$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3417126e-4349-36f3-92d4-d566e022cd1f.roa File: 3417126e-4349-36f3-92d4-d566e022cd1f.roa (raw, json) Hash identifier: IQYgDEFXVUocjFbCAc7rITZ32qmROxxflWbIDsFiCpM= Subject key identifier: CF:F1:FC:FE:9A:36:79:1C:BF:4C:38:D4:33:03:5A:45:8E:EE:01:98 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849B30B214850C7E1FCE2655900 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3417126e-4349-36f3-92d4-d566e022cd1f.roa Signing time: Wed 30 Apr 2025 16:05:57 +0000 ROA not before: Wed 30 Apr 2025 16:05:57 +0000 ROA not after: Tue 29 Jul 2025 16:05:57 +0000 asID: 263812 IP address blocks: 166.0.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b3:0b:21:48:50:c7:e1:fc:e2:65:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 30 16:05:57 2025 GMT Not After : Jul 29 16:05:57 2025 GMT Subject: CN=e9ffbcd0-dd45-4d75-9fac-de71162e7eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:29:76:9f:1c:b9:e0:35:15:03:ae:dc:12:46: 70:4c:66:f6:b3:ba:18:bc:6e:7d:e1:2e:de:c6:bb: 79:62:d9:81:45:a7:33:71:46:75:45:07:56:0b:32: 43:46:ed:01:9c:9a:e0:a1:73:58:95:73:48:f5:27: de:ba:9b:58:1f:d4:aa:0a:5e:20:ea:b6:d6:56:02: ad:a9:de:e4:34:22:12:46:f4:4d:d1:d5:fc:f6:08: f2:0d:0b:9f:30:dd:40:6e:02:52:5a:24:83:40:a4: bb:e8:cc:c9:0e:ee:15:35:0e:f9:bd:2f:fd:79:83: 44:ec:b4:de:be:28:29:3d:2a:c2:8d:5a:67:f9:90: e2:00:8b:0c:70:61:17:d1:87:61:bb:1c:3c:da:b8: 97:be:d1:86:4d:fd:d1:e0:5b:7d:38:28:09:4d:55: c5:d1:41:99:f0:e7:11:07:b6:58:d4:cc:14:a7:9b: 26:43:cf:8d:a8:54:38:8e:de:98:ca:83:00:41:b3: 6f:50:13:2e:3f:1e:a0:ae:a9:a7:ee:3f:a3:d1:5d: 49:76:a3:ac:5b:df:e0:a4:4d:eb:b6:06:76:44:64: ac:1a:26:ef:9f:a0:90:c2:7b:f3:96:9b:dd:af:92: 8e:32:fc:e9:a6:26:7c:b1:a7:be:38:5f:0f:ad:2a: 09:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F1:FC:FE:9A:36:79:1C:BF:4C:38:D4:33:03:5A:45:8E:EE:01:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3417126e-4349-36f3-92d4-d566e022cd1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c2:83:ec:3f:0e:ba:e2:f8:5a:82:64:80:05:da:2e:88:0e: a2:9b:fd:6b:c9:65:64:f5:f8:0f:12:3a:1f:0b:8d:1f:83:f0: 39:da:e7:70:bd:7e:9c:67:64:4d:a8:85:3d:12:39:9e:ed:b6: bf:a6:71:53:e8:c7:a7:d0:af:d9:af:c8:e9:20:83:b3:0e:9a: b6:fe:80:e0:53:9a:0e:de:79:8b:4c:ed:42:10:92:bf:10:b7: cc:83:a4:d0:e9:e1:ea:20:37:11:c4:e6:6c:d2:65:95:a4:2a: 91:32:25:28:c9:6a:ba:d6:44:4f:a2:6c:78:b7:fe:08:15:13: 5a:54:af:53:5b:c3:b2:08:19:16:6a:96:f7:3b:b1:b1:d5:71: 44:ef:24:2a:33:6a:a4:5c:b6:eb:bc:44:47:bb:54:fa:26:4b: 6b:6a:b7:1f:2f:f5:90:e2:3d:03:a2:53:34:4b:14:60:3d:38: 84:4b:c0:9f:54:dd:b0:e9:81:06:56:d6:ba:6a:94:ff:e6:1a: d7:e2:41:4a:78:b5:a8:be:ed:d5:a7:7c:ef:06:e4:b7:f4:38: cb:dd:57:61:36:40:a5:12:21:ec:9a:ab:b3:32:3b:d4:ca:72: e4:1e:82:e9:e9:c6:63:85:30:3f:b6:a9:21:da:4f:93:16:f5: db:8d:79:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmzCyFIUMfh/OJlWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQzMDE2MDU1N1oXDTI1MDcyOTE2MDU1N1owLzEtMCsGA1UEAxMk ZTlmZmJjZDAtZGQ0NS00ZDc1LTlmYWMtZGU3MTE2MmU3ZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCl2nxy54DUVA67cEkZwTGb2s7oYvG594S7e xrt5YtmBRaczcUZ1RQdWCzJDRu0BnJrgoXNYlXNI9SfeuptYH9SqCl4g6rbWVgKt qd7kNCISRvRN0dX89gjyDQufMN1AbgJSWiSDQKS76MzJDu4VNQ75vS/9eYNE7LTe vigpPSrCjVpn+ZDiAIsMcGEX0Ydhuxw82riXvtGGTf3R4Ft9OCgJTVXF0UGZ8OcR B7ZY1MwUp5smQ8+NqFQ4jt6YyoMAQbNvUBMuPx6grqmn7j+j0V1JdqOsW9/gpE3r tgZ2RGSsGibvn6CQwnvzlpvdr5KOMvzppiZ8sae+OF8PrSoJJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/x/P6aNnkcv0w41DMDWkWO7gGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzQxNzEyNmUtNDM0OS0z NmYzLTkyZDQtZDU2NmUwMjJjZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpgBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHCg+w/Drri+FqCZIAF2i6IDqKb/WvJZWT1+A8SOh8LjR+D8Dna53C9 fpxnZE2ohT0SOZ7ttr+mcVPox6fQr9mvyOkgg7MOmrb+gOBTmg7eeYtM7UIQkr8Q t8yDpNDp4eogNxHE5mzSZZWkKpEyJSjJarrWRE+ibHi3/ggVE1pUr1Nbw7IIGRZq lvc7sbHVcUTvJCozaqRctuu8REe7VPomS2tqtx8v9ZDiPQOiUzRLFGA9OIRLwJ9U 3bDpgQZW1rpqlP/mGtfiQUp4tai+7dWnfO8G5Lf0OMvdV2E2QKUSIeyaq7MyO9TK cuQegunpxmOFMD+2qSHaT5MW9duNeRk= -----END CERTIFICATE-----Generated at Sat May 10 18:44:36 2025 by rpki-client