$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d59ff733-1d90-3afb-9454-ba356324043e.roa File: d59ff733-1d90-3afb-9454-ba356324043e.roa (raw, json) Hash identifier: 6Y0E1vxTrRe80k/QBvGN9A3BfCTJFtPzaCi1PiAVYxM= Subject key identifier: 04:0A:18:8B:86:BF:FC:2B:46:AC:04:9A:E3:42:0F:75:0E:77:66:44 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B64210F8BE70ADE90DE1D80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d59ff733-1d90-3afb-9454-ba356324043e.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 66.235.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:21:0f:8b:e7:0a:de:90:de:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=ec938ea3-43d5-43f1-aaf1-9898b3184342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:01:f6:22:94:dd:40:95:e7:d6:2d:7b:cb:23: c3:d5:b8:d7:33:2c:82:42:ec:a3:7f:ad:49:35:48: 8d:6c:07:47:7a:21:04:1a:6d:eb:f5:45:cb:86:dd: 4a:0a:8f:70:b6:0d:24:75:aa:d1:c7:ac:17:b3:78: 5c:57:97:6b:da:ed:c6:c8:2b:0f:4a:4f:8c:40:7f: b0:4a:2d:93:a9:c4:3a:ae:7f:37:07:26:6b:c1:bf: b5:07:29:32:f7:09:f3:46:e0:f8:4c:a5:9b:ec:fd: cc:01:b2:df:4a:37:a9:d1:81:b3:ba:d9:df:2c:a8: 15:d2:39:a4:f0:49:c6:d7:52:5f:66:9d:d8:27:5e: 36:98:8d:c8:18:3b:06:3c:53:22:87:66:65:2d:fc: 52:3a:05:db:bf:21:c4:cc:0e:6a:be:d0:35:c0:7d: 7f:41:a0:cd:0a:e4:4f:ec:54:c0:53:67:99:26:69: 31:5d:3e:98:11:80:32:e2:53:ad:9b:4d:07:61:a0: ad:f3:80:ba:5c:33:66:dc:4c:cf:62:09:ef:07:a5: 52:9d:e8:0f:da:82:b8:d0:b9:8f:68:d8:fb:c9:80: 65:7d:ea:5f:77:5b:17:e6:43:5e:f6:90:38:c8:09: 35:44:8a:eb:93:4a:dd:10:2f:43:85:e2:7c:9c:de: d1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0A:18:8B:86:BF:FC:2B:46:AC:04:9A:E3:42:0F:75:0E:77:66:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d59ff733-1d90-3afb-9454-ba356324043e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 66.235.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:0f:66:4c:d3:71:56:df:9f:7f:19:da:f2:ac:e0:c8:7e:b3: a1:8b:aa:a8:1e:80:43:ce:83:fa:f1:16:ef:0b:5c:b5:de:1c: ba:01:c0:a0:52:bc:d3:71:17:f9:b4:c6:f0:8a:9b:cc:f8:6e: 5e:2b:91:2b:f8:5a:1c:13:dc:2e:1d:fe:18:a9:32:a6:3f:93: 99:f5:ee:4d:4e:31:26:c6:b6:dc:2d:c9:b0:16:b5:b3:ec:e1: 75:83:97:12:d1:d4:24:d8:22:e3:3b:04:97:96:b0:f2:69:78: 81:a6:8b:a1:7b:6f:31:10:6d:b9:ea:0d:eb:c6:f7:58:7d:5d: 3e:d6:bc:62:f6:66:c7:42:cb:ef:5f:c3:29:c5:5d:28:55:57: 6b:76:91:bf:48:45:85:55:53:99:ac:1e:97:3d:28:d3:a5:18: 95:1d:c0:0e:ab:5e:fe:42:20:05:1c:67:73:ba:fe:80:79:8e: 2d:7d:c8:93:0e:93:4e:70:5c:d6:13:c0:d9:e2:90:96:1b:3b: a4:60:ed:77:0a:fa:58:c2:c7:b6:3a:6d:7d:80:c1:5a:07:cc: ca:cd:0e:60:b0:7a:0c:6a:68:6b:cd:7c:ab:e8:c7:aa:18:8e: 4f:86:e7:02:f3:ce:0c:fa:73:7c:ce:96:97:0e:9f:1c:5c:6d: db:5a:2a:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCEPi+cK3pDeHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZWM5MzhlYTMtNDNkNS00M2YxLWFhZjEtOTg5OGIzMTg0MzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAH2IpTdQJXn1i17yyPD1bjXMyyCQuyjf61J NUiNbAdHeiEEGm3r9UXLht1KCo9wtg0kdarRx6wXs3hcV5dr2u3GyCsPSk+MQH+w Si2TqcQ6rn83ByZrwb+1Byky9wnzRuD4TKWb7P3MAbLfSjep0YGzutnfLKgV0jmk 8EnG11JfZp3YJ142mI3IGDsGPFMih2ZlLfxSOgXbvyHEzA5qvtA1wH1/QaDNCuRP 7FTAU2eZJmkxXT6YEYAy4lOtm00HYaCt84C6XDNm3EzPYgnvB6VSnegP2oK40LmP aNj7yYBlfepfd1sX5kNe9pA4yAk1RIrrk0rdEC9DheJ8nN7R+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQKGIuGv/wrRqwEmuNCD3UOd2ZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZDU5ZmY3MzMtMWQ5MC0z YWZiLTk0NTQtYmEzNTYzMjQwNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQusAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0PZkzTcVbfn38Z2vKs4Mh+s6GLqqgegEPOg/rxFu8LXLXeHLoBwKBS vNNxF/m0xvCKm8z4bl4rkSv4WhwT3C4d/hipMqY/k5n17k1OMSbGttwtybAWtbPs 4XWDlxLR1CTYIuM7BJeWsPJpeIGmi6F7bzEQbbnqDevG91h9XT7WvGL2ZsdCy+9f wynFXShVV2t2kb9IRYVVU5msHpc9KNOlGJUdwA6rXv5CIAUcZ3O6/oB5ji19yJMO k05wXNYTwNnikJYbO6Rg7XcK+ljCx7Y6bX2AwVoHzMrNDmCwegxqaGvNfKvox6oY jk+G5wLzzgz6c3zOlpcOnxxcbdtaKgQ= -----END CERTIFICATE-----Generated at Sun Apr 27 13:06:19 2025 by rpki-client