$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ffbae651-8d87-35f3-9342-d06b82cf18c4.roa File: ffbae651-8d87-35f3-9342-d06b82cf18c4.roa (raw, json) Hash identifier: NzdHzLL9HoStOcnhnV9Pc13LeW9c3Lx0BdZPI2Bt8Fo= Subject key identifier: 68:A2:3F:93:48:E3:BE:A9:9A:BC:74:B4:82:71:46:D2:9A:A4:7F:FE Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848801DCC0674FE81FCAEA18920 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ffbae651-8d87-35f3-9342-d06b82cf18c4.roa Signing time: Fri 10 Jan 2025 17:30:24 +0000 ROA not before: Fri 10 Jan 2025 17:30:24 +0000 ROA not after: Thu 10 Apr 2025 16:30:24 +0000 asID: 213993 IP address blocks: 108.165.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:80:1d:cc:06:74:fe:81:fc:ae:a1:89:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jan 10 17:30:24 2025 GMT Not After : Apr 10 16:30:24 2025 GMT Subject: CN=cbee9ed1-bf50-405d-b3eb-4db978401fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:1b:c6:e9:4c:e7:da:f3:45:76:7f:6c:a6: c2:f4:99:18:1e:ab:49:40:6c:47:0d:3f:18:e7:1c: 52:a2:1d:5f:9c:15:14:cc:68:78:6d:0c:ba:62:eb: d9:d7:31:18:d5:fa:f6:b8:1d:30:0d:a6:e2:30:8d: a5:87:d0:95:ee:19:d2:ed:31:0e:58:a8:03:6e:a5: 49:80:36:23:dc:fb:2f:c2:70:b0:a8:c8:22:16:5e: 84:b6:e5:5b:8f:67:39:b8:30:af:c2:81:93:5b:96: 6e:4e:93:5d:2c:7b:7a:51:2a:24:e4:3b:4f:fa:a4: 47:9c:9b:57:cc:38:b6:6a:34:05:3d:59:f2:d2:53: 6c:ea:e7:71:51:65:17:38:cb:b1:f5:3c:a1:e3:8f: c7:2b:b2:ea:c9:ba:55:0f:9b:2d:45:5d:d8:7a:7b: fc:e7:aa:f3:42:b6:01:9a:a4:87:d3:99:cb:ee:ec: 55:69:93:ce:11:f7:70:f6:7b:4d:bf:8b:a4:5a:b7: fc:1a:1a:92:93:49:99:c3:9d:a9:c6:08:77:01:9d: 65:a4:3b:41:52:bb:15:8b:27:35:80:15:d7:be:b1: 99:41:ee:52:d6:8a:05:6e:b3:f5:37:d2:b3:79:3a: a5:ea:05:bf:a8:83:d0:82:e9:a3:4e:15:ef:d1:dc: b2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A2:3F:93:48:E3:BE:A9:9A:BC:74:B4:82:71:46:D2:9A:A4:7F:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ffbae651-8d87-35f3-9342-d06b82cf18c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:43:99:b6:54:4e:f3:c0:13:30:83:4d:71:fd:79:7b:41:b7: 89:50:a2:60:8a:cd:14:8c:7f:80:2c:a0:bd:d0:27:2a:d5:dc: f7:e4:7b:5a:04:a0:1e:31:7a:ab:83:fd:36:c9:4b:87:2c:36: 9e:83:2c:e4:f2:3a:3e:14:0d:2a:29:8f:55:b4:39:54:2e:32: fd:ac:e8:42:e6:64:27:a4:14:de:ec:d1:9d:b3:1e:4a:08:f6: 9a:a4:38:09:62:46:ac:67:f1:fe:84:94:4d:4a:14:f1:60:37: e7:56:d9:0c:4f:c1:73:57:9f:31:a9:10:06:37:74:81:c1:1f: 6a:da:75:a1:db:4a:31:b6:78:34:58:e0:ee:e7:6c:7d:8b:9d: d9:54:98:ed:ab:8f:04:bb:d3:b1:a6:9e:5c:14:bb:d1:25:73: 51:bc:c6:a4:32:26:9d:05:cc:bb:13:9b:8f:8d:ab:e9:7f:63: ea:f9:af:39:11:ea:6f:11:5f:ed:b3:23:5b:3e:4f:53:58:12: 77:48:25:24:a9:df:20:fe:9a:fa:a3:1b:0f:f0:49:9e:87:73: 4c:c1:9a:75:a0:ca:c8:64:0d:51:f6:48:82:26:ab:8d:e8:37: 63:8b:49:0d:a9:df:5f:61:af:66:43:64:4a:db:90:b3:b8:3a: fd:4c:1d:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiAHcwGdP6B/K6hiSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDExMDE3MzAyNFoXDTI1MDQxMDE2MzAyNFowLzEtMCsGA1UEAxMk Y2JlZTllZDEtYmY1MC00MDVkLWIzZWItNGRiOTc4NDAxZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApscbxulM59rzRXZ/bKbC9JkYHqtJQGxHDT8Y 5xxSoh1fnBUUzGh4bQy6YuvZ1zEY1fr2uB0wDabiMI2lh9CV7hnS7TEOWKgDbqVJ gDYj3PsvwnCwqMgiFl6EtuVbj2c5uDCvwoGTW5ZuTpNdLHt6USok5DtP+qRHnJtX zDi2ajQFPVny0lNs6udxUWUXOMux9Tyh44/HK7LqybpVD5stRV3Yenv856rzQrYB mqSH05nL7uxVaZPOEfdw9ntNv4ukWrf8GhqSk0mZw52pxgh3AZ1lpDtBUrsViyc1 gBXXvrGZQe5S1ooFbrP1N9KzeTql6gW/qIPQgumjThXv0dyy7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiiP5NI476pmrx0tIJxRtKapH/+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmZiYWU2NTEtOGQ4Ny0z NWYzLTkzNDItZDA2YjgyY2YxOGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFDmbZUTvPAEzCDTXH9eXtBt4lQomCKzRSMf4AsoL3QJyrV3Pfke1oE oB4xequD/TbJS4csNp6DLOTyOj4UDSopj1W0OVQuMv2s6ELmZCekFN7s0Z2zHkoI 9pqkOAliRqxn8f6ElE1KFPFgN+dW2QxPwXNXnzGpEAY3dIHBH2radaHbSjG2eDRY 4O7nbH2LndlUmO2rjwS707GmnlwUu9Elc1G8xqQyJp0FzLsTm4+Nq+l/Y+r5rzkR 6m8RX+2zI1s+T1NYEndIJSSp3yD+mvqjGw/wSZ6Hc0zBmnWgyshkDVH2SIImq43o N2OLSQ2p319hr2ZDZErbkLO4Ov1MHZ8= -----END CERTIFICATE-----Generated at Wed Feb 5 09:50:46 2025 by rpki-client