$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/4d94651f-74dd-36ba-996a-ca1e133d2794.roa File: 4d94651f-74dd-36ba-996a-ca1e133d2794.roa (raw, json) Hash identifier: LVjYEE4RzvzS68q/OH9z3jFlPDENInkChozbenYHL6o= Subject key identifier: B8:49:57:68:4C:28:91:F4:D7:FB:C3:A5:8B:47:CF:B4:2E:AD:46:83 Certificate issuer: /CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0 Certificate serial: 010D0C9F4328584908817A8EDDA52240529992B0 Authority key identifier: 79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/4d94651f-74dd-36ba-996a-ca1e133d2794.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 208.66.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:7a:8e:dd:a5:22:40:52:99:92:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=7a3e05d0-6b32-45e6-995d-18d7cd4cd34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:e8:b5:1c:91:f7:a1:9b:87:77:45:79:6d: bb:ca:33:62:d3:cd:13:94:88:74:0c:77:22:c1:71: b5:ee:a7:c3:85:f8:42:4f:07:b8:c7:87:e5:73:93: 4d:24:76:68:62:cc:d0:00:bb:3b:00:08:fd:f9:fe: f4:bc:ec:c3:cc:12:6a:c6:b9:b5:63:38:6d:a8:d0: fd:90:f8:d1:1e:74:a3:e2:73:08:e6:df:67:10:1f: 26:33:b0:9e:51:42:2b:d3:21:5f:a4:b8:23:33:a1: 53:98:33:d0:82:b6:27:62:ce:a5:60:03:97:cd:34: f2:56:b2:24:e3:18:0c:5e:65:54:a3:de:7d:df:c9: 15:09:52:bf:a0:51:c9:d7:2d:81:bd:82:ce:1c:47: fb:cb:f3:ee:5a:09:ca:f1:df:dd:06:ba:cd:dd:fc: 21:ae:1d:11:fa:58:3d:3c:5a:60:91:44:1d:3a:f2: b1:6c:be:2b:f4:23:be:cc:1b:fa:e1:fc:65:04:96: c7:94:0e:91:21:d5:98:41:ef:0a:9e:1b:14:ce:65: 32:1c:2a:f2:87:6e:bb:6f:93:72:2c:ca:cf:cd:ad: 20:05:72:04:70:98:a4:a4:6a:fc:78:42:0a:bf:58: bb:f6:78:40:d5:40:69:ce:e9:5a:9f:48:ef:bd:83: 09:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:49:57:68:4C:28:91:F4:D7:FB:C3:A5:8B:47:CF:B4:2E:AD:46:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/4d94651f-74dd-36ba-996a-ca1e133d2794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl X509v3 Authority Key Identifier: keyid:79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer sbgp-ipAddrBlock: critical IPv4: 208.66.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f9:2e:c1:de:19:f8:fd:33:4b:07:a0:bf:33:01:55:22:b3: 45:a8:f7:c8:85:43:16:93:f9:54:85:49:63:a3:65:b8:77:1a: 7d:0e:2e:85:d4:b0:ef:69:02:df:03:8d:3c:1a:3a:e0:02:f3: af:51:bb:0d:1a:50:72:e9:6a:c0:fd:95:98:00:1e:b9:56:89: 65:18:37:11:60:d4:d5:02:07:56:31:9f:65:79:80:12:79:0c: 54:71:a3:03:c2:dd:4f:b8:bb:31:7a:11:72:ac:6d:e6:13:32: 25:8d:25:83:92:c4:97:32:ec:8e:22:13:1d:5c:84:a2:34:2a: be:30:63:40:2b:36:c0:01:a9:b9:68:a3:7d:52:f3:26:a9:76: eb:d5:69:81:43:5b:2f:43:94:82:95:e8:1c:79:3e:2a:e6:e9: 40:bc:57:e1:a7:d4:81:2c:fd:da:57:c5:81:2c:1e:dd:ea:5c: 38:57:f3:d9:bd:82:c0:cb:d3:b0:6e:7d:b3:6d:c1:15:48:06: 09:35:73:14:46:51:cb:ff:25:66:3f:d7:8d:1f:8d:5d:a3:59: 85:30:2c:55:29:76:ba:d3:99:d5:b6:b4:8b:59:f4:91:d0:42: 04:2b:d5:4b:fa:76:b5:66:25:fe:d0:13:7f:ef:1b:e1:2c:82: de:34:44:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXqO3aUiQFKZkrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk0ZTdmYzMtMjE2OS00Njc2LTkzZmItZmUxYTU1Yjlh MmIwMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk N2EzZTA1ZDAtNmIzMi00NWU2LTk5NWQtMThkN2NkNGNkMzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn/otRyR96Gbh3dFeW27yjNi080TlIh0DHci wXG17qfDhfhCTwe4x4flc5NNJHZoYszQALs7AAj9+f70vOzDzBJqxrm1YzhtqND9 kPjRHnSj4nMI5t9nEB8mM7CeUUIr0yFfpLgjM6FTmDPQgrYnYs6lYAOXzTTyVrIk 4xgMXmVUo95938kVCVK/oFHJ1y2BvYLOHEf7y/PuWgnK8d/dBrrN3fwhrh0R+lg9 PFpgkUQdOvKxbL4r9CO+zBv64fxlBJbHlA6RIdWYQe8KnhsUzmUyHCryh267b5Ny LMrPza0gBXIEcJikpGr8eEIKv1i79nhA1UBpzulan0jvvYMJJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhJV2hMKJH01/vDpYtHz7QurUaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOTRl N2ZjMy0yMTY5LTQ2NzYtOTNmYi1mZTFhNTViOWEyYjAvNGQ5NDY1MWYtNzRkZC0z NmJhLTk5NmEtY2ExZTEzM2QyNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTk0ZTdmYzMtMjE2OS00Njc2LTkz ZmItZmUxYTU1YjlhMmIwL2U5NGU3ZmMzLTIxNjktNDY3Ni05M2ZiLWZlMWE1NWI5 YTJiMC5jcmwwHwYDVR0jBBgwFoAUeSzaFy0pIOWgmosSyK1fVxVcm/8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOTRlN2ZjMy0yMTY5LTQ2NzYtOTNmYi1mZTFh NTViOWEyYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EIqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADj5LsHeGfj9M0sHoL8zAVUis0Wo98iFQxaT+VSFSWOjZbh3Gn0OLoXU sO9pAt8DjTwaOuAC869Ruw0aUHLpasD9lZgAHrlWiWUYNxFg1NUCB1Yxn2V5gBJ5 DFRxowPC3U+4uzF6EXKsbeYTMiWNJYOSxJcy7I4iEx1chKI0Kr4wY0ArNsABqblo o31S8yapduvVaYFDWy9DlIKV6Bx5Pirm6UC8V+Gn1IEs/dpXxYEsHt3qXDhX89m9 gsDL07BufbNtwRVIBgk1cxRGUcv/JWY/140fjV2jWYUwLFUpdrrTmdW2tItZ9JHQ QgQr1Uv6drVmJf7QE3/vG+Esgt40RCM= -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:26 2025 by rpki-client