$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b212eaf4-522f-3e09-9213-3973a2de5078.roa File: b212eaf4-522f-3e09-9213-3973a2de5078.roa (raw, json) Hash identifier: gZDze2IPHW9JecswxHurMR3tW0AHibwAUyn+u7kyWAc= Subject key identifier: 4F:9F:AF:CB:43:C8:02:44:52:E1:D2:29:17:B0:17:4A:9D:9D:A5:B8 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849ABB496AE1DC24B6862B9FA80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b212eaf4-522f-3e09-9213-3973a2de5078.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 401152 IP address blocks: 166.0.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:96:ae:1d:c2:4b:68:62:b9:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=130ba7c1-c4d0-424d-aa1e-53c10cc56270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:e3:49:37:87:9a:3f:54:05:eb:dc:84:b7: 01:ff:08:58:76:b5:77:73:71:0b:b2:00:13:0b:c2: 15:f4:ef:7e:c6:ee:86:70:49:d1:2c:02:83:cd:e7: cc:af:67:bb:7c:84:6e:33:ab:24:ed:90:1e:02:b9: 91:ca:fc:0c:fe:c8:1b:ab:72:69:26:4c:fe:53:ea: c1:7d:ce:17:7d:04:f7:2f:07:80:6e:55:62:db:7e: ae:ca:ae:4a:39:12:24:c9:55:f5:29:16:51:7d:1f: 06:36:70:4d:c0:3c:be:d1:68:f9:d5:74:d8:66:57: 68:61:2e:cd:52:e2:dc:9e:34:4b:bc:55:c6:6a:cd: 41:60:91:b4:34:af:83:f2:0f:66:3a:e8:6f:8f:1e: 37:33:3d:99:07:1b:eb:2d:d6:e2:73:20:2c:95:b7: 19:7a:b7:12:97:2f:44:8e:e5:43:10:c5:b0:0c:83: 1c:cb:ea:df:22:bf:1c:ac:5a:3a:0c:6e:83:e7:9b: 64:a5:59:ab:10:02:4c:74:52:4d:cd:93:34:72:73: 26:6d:16:fd:76:17:46:a8:1c:70:7d:fb:a6:4d:00: 84:aa:00:73:42:25:ad:e0:09:c8:da:57:d9:60:78: d3:21:d3:04:8a:b2:f3:e8:97:57:1e:ba:2e:3f:69: 47:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9F:AF:CB:43:C8:02:44:52:E1:D2:29:17:B0:17:4A:9D:9D:A5:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b212eaf4-522f-3e09-9213-3973a2de5078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:92:38:75:db:01:2a:a2:a9:ca:e5:52:39:d8:70:0c:9d:51: 1f:25:a7:27:bd:28:80:d1:23:51:62:0a:bf:d7:33:67:7f:67: bf:97:33:81:f5:2a:a2:e3:15:58:0d:bb:3f:9b:93:31:da:f4: ff:6e:ee:87:6b:10:35:da:9a:14:f4:14:1b:70:49:6e:9b:82: cd:20:90:24:ee:26:93:de:bb:79:d4:9e:f2:40:e9:52:43:0f: d6:b6:5e:e5:2c:e6:4a:a6:42:05:1d:79:d9:21:73:87:31:4f: 4e:c7:58:41:43:a9:4f:a2:26:c6:1e:3f:05:e4:e0:61:2d:1a: 1c:71:7d:04:c4:94:94:72:f5:3c:95:fe:13:56:7f:22:55:c1: a8:3b:9b:38:77:b8:92:81:ef:0d:46:7e:97:32:82:71:05:47: 6a:d3:8a:3b:67:37:df:8b:7c:0e:67:2d:ae:c5:66:a7:db:db: 08:57:aa:b7:91:5f:89:02:bf:bd:28:83:22:4e:ff:c4:ee:ee: 9a:58:48:d3:14:6d:0a:79:f8:38:29:0b:af:62:9f:3e:42:ef: 8a:40:58:0f:74:bb:b5:4d:0d:b6:19:6e:28:8a:b6:8b:a1:fa: 0f:40:12:2d:5b:61:20:67:99:62:f5:76:56:3e:86:4e:fe:12: 5b:f5:24:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJauHcJLaGK5+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MTMwYmE3YzEtYzRkMC00MjRkLWFhMWUtNTNjMTBjYzU2MjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e/jSTeHmj9UBevchLcB/whYdrV3c3ELsgAT C8IV9O9+xu6GcEnRLAKDzefMr2e7fIRuM6sk7ZAeArmRyvwM/sgbq3JpJkz+U+rB fc4XfQT3LweAblVi236uyq5KORIkyVX1KRZRfR8GNnBNwDy+0Wj51XTYZldoYS7N UuLcnjRLvFXGas1BYJG0NK+D8g9mOuhvjx43Mz2ZBxvrLdbicyAslbcZercSly9E juVDEMWwDIMcy+rfIr8crFo6DG6D55tkpVmrEAJMdFJNzZM0cnMmbRb9dhdGqBxw ffumTQCEqgBzQiWt4AnI2lfZYHjTIdMEirLz6JdXHrouP2lHKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+fr8tDyAJEUuHSKRewF0qdnaW4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjIxMmVhZjQtNTIyZi0z ZTA5LTkyMTMtMzk3M2EyZGU1MDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeSOHXbASqiqcrlUjnYcAydUR8lpye9KIDRI1FiCr/XM2d/Z7+XM4H1 KqLjFVgNuz+bkzHa9P9u7odrEDXamhT0FBtwSW6bgs0gkCTuJpPeu3nUnvJA6VJD D9a2XuUs5kqmQgUdedkhc4cxT07HWEFDqU+iJsYePwXk4GEtGhxxfQTElJRy9TyV /hNWfyJVwag7mzh3uJKB7w1GfpcygnEFR2rTijtnN9+LfA5nLa7FZqfb2whXqreR X4kCv70ogyJO/8Tu7ppYSNMUbQp5+DgpC69inz5C74pAWA90u7VNDbYZbiiKtouh +g9AEi1bYSBnmWL1dlY+hk7+Elv1JBg= -----END CERTIFICATE-----Generated at Sat May 10 17:53:17 2025 by rpki-client