$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa File: ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa (raw, json) Hash identifier: z4NG4NjQKoqhAIoh20huEqd9imuPfJ84Pp49+tDxtE0= Subject key identifier: AD:17:35:41:2E:B4:9A:84:69:C2:61:4A:AC:0C:C6:9E:1C:C4:34:39 Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F43285848E16BE9121D94F0EE2D6763C0 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 33139 IP address blocks: 66.49.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e9:12:1d:94:f0:ee:2d:67:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=1d3d050c-9690-46c1-9abf-34fa879cc141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:41:93:29:2c:d4:fc:9b:a3:f0:02:3a:b3:9f: a6:22:76:40:7b:58:ce:1d:76:c7:50:68:07:80:c1: 28:f6:f2:79:2c:3a:4e:be:e7:ec:ae:66:02:20:6d: 4c:7c:3c:ba:34:81:ab:2d:cd:e3:02:b6:d3:ed:ad: e9:5f:fe:65:68:dc:b7:6f:5c:f9:72:af:7c:4c:06: 4d:d7:85:ca:17:e2:98:37:96:ff:aa:25:e5:63:48: 65:91:17:c2:5c:bc:1b:75:97:07:bd:64:36:70:34: b8:2f:f6:3d:34:d1:2b:87:36:b3:df:e4:fa:55:10: fe:7a:d5:74:91:03:1a:c9:60:8b:52:6f:dd:c1:72: aa:6f:9c:94:e3:43:13:2e:36:96:9c:77:ac:fd:67: 50:5c:6e:60:7b:61:43:3d:c9:f4:be:4d:70:19:bb: 13:b9:aa:79:95:83:8b:67:ac:7c:c0:0d:29:c7:c2: 19:d2:96:31:43:64:d6:2f:11:ab:69:b4:46:da:ba: ea:ad:8c:b1:c2:62:18:21:37:10:11:33:cd:e2:51: f2:0d:fc:09:d2:57:9e:4f:40:de:59:8d:38:53:24: 03:3c:8f:6f:1a:77:40:5f:14:cb:f5:62:e1:14:e0: 6c:32:bc:ef:b6:be:27:6a:5e:47:aa:cd:f0:e4:b2: d1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:17:35:41:2E:B4:9A:84:69:C2:61:4A:AC:0C:C6:9E:1C:C4:34:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:2e:22:73:37:c6:c7:bb:5d:d2:86:58:47:12:6f:a8:47:22: b0:a4:4f:6e:dd:62:bd:cc:48:36:81:37:80:c4:5e:b5:7f:f0: 91:f9:c6:12:8b:bb:e9:0c:a0:23:c4:4e:24:d5:c8:2a:a6:bc: 3c:15:f4:ff:f9:11:9b:45:6a:c0:35:93:9e:b4:1d:b1:fe:0f: 37:18:44:11:7c:57:c6:34:34:bf:d8:8a:ad:13:2f:05:ed:b2: 2c:30:45:a4:7c:78:ef:50:e5:87:9d:cb:35:46:fa:27:3d:a7: e8:30:ad:78:31:99:6c:8d:5f:7f:ad:62:7e:31:0a:de:56:b3: 4d:ff:cc:54:f6:22:5b:46:04:f5:2c:d7:c3:b0:50:81:93:9f: 7d:28:8f:88:6d:3a:e8:5d:95:25:55:ef:f2:64:c5:8a:77:b0: 2e:ec:d9:2f:2a:ce:fd:79:d0:d4:6a:60:45:87:67:c7:09:4a: 3d:cc:80:94:9c:be:4c:65:fc:87:6e:6d:46:23:61:4d:58:b2: 4d:a1:07:41:0a:28:a9:b0:9e:9c:1b:a0:55:d6:86:7e:b0:b3: 28:56:c3:4f:da:de:7e:fa:ad:cd:48:95:2c:17:06:e9:34:cb: ed:1a:f8:bd:6b:32:8f:e6:36:26:3a:3c:70:1a:fe:f4:3f:dc: d9:9d:49:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+kSHZTw7i1nY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk MWQzZDA1MGMtOTY5MC00NmMxLTlhYmYtMzRmYTg3OWNjMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkGTKSzU/Juj8AI6s5+mInZAe1jOHXbHUGgH gMEo9vJ5LDpOvufsrmYCIG1MfDy6NIGrLc3jArbT7a3pX/5laNy3b1z5cq98TAZN 14XKF+KYN5b/qiXlY0hlkRfCXLwbdZcHvWQ2cDS4L/Y9NNErhzaz3+T6VRD+etV0 kQMayWCLUm/dwXKqb5yU40MTLjaWnHes/WdQXG5ge2FDPcn0vk1wGbsTuap5lYOL Z6x8wA0px8IZ0pYxQ2TWLxGrabRG2rrqrYyxwmIYITcQETPN4lHyDfwJ0leeT0De WY04UyQDPI9vGndAXxTL9WLhFOBsMrzvtr4nal5Hqs3w5LLRSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0XNUEutJqEacJhSqwMxp4cxDQ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvY2U3YzBjNTgtOTg4YS0z NTFhLTlkMDItNGMxMzVhZDcyYjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjHFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcuInM3xse7XdKGWEcSb6hHIrCkT27dYr3MSDaBN4DEXrV/8JH5xhKL u+kMoCPETiTVyCqmvDwV9P/5EZtFasA1k560HbH+DzcYRBF8V8Y0NL/Yiq0TLwXt siwwRaR8eO9Q5YedyzVG+ic9p+gwrXgxmWyNX3+tYn4xCt5Ws03/zFT2IltGBPUs 18OwUIGTn30oj4htOuhdlSVV7/JkxYp3sC7s2S8qzv150NRqYEWHZ8cJSj3MgJSc vkxl/IdubUYjYU1Ysk2hB0EKKKmwnpwboFXWhn6wsyhWw0/a3n76rc1IlSwXBuk0 y+0a+L1rMo/mNiY6PHAa/vQ/3NmdSYA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:27:57 2025 by rpki-client