$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/95f91c65-3a7c-3b42-97c4-17a70e3dad02.roa File: 95f91c65-3a7c-3b42-97c4-17a70e3dad02.roa (raw, json) Hash identifier: yjOwJqlqd9VpKTdi/J7JR7eEL14rcarFx3D1hYsXKqI= Subject key identifier: 5D:0B:7B:6B:55:10:40:5B:37:BB:40:26:58:5B:EF:1E:11:43:58:B6 Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Certificate serial: 010D0C9F43285848EC968C28FA453825B82FD500 Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/95f91c65-3a7c-3b42-97c4-17a70e3dad02.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 4134 IP address blocks: 66.102.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:8c:28:fa:45:38:25:b8:2f:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=2ea30bda-5e63-4583-b431-e67bec29662f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:3e:bf:29:2a:4c:6f:38:e2:24:86:0a:e0: e2:30:b6:c9:c0:2f:71:55:bc:50:cb:13:03:46:80: eb:d9:2c:f1:85:84:0c:be:71:a0:84:32:11:32:fe: 51:6c:ab:be:b8:ca:9b:68:f3:d5:f0:f8:f3:8a:93: e1:88:a8:86:48:6e:54:df:24:59:7e:a6:9e:d1:2c: b2:0e:ab:b2:c3:66:a0:76:6a:30:23:82:4b:bb:1a: e6:fe:8b:48:20:e9:99:e5:5b:aa:8b:83:53:1e:0e: 2b:27:7b:c4:4c:37:12:8d:e7:67:22:f0:5a:09:e7: a6:cc:6b:f8:4c:90:bc:e4:30:e5:bb:46:24:32:49: 0a:9b:a0:af:01:d7:ae:1b:71:1e:51:5c:cf:af:76: 36:d7:f3:aa:9f:55:13:b6:2c:1f:bc:fa:83:99:44: b2:18:25:da:50:3f:37:16:f7:d2:a1:66:4d:b2:8d: 83:bb:c7:06:1c:59:1b:23:9f:27:dd:21:a1:1a:2e: 49:a0:08:5c:e4:84:05:6a:17:03:a0:c5:34:97:c4: da:39:f5:b7:80:a2:e3:d4:33:b3:c5:ba:32:6c:a4: 6f:70:5b:d9:d2:14:94:c1:6d:3d:8a:e7:ac:a1:a7: 48:6b:3e:f0:96:ec:34:44:69:ba:57:5f:72:c7:78: 9e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0B:7B:6B:55:10:40:5B:37:BB:40:26:58:5B:EF:1E:11:43:58:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/95f91c65-3a7c-3b42-97c4-17a70e3dad02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl X509v3 Authority Key Identifier: keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer sbgp-ipAddrBlock: critical IPv4: 66.102.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:72:0c:2c:0e:02:e2:50:93:c2:a5:b4:8d:76:e1:4b:e7:44: 5b:97:97:5b:a2:8b:1a:38:5c:00:73:b1:7a:6b:1e:01:c9:25: 04:29:ec:d6:6a:cf:59:f2:c9:ec:2d:fa:03:fe:fa:da:1a:8c: a7:ac:ae:60:6e:d9:d8:60:84:c1:49:c7:2f:65:f9:37:79:b7: 51:83:82:2a:66:52:8b:ff:db:ce:c6:c5:ab:eb:fa:df:5c:ef: 72:2d:3b:32:df:ff:a9:df:ca:1b:22:7b:b0:9e:43:ad:e6:38: 9d:61:f7:fa:92:4c:26:e0:be:9a:8f:78:88:88:0a:a2:6f:08: b0:fa:2a:e9:70:c7:8b:3f:b7:b9:6d:3a:dd:99:74:5a:83:0f: 15:63:8f:d4:0c:ec:07:cf:26:6e:d6:9b:0e:58:64:9a:2b:5e: d0:78:45:b3:1f:d4:27:32:8e:16:17:b9:a2:01:4b:5b:cc:2d: 24:5e:9a:93:6b:37:80:2a:08:2e:7d:6a:26:8c:57:87:e0:fc: df:98:80:29:50:e8:e8:eb:29:08:2d:e1:45:18:2f:c0:4f:4f: 73:55:15:95:e0:e2:41:e2:81:82:16:34:d6:52:85:8e:51:fd: e4:06:04:06:02:7c:70:81:90:d4:48:ac:9c:96:01:da:9f:d0: c0:07:16:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslowo+kU4Jbgv1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl Y2FmMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MmVhMzBiZGEtNWU2My00NTgzLWI0MzEtZTY3YmVjMjk2NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyE+vykqTG844iSGCuDiMLbJwC9xVbxQyxMD RoDr2SzxhYQMvnGghDIRMv5RbKu+uMqbaPPV8PjzipPhiKiGSG5U3yRZfqae0Syy Dquyw2agdmowI4JLuxrm/otIIOmZ5Vuqi4NTHg4rJ3vETDcSjednIvBaCeemzGv4 TJC85DDlu0YkMkkKm6CvAdeuG3EeUVzPr3Y21/Oqn1UTtiwfvPqDmUSyGCXaUD83 FvfSoWZNso2Du8cGHFkbI58n3SGhGi5JoAhc5IQFahcDoMU0l8TaOfW3gKLj1DOz xboybKRvcFvZ0hSUwW09iuesoadIaz7wluw0RGm6V19yx3ieoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0Le2tVEEBbN7tAJlhb7x4RQ1i2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvOTVmOTFjNjUtM2E3Yy0z YjQyLTk3YzQtMTdhNzBlM2RhZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5 NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4 ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1 ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmb/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADByDCwOAuJQk8KltI124UvnRFuXl1uiixo4XABzsXprHgHJJQQp7NZq z1nyyewt+gP++toajKesrmBu2dhghMFJxy9l+Td5t1GDgipmUov/287Gxavr+t9c 73ItOzLf/6nfyhsie7CeQ63mOJ1h9/qSTCbgvpqPeIiICqJvCLD6Kulwx4s/t7lt Ot2ZdFqDDxVjj9QM7AfPJm7Wmw5YZJorXtB4RbMf1CcyjhYXuaIBS1vMLSRempNr N4AqCC59aiaMV4fg/N+YgClQ6OjrKQgt4UUYL8BPT3NVFZXg4kHigYIWNNZShY5R /eQGBAYCfHCBkNRIrJyWAdqf0MAHFqg= -----END CERTIFICATE-----Generated at Fri Mar 14 10:08:58 2025 by rpki-client