$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/cfe1da32-8410-369b-8311-ea32b3bd8657.roa File: cfe1da32-8410-369b-8311-ea32b3bd8657.roa (raw, json) Hash identifier: g3W2du3RX+l1OwxJ2NFgQ47E7hGbk7XXnOK0DstVp2w= Subject key identifier: 1D:3C:70:FF:72:CB:D8:E8:7E:8C:9D:5D:9D:29:C9:2E:F6:74:46:EB Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F432858496CE44F292B0A4E90156A2C80 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/cfe1da32-8410-369b-8311-ea32b3bd8657.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 559 IP address blocks: 66.180.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:4f:29:2b:0a:4e:90:15:6a:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=3c13d2a5-d9ad-429e-afe0-2ddd5c9a06a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:bd:d2:64:c8:56:1f:00:d7:c8:6d:1b:33: 79:b8:f0:1e:f2:b8:4d:9f:65:d1:73:5a:59:9c:b1: c9:2d:b9:f6:d0:58:4c:95:5d:db:be:7e:77:a6:4a: 02:8f:6b:a7:50:70:e3:a3:89:71:f4:c6:e0:54:84: c7:d9:5a:e8:24:c7:57:18:87:cd:3c:97:fb:c9:2d: c8:87:d6:ea:2c:f8:f5:29:04:99:49:43:dd:77:58: 27:67:44:39:2e:96:14:61:40:52:09:ad:80:2e:ea: 55:ca:aa:47:8c:d3:b4:b2:3b:77:91:d2:45:8a:7a: 23:e3:ae:12:42:a0:f8:c3:60:ae:27:a4:db:ba:6a: 23:48:f3:0f:a1:e3:de:a4:30:71:58:d6:65:d5:c3: e4:68:bc:ee:62:c6:01:02:4a:62:6e:7d:05:48:2b: aa:92:95:65:c1:2e:16:1b:b9:08:b9:21:07:85:60: 13:87:78:18:93:aa:7a:63:13:0f:ec:4e:b2:87:c3: cd:c6:af:9f:5a:86:d3:84:9d:09:1b:08:90:44:73: e8:86:4a:07:89:e3:03:26:fb:e5:de:dc:99:80:64: 69:14:ad:64:a4:b7:7f:55:db:2d:f2:c5:5d:f1:a4: f9:d9:75:8f:37:ba:fa:50:c2:f4:dd:e1:81:9d:22: 57:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3C:70:FF:72:CB:D8:E8:7E:8C:9D:5D:9D:29:C9:2E:F6:74:46:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/cfe1da32-8410-369b-8311-ea32b3bd8657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv4: 66.180.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:94:fb:8f:b8:d2:50:ea:b2:51:29:cb:00:29:f5:08:0d:c2: 1a:8e:d4:ab:41:c1:b3:bc:94:28:2a:1c:78:28:08:e0:7e:c3: 7a:73:e1:b2:22:6d:67:ce:d9:81:45:b5:ce:fd:8d:20:b7:69: fa:7f:cd:d5:27:ec:45:5b:07:aa:f2:2b:0e:4f:74:a1:e7:99: 4b:b4:8a:a7:6b:6f:7f:ff:f4:dd:e1:fa:77:a8:6c:de:0c:38: 1f:59:0c:8c:19:3c:4f:4f:f8:4f:c2:ee:b7:a7:57:3f:87:28: 34:cd:36:a7:37:8e:55:49:99:72:d0:7f:25:87:fe:00:2e:5d: 8e:5d:58:04:97:7f:a4:68:42:32:9d:74:3d:c4:33:e3:c9:3b: b9:ca:7c:a0:e7:e1:38:a5:51:ef:4e:00:be:8e:f2:66:ac:c1: 32:0c:bd:56:c2:b6:41:a8:40:4c:c8:28:c7:fa:d4:c3:ab:c5: 78:ab:1f:22:82:fe:f4:b6:c7:6c:7b:ee:5f:bd:ed:80:af:f3: ba:c7:17:d9:d3:62:f2:b5:2e:23:e6:37:61:8f:e5:96:84:05: c8:5c:3d:2e:2b:5c:8f:99:3c:ea:22:40:75:cb:59:61:80:f8: 0e:51:39:62:92:62:c9:e8:88:87:fa:3d:47:c5:e3:55:f5:06: 67:58:de:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5E8pKwpOkBVqLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk M2MxM2QyYTUtZDlhZC00MjllLWFmZTAtMmRkZDVjOWEwNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBu90mTIVh8A18htGzN5uPAe8rhNn2XRc1pZ nLHJLbn20FhMlV3bvn53pkoCj2unUHDjo4lx9MbgVITH2VroJMdXGIfNPJf7yS3I h9bqLPj1KQSZSUPdd1gnZ0Q5LpYUYUBSCa2ALupVyqpHjNO0sjt3kdJFinoj464S QqD4w2CuJ6TbumojSPMPoePepDBxWNZl1cPkaLzuYsYBAkpibn0FSCuqkpVlwS4W G7kIuSEHhWATh3gYk6p6YxMP7E6yh8PNxq+fWobThJ0JGwiQRHPohkoHieMDJvvl 3tyZgGRpFK1kpLd/Vdst8sVd8aT52XWPN7r6UML03eGBnSJXLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB08cP9yy9jofoydXZ0pyS72dEbrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvY2ZlMWRhMzItODQxMC0z NjliLTgzMTEtZWEzMmIzYmQ4NjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrS+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyU+4+40lDqslEpywAp9QgNwhqO1KtBwbO8lCgqHHgoCOB+w3pz4bIi bWfO2YFFtc79jSC3afp/zdUn7EVbB6ryKw5PdKHnmUu0iqdrb3//9N3h+neobN4M OB9ZDIwZPE9P+E/C7renVz+HKDTNNqc3jlVJmXLQfyWH/gAuXY5dWASXf6RoQjKd dD3EM+PJO7nKfKDn4TilUe9OAL6O8maswTIMvVbCtkGoQEzIKMf61MOrxXirHyKC /vS2x2x77l+97YCv87rHF9nTYvK1LiPmN2GP5ZaEBchcPS4rXI+ZPOoiQHXLWWGA +A5ROWKSYsnoiIf6PUfF41X1BmdY3mw= -----END CERTIFICATE-----Generated at Fri Apr 11 05:05:38 2025 by rpki-client