3sl4Br WTYbDsEQo8XNbHWgFns4lC/lsWGW53XsSWSX+H3q6yg8nAO+UQRN97wTVoYu9DFI xRz1SaaPqmeoXieJK8Ou0VVy1P2rQ6k= -----END CERTIFICATE-----Generated at Wed Feb 5 09:53:45 2025 by rpki-client