$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bad120b8-8503-344a-8e33-655ad28b7df1.roa File: bad120b8-8503-344a-8e33-655ad28b7df1.roa (raw, json) Hash identifier: yKXlnvGgI+dg1h6hYrsW4m9txE2U4ln2sId4lkh3rLs= Subject key identifier: 6B:45:FF:93:74:D3:F9:C5:86:D2:10:E6:34:00:C5:B3:4C:BB:DF:39 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848EF6146B25C6865B0C62687C0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bad120b8-8503-344a-8e33-655ad28b7df1.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 66.255.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:46:b2:5c:68:65:b0:c6:26:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=838afd05-ae58-4931-8207-974eff7ee4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a5:6a:af:9d:27:34:06:7c:c4:70:82:e9:9c: c0:15:4d:6c:f0:9c:69:77:50:35:1a:b5:ab:6b:dc: 63:e5:56:54:06:f4:96:9f:2a:8c:ca:17:42:6e:6e: 8e:97:0b:27:7f:8d:54:00:20:b5:f5:5f:db:57:e4: 2c:c6:a5:ef:c8:f8:d7:c9:ae:9d:8c:a8:e5:ef:f3: 8b:02:98:6c:5b:79:08:f8:47:be:9c:cc:76:d3:05: 0c:65:d5:43:d1:cf:8c:c3:fc:bd:0f:cc:09:82:fa: 7b:c9:a7:4d:5f:83:16:49:b7:34:c2:05:de:89:25: f3:68:04:bf:ea:6e:57:7b:26:03:d5:6e:34:40:3e: 07:3b:67:04:d8:84:c3:b4:43:27:89:d2:72:6f:3e: 72:51:94:85:27:ea:a6:db:7d:7f:ad:46:42:46:78: 0d:c7:2c:1a:1a:59:55:d8:7b:ff:93:68:11:4b:64: 67:d8:18:c8:f0:f5:e3:db:76:b3:88:71:95:1b:ab: 0b:03:da:26:35:ba:d7:d5:90:46:1f:e4:46:df:8b: fc:de:7b:c4:b2:7b:28:f4:ee:c9:d7:ec:06:f9:3e: 7b:34:f2:e6:fa:21:3b:06:c5:0d:0a:1c:8e:15:f5: 44:16:2f:6e:39:35:15:9f:40:82:c7:3a:89:a9:f4: 00:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:45:FF:93:74:D3:F9:C5:86:D2:10:E6:34:00:C5:B3:4C:BB:DF:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bad120b8-8503-344a-8e33-655ad28b7df1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 66.255.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f6:64:33:8c:6f:d8:ae:a7:6c:20:aa:37:86:6a:a7:ff:2e: 26:32:2e:6f:38:cd:ab:fb:cc:8f:04:cd:d2:20:db:b6:c3:d5: 03:9a:37:49:8f:d6:c6:61:6d:1c:5d:9c:ce:80:01:85:44:e8: d3:28:aa:66:ad:26:bc:5c:18:ac:a6:9e:1b:5b:e2:47:c1:26: a2:3c:78:61:cd:74:f4:c3:a7:fc:11:58:ac:d0:02:d9:a6:71: 6c:ed:6e:46:d5:4a:8a:3c:1d:f4:50:a1:18:a2:0a:7c:6e:32: 62:3b:8d:f8:9d:40:ec:89:b7:ca:88:e2:c0:f3:79:71:11:6a: 37:fc:27:c8:bb:1d:f5:b6:59:ab:75:f5:13:34:03:a1:ef:3a: 71:19:6f:db:18:36:22:83:71:ab:3f:16:d5:a0:52:2f:ab:08: d7:39:c4:25:0d:00:50:a3:03:48:8d:d5:a2:92:53:e6:b7:e6: 53:7e:1c:7c:66:db:f6:db:7b:48:4d:dc:fd:83:24:62:ae:92: 1e:38:1e:b6:22:12:5b:f4:93:df:2c:b7:67:d7:36:7a:17:19: 56:22:a5:8c:c9:5d:93:33:4c:e9:b9:9e:57:d9:05:86:ab:e2: 43:7b:8d:fe:41:7c:14:f0:8b:91:a4:43:a9:0c:04:fd:f8:6f: 82:87:15:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUayXGhlsMYmh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ODM4YWZkMDUtYWU1OC00OTMxLTgyMDctOTc0ZWZmN2VlNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqVqr50nNAZ8xHCC6ZzAFU1s8Jxpd1A1GrWr a9xj5VZUBvSWnyqMyhdCbm6Olwsnf41UACC19V/bV+QsxqXvyPjXya6djKjl7/OL AphsW3kI+Ee+nMx20wUMZdVD0c+Mw/y9D8wJgvp7yadNX4MWSbc0wgXeiSXzaAS/ 6m5XeyYD1W40QD4HO2cE2ITDtEMnidJybz5yUZSFJ+qm231/rUZCRngNxywaGllV 2Hv/k2gRS2Rn2BjI8PXj23aziHGVG6sLA9omNbrX1ZBGH+RG34v83nvEsnso9O7J 1+wG+T57NPLm+iE7BsUNChyOFfVEFi9uOTUVn0CCxzqJqfQAEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtF/5N00/nFhtIQ5jQAxbNMu985MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYmFkMTIwYjgtODUwMy0z NDRhLThlMzMtNjU1YWQyOGI3ZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv/NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID2ZDOMb9iup2wgqjeGaqf/LiYyLm84zav7zI8EzdIg27bD1QOaN0mP 1sZhbRxdnM6AAYVE6NMoqmatJrxcGKymnhtb4kfBJqI8eGHNdPTDp/wRWKzQAtmm cWztbkbVSoo8HfRQoRiiCnxuMmI7jfidQOyJt8qI4sDzeXERajf8J8i7HfW2Wat1 9RM0A6HvOnEZb9sYNiKDcas/FtWgUi+rCNc5xCUNAFCjA0iN1aKSU+a35lN+HHxm 2/bbe0hN3P2DJGKukh44HrYiElv0k98st2fXNnoXGVYipYzJXZMzTOm5nlfZBYar 4kN7jf5BfBTwi5GkQ6kMBP34b4KHFd8= -----END CERTIFICATE-----Generated at Fri Apr 4 19:50:35 2025 by rpki-client