$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afba6e9a-9e9c-302b-97ca-9f6dcbeb2a8e.roa File: afba6e9a-9e9c-302b-97ca-9f6dcbeb2a8e.roa (raw, json) Hash identifier: gcfWj0i0VBX+UeyvpTpJVKakE/pqEPK28Fnsspc1KZg= Subject key identifier: A4:EC:5D:53:73:75:A0:B7:CE:6C:A4:97:EA:80:6C:A2:9B:6F:1E:CF Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A364CFAB217CD8D5B2D402240 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afba6e9a-9e9c-302b-97ca-9f6dcbeb2a8e.roa Signing time: Mon 16 Jun 2025 16:29:31 +0000 ROA not before: Mon 16 Jun 2025 16:29:31 +0000 ROA not after: Sun 14 Sep 2025 16:29:31 +0000 asID: 397423 IP address blocks: 166.1.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:4c:fa:b2:17:cd:8d:5b:2d:40:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jun 16 16:29:31 2025 GMT Not After : Sep 14 16:29:31 2025 GMT Subject: CN=7319a206-174e-4d7f-abc9-031671cbe173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b0:77:dc:9c:0d:8b:79:c6:5e:fd:4f:e8:8c: 15:e1:7c:31:46:de:ca:88:39:64:8d:e4:21:0c:6f: 54:8c:50:8f:72:4d:30:e7:38:44:f5:f0:13:c6:ec: 2c:56:81:3f:79:fe:af:f7:d5:c3:8d:52:64:a8:1d: 9b:7c:8f:04:4c:91:9e:88:8f:14:b5:56:62:ce:89: 56:78:fb:01:05:1d:74:61:cf:68:0e:6c:45:ec:df: fb:45:bb:9d:0b:55:9b:ec:96:ef:a7:9d:13:2e:e7: 24:24:f8:96:0e:49:b9:77:4a:4b:4a:4c:d0:db:3e: 8a:64:ed:6d:97:69:63:12:5e:4e:c3:c5:1e:73:2a: 62:66:49:98:be:a7:e5:ca:a4:49:27:2f:5f:36:4d: e7:95:1b:bd:a4:78:75:26:eb:64:9d:a1:d9:80:20: 27:6a:9d:e6:d4:94:8a:53:0b:67:ba:c9:5b:b6:16: a8:d1:67:63:2e:f0:1b:d9:f5:a9:d9:f7:c1:7d:3b: 7b:63:35:a2:f4:9e:25:78:35:92:bf:c9:d5:cc:d2: 54:0e:77:7b:f3:85:fb:9e:8a:cd:05:7f:70:12:63: 2e:05:c0:9c:bc:0e:53:44:86:bd:ce:ed:92:77:51: 45:c2:90:b4:50:c7:b5:d4:12:be:e8:01:a6:20:23: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:EC:5D:53:73:75:A0:B7:CE:6C:A4:97:EA:80:6C:A2:9B:6F:1E:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afba6e9a-9e9c-302b-97ca-9f6dcbeb2a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c1:73:7d:7c:c5:11:a4:34:b8:dd:98:e1:97:c7:16:b6:78: 29:e7:9e:2d:9c:8c:e6:81:d7:c3:84:75:c0:b0:76:99:17:32: 68:a9:3b:14:a6:f7:78:e6:0c:a5:b4:9c:5f:25:e7:fc:9e:ab: ec:c7:c8:81:e2:59:f7:95:40:dd:29:0d:66:5a:0c:7b:6f:64: c9:21:7c:0c:65:04:23:cf:2e:14:6d:ca:bd:f3:ea:a0:c9:60: 39:83:d1:a6:bf:a1:5f:6b:86:eb:f1:50:1b:d6:ec:68:82:40: 2d:ea:23:0b:a4:5a:64:6b:cc:dc:d5:a3:3f:0c:4e:d1:bb:ed: 91:f8:ce:c0:2d:36:66:ce:96:7a:a5:0c:0e:b9:dc:f5:55:f3: 50:28:a2:8b:11:fb:9b:b3:de:a0:c8:94:75:65:bb:a3:22:1c: f1:fa:56:ba:88:37:b5:72:0b:ce:4e:60:06:e8:c3:64:1a:0d: a4:16:66:b4:99:8e:54:6d:19:92:a2:cc:01:17:e4:f9:d4:0f: 3f:41:95:ed:9b:8a:5c:82:3d:f1:4c:19:97:fe:c7:71:4f:f7: 2b:62:92:5b:3f:eb:91:5b:b9:62:fc:b1:c1:12:68:18:75:07: 8e:44:de:44:77:1d:09:b2:d0:b0:46:48:2d:c7:99:7c:d8:1e: 3c:80:74:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo2TPqyF82NWy1AIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDYxNjE2MjkzMVoXDTI1MDkxNDE2MjkzMVowLzEtMCsGA1UEAxMk NzMxOWEyMDYtMTc0ZS00ZDdmLWFiYzktMDMxNjcxY2JlMTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7B33JwNi3nGXv1P6IwV4XwxRt7KiDlkjeQh DG9UjFCPck0w5zhE9fATxuwsVoE/ef6v99XDjVJkqB2bfI8ETJGeiI8UtVZizolW ePsBBR10Yc9oDmxF7N/7RbudC1Wb7Jbvp50TLuckJPiWDkm5d0pLSkzQ2z6KZO1t l2ljEl5Ow8UecypiZkmYvqflyqRJJy9fNk3nlRu9pHh1JutknaHZgCAnap3m1JSK Uwtnuslbthao0WdjLvAb2fWp2ffBfTt7YzWi9J4leDWSv8nVzNJUDnd784X7norN BX9wEmMuBcCcvA5TRIa9zu2Sd1FFwpC0UMe11BK+6AGmICNVzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTsXVNzdaC3zmykl+qAbKKbbx7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWZiYTZlOWEtOWU5Yy0z MDJiLTk3Y2EtOWY2ZGNiZWIyYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgH5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjBc318xRGkNLjdmOGXxxa2eCnnni2cjOaB18OEdcCwdpkXMmipOxSm 93jmDKW0nF8l5/yeq+zHyIHiWfeVQN0pDWZaDHtvZMkhfAxlBCPPLhRtyr3z6qDJ YDmD0aa/oV9rhuvxUBvW7GiCQC3qIwukWmRrzNzVoz8MTtG77ZH4zsAtNmbOlnql DA653PVV81AooosR+5uz3qDIlHVlu6MiHPH6VrqIN7VyC85OYAbow2QaDaQWZrSZ jlRtGZKizAEX5PnUDz9Ble2bilyCPfFMGZf+x3FP9ytikls/65FbuWL8scESaBh1 B45E3kR3HQmy0LBGSC3HmXzYHjyAdD8= -----END CERTIFICATE-----Generated at Sun Jun 29 14:45:19 2025 by rpki-client