$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa File: 7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa (raw, json) Hash identifier: o6VwiEqRLZfKI0nCJjfWzZ+LxPubI16XhSBstlfnfDs= Subject key identifier: 05:14:17:2F:67:3A:AE:FB:42:60:56:98:BA:57:CE:C3:E1:CA:C9:52 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F43285848FD569BB78E5D70A7ED6AE180 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 66.22.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:9b:b7:8e:5d:70:a7:ed:6a:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=f15c5e81-2961-47c4-955b-665d2e1db396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1e:36:ad:34:3e:c8:b5:3d:37:31:47:86:36: 6d:a3:35:5e:bd:df:ad:51:86:68:6a:35:17:35:06: 6d:0a:50:07:b4:13:1b:52:da:8e:59:d5:a6:d5:f6: 15:ac:d2:c6:a1:6d:5b:fc:f4:b2:dd:17:ca:00:05: ee:fa:16:43:90:21:0c:aa:47:ee:c7:bb:3b:8a:11: 45:79:04:37:6a:bd:b0:48:28:26:6d:e3:96:8c:37: 87:fc:6f:26:63:16:56:7a:b0:a9:01:86:5f:a3:48: c4:47:d1:97:24:b5:1b:59:b1:ae:41:3d:25:9c:52: 3b:7c:a0:23:c1:7b:74:40:40:4b:f4:01:af:e7:1d: 34:04:ca:01:2b:65:61:ed:5f:cf:89:f7:70:32:da: db:f7:48:77:01:08:8c:fc:fa:5e:74:25:f2:1e:6a: bc:68:d4:c9:2a:7e:4a:9c:89:e8:46:e4:fa:1c:86: 25:27:f6:91:ba:c4:b0:7a:ea:23:c8:e4:eb:ac:57: fd:14:51:7e:d2:b5:17:2e:c4:5f:2e:75:db:fa:80: 12:55:3c:5e:1a:60:85:5d:f9:bb:9d:3b:bb:85:d5: c4:3b:10:66:d6:31:f9:35:43:3d:b2:25:e8:b7:ce: 3a:f7:06:39:7c:cc:55:6e:3c:de:2b:ac:e2:f3:07: 53:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:14:17:2F:67:3A:AE:FB:42:60:56:98:BA:57:CE:C3:E1:CA:C9:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 66.22.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5c:36:ba:f5:56:0a:7b:1b:a2:4c:83:67:62:54:96:54:73: 7a:a4:25:b3:a1:31:8d:f8:fa:46:1b:b6:31:fe:09:a6:c8:a6: c3:30:b8:87:6e:7a:90:d9:db:f0:1b:ea:68:08:78:bf:ff:4c: cd:f1:74:97:3c:4e:b2:e1:56:ad:46:27:77:56:6d:97:f7:d3: 7a:fe:bc:a2:b9:73:78:59:8c:f9:66:a0:21:c1:70:95:54:da: e0:01:5f:63:8a:36:62:7d:87:85:40:9c:47:69:3a:4d:38:e1: 18:80:cc:b1:d7:aa:d9:26:2f:f2:c0:b3:b3:04:25:9e:18:37: d3:3e:00:a5:bb:d2:ea:f4:ee:19:7c:7d:e1:e4:7d:bb:4e:e0: ed:c9:62:75:82:e1:22:86:8f:4d:3c:53:dd:b4:5b:93:b9:73: fd:89:0a:05:b1:0c:c2:ae:11:35:31:97:6b:81:df:65:ec:6b: 7d:05:a6:94:85:b0:d6:93:7f:65:24:3e:5a:cc:ca:ac:06:43: 0f:1e:62:fd:81:27:40:ae:3f:62:8c:08:1e:c1:4a:a9:2d:70: db:1a:b3:6d:1f:bf:79:83:ca:7f:a7:3b:6f:29:20:d6:7a:bc: b6:50:94:0f:db:5c:1e:d3:a2:08:c2:b3:88:e6:97:12:56:48: 29:6b:18:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vpu3jl1wp+1q4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjE1YzVlODEtMjk2MS00N2M0LTk1NWItNjY1ZDJlMWRiMzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh42rTQ+yLU9NzFHhjZtozVevd+tUYZoajUX NQZtClAHtBMbUtqOWdWm1fYVrNLGoW1b/PSy3RfKAAXu+hZDkCEMqkfux7s7ihFF eQQ3ar2wSCgmbeOWjDeH/G8mYxZWerCpAYZfo0jER9GXJLUbWbGuQT0lnFI7fKAj wXt0QEBL9AGv5x00BMoBK2Vh7V/PifdwMtrb90h3AQiM/PpedCXyHmq8aNTJKn5K nInoRuT6HIYlJ/aRusSweuojyOTrrFf9FFF+0rUXLsRfLnXb+oASVTxeGmCFXfm7 nTu7hdXEOxBm1jH5NUM9siXot8469wY5fMxVbjzeK6zi8wdTHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUUFy9nOq77QmBWmLpXzsPhyslSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvN2Y4NDRmYjItY2MzZC0z N2U0LWI1YTgtODU5NTg1ZjJjNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQha8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFcNrr1Vgp7G6JMg2diVJZUc3qkJbOhMY34+kYbtjH+CabIpsMwuIdu epDZ2/Ab6mgIeL//TM3xdJc8TrLhVq1GJ3dWbZf303r+vKK5c3hZjPlmoCHBcJVU 2uABX2OKNmJ9h4VAnEdpOk044RiAzLHXqtkmL/LAs7MEJZ4YN9M+AKW70ur07hl8 feHkfbtO4O3JYnWC4SKGj008U920W5O5c/2JCgWxDMKuETUxl2uB32Xsa30FppSF sNaTf2UkPlrMyqwGQw8eYv2BJ0CuP2KMCB7BSqktcNsas20fv3mDyn+nO28pINZ6 vLZQlA/bXB7TogjCs4jmlxJWSClrGB4= -----END CERTIFICATE-----Generated at Fri Mar 14 08:00:56 2025 by rpki-client