$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/5af1468e-e773-37fd-8eae-6322af02b768.roa File: 5af1468e-e773-37fd-8eae-6322af02b768.roa (raw, json) Hash identifier: VvjLiW8xbKuDe5pcdSYIg/pDl+786EWmfrFNMzjM4hE= Subject key identifier: 5D:17:25:B8:4E:EB:78:4C:69:AC:0F:A8:9E:AF:14:D2:AC:65:E6:1D Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F43285848E16BE8957049495DDE14EF80 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/5af1468e-e773-37fd-8eae-6322af02b768.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 33139 IP address blocks: 66.49.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e8:95:70:49:49:5d:de:14:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=088a6a8b-9ae7-4223-bd54-dfa4acc43337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:38:94:d1:62:25:fe:48:61:07:62:a6:bc:1e: 3d:fb:fd:13:95:73:cf:36:8b:c3:31:64:c5:09:b0: 89:02:d5:30:b4:63:8a:7f:5a:76:d8:b1:8c:89:85: 09:c9:a9:0d:25:aa:ab:e1:31:e5:b6:f3:85:dc:a5: 75:53:c8:3c:56:93:50:42:92:9f:71:65:63:29:45: 6b:63:f9:7e:fd:42:83:ad:5b:4a:4d:86:5d:97:c9: 07:e2:7a:82:e0:b8:77:9c:fb:b5:b5:2b:62:c4:f6: 2b:89:da:bf:8d:ec:2d:b6:ac:87:cd:d3:3e:6d:bf: df:e6:51:86:72:6a:b7:58:af:2f:58:1d:27:32:45: fb:7d:e5:09:28:d0:88:8e:dc:64:99:43:6a:ee:7f: 64:e5:e2:aa:c3:29:b8:40:da:fe:17:d0:aa:18:26: 10:bc:ac:83:4d:47:34:9f:8c:24:df:f7:7a:60:d7: 6f:c2:60:f5:d7:fc:55:91:8d:26:a5:0d:41:bb:48: b9:6a:09:8f:80:3d:99:4d:40:8d:89:ca:35:71:01: d1:4b:a1:a1:a9:17:da:50:8f:ba:30:7c:f9:5b:02: fa:09:02:56:a7:11:b1:fc:f6:76:d9:2b:06:39:8b: 33:fc:64:95:1d:ea:0e:d5:26:26:67:55:a8:a9:ad: 5c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:17:25:B8:4E:EB:78:4C:69:AC:0F:A8:9E:AF:14:D2:AC:65:E6:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/5af1468e-e773-37fd-8eae-6322af02b768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a4:83:99:6d:17:06:47:30:b8:16:7d:b4:30:46:f9:61:00: 6a:78:11:a0:12:c6:3e:da:7e:b6:2d:6d:32:c0:ce:c8:a7:38: e0:0b:e1:aa:33:39:0e:82:0c:62:e4:de:55:7b:e0:83:1a:76: f1:d4:b2:37:b7:78:ae:27:a6:cd:41:66:93:53:43:dd:c5:37: f6:c1:30:ed:5b:e3:36:e5:ec:cf:94:0e:ba:ad:33:82:5b:23: 76:db:c5:83:a3:46:0f:50:30:9b:09:34:e1:99:5f:31:af:1d: 6a:bd:ea:1b:18:29:20:46:03:54:3d:26:bf:59:9d:46:b3:69: 52:7b:de:e5:e3:1e:a0:37:b4:39:82:40:67:db:f7:e4:99:7c: f7:ab:94:0c:f4:99:e1:06:65:f4:3e:9f:5f:ee:80:bf:6f:e0: 13:ea:43:36:11:bf:cc:0d:ea:bf:56:c4:06:40:39:87:c6:4f: e5:f6:2b:42:ea:b9:35:42:56:cc:6e:e6:f4:d7:1d:5d:83:8d: a3:67:3a:b4:52:b2:cf:1d:fe:14:79:eb:a8:17:0c:c3:ad:a2: c8:93:c5:87:c6:0d:7d:d4:9e:56:45:05:99:16:4b:b2:f5:8d: 1f:4f:fc:bd:32:98:7e:33:79:de:de:ea:f0:c3:0b:93:a3:9a: b8:1e:e5:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+iVcElJXd4U74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk MDg4YTZhOGItOWFlNy00MjIzLWJkNTQtZGZhNGFjYzQzMzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjiU0WIl/khhB2KmvB49+/0TlXPPNovDMWTF CbCJAtUwtGOKf1p22LGMiYUJyakNJaqr4THltvOF3KV1U8g8VpNQQpKfcWVjKUVr Y/l+/UKDrVtKTYZdl8kH4nqC4Lh3nPu1tStixPYridq/jewttqyHzdM+bb/f5lGG cmq3WK8vWB0nMkX7feUJKNCIjtxkmUNq7n9k5eKqwym4QNr+F9CqGCYQvKyDTUc0 n4wk3/d6YNdvwmD11/xVkY0mpQ1Bu0i5agmPgD2ZTUCNico1cQHRS6GhqRfaUI+6 MHz5WwL6CQJWpxGx/PZ22SsGOYsz/GSVHeoO1SYmZ1Woqa1cAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0XJbhO63hMaawPqJ6vFNKsZeYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvNWFmMTQ2OGUtZTc3My0z N2ZkLThlYWUtNjMyMmFmMDJiNzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjH9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKkg5ltFwZHMLgWfbQwRvlhAGp4EaASxj7afrYtbTLAzsinOOAL4aoz OQ6CDGLk3lV74IMadvHUsje3eK4nps1BZpNTQ93FN/bBMO1b4zbl7M+UDrqtM4Jb I3bbxYOjRg9QMJsJNOGZXzGvHWq96hsYKSBGA1Q9Jr9ZnUazaVJ73uXjHqA3tDmC QGfb9+SZfPerlAz0meEGZfQ+n1/ugL9v4BPqQzYRv8wN6r9WxAZAOYfGT+X2K0Lq uTVCVsxu5vTXHV2DjaNnOrRSss8d/hR566gXDMOtosiTxYfGDX3UnlZFBZkWS7L1 jR9P/L0ymH4zed7e6vDDC5Ojmrge5ac= -----END CERTIFICATE-----Generated at Sat Apr 5 05:38:05 2025 by rpki-client