$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f85af0d8-5932-3f7f-81a3-d325ba297266.roa File: f85af0d8-5932-3f7f-81a3-d325ba297266.roa (raw, json) Hash identifier: s8XdifPQ2iEjt7F/3In4ZlLWWktE1FjvEkydwEBGvOk= Subject key identifier: 98:C1:CB:9C:D2:A7:17:96:6B:87:8A:AC:3A:DF:C1:90:02:0D:7A:15 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849115E1A150892BF92D26299A0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f85af0d8-5932-3f7f-81a3-d325ba297266.roa Signing time: Mon 03 Mar 2025 18:12:10 +0000 ROA not before: Mon 03 Mar 2025 18:12:10 +0000 ROA not after: Sun 01 Jun 2025 17:12:10 +0000 asID: 401152 IP address blocks: 108.165.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:11:5e:1a:15:08:92:bf:92:d2:62:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 3 18:12:10 2025 GMT Not After : Jun 1 17:12:10 2025 GMT Subject: CN=4f2f8a16-ab16-4c35-bb44-69c628e7c719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:82:88:fa:dd:0a:a7:61:c9:f4:f6:f3:70:3a: 62:1e:63:ab:92:63:c3:f6:cd:d5:63:59:ba:f2:45: 2c:79:c8:54:fb:3e:6a:13:88:51:b1:a2:0a:22:8d: 2e:0f:ad:e5:92:43:c3:da:a9:78:8c:69:f0:4e:d3: 8e:ed:62:38:90:d9:a1:25:a5:58:c1:ed:08:9c:d8: 64:ef:df:df:56:8e:ef:4a:8c:f5:ed:65:41:00:b5: 4e:e8:c9:c8:fe:a1:b9:4b:ba:67:c7:a1:ac:45:03: 4d:94:81:35:7f:0e:55:09:dc:53:50:93:5e:df:8e: 6e:f3:9f:3f:be:2e:3d:fa:8c:8c:09:8e:ef:63:1e: af:7e:5a:50:b1:d4:f3:86:78:23:47:d3:c8:98:f5: dc:a8:81:27:95:cf:ce:49:2d:08:2e:90:70:ed:8e: 09:55:e0:8d:13:4f:1b:69:13:5c:81:44:62:53:16: 30:7b:2e:d7:61:03:18:4e:31:11:db:93:ac:a2:3b: cb:8e:58:16:34:a1:01:72:c2:df:10:ac:39:14:66: a6:d3:45:85:27:65:70:ec:c4:35:b3:a1:64:83:fa: 23:da:f4:ad:99:b6:e1:86:98:1e:17:ac:bf:57:01: 18:38:82:91:c0:9e:d3:36:57:0b:95:ae:f6:af:ef: d1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C1:CB:9C:D2:A7:17:96:6B:87:8A:AC:3A:DF:C1:90:02:0D:7A:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f85af0d8-5932-3f7f-81a3-d325ba297266.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:10:75:a1:ed:07:ed:7f:2b:0f:25:6d:9a:7c:a7:f6:20:38: d7:a7:fc:0d:ab:89:da:93:d1:49:04:42:f3:ce:4f:f6:27:0b: 42:41:de:76:4b:40:2f:a5:d6:1f:e5:a2:97:03:b6:7a:80:07: cd:33:08:33:b9:ad:22:96:c3:07:a6:ff:f7:dd:9d:77:c0:f5: 11:d9:8e:d4:25:48:26:98:39:5b:c6:8d:cd:55:d9:22:af:12: a5:b3:d6:b2:a5:f9:53:7f:d2:d8:07:75:c1:6a:7d:9e:a5:6d: 67:44:50:06:ca:d8:04:fc:6d:84:9b:84:93:9b:f4:3b:13:66: fb:2c:68:b9:e5:d4:26:57:db:1a:31:0a:64:0d:a1:cb:2f:18: 58:fa:99:94:ac:55:d6:e2:34:9b:49:75:3d:07:f4:34:91:9b: 70:06:5a:3e:75:4e:90:11:05:86:46:fe:f5:37:82:e1:d9:1b: 21:39:56:0f:d9:83:4c:25:74:92:31:1f:ab:1d:a5:ca:03:ab: 1e:cd:9e:67:96:7f:a0:6d:27:2b:32:b8:0f:b6:91:13:3d:32: 1a:5b:86:aa:f8:50:1b:26:5d:0c:84:e2:97:cb:c2:7f:f3:5d: e9:a4:bb:8f:d9:4e:87:fe:73:36:4c:16:8f:d6:86:bb:fe:71: 05:f7:30:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkRXhoVCJK/ktJimaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDMwMzE4MTIxMFoXDTI1MDYwMTE3MTIxMFowLzEtMCsGA1UEAxMk NGYyZjhhMTYtYWIxNi00YzM1LWJiNDQtNjljNjI4ZTdjNzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIKI+t0Kp2HJ9PbzcDpiHmOrkmPD9s3VY1m6 8kUsechU+z5qE4hRsaIKIo0uD63lkkPD2ql4jGnwTtOO7WI4kNmhJaVYwe0InNhk 79/fVo7vSoz17WVBALVO6MnI/qG5S7pnx6GsRQNNlIE1fw5VCdxTUJNe345u858/ vi49+oyMCY7vYx6vflpQsdTzhngjR9PImPXcqIEnlc/OSS0ILpBw7Y4JVeCNE08b aRNcgURiUxYwey7XYQMYTjER25OsojvLjlgWNKEBcsLfEKw5FGam00WFJ2Vw7MQ1 s6Fkg/oj2vStmbbhhpgeF6y/VwEYOIKRwJ7TNlcLla72r+/RswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjBy5zSpxeWa4eKrDrfwZACDXoVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjg1YWYwZDgtNTkzMi0z ZjdmLTgxYTMtZDMyNWJhMjk3MjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8QdaHtB+1/Kw8lbZp8p/YgONen/A2ridqT0UkEQvPOT/YnC0JB3nZL QC+l1h/lopcDtnqAB80zCDO5rSKWwwem//fdnXfA9RHZjtQlSCaYOVvGjc1V2SKv EqWz1rKl+VN/0tgHdcFqfZ6lbWdEUAbK2AT8bYSbhJOb9DsTZvssaLnl1CZX2xox CmQNocsvGFj6mZSsVdbiNJtJdT0H9DSRm3AGWj51TpARBYZG/vU3guHZGyE5Vg/Z g0wldJIxH6sdpcoDqx7NnmeWf6BtJysyuA+2kRM9Mhpbhqr4UBsmXQyE4pfLwn/z Xemku4/ZTof+czZMFo/Whrv+cQX3MDY= -----END CERTIFICATE-----Generated at Sat Apr 5 09:54:50 2025 by rpki-client