$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/f8368360-af83-3cf4-8c9b-cf3a40d43f65.roa File: f8368360-af83-3cf4-8c9b-cf3a40d43f65.roa (raw, json) Hash identifier: UUvyOW3uAt/ydce0Y5lnpmriPa8jBhQgeBhG8fRMGd0= Subject key identifier: C2:11:5F:D5:45:6C:36:79:12:2B:E0:6C:24:4A:B8:B7:7D:A6:ED:33 Certificate issuer: /CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a Certificate serial: 010D0C9F43285849287E5F84FA244965EF206B00 Authority key identifier: 36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/f8368360-af83-3cf4-8c9b-cf3a40d43f65.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 66.187.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:5f:84:fa:24:49:65:ef:20:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=3a018298-e4f4-46e1-8e91-87df760faccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:33:9b:14:cf:d0:8c:a0:ae:12:d6:b5:9d: f7:1d:d4:4e:8c:29:01:23:4c:3f:d8:ef:36:f6:48: 7f:50:f8:76:af:c7:f5:1e:51:82:7d:3a:09:bc:02: 87:46:20:2c:62:a7:78:50:ff:44:11:93:e9:99:b0: 30:2d:ce:f8:0d:65:28:30:c1:09:ae:f1:05:b3:71: ed:10:b4:a9:0f:39:13:6e:c4:e5:a6:f3:bc:41:7d: c8:1b:b7:15:6c:7a:2e:79:62:fb:b8:6d:8a:22:0d: da:c0:6c:85:78:e1:15:67:37:db:fb:f5:6e:8f:be: df:80:79:b2:41:9e:24:1d:0f:99:6e:d3:1e:02:92: 16:16:5b:24:73:7a:34:0c:ef:2f:68:c7:a6:f2:82: c9:d2:12:7a:47:12:17:b2:7d:1e:1c:71:59:90:a4: 5c:59:04:20:7f:fa:67:ff:f8:38:af:86:fe:f7:a6: e1:fe:e1:ec:2c:d0:47:c5:9b:58:33:e2:d9:b0:13: 1b:51:ba:cc:60:4c:a0:4b:0f:7a:91:29:78:29:20: ef:a5:5e:fb:d7:9f:aa:c4:b2:76:c3:28:25:54:e8: 8e:62:79:8c:22:a7:2f:2d:4c:19:92:b4:1c:15:18: ff:9f:4e:d3:0e:17:0f:e5:ac:07:d3:7e:02:51:08: aa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:11:5F:D5:45:6C:36:79:12:2B:E0:6C:24:4A:B8:B7:7D:A6:ED:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/f8368360-af83-3cf4-8c9b-cf3a40d43f65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl X509v3 Authority Key Identifier: keyid:36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer sbgp-ipAddrBlock: critical IPv4: 66.187.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:56:7b:82:21:29:06:06:03:c9:7f:dd:84:78:12:a2:a4:23: a9:4c:9e:05:56:45:bf:d3:dc:f4:d7:21:17:82:20:26:3f:98: 33:e2:10:ee:5b:f4:a4:0b:13:35:c0:2a:5c:0f:79:a8:35:69: a8:83:71:51:bc:dc:e0:d3:cc:79:0e:ce:45:9b:ca:d7:a5:b2: d7:83:93:b6:47:b1:a4:8a:7a:b1:dd:3e:5d:fd:16:11:5f:c4: 62:99:5a:87:7f:57:41:94:f0:d2:5e:05:a8:7c:d3:5b:03:f3: 06:fc:78:76:8c:0f:aa:a4:9c:6b:b9:dd:e6:c8:77:af:12:34: b6:a7:1a:56:6e:e4:85:98:61:77:35:f9:aa:4b:a1:13:e4:55: 11:f8:d7:e8:cc:d9:4c:35:6f:1f:e0:f2:b5:eb:ac:49:77:33: 82:a0:69:20:95:0a:1c:b3:13:fc:f7:d2:50:ae:5d:d9:cb:c0: f4:22:eb:11:16:35:19:e4:ce:fb:da:c8:c4:5e:3b:ab:a3:fc: fc:82:c9:0b:a4:83:b1:25:2f:13:7b:af:d6:a9:a8:d6:f3:24: 8d:7c:c6:91:51:62:13:54:5d:ca:ba:77:34:08:db:ff:1f:39: 39:32:f1:2e:d6:46:54:27:9f:7f:1b:c0:f3:11:b6:72:aa:75: e8:b8:07:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofl+E+iRJZe8gawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGQ3OGEtMDJjYi00NmVlLWFjZDEtNDY0ZjAzZjNl MTJhMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk M2EwMTgyOTgtZTRmNC00NmUxLThlOTEtODdkZjc2MGZhY2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQozmxTP0IygrhLWtZ33HdROjCkBI0w/2O82 9kh/UPh2r8f1HlGCfToJvAKHRiAsYqd4UP9EEZPpmbAwLc74DWUoMMEJrvEFs3Ht ELSpDzkTbsTlpvO8QX3IG7cVbHoueWL7uG2KIg3awGyFeOEVZzfb+/Vuj77fgHmy QZ4kHQ+ZbtMeApIWFlskc3o0DO8vaMem8oLJ0hJ6RxIXsn0eHHFZkKRcWQQgf/pn //g4r4b+96bh/uHsLNBHxZtYM+LZsBMbUbrMYEygSw96kSl4KSDvpV7715+qxLJ2 wyglVOiOYnmMIqcvLUwZkrQcFRj/n07TDhcP5awH034CUQiqkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIRX9VFbDZ5EivgbCRKuLd9pu0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZGQ4 ZDc4YS0wMmNiLTQ2ZWUtYWNkMS00NjRmMDNmM2UxMmEvZjgzNjgzNjAtYWY4My0z Y2Y0LThjOWItY2YzYTQwZDQzZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWRkOGQ3OGEtMDJjYi00NmVlLWFj ZDEtNDY0ZjAzZjNlMTJhLzFkZDhkNzhhLTAyY2ItNDZlZS1hY2QxLTQ2NGYwM2Yz ZTEyYS5jcmwwHwYDVR0jBBgwFoAUNkhexZprzYeaeNoLWq65iRuYFGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZGQ4ZDc4YS0wMmNiLTQ2ZWUtYWNkMS00NjRm MDNmM2UxMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9We4IhKQYGA8l/3YR4EqKkI6lMngVWRb/T3PTXIReCICY/mDPiEO5b 9KQLEzXAKlwPeag1aaiDcVG83ODTzHkOzkWbytelsteDk7ZHsaSKerHdPl39FhFf xGKZWod/V0GU8NJeBah801sD8wb8eHaMD6qknGu53ebId68SNLanGlZu5IWYYXc1 +apLoRPkVRH41+jM2Uw1bx/g8rXrrEl3M4KgaSCVChyzE/z30lCuXdnLwPQi6xEW NRnkzvvayMReO6uj/PyCyQukg7ElLxN7r9apqNbzJI18xpFRYhNUXcq6dzQI2/8f OTky8S7WRlQnn38bwPMRtnKqdei4B78= -----END CERTIFICATE-----Generated at Fri Mar 14 13:50:32 2025 by rpki-client