$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3995483a-e757-31bf-8b1b-056a3967794b.roa File: 3995483a-e757-31bf-8b1b-056a3967794b.roa (raw, json) Hash identifier: +4LBALG8T03UNY+45Ou0etDgokV3giuGk16s6ZjAlJw= Subject key identifier: 1F:12:03:B5:C3:A3:CA:31:92:70:53:73:6A:A1:D1:FA:12:CE:54:39 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849B94C59A0AB7F964F13A5AB80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3995483a-e757-31bf-8b1b-056a3967794b.roa Signing time: Fri 02 May 2025 21:52:12 +0000 ROA not before: Fri 02 May 2025 21:52:12 +0000 ROA not after: Thu 31 Jul 2025 21:52:12 +0000 asID: 401152 IP address blocks: 166.0.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:4c:59:a0:ab:7f:96:4f:13:a5:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: May 2 21:52:12 2025 GMT Not After : Jul 31 21:52:12 2025 GMT Subject: CN=0128b6a0-3467-4be1-9fa0-87111fca5abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:34:52:1f:66:1a:65:c9:a6:97:ff:dc:67:fc: d3:b0:1e:3d:32:c6:18:67:28:2c:9c:6b:e0:8c:0e: 9a:e7:5d:2b:a7:6c:1b:97:ae:fe:e5:1a:27:f1:b8: d9:25:28:08:97:b9:5b:80:dd:94:52:4f:0e:cc:32: f9:77:c2:91:27:82:d7:6c:e7:82:6d:77:18:c4:7d: e7:ac:dd:1a:e3:a0:41:9a:db:0d:04:63:53:57:d5: 65:c3:24:31:51:85:f4:c1:92:bd:1e:21:a4:8d:ad: 61:22:35:8c:7a:47:34:a3:5d:d0:a0:8b:c4:91:5a: f1:0f:86:92:fb:1c:37:8a:68:43:bc:97:b8:69:23: 42:5d:27:d1:65:18:00:10:80:6c:f2:7b:9f:fd:2a: b4:86:52:2b:e6:eb:ed:da:09:85:47:75:14:5b:64: 62:c6:16:02:a3:47:59:a3:2d:f9:f7:01:4b:66:d6: 53:09:27:a6:47:9f:f0:3a:ea:05:35:e2:af:95:e9: bf:10:3b:68:f8:bb:61:62:f3:2e:ea:6c:56:56:46: 35:b5:29:31:ad:69:a9:2f:dc:76:70:27:38:63:66: 77:fc:c5:c1:0a:40:e3:7e:d8:d1:db:44:93:a0:a8: 71:b6:86:fb:be:1b:84:61:ab:8f:a5:1b:68:f8:78: 0d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:12:03:B5:C3:A3:CA:31:92:70:53:73:6A:A1:D1:FA:12:CE:54:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3995483a-e757-31bf-8b1b-056a3967794b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:8e:98:9c:b9:2e:7a:e3:06:15:15:e5:8a:ea:b8:7e:c0:1e: ae:3a:81:2a:f9:db:e9:d4:83:c4:03:76:8d:89:50:f0:9f:d6: 05:a9:d2:e1:99:57:27:b4:94:66:2a:8c:98:12:8b:b8:58:a0: 1e:9f:d3:2c:d2:ee:56:db:1c:43:ce:57:f8:80:4c:67:1e:5d: 23:5e:aa:d7:70:1f:ff:40:11:b1:9f:8d:26:bf:0f:44:ce:d8: 54:81:01:39:18:00:3a:38:80:b9:eb:6f:11:82:05:ac:86:ba: 1b:05:d3:c0:ea:fb:f2:0f:e0:de:e4:63:23:0d:09:75:ea:4d: 02:fd:4b:5f:f5:6a:a2:54:d3:eb:88:f9:28:f5:52:73:14:ea: c1:7f:39:28:f6:22:86:7a:e7:62:a2:fb:5e:6c:5a:7f:e7:4f: 5b:af:ea:78:15:5d:f6:fb:09:a2:24:78:e6:04:f2:2e:04:72: 5a:b0:98:98:f5:53:96:b8:c0:2f:05:e4:4f:b2:96:3b:9b:02: 09:ac:21:95:80:14:68:85:50:f1:6e:59:a1:42:3e:1c:3c:23: 35:7e:3b:24:52:03:19:93:b0:6f:14:37:43:35:36:35:ea:2a: a5:86:de:45:95:78:c4:7c:ad:4c:29:8d:30:34:45:4e:29:43: 09:a1:ea:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5TFmgq3+WTxOlq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDUwMjIxNTIxMloXDTI1MDczMTIxNTIxMlowLzEtMCsGA1UEAxMk MDEyOGI2YTAtMzQ2Ny00YmUxLTlmYTAtODcxMTFmY2E1YWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DRSH2YaZcmml//cZ/zTsB49MsYYZygsnGvg jA6a510rp2wbl67+5Ron8bjZJSgIl7lbgN2UUk8OzDL5d8KRJ4LXbOeCbXcYxH3n rN0a46BBmtsNBGNTV9VlwyQxUYX0wZK9HiGkja1hIjWMekc0o13QoIvEkVrxD4aS +xw3imhDvJe4aSNCXSfRZRgAEIBs8nuf/Sq0hlIr5uvt2gmFR3UUW2RixhYCo0dZ oy359wFLZtZTCSemR5/wOuoFNeKvlem/EDto+LthYvMu6mxWVkY1tSkxrWmpL9x2 cCc4Y2Z3/MXBCkDjftjR20SToKhxtob7vhuEYauPpRto+HgNIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8SA7XDo8oxknBTc2qh0foSzlQ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzk5NTQ4M2EtZTc1Ny0z MWJmLThiMWItMDU2YTM5Njc3OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpgAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGOmJy5LnrjBhUV5YrquH7AHq46gSr52+nUg8QDdo2JUPCf1gWp0uGZ Vye0lGYqjJgSi7hYoB6f0yzS7lbbHEPOV/iATGceXSNeqtdwH/9AEbGfjSa/D0TO 2FSBATkYADo4gLnrbxGCBayGuhsF08Dq+/IP4N7kYyMNCXXqTQL9S1/1aqJU0+uI +Sj1UnMU6sF/OSj2IoZ652Ki+15sWn/nT1uv6ngVXfb7CaIkeOYE8i4EclqwmJj1 U5a4wC8F5E+yljubAgmsIZWAFGiFUPFuWaFCPhw8IzV+OyRSAxmTsG8UN0M1NjXq KqWG3kWVeMR8rUwpjTA0RU4pQwmh6ug= -----END CERTIFICATE-----Generated at Mon May 12 16:56:08 2025 by rpki-client