$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/1bf25bd3-0d95-35f0-9f53-96f916de7440.roa File: 1bf25bd3-0d95-35f0-9f53-96f916de7440.roa (raw, json) Hash identifier: juMrEHu3u9A+w/D+3blvRAPmPxDFxR2/pZXXFK7FSDY= Subject key identifier: B7:97:78:48:6F:EB:0C:17:CE:04:2A:05:7B:58:26:A1:20:6C:8B:02 Certificate issuer: /CN=11b225f7-40bc-41c6-8ed3-2e2845094089 Certificate serial: 010D0C9F43285848DA70FA5B470F7095D7525680 Authority key identifier: E6:83:88:DD:0C:19:63:A6:36:CA:34:51:29:66:1C:2C:AE:0C:B5:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/1bf25bd3-0d95-35f0-9f53-96f916de7440.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 46763 IP address blocks: 66.45.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/11b225f7-40bc-41c6-8ed3-2e2845094089.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/11b225f7-40bc-41c6-8ed3-2e2845094089.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:fa:5b:47:0f:70:95:d7:52:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b225f7-40bc-41c6-8ed3-2e2845094089 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=9d799ac8-815b-438e-98ff-551ee5fb5859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:76:42:dd:e2:3a:5b:88:32:69:33:6d:31:4f: 7f:1d:21:21:8e:ef:2a:51:96:77:fc:c9:fa:a8:84: b9:f6:b9:59:e4:1d:08:3b:5b:35:e6:97:6d:ec:52: 4d:aa:2f:3d:25:a6:47:39:e8:1c:97:19:40:78:b9: dd:cc:54:7d:09:d1:c2:06:82:ee:93:51:05:f8:a9: 91:75:cb:a0:5f:d4:39:e2:22:0c:1a:2b:3a:3d:65: 60:69:31:be:a5:aa:3b:20:92:e3:d2:54:d7:cb:d1: 52:4c:20:10:86:8f:94:f6:af:36:50:93:51:66:6a: 6f:75:d2:90:da:ef:a9:d0:d6:2d:cb:04:54:2e:c7: 07:af:90:12:86:20:91:c6:b5:8e:d2:50:da:32:df: 12:24:d4:a4:f5:a5:5b:25:57:31:23:7c:0a:33:5e: 85:0a:1e:85:b2:4e:85:41:d1:8a:97:09:f3:1d:c3: e5:01:f4:0c:97:41:d3:06:1a:3f:a0:55:ce:f8:94: 6e:d2:bd:87:cc:b0:67:71:da:79:81:ba:54:5b:1d: e0:55:94:1a:43:66:81:40:e2:90:42:81:62:42:3d: 9d:10:a5:57:70:50:eb:a8:19:82:78:87:5d:eb:a3: 68:14:ee:ea:f9:e0:b8:40:a3:24:80:ce:0a:c1:14: 36:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:97:78:48:6F:EB:0C:17:CE:04:2A:05:7B:58:26:A1:20:6C:8B:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/1bf25bd3-0d95-35f0-9f53-96f916de7440.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/11b225f7-40bc-41c6-8ed3-2e2845094089.crl X509v3 Authority Key Identifier: keyid:E6:83:88:DD:0C:19:63:A6:36:CA:34:51:29:66:1C:2C:AE:0C:B5:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089.cer sbgp-ipAddrBlock: critical IPv4: 66.45.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:aa:ed:2b:ca:1b:8d:5c:fb:7f:3b:67:b5:a5:0b:9b:2a:a6: 04:5b:bd:c9:99:0f:6c:69:11:da:19:ca:d1:49:2a:3a:e3:da: 32:8c:50:40:4a:46:77:0d:2e:4c:58:c7:cf:27:0d:21:01:98: 1e:4b:db:ad:a2:f1:2a:50:af:6a:8a:ea:ae:7f:18:fc:6f:8f: 5d:21:e2:f1:47:39:8c:a9:7b:af:af:30:02:32:b3:8b:27:38: a3:e0:27:11:0e:17:05:a6:6e:de:ff:48:79:ff:db:5f:2e:d6: 9e:51:3b:ef:94:dd:e6:43:b8:b6:5b:86:1b:3c:3b:4b:10:0f: bb:d6:08:6e:bd:fe:1c:75:55:3b:4e:3e:e2:83:07:cc:a1:b8: 95:9b:d4:36:d9:10:67:36:af:dc:d3:1b:1d:34:d8:7a:2c:52: 84:68:bc:b4:68:c9:a3:d2:4b:92:13:09:ee:15:30:d7:11:bb: 01:2c:aa:e0:14:62:e3:07:f1:de:23:07:59:33:0b:66:13:7d: ff:18:7c:79:da:27:c7:6a:5a:de:9d:61:c4:91:f2:7d:56:1d: 01:48:4b:57:03:ec:3a:f7:27:c0:47:3a:7e:42:e9:1f:1e:02: a4:fd:f3:e5:4d:2b:de:53:df:c6:ea:3f:d4:a9:31:24:f9:4d: fd:c9:a2:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPpbRw9wlddSVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFiMjI1ZjctNDBiYy00MWM2LThlZDMtMmUyODQ1MDk0 MDg5MB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk OWQ3OTlhYzgtODE1Yi00MzhlLTk4ZmYtNTUxZWU1ZmI1ODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXZC3eI6W4gyaTNtMU9/HSEhju8qUZZ3/Mn6 qIS59rlZ5B0IO1s15pdt7FJNqi89JaZHOegclxlAeLndzFR9CdHCBoLuk1EF+KmR dcugX9Q54iIMGis6PWVgaTG+pao7IJLj0lTXy9FSTCAQho+U9q82UJNRZmpvddKQ 2u+p0NYtywRULscHr5AShiCRxrWO0lDaMt8SJNSk9aVbJVcxI3wKM16FCh6Fsk6F QdGKlwnzHcPlAfQMl0HTBho/oFXO+JRu0r2HzLBncdp5gbpUWx3gVZQaQ2aBQOKQ QoFiQj2dEKVXcFDrqBmCeIdd66NoFO7q+eC4QKMkgM4KwRQ2VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeXeEhv6wwXzgQqBXtYJqEgbIsCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMWIy MjVmNy00MGJjLTQxYzYtOGVkMy0yZTI4NDUwOTQwODkvMWJmMjViZDMtMGQ5NS0z NWYwLTlmNTMtOTZmOTE2ZGU3NDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTFiMjI1ZjctNDBiYy00MWM2LThl ZDMtMmUyODQ1MDk0MDg5LzExYjIyNWY3LTQwYmMtNDFjNi04ZWQzLTJlMjg0NTA5 NDA4OS5jcmwwHwYDVR0jBBgwFoAU5oOI3QwZY6Y2yjRRKWYcLK4MtTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMWIyMjVmNy00MGJjLTQxYzYtOGVkMy0yZTI4 NDUwOTQwODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQi07MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWq7SvKG41c+387Z7WlC5sqpgRbvcmZD2xpEdoZytFJKjrj2jKMUEBK RncNLkxYx88nDSEBmB5L262i8SpQr2qK6q5/GPxvj10h4vFHOYype6+vMAIys4sn OKPgJxEOFwWmbt7/SHn/218u1p5RO++U3eZDuLZbhhs8O0sQD7vWCG69/hx1VTtO PuKDB8yhuJWb1DbZEGc2r9zTGx002HosUoRovLRoyaPSS5ITCe4VMNcRuwEsquAU YuMH8d4jB1kzC2YTff8YfHnaJ8dqWt6dYcSR8n1WHQFIS1cD7Dr3J8BHOn5C6R8e AqT98+VNK95T38bqP9SpMST5Tf3Jojg= -----END CERTIFICATE-----Generated at Fri Apr 4 16:18:39 2025 by rpki-client