$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6278ed56-2d53-3122-a6c4-ccd704b0862e.roa File: 6278ed56-2d53-3122-a6c4-ccd704b0862e.roa (raw, json) Hash identifier: zQll6tJuJbS/znQq/zdyk2CQaw3hpB/lh07aq+gTvj8= Subject key identifier: D1:A5:67:5F:17:AB:8F:FB:40:93:32:FE:62:46:F1:7C:DC:1C:77:57 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A5E605E052C7FAC8ED03F3580 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6278ed56-2d53-3122-a6c4-ccd704b0862e.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 401152 IP address blocks: 166.0.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5e:05:2c:7f:ac:8e:d0:3f:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=5fe98a79-7cf8-481c-9124-f795b66b25a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8e:60:90:73:5e:5c:e5:db:94:cb:cc:7e:8f: db:b2:fc:68:d6:90:69:f3:e9:9d:6f:96:04:85:dd: 8a:69:a2:10:58:9b:13:d4:8b:6b:68:d6:e3:c4:f2: d4:56:ae:57:9f:62:ee:66:cb:3e:5d:65:3c:47:5b: 8a:1f:60:39:5d:a6:89:3d:c3:9d:2f:b8:f4:8c:60: 72:d8:d4:f4:cb:bf:80:8d:d8:f4:8b:b2:a0:8c:4b: 73:ed:e6:e2:a8:4b:1a:48:75:9c:4b:37:2a:0f:d9: 87:81:29:53:e9:8f:66:6b:53:b1:c9:53:4e:59:57: 0c:73:6d:6a:34:17:9c:f7:57:ca:f0:7c:61:ba:c6: 07:97:57:6f:b6:da:3c:7d:2a:4b:92:fb:94:08:73: 79:df:17:cc:11:06:62:19:03:46:99:b0:f6:82:80: 3a:85:84:d0:99:e6:d6:7b:d5:c8:50:86:60:93:84: 95:fb:1c:ae:d1:52:04:e3:8a:a7:ad:c4:ce:57:ad: c0:2d:f3:88:32:eb:3a:5c:4e:59:02:22:44:6e:61: ce:1c:d6:3e:2c:0f:6d:8b:7f:d3:40:60:c0:fc:38: 75:b1:98:7d:30:4d:c6:27:98:ef:2d:32:ad:02:67: 36:d3:3a:07:e0:8a:6d:b4:97:b8:28:95:2b:f6:d5: 8e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A5:67:5F:17:AB:8F:FB:40:93:32:FE:62:46:F1:7C:DC:1C:77:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6278ed56-2d53-3122-a6c4-ccd704b0862e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:57:47:dc:c5:56:63:70:66:37:d8:49:32:83:b2:4f:92:89: 2c:c6:98:20:5e:8a:88:7a:40:d5:cb:7e:a7:c4:41:59:6a:22: 41:5f:9d:8e:03:49:5f:46:40:16:32:e1:37:37:e5:10:a6:41: 61:85:bf:a8:1a:3c:10:fe:6c:dc:d1:19:ff:5a:9e:aa:b0:c5: cb:ff:ac:1d:e6:e8:a3:df:b3:66:d6:df:15:f7:83:4f:1c:81: b3:70:61:00:84:cc:fa:c4:02:07:ee:b9:1d:ad:f0:43:75:aa: d9:24:f2:6e:ba:3c:db:1c:1d:b0:ac:09:5b:4c:d1:68:ce:95: fb:a6:ea:ab:a0:60:f2:53:d5:ba:e6:db:9c:28:23:60:e7:a7: 45:9b:1a:9d:01:72:25:7e:46:78:ab:96:2a:63:e5:c5:ef:03: 17:fd:6c:77:d5:d1:8c:f5:ba:50:e7:16:72:9b:49:cb:b6:ff: 83:e4:17:4c:d6:ed:fe:3e:a6:3a:85:aa:e5:3e:70:8f:55:2c: fd:50:16:77:78:cd:bc:b9:0b:ff:51:1a:c0:f7:3f:d0:65:c0: 19:b0:19:f0:b4:4e:93:da:d5:d1:1f:db:98:30:fe:ea:02:ce: 7a:bf:4a:a3:85:7e:1a:a4:f0:b1:e1:91:c5:5e:3f:8f:ab:84: 57:1a:1e:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYF4FLH+sjtA/NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk NWZlOThhNzktN2NmOC00ODFjLTkxMjQtZjc5NWI2NmIyNWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y5gkHNeXOXblMvMfo/bsvxo1pBp8+mdb5YE hd2KaaIQWJsT1ItraNbjxPLUVq5Xn2LuZss+XWU8R1uKH2A5XaaJPcOdL7j0jGBy 2NT0y7+Ajdj0i7KgjEtz7ebiqEsaSHWcSzcqD9mHgSlT6Y9ma1OxyVNOWVcMc21q NBec91fK8HxhusYHl1dvtto8fSpLkvuUCHN53xfMEQZiGQNGmbD2goA6hYTQmebW e9XIUIZgk4SV+xyu0VIE44qnrcTOV63ALfOIMus6XE5ZAiJEbmHOHNY+LA9ti3/T QGDA/Dh1sZh9ME3GJ5jvLTKtAmc20zoH4IpttJe4KJUr9tWO3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGlZ18Xq4/7QJMy/mJG8XzcHHdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjI3OGVkNTYtMmQ1My0z MTIyLWE2YzQtY2NkNzA0YjA4NjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpgAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlXR9zFVmNwZjfYSTKDsk+SiSzGmCBeioh6QNXLfqfEQVlqIkFfnY4D SV9GQBYy4Tc35RCmQWGFv6gaPBD+bNzRGf9anqqwxcv/rB3m6KPfs2bW3xX3g08c gbNwYQCEzPrEAgfuuR2t8EN1qtkk8m66PNscHbCsCVtM0WjOlfum6qugYPJT1brm 25woI2Dnp0WbGp0BciV+Rnirlipj5cXvAxf9bHfV0Yz1ulDnFnKbScu2/4PkF0zW 7f4+pjqFquU+cI9VLP1QFnd4zby5C/9RGsD3P9BlwBmwGfC0TpPa1dEf25gw/uoC znq/SqOFfhqk8LHhkcVeP4+rhFcaHrs= -----END CERTIFICATE-----Generated at Tue Jul 1 15:24:58 2025 by rpki-client