$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfe35dfb-4a48-37cd-b0e8-de22e885cb58.roa File: dfe35dfb-4a48-37cd-b0e8-de22e885cb58.roa (raw, json) Hash identifier: HCoLPU6vegGlE/inzdwM1QMa0Rk+riNrpeBJt3ka1AM= Subject key identifier: 8E:7B:CF:85:0D:1F:18:F0:2C:C1:04:DB:A2:60:BE:B9:34:69:DE:85 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858452C1D4883AE8BCFE7A054C698 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfe35dfb-4a48-37cd-b0e8-de22e885cb58.roa Signing time: Mon 11 Mar 2024 13:00:31 +0000 ROA not before: Mon 11 Mar 2024 13:00:31 +0000 ROA not after: Sun 09 Jun 2024 13:00:31 +0000 asID: 21859 IP address blocks: 108.165.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2c:1d:48:83:ae:8b:cf:e7:a0:54:c6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 11 13:00:31 2024 GMT Not After : Jun 9 13:00:31 2024 GMT Subject: CN=e3485b30-fb3f-48f8-8e72-70ffecf6de23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0b:62:96:c1:45:87:e0:0c:89:d6:f7:22:b1: d7:73:ea:22:37:ea:26:f1:8b:09:0c:3e:33:be:c9: 1f:67:6b:0f:a3:96:fb:00:b8:11:17:ec:06:c1:1f: 9d:4c:1f:86:ec:99:bf:19:a9:97:76:4c:cf:51:0c: ae:85:05:61:86:31:0c:ef:56:29:06:0b:01:42:70: 9e:09:4f:5b:aa:6f:e5:b8:7a:1c:96:9d:9a:81:d1: d2:d4:33:05:45:71:1b:3b:ea:de:73:ab:2b:59:9e: 0a:81:52:3e:e6:8a:5d:07:2e:83:a4:41:60:09:2f: 1b:59:00:23:a2:86:54:d0:5e:4d:7e:13:13:16:51: 86:93:da:72:30:85:d4:17:46:56:b0:d9:25:e3:c2: ce:f0:13:38:2f:d5:4a:a9:08:de:b2:a5:ec:a9:86: 92:a6:88:27:a4:5e:f0:4c:83:c6:21:54:a7:b4:8e: 6c:7e:4d:f5:3f:f8:3c:c2:f8:d5:65:34:ce:3f:75: d3:58:e7:cb:4f:69:86:92:84:a7:e9:b2:89:ff:89: 85:58:ab:6a:e2:59:6a:91:ac:08:d7:58:20:f7:5a: 22:e5:b2:f1:89:3a:e4:fe:3a:aa:81:4e:39:82:36: f2:1e:79:5c:86:f4:c9:b3:e8:11:2a:02:44:8c:a4: 7a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7B:CF:85:0D:1F:18:F0:2C:C1:04:DB:A2:60:BE:B9:34:69:DE:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfe35dfb-4a48-37cd-b0e8-de22e885cb58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:23:bb:73:41:25:9a:a2:02:13:21:99:1a:fb:3f:1a:c0:b4: 98:27:9b:c0:a2:7b:05:29:b3:a6:47:b2:e8:b8:ec:b4:f3:ec: 62:6a:ab:7a:3c:97:02:d6:fc:1a:fd:ad:0b:69:8a:6f:8a:75: f9:7d:bb:af:09:2d:fd:6f:b4:5a:b2:1e:c4:5f:b5:90:b5:51: d8:28:b9:4f:8e:e8:a3:8a:9b:e8:2d:ce:b4:9a:b9:aa:96:db: 00:ac:0b:a9:d5:da:7f:82:15:12:d7:ec:66:ba:45:55:4c:66: 0c:74:dc:22:0a:88:f7:fd:21:1a:09:a8:0c:4b:c4:8d:31:ca: f9:fa:4d:be:10:8f:9f:13:87:90:3b:a3:cd:64:9c:a3:a8:f5: 88:bc:9d:f0:18:93:f4:1c:1f:11:f7:1f:da:d7:df:d7:63:ca: 3e:ee:44:df:86:0f:d2:c5:9f:54:a7:80:a1:9f:88:31:ac:cc: 6a:4d:09:77:9f:26:7b:1d:22:4e:a3:21:80:19:e4:15:00:89: b5:cf:92:dc:05:e6:42:1d:e9:67:8c:75:79:d3:cc:24:d5:15: 00:23:8f:1d:bd:c7:cf:cb:c3:9d:25:21:82:df:d9:5a:9c:d9: cc:13:ef:33:6d:fd:ef:90:16:8b:49:c0:82:8b:d3:1e:ca:c5: a0:41:f4:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUsHUiDrovP56BUxpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI0MDMxMTEzMDAzMVoXDTI0MDYwOTEzMDAzMVowLzEtMCsGA1UEAxMk ZTM0ODViMzAtZmIzZi00OGY4LThlNzItNzBmZmVjZjZkZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwtilsFFh+AMidb3IrHXc+oiN+om8YsJDD4z vskfZ2sPo5b7ALgRF+wGwR+dTB+G7Jm/GamXdkzPUQyuhQVhhjEM71YpBgsBQnCe CU9bqm/luHoclp2agdHS1DMFRXEbO+rec6srWZ4KgVI+5opdBy6DpEFgCS8bWQAj ooZU0F5NfhMTFlGGk9pyMIXUF0ZWsNkl48LO8BM4L9VKqQjesqXsqYaSpognpF7w TIPGIVSntI5sfk31P/g8wvjVZTTOP3XTWOfLT2mGkoSn6bKJ/4mFWKtq4llqkawI 11gg91oi5bLxiTrk/jqqgU45gjbyHnlchvTJs+gRKgJEjKR6LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI57z4UNHxjwLMEE26Jgvrk0ad6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGZlMzVkZmItNGE0OC0z N2NkLWIwZTgtZGUyMmU4ODVjYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUju3NBJZqiAhMhmRr7PxrAtJgnm8CiewUps6ZHsui47LTz7GJqq3o8 lwLW/Br9rQtpim+Kdfl9u68JLf1vtFqyHsRftZC1UdgouU+O6KOKm+gtzrSauaqW 2wCsC6nV2n+CFRLX7Ga6RVVMZgx03CIKiPf9IRoJqAxLxI0xyvn6Tb4Qj58Th5A7 o81knKOo9Yi8nfAYk/QcHxH3H9rX39djyj7uRN+GD9LFn1SngKGfiDGszGpNCXef JnsdIk6jIYAZ5BUAibXPktwF5kId6WeMdXnTzCTVFQAjjx29x8/Lw50lIYLf2Vqc 2cwT7zNt/e+QFotJwIKL0x7KxaBB9Pk= -----END CERTIFICATE-----Generated at Thu May 2 10:19:01 2024 by rpki-client on console-ams.rpki-client.org