$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa File: fbd0f42f-fbef-3f5d-b443-269369b555df.roa (raw, json) Hash identifier: YKdtTdYIr5RI36H+0s01+zA9MXihVnG+fwHwQTtbJh8= Subject key identifier: 79:77:08:23:24:86:2E:64:6E:9A:8C:28:B6:88:DD:9A:BC:B3:36:49 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F43285848ADC613FBA3D0D99AEA11E300 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 397673 IP address blocks: 66.11.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:13:fb:a3:d0:d9:9a:ea:11:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=14f8668c-619f-48a5-8d4d-93a076483ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:57:b5:82:6c:2a:84:87:58:2a:70:d7:a3:56: d2:2c:09:2c:5b:6e:d1:d1:69:c3:b9:a4:67:e5:b2: f6:16:27:0d:5c:0f:c3:20:1b:22:b4:a2:df:4c:29: ca:6d:8a:73:e3:e0:82:5e:81:42:df:b8:aa:b0:8c: 2e:70:7c:6c:9f:94:35:e9:1b:58:1c:fd:47:4d:db: fe:c6:80:e1:b7:e0:83:ff:25:0c:99:a2:f5:ae:66: 4b:90:f1:bc:15:80:83:4f:0e:14:87:6c:23:e8:62: cf:93:79:6f:35:60:0b:c3:21:a6:86:e3:82:2d:ad: fb:06:c4:68:86:9a:c2:b9:f9:bb:37:cc:7b:d1:f1: c2:78:0e:5d:94:3c:68:8c:e5:67:4d:ef:a7:9c:53: 25:06:93:53:4f:bd:3c:e8:45:4e:58:57:0b:cc:b4: d9:b8:fd:24:85:20:7e:77:8b:78:3d:cf:ac:9a:de: 0f:09:fb:6c:b5:6d:fe:dc:cc:ee:6c:6d:61:bb:a5: c1:2c:8e:d7:bd:44:3a:5c:0d:4e:9f:71:bd:8d:af: cf:67:9a:a6:5a:30:c0:23:8a:a7:48:cd:01:01:91: 86:fe:92:88:69:ec:8c:e6:a6:c6:5c:c5:43:ba:68: 60:dc:0a:4f:95:a8:a3:67:09:2d:61:61:0f:7b:8c: 1b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:77:08:23:24:86:2E:64:6E:9A:8C:28:B6:88:DD:9A:BC:B3:36:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 66.11.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:54:09:d2:dc:00:9e:fa:ad:58:7b:92:7f:67:ea:f5:5d:e8: 0a:ed:b5:67:da:33:5b:8f:fc:66:b4:8e:95:3d:36:c7:11:01: 9e:1c:25:30:4b:9b:11:2b:38:2d:85:cb:e5:22:4e:a0:f2:ec: 88:ee:21:40:19:8b:89:76:c3:20:f9:a9:1a:ab:71:57:48:37: 4b:10:b4:e3:db:6c:e8:af:e1:3c:6d:7f:55:d5:28:fd:f3:9f: db:cb:be:78:8b:04:26:f8:b6:57:6f:7f:ff:0b:4f:b9:47:3c: 22:f5:8a:90:ce:61:d6:7f:1e:54:d9:8e:30:11:c0:e2:bb:4f: 24:43:cf:b6:76:23:ed:57:06:49:28:30:6c:65:f8:8b:56:ca: 32:fd:1d:33:42:7d:85:30:9f:0e:a8:e8:63:9a:7c:ce:02:3d: cb:f6:7e:a0:2b:f0:18:0b:d1:52:5a:16:e6:d3:55:28:11:ad: a9:ff:f8:cb:dd:f6:6a:e1:53:e7:32:3a:0e:5a:7a:93:c8:4e: 5c:46:a0:8b:bc:36:26:94:d2:9d:cc:9c:29:de:35:0b:84:ac: 4d:d8:ae:9f:47:38:b2:e5:62:ca:74:1b:0a:69:ef:f4:db:90: 95:4a:2f:ce:bd:f8:35:7a:6e:88:db:40:14:a0:06:e4:66:ac: 8f:5d:67:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhP7o9DZmuoR4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk MTRmODY2OGMtNjE5Zi00OGE1LThkNGQtOTNhMDc2NDgzYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFe1gmwqhIdYKnDXo1bSLAksW27R0WnDuaRn 5bL2FicNXA/DIBsitKLfTCnKbYpz4+CCXoFC37iqsIwucHxsn5Q16RtYHP1HTdv+ xoDht+CD/yUMmaL1rmZLkPG8FYCDTw4Uh2wj6GLPk3lvNWALwyGmhuOCLa37BsRo hprCufm7N8x70fHCeA5dlDxojOVnTe+nnFMlBpNTT7086EVOWFcLzLTZuP0khSB+ d4t4Pc+smt4PCftstW3+3MzubG1hu6XBLI7XvUQ6XA1On3G9ja/PZ5qmWjDAI4qn SM0BAZGG/pKIaeyM5qbGXMVDumhg3ApPlaijZwktYWEPe4wbvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHl3CCMkhi5kbpqMKLaI3Zq8szZJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZmJkMGY0MmYtZmJlZi0z ZjVkLWI0NDMtMjY5MzY5YjU1NWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQgsSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9UCdLcAJ76rVh7kn9n6vVd6ArttWfaM1uP/Ga0jpU9NscRAZ4cJTBL mxErOC2Fy+UiTqDy7IjuIUAZi4l2wyD5qRqrcVdIN0sQtOPbbOiv4Txtf1XVKP3z n9vLvniLBCb4tldvf/8LT7lHPCL1ipDOYdZ/HlTZjjARwOK7TyRDz7Z2I+1XBkko MGxl+ItWyjL9HTNCfYUwnw6o6GOafM4CPcv2fqAr8BgL0VJaFubTVSgRran/+Mvd 9mrhU+cyOg5aepPITlxGoIu8NiaU0p3MnCneNQuErE3Yrp9HOLLlYsp0Gwpp7/Tb kJVKL869+DV6bojbQBSgBuRmrI9dZ/Y= -----END CERTIFICATE-----Generated at Sat Apr 12 15:27:25 2025 by rpki-client