$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/f73c0647-db0b-3cc0-a5ca-7dcac5866787.roa File: f73c0647-db0b-3cc0-a5ca-7dcac5866787.roa (raw, json) Hash identifier: sNTFgH0NKRPqIWikA2+Y8oodJfLmfoTkwgC8DpTBNBg= Subject key identifier: 63:F6:81:F7:B6:D7:89:2A:AA:DA:EF:2B:AC:24:C2:BE:AA:C9:1B:87 Certificate issuer: /CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Certificate serial: 010D0C9F43285848A830A97EC337104934B16AB0 Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/f73c0647-db0b-3cc0-a5ca-7dcac5866787.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 14618 IP address blocks: 66.235.154.0/24 maxlen: 24 66.235.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:a9:7e:c3:37:10:49:34:b1:6a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=3957d41e-8b60-4fa8-8c0a-1d92a2f32506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:19:b0:8e:50:94:96:c1:f8:60:7e:f9:9f:8c: 02:93:a6:17:b7:a5:7d:96:94:c8:8f:6c:3f:32:5f: d2:24:a5:87:a9:a9:f2:77:c2:a4:e9:d4:a6:b3:a2: de:f6:20:a4:45:01:4b:e4:d9:c4:36:81:36:ce:f9: 61:fc:d3:42:47:55:82:44:5f:ac:be:04:4c:61:a4: d3:81:d8:30:d2:2b:76:1f:98:0d:2f:a4:cd:9d:46: 1d:9a:d3:b3:39:7b:94:e7:a0:c1:22:2c:b1:79:47: f2:d0:d9:1d:bd:24:2f:06:3c:1b:fb:8d:fc:08:a8: 95:e6:57:9b:7a:d7:fe:bd:7a:47:eb:46:11:c2:e3: f9:e1:86:4f:cb:8f:47:3d:69:a4:75:df:c6:35:58: d6:70:ee:4c:50:e0:0d:95:07:e4:bd:70:36:48:09: b5:28:71:3f:88:36:db:b6:1f:74:c7:fc:83:ca:09: 53:1d:f9:23:e5:b7:e1:21:5a:b1:46:91:8c:18:55: 35:e1:dd:3c:15:78:b7:23:40:a7:3f:18:24:10:88: d7:fd:0e:16:43:47:4d:a0:fc:d5:42:04:fa:fc:16: 7c:75:ea:db:26:3e:71:8e:fe:11:b0:b7:33:f1:62: b3:3b:d5:77:8d:0a:aa:74:05:30:e0:38:9e:c6:a1: 96:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F6:81:F7:B6:D7:89:2A:AA:DA:EF:2B:AC:24:C2:BE:AA:C9:1B:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/f73c0647-db0b-3cc0-a5ca-7dcac5866787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl X509v3 Authority Key Identifier: keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer sbgp-ipAddrBlock: critical IPv4: 66.235.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:46:95:46:c7:6c:a4:f7:6b:aa:b8:cd:0a:03:db:73:c5:0c: ce:48:ff:9c:67:40:00:e5:bd:f1:52:00:aa:e4:66:4a:f1:44: 70:df:54:73:39:7f:75:34:f9:d6:fb:55:28:b9:0a:4e:82:cf: bf:c7:8c:32:5b:b6:42:68:46:9b:92:ad:1a:4d:bb:96:06:93: 9f:0b:40:d2:7d:8e:b9:5d:ce:da:22:51:d7:8e:bc:f6:89:9a: 55:da:79:9f:ad:8d:20:e3:96:7c:7f:d5:8b:db:2c:59:c4:0b: f1:8a:9a:11:53:6a:26:21:83:94:85:90:f0:ed:12:5d:da:73: 37:0d:f9:a3:dd:7b:7e:19:a5:cb:ec:26:13:87:04:54:aa:7f: 49:cc:de:1d:71:80:0b:a9:c8:27:99:e1:1c:12:b7:4b:ad:be: cd:09:37:ac:a6:c7:f4:1b:92:91:7a:3d:89:ff:79:1b:a4:50: 88:8e:c7:a0:e6:b7:2c:e0:45:de:9a:95:13:ed:9b:fb:7c:fe: 67:24:f5:fe:f7:1c:37:b3:5c:26:91:35:40:7e:23:8d:fc:36: a6:f7:d9:3b:a5:6c:c1:30:de:6d:2f:3c:5a:50:31:03:2f:43: 9a:6e:cc:28:b9:5f:f8:aa:c3:09:25:4a:5c:55:a4:28:4d:25: b7:f6:37:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMKl+wzcQSTSxarAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5 ZWE5MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk Mzk1N2Q0MWUtOGI2MC00ZmE4LThjMGEtMWQ5MmEyZjMyNTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhmwjlCUlsH4YH75n4wCk6YXt6V9lpTIj2w/ Ml/SJKWHqanyd8Kk6dSms6Le9iCkRQFL5NnENoE2zvlh/NNCR1WCRF+svgRMYaTT gdgw0it2H5gNL6TNnUYdmtOzOXuU56DBIiyxeUfy0NkdvSQvBjwb+438CKiV5leb etf+vXpH60YRwuP54YZPy49HPWmkdd/GNVjWcO5MUOANlQfkvXA2SAm1KHE/iDbb th90x/yDyglTHfkj5bfhIVqxRpGMGFU14d08FXi3I0CnPxgkEIjX/Q4WQ0dNoPzV QgT6/BZ8derbJj5xjv4RsLcz8WKzO9V3jQqqdAUw4DiexqGW7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP2gfe214kqqtrvK6wkwr6qyRuHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvZjczYzA2NDctZGIwYi0z Y2MwLWE1Y2EtN2RjYWM1ODY2Nzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz MjkyMTllYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQuuaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtGlUbHbKT3a6q4zQoD23PFDM5I/5xnQADlvfFSAKrkZkrxRHDfVHM5 f3U0+db7VSi5Ck6Cz7/HjDJbtkJoRpuSrRpNu5YGk58LQNJ9jrldztoiUdeOvPaJ mlXaeZ+tjSDjlnx/1YvbLFnEC/GKmhFTaiYhg5SFkPDtEl3aczcN+aPde34Zpcvs JhOHBFSqf0nM3h1xgAupyCeZ4RwSt0utvs0JN6ymx/QbkpF6PYn/eRukUIiOx6Dm tyzgRd6alRPtm/t8/mck9f73HDezXCaRNUB+I438Nqb32TulbMEw3m0vPFpQMQMv Q5puzCi5X/iqwwklSlxVpChNJbf2N+U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:57 2025 by rpki-client