$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/c0d18a77-2220-385b-a93c-a67d1e048ec8.roa File: c0d18a77-2220-385b-a93c-a67d1e048ec8.roa (raw, json) Hash identifier: uO7xZWyWsoHqPb50Cw1b4msR3A5G8DiwxsrR919UKRA= Subject key identifier: 73:76:6B:4D:6E:1F:2D:BF:86:AF:54:72:42:2F:B0:16:0D:10:30:AC Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F43285848E16BE920C48DFF9553383C80 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/c0d18a77-2220-385b-a93c-a67d1e048ec8.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 33139 IP address blocks: 66.49.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e9:20:c4:8d:ff:95:53:38:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=d4762bfe-f1d5-4877-89a4-4439d913270e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:a9:7e:1e:ca:bf:8a:e0:75:ff:6b:57:03: 0e:15:40:32:70:d0:32:dd:58:52:b8:9a:ba:b0:bb: 5e:f8:1b:00:7e:c0:ac:bb:b7:1f:8c:4f:31:f1:bc: 99:ef:2c:fa:cd:22:00:5f:b3:eb:70:e9:86:c7:73: e9:bf:be:55:70:68:89:a1:21:22:a5:e1:b1:9f:d5: 67:09:74:4b:d8:7f:ee:76:f6:c6:b3:67:f6:e4:28: 63:7f:99:e8:6d:5a:c0:68:2a:69:f3:07:57:f2:4d: 3d:d9:89:7b:52:94:94:be:ca:1b:5d:2c:ac:77:8d: ee:e6:f8:ec:87:73:c4:ab:0d:71:48:e1:e4:5b:85: 3b:31:55:06:1f:e9:14:00:7a:d6:0b:f5:43:3e:de: 45:87:33:f5:a7:d4:02:45:bb:e4:1a:25:44:9e:31: 37:0e:ae:dd:92:7f:82:a6:a5:3a:21:a7:a0:24:55: be:71:71:79:5e:5a:96:0c:47:ef:ae:0a:ec:df:4c: f4:33:86:f8:f3:85:1f:22:80:b2:b5:5c:6f:75:b8: 9b:eb:ca:5f:08:89:bf:7a:ce:75:6c:d6:82:1f:7a: 03:62:1f:ce:72:1f:6f:8a:31:74:ff:59:44:2e:40: 87:37:fb:5b:79:8f:de:bb:5a:30:4a:02:b5:bf:56: 66:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:76:6B:4D:6E:1F:2D:BF:86:AF:54:72:42:2F:B0:16:0D:10:30:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/c0d18a77-2220-385b-a93c-a67d1e048ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c7:05:20:45:96:e6:dd:b4:de:2e:98:6b:88:c8:e0:44:9a: fd:a7:09:03:d2:43:01:53:c3:52:d9:7d:92:75:cf:44:5d:85: c0:70:80:a2:2e:00:73:cd:38:58:a5:5c:66:2a:ac:29:ff:14: 60:87:16:83:f1:c4:29:d6:41:32:31:66:d6:8a:73:1a:cf:8c: b0:82:31:99:35:9f:49:74:49:02:7d:5c:0a:7e:39:df:57:bb: 02:79:cc:65:f6:0b:ca:9f:5a:b2:03:23:ad:fd:66:ca:34:45: 2b:33:99:9b:16:28:40:f0:ba:d0:15:e6:34:63:53:6e:1f:53: eb:65:24:fb:3c:96:d7:d6:27:3f:95:4f:68:44:5f:82:3f:68: 81:1c:3f:fe:f4:63:63:e2:3b:8f:02:ff:25:19:78:70:3a:06: ca:8f:fd:97:86:ce:24:18:5d:46:da:fe:36:14:fd:a0:cf:0d: 3f:7b:c7:6e:27:92:07:53:6b:d0:4e:63:3b:8b:32:91:15:a0: 69:03:1c:ea:4e:55:b3:da:b9:55:b2:84:18:c4:7a:2f:81:60: 96:84:7d:83:a3:f1:fc:f2:93:f6:26:ec:f4:33:43:ee:42:09: d8:32:6e:8a:03:b6:68:67:77:f6:b5:b3:1f:9b:40:43:45:23: a5:7f:dc:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+kgxI3/lVM4PIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDQ3NjJiZmUtZjFkNS00ODc3LTg5YTQtNDQzOWQ5MTMyNzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveupfh7Kv4rgdf9rVwMOFUAycNAy3VhSuJq6 sLte+BsAfsCsu7cfjE8x8byZ7yz6zSIAX7PrcOmGx3Ppv75VcGiJoSEipeGxn9Vn CXRL2H/udvbGs2f25Chjf5nobVrAaCpp8wdX8k092Yl7UpSUvsobXSysd43u5vjs h3PEqw1xSOHkW4U7MVUGH+kUAHrWC/VDPt5FhzP1p9QCRbvkGiVEnjE3Dq7dkn+C pqU6IaegJFW+cXF5XlqWDEfvrgrs30z0M4b484UfIoCytVxvdbib68pfCIm/es51 bNaCH3oDYh/Och9vijF0/1lELkCHN/tbeY/eu1owSgK1v1ZmGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN2a01uHy2/hq9UckIvsBYNEDCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvYzBkMThhNzctMjIyMC0z ODViLWE5M2MtYTY3ZDFlMDQ4ZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjHGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/HBSBFlubdtN4umGuIyOBEmv2nCQPSQwFTw1LZfZJ1z0RdhcBwgKIu AHPNOFilXGYqrCn/FGCHFoPxxCnWQTIxZtaKcxrPjLCCMZk1n0l0SQJ9XAp+Od9X uwJ5zGX2C8qfWrIDI639Zso0RSszmZsWKEDwutAV5jRjU24fU+tlJPs8ltfWJz+V T2hEX4I/aIEcP/70Y2PiO48C/yUZeHA6BsqP/ZeGziQYXUba/jYU/aDPDT97x24n kgdTa9BOYzuLMpEVoGkDHOpOVbPauVWyhBjEei+BYJaEfYOj8fzyk/Ym7PQzQ+5C CdgybooDtmhnd/a1sx+bQENFI6V/3Js= -----END CERTIFICATE-----Generated at Sat Apr 5 05:15:04 2025 by rpki-client