$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa File: f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa (raw, json) Hash identifier: RYa5/qUnchuJgiymE2MHgkqT3lUPnUirBWqrB9Hpjlg= Subject key identifier: BE:76:70:89:55:40:2F:13:07:22:A6:3D:2D:C3:AB:B8:0C:D8:A0:B0 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F43285848BBBB7FABF8A6D276351F7B20 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 266820 IP address blocks: 107.166.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:7f:ab:f8:a6:d2:76:35:1f:7b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=dc140957-212a-4ecf-8275-5a55a4fd8825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:91:cf:17:ea:7b:3f:0f:ac:cf:5d:a7:da:35: 9e:0d:f3:6d:8e:72:3d:a1:cd:4a:1f:91:fb:98:f3: 28:15:b6:f0:9d:e4:0a:81:de:b5:ce:1b:c3:1f:fb: bf:91:01:0c:76:0c:93:b7:cf:f8:6c:ad:fc:8b:7a: f3:d5:4a:4f:f0:d2:60:3f:ee:5f:d6:ab:40:32:59: d8:06:c7:47:04:ec:29:7b:59:f4:68:f7:18:70:9b: 58:0c:a4:0f:29:a9:f3:e5:5c:98:c3:ef:0b:c6:9e: 05:53:ae:47:db:2f:d7:ea:7b:c3:96:b9:19:a5:97: ba:88:b1:87:d1:a1:52:e3:93:db:de:2d:1c:6b:c5: 71:35:34:b4:13:4a:97:ff:0d:ab:50:fc:bd:16:59: a5:c1:48:63:ec:97:35:e9:cb:4c:78:89:e6:3d:34: 91:76:ed:6e:1e:09:7a:a4:dc:d9:25:d8:ce:02:8e: c4:7c:be:3f:3c:06:8b:55:09:e3:de:44:7f:fa:78: 8e:a5:ce:b0:70:ab:c3:34:98:b9:fd:cc:9b:88:ad: 75:55:39:f6:ac:bd:b7:0c:10:a8:eb:3c:fd:ea:de: d5:cb:7e:8a:d2:9b:c4:81:ca:5f:d4:a9:3b:e6:05: 4b:0f:71:0b:62:03:db:4d:d6:ff:23:4e:25:81:76: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:76:70:89:55:40:2F:13:07:22:A6:3D:2D:C3:AB:B8:0C:D8:A0:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 107.166.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:31:8b:26:cd:aa:b1:69:b1:48:3c:78:04:20:ee:29:12:af: 12:0a:64:43:01:39:67:0a:de:64:41:78:58:de:5b:d8:cc:fd: 3a:ae:6e:04:64:5a:77:bd:95:d0:7d:45:9f:f5:b8:58:a3:36: cb:f0:a3:fd:52:a6:b4:8e:64:c5:10:3c:ba:45:d3:f1:1c:e3: 40:1a:6f:84:56:1a:a3:41:21:35:7e:2c:a2:7f:0c:ad:44:a0: 51:19:e9:18:98:96:96:3c:18:bf:54:9b:8e:24:f2:d9:ac:19: 55:d1:2d:2c:9b:f4:0d:9e:21:11:74:08:c1:35:ae:e8:df:ba: c2:00:72:36:04:0c:b7:ed:81:54:b8:db:d5:de:9b:3b:61:19: 75:9c:4a:87:32:2c:b6:64:90:e5:b7:24:0c:dc:46:1f:a3:f1: 06:cf:90:b7:ae:cc:5a:ed:9f:15:a9:9f:fd:d1:2b:9e:48:81: 08:73:30:9e:c0:7b:8a:f1:01:a6:aa:42:d6:b4:f6:bf:50:70: 02:aa:4e:ab:1e:9a:06:05:20:0b:79:34:99:e3:93:60:67:ac: 2e:2e:71:8a:ab:fa:de:8d:85:d7:98:58:3d:8b:73:40:d3:7e: 24:17:89:6d:6f:66:d2:b4:e3:15:0d:6b:73:6b:55:93:ac:db: e0:7a:9f:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u3+r+KbSdjUfeyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ZGMxNDA5NTctMjEyYS00ZWNmLTgyNzUtNWE1NWE0ZmQ4ODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZHPF+p7Pw+sz12n2jWeDfNtjnI9oc1KH5H7 mPMoFbbwneQKgd61zhvDH/u/kQEMdgyTt8/4bK38i3rz1UpP8NJgP+5f1qtAMlnY BsdHBOwpe1n0aPcYcJtYDKQPKanz5VyYw+8Lxp4FU65H2y/X6nvDlrkZpZe6iLGH 0aFS45Pb3i0ca8VxNTS0E0qX/w2rUPy9FlmlwUhj7Jc16ctMeInmPTSRdu1uHgl6 pNzZJdjOAo7EfL4/PAaLVQnj3kR/+niOpc6wcKvDNJi5/cybiK11VTn2rL23DBCo 6zz96t7Vy36K0pvEgcpf1Kk75gVLD3ELYgPbTdb/I04lgXaK7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL52cIlVQC8TByKmPS3Dq7gM2KCwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvZjJjNDNhNmYtM2E5Ny0z OTc4LWI3Y2UtODNkMzVmMWUwZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa6YEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgxiybNqrFpsUg8eAQg7ikSrxIKZEMBOWcK3mRBeFjeW9jM/TqubgRk Wne9ldB9RZ/1uFijNsvwo/1SprSOZMUQPLpF0/Ec40Aab4RWGqNBITV+LKJ/DK1E oFEZ6RiYlpY8GL9Um44k8tmsGVXRLSyb9A2eIRF0CME1rujfusIAcjYEDLftgVS4 29XemzthGXWcSocyLLZkkOW3JAzcRh+j8QbPkLeuzFrtnxWpn/3RK55IgQhzMJ7A e4rxAaaqQta09r9QcAKqTqsemgYFIAt5NJnjk2BnrC4ucYqr+t6NhdeYWD2Lc0DT fiQXiW1vZtK04xUNa3NrVZOs2+B6n2M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:18 2025 by rpki-client