$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/ff05b1d6-4b8a-304c-b183-c4f68d99f365.roa File: ff05b1d6-4b8a-304c-b183-c4f68d99f365.roa (raw, json) Hash identifier: /k+S7xIR8xsv32BYqGWvlLyFWl2fBpEc9ztoE+Y9KnA= Subject key identifier: D8:4F:89:6A:16:DC:32:3C:02:40:9A:86:8C:78:D0:1D:C2:8C:F4:C2 Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Certificate serial: 010D0C9F43285848EC968BFBF8E98299C0D881A0 Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/ff05b1d6-4b8a-304c-b183-c4f68d99f365.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 36678 IP address blocks: 66.102.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:8b:fb:f8:e9:82:99:c0:d8:81:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=772e3552-d7a9-458c-acde-240173bf9669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:58:7c:1b:de:af:87:34:28:38:5d:58:08: 3c:19:f8:94:4c:ad:1e:60:02:f1:ec:68:1d:ad:82: 55:3d:4d:57:1e:98:40:f9:ee:ac:d9:8a:30:e6:95: e3:2d:d0:3e:9c:98:5b:12:d3:fc:81:a4:b8:8a:ac: 57:39:28:2a:b4:6d:df:b4:1e:fe:a8:40:65:50:19: fb:1f:be:ec:7c:18:e3:27:85:0c:b6:53:4c:5f:5a: af:c3:9e:a9:ce:28:07:b4:8f:96:85:57:ff:5f:95: 99:7c:d2:a0:42:fc:51:1f:d9:8a:b9:0f:af:0c:d2: 13:f7:57:a1:d2:7a:1f:a3:59:d6:15:54:e7:0a:d0: 34:f5:aa:8c:d4:72:61:3e:4c:ce:e7:ff:54:61:6d: ea:be:b1:a0:ab:8a:6e:2a:00:70:24:d8:98:d2:cf: 73:94:e1:5d:09:0e:8d:35:c0:60:26:97:f6:55:58: 83:6d:d4:26:56:ce:60:b8:07:2c:03:93:99:9a:60: be:0d:05:8e:81:34:a9:12:3d:e9:fc:c3:48:62:14: 04:12:f4:61:cd:19:66:8a:76:a8:61:20:ab:e7:df: b3:0d:76:8c:76:37:7d:e9:9b:b8:e8:5a:87:86:28: 82:16:fc:ba:de:ba:51:66:77:01:60:62:22:85:20: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4F:89:6A:16:DC:32:3C:02:40:9A:86:8C:78:D0:1D:C2:8C:F4:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/ff05b1d6-4b8a-304c-b183-c4f68d99f365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl X509v3 Authority Key Identifier: keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer sbgp-ipAddrBlock: critical IPv4: 66.102.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:fa:a2:9b:ca:2f:a8:3b:0d:7d:29:3e:c5:6f:dc:30:ca:a0: af:ce:9d:6b:fb:05:89:83:2c:3c:c8:5f:a2:49:01:46:e7:8c: 47:6c:36:e4:48:fd:b5:d4:a5:8a:07:5f:b5:d5:19:83:1c:93: 48:01:2d:1b:78:98:aa:db:c7:27:51:bc:7f:34:c8:33:c4:48: 97:9d:82:2f:7e:bf:96:29:17:4a:70:25:e3:ad:6e:b5:6b:82: 90:26:13:36:40:67:d7:d1:c2:14:90:a4:2f:4c:7b:ff:3b:82: 2e:22:b2:78:55:b0:d3:92:c6:99:e4:c4:07:b8:59:2c:a0:52: de:37:2d:ee:b3:83:6d:68:46:5b:39:36:c3:9f:99:f5:0b:3f: d3:6e:78:c3:e2:53:d3:44:87:55:ed:56:f4:a4:e6:b9:dd:e0: df:3d:c7:ee:fb:37:87:51:cb:3e:e1:89:a4:3e:2b:22:a4:5f: 5a:9a:48:57:aa:48:7d:a7:3a:50:c0:99:df:b3:49:36:fa:62: 8d:22:0a:7a:17:a6:82:ec:60:44:4e:fc:e2:8a:00:b2:c7:2d: b4:87:36:dd:f9:ea:c9:79:0b:fc:6b:e5:9d:7f:95:14:86:d0: 9b:3f:49:6f:b6:56:14:a3:07:d2:f5:3d:67:93:fd:b1:e1:0c: 92:1c:0e:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslov7+OmCmcDYgaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl Y2FmMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NzcyZTM1NTItZDdhOS00NThjLWFjZGUtMjQwMTczYmY5NjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXNYfBver4c0KDhdWAg8GfiUTK0eYALx7Ggd rYJVPU1XHphA+e6s2Yow5pXjLdA+nJhbEtP8gaS4iqxXOSgqtG3ftB7+qEBlUBn7 H77sfBjjJ4UMtlNMX1qvw56pzigHtI+WhVf/X5WZfNKgQvxRH9mKuQ+vDNIT91eh 0nofo1nWFVTnCtA09aqM1HJhPkzO5/9UYW3qvrGgq4puKgBwJNiY0s9zlOFdCQ6N NcBgJpf2VViDbdQmVs5guAcsA5OZmmC+DQWOgTSpEj3p/MNIYhQEEvRhzRlminao YSCr59+zDXaMdjd96Zu46FqHhiiCFvy63rpRZncBYGIihSCgdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhPiWoW3DI8AkCahox40B3CjPTCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvZmYwNWIxZDYtNGI4YS0z MDRjLWIxODMtYzRmNjhkOTlmMzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5 NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4 ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1 ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmb7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/6opvKL6g7DX0pPsVv3DDKoK/OnWv7BYmDLDzIX6JJAUbnjEdsNuRI /bXUpYoHX7XVGYMck0gBLRt4mKrbxydRvH80yDPESJedgi9+v5YpF0pwJeOtbrVr gpAmEzZAZ9fRwhSQpC9Me/87gi4isnhVsNOSxpnkxAe4WSygUt43Le6zg21oRls5 NsOfmfULP9NueMPiU9NEh1XtVvSk5rnd4N89x+77N4dRyz7hiaQ+KyKkX1qaSFeq SH2nOlDAmd+zSTb6Yo0iCnoXpoLsYERO/OKKALLHLbSHNt356sl5C/xr5Z1/lRSG 0Js/SW+2VhSjB9L1PWeT/bHhDJIcDkU= -----END CERTIFICATE-----Generated at Fri Mar 14 11:09:34 2025 by rpki-client