$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/0ad1dded-4b94-3e11-872b-bcd15954c079.roa File: 0ad1dded-4b94-3e11-872b-bcd15954c079.roa (raw, json) Hash identifier: ogYVZX3/v++b1keNtw1gDOYvHVN7glL6hRC6rr4XhRw= Subject key identifier: 2C:AD:98:90:76:45:E3:8F:71:7D:1C:C4:DA:87:E2:D3:94:FF:1B:40 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F432858490B4C1FA5E7FA920B4D34E480 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/0ad1dded-4b94-3e11-872b-bcd15954c079.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 19224 IP address blocks: 66.103.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:1f:a5:e7:fa:92:0b:4d:34:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=6c640d47-3f5b-4a7d-a86e-f6da00350958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ae:2c:13:24:5a:ca:ff:a7:bf:43:a4:19:52: 9e:cb:45:0e:7d:08:7d:7f:30:ba:42:c6:51:70:78: 35:a9:1f:c6:3f:b5:bd:ed:91:65:5d:8d:08:42:d2: 61:56:f0:a7:66:a0:88:12:af:be:b5:9b:50:c7:4d: 3a:2d:2f:af:e2:22:98:43:38:1d:20:c6:ca:7a:2d: fb:63:19:f7:b6:95:8a:bc:38:8d:3b:7b:ac:77:87: 86:7a:89:7c:fb:4d:ee:b8:87:c7:c6:5a:67:46:76: c3:6a:f6:b2:b4:22:e7:c7:c6:f2:fa:2a:9c:9e:1c: 99:20:a5:54:c0:fc:62:62:e6:f0:83:ff:e6:68:b4: fd:bb:9f:97:19:76:0c:2a:6b:7f:5a:f6:3c:2d:58: 39:14:99:ed:0a:4b:03:b8:e2:15:21:71:7b:6f:b0: 67:ba:8f:6c:f3:60:f5:47:ee:61:37:b2:32:c9:92: 42:6f:1d:39:22:a2:b8:1a:dd:a5:95:27:95:fc:25: eb:dd:41:74:a8:32:c2:5c:90:fd:82:98:d5:fe:2b: 91:08:ec:f9:46:f3:65:a9:ba:3d:a7:35:59:21:dc: 4f:b4:e4:d1:4a:dc:48:3d:b4:41:41:a4:70:23:ab: 4a:93:b4:58:3c:77:cf:54:90:4b:fb:39:21:cb:66: b0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AD:98:90:76:45:E3:8F:71:7D:1C:C4:DA:87:E2:D3:94:FF:1B:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/0ad1dded-4b94-3e11-872b-bcd15954c079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 66.103.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:60:2a:b2:a1:8b:3d:4c:9c:f3:c6:50:c6:fc:55:9d:ca:17: d2:24:f7:47:e8:95:0b:64:ba:39:bb:6a:4c:db:5e:86:ee:14: 54:09:88:83:36:af:a6:b8:83:9d:f8:a6:5c:0d:cd:db:9d:3c: fc:11:80:2d:24:3a:51:d8:25:f6:d6:41:60:ea:48:a5:d4:33: 26:da:d1:03:35:50:46:fb:8f:bc:70:44:05:43:5a:01:5d:a9: 28:f6:ca:a7:54:81:f4:14:0c:81:4b:e4:cf:f1:4f:52:16:fd: 6e:53:28:03:5d:64:83:4f:73:67:4a:24:f2:e6:b9:3b:08:48: 06:d7:d1:26:32:f5:4a:12:02:68:66:ea:19:e9:d8:ef:c6:83: c8:23:98:a7:0a:dc:50:e6:ce:d4:94:77:c2:dc:ff:ba:b8:fd: 00:fc:aa:16:84:37:2d:2b:14:8e:b1:c9:7c:1f:fe:c0:34:6b: 59:5a:8a:7e:1d:ac:95:ea:a0:05:46:27:ca:30:66:dd:14:da: 7b:c3:1c:42:82:5a:2f:f6:d6:6e:3f:4f:4e:2e:5a:e0:25:5d: 99:f3:9e:c2:c6:3b:9e:e6:39:bc:6f:38:7f:9a:1c:79:33:15: 92:02:40:12:50:81:37:77:6b:ff:bb:c9:0d:e6:b8:41:2c:27: e2:b5:ce:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTB+l5/qSC0005IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk NmM2NDBkNDctM2Y1Yi00YTdkLWE4NmUtZjZkYTAwMzUwOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq4sEyRayv+nv0OkGVKey0UOfQh9fzC6QsZR cHg1qR/GP7W97ZFlXY0IQtJhVvCnZqCIEq++tZtQx006LS+v4iKYQzgdIMbKei37 Yxn3tpWKvDiNO3usd4eGeol8+03uuIfHxlpnRnbDavaytCLnx8by+iqcnhyZIKVU wPxiYubwg//maLT9u5+XGXYMKmt/WvY8LVg5FJntCksDuOIVIXF7b7Bnuo9s82D1 R+5hN7IyyZJCbx05IqK4Gt2llSeV/CXr3UF0qDLCXJD9gpjV/iuRCOz5RvNlqbo9 pzVZIdxPtOTRStxIPbRBQaRwI6tKk7RYPHfPVJBL+zkhy2awrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCytmJB2ReOPcX0cxNqH4tOU/xtAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvMGFkMWRkZWQtNGI5NC0z ZTExLTg3MmItYmNkMTU5NTRjMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmf1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVgKrKhiz1MnPPGUMb8VZ3KF9Ik90folQtkujm7akzbXobuFFQJiIM2 r6a4g534plwNzdudPPwRgC0kOlHYJfbWQWDqSKXUMyba0QM1UEb7j7xwRAVDWgFd qSj2yqdUgfQUDIFL5M/xT1IW/W5TKANdZINPc2dKJPLmuTsISAbX0SYy9UoSAmhm 6hnp2O/Gg8gjmKcK3FDmztSUd8Lc/7q4/QD8qhaENy0rFI6xyXwf/sA0a1lain4d rJXqoAVGJ8owZt0U2nvDHEKCWi/21m4/T04uWuAlXZnznsLGO57mObxvOH+aHHkz FZICQBJQgTd3a/+7yQ3muEEsJ+K1zqU= -----END CERTIFICATE-----Generated at Fri Mar 14 10:30:18 2025 by rpki-client