$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa File: db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa (raw, json) Hash identifier: qFXHoAWOb5o+hSFNssEW2baWOShBTRum4R6Hb7ME2Vk= Subject key identifier: FC:96:A3:1F:97:75:51:12:B5:23:B7:48:B4:16:20:A2:02:C7:07:EA Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584944692C6BE6C2C7582BBAB380 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 22808 IP address blocks: 66.112.128.8/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:2c:6b:e6:c2:c7:58:2b:ba:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=0c8d629b-2597-4081-8c5d-1d89a691a826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:f1:27:e5:b3:25:4a:a2:11:20:52:b6:43: 58:f4:71:ee:fb:b2:0f:e4:02:fb:19:41:f9:0f:22: 71:ae:44:f6:5c:25:63:84:48:66:b3:2a:72:1c:44: f6:82:1d:68:e9:15:9d:4b:1f:c8:23:58:d7:ba:ec: cd:58:58:66:a3:09:e5:c3:dd:f5:f5:73:fa:7f:7d: 38:5f:16:83:a0:59:42:ff:4d:b1:8b:80:15:8a:0d: 91:f0:fe:5c:0d:e2:01:f9:a6:9a:13:64:75:3e:ce: 85:24:a2:dd:32:28:5b:3f:e3:ba:8c:e8:30:b8:26: 7c:5a:06:9f:f9:ce:a1:7a:db:26:77:0e:73:43:3d: d3:81:62:00:74:cf:d7:b7:73:ea:44:73:da:0a:83: 85:05:27:ed:fe:00:2f:09:12:0f:8f:b6:08:5e:ed: f8:01:4e:b8:32:b6:46:2f:1f:c0:a0:3a:45:b4:1c: c4:36:ae:36:68:6a:a7:32:86:2e:6f:0d:c1:a6:f0: cb:65:fa:7a:fa:5f:23:b8:0a:3d:f4:7b:b3:24:1f: ab:26:41:17:e2:69:20:55:b4:c9:8b:d0:af:ac:2a: 9b:e3:03:36:b2:b4:ed:b1:b9:1e:01:68:d4:5b:5a: 50:c6:86:a6:ec:a0:84:51:e8:c1:2d:6e:37:47:3f: 3f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:96:A3:1F:97:75:51:12:B5:23:B7:48:B4:16:20:A2:02:C7:07:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.8/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e7:07:7c:b6:66:2c:2b:1a:d7:46:35:20:fc:92:c5:1d:e5: 61:c1:05:36:40:1c:9e:0a:56:13:37:87:6f:ec:ef:64:89:25: 4f:77:a9:4b:ad:eb:de:01:60:79:82:78:8a:c1:24:dc:99:d9: d1:3a:b6:5b:1b:54:af:6d:34:c5:6c:7f:f6:37:00:dd:15:f2: cb:a0:e1:2a:ab:3e:01:d0:ac:15:7f:4d:d2:3f:09:a9:dd:c6: b5:0c:d6:ec:c1:11:4f:b9:63:fe:5b:e0:1e:b0:38:09:47:5b: 1b:72:c2:5b:16:2c:0e:f3:72:0c:d8:0f:4b:5c:12:9e:36:73: f4:8e:a1:31:a4:90:94:4f:f8:1d:63:79:d4:58:5b:e4:70:db: dd:54:93:87:55:86:81:78:f3:a4:d2:a5:8a:60:c9:5f:e5:b6: b6:02:2b:4d:88:7a:84:9a:5f:ab:5f:b9:bc:84:28:62:f9:52: 77:b1:4d:31:be:c0:00:a9:cd:e9:8d:de:e6:3f:90:91:31:92: 43:1a:7f:66:de:fa:8a:80:a4:dc:6b:cb:3a:10:cb:26:2c:64: 57:72:51:e1:f1:cc:7b:5d:fa:20:db:fb:dd:df:ae:91:f0:ce: f9:4b:ce:77:c3:47:58:b4:11:f2:3e:f5:e9:08:8a:75:c1:a4: 1f:ed:f7:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElEaSxr5sLHWCu6s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MGM4ZDYyOWItMjU5Ny00MDgxLThjNWQtMWQ4OWE2OTFhODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSTxJ+WzJUqiESBStkNY9HHu+7IP5AL7GUH5 DyJxrkT2XCVjhEhmsypyHET2gh1o6RWdSx/II1jXuuzNWFhmownlw9319XP6f304 XxaDoFlC/02xi4AVig2R8P5cDeIB+aaaE2R1Ps6FJKLdMihbP+O6jOgwuCZ8Wgaf +c6hetsmdw5zQz3TgWIAdM/Xt3PqRHPaCoOFBSft/gAvCRIPj7YIXu34AU64MrZG Lx/AoDpFtBzENq42aGqnMoYubw3BpvDLZfp6+l8juAo99HuzJB+rJkEX4mkgVbTJ i9CvrCqb4wM2srTtsbkeAWjUW1pQxoam7KCEUejBLW43Rz8/AQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPyWox+XdVEStSO3SLQWIKICxwfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZGIwYmUzNmMtZGJiYi0z NWIyLWFhODEtZTg0MjE2M2EyYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDQnCACDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAr5wd8tmYsKxrXRjUg/JLFHeVhwQU2QByeClYTN4dv7O9kiSVPd6lL reveAWB5gniKwSTcmdnROrZbG1SvbTTFbH/2NwDdFfLLoOEqqz4B0KwVf03SPwmp 3ca1DNbswRFPuWP+W+AesDgJR1sbcsJbFiwO83IM2A9LXBKeNnP0jqExpJCUT/gd Y3nUWFvkcNvdVJOHVYaBePOk0qWKYMlf5ba2AitNiHqEml+rX7m8hChi+VJ3sU0x vsAAqc3pjd7mP5CRMZJDGn9m3vqKgKTca8s6EMsmLGRXclHh8cx7Xfog2/vd366R 8M75S853w0dYtBHyPvXpCIp1waQf7fdK -----END CERTIFICATE-----Generated at Sat Apr 12 16:15:12 2025 by rpki-client