$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2b3905c-1cf9-399c-b937-9f1a7cf5e280.roa File: b2b3905c-1cf9-399c-b937-9f1a7cf5e280.roa (raw, json) Hash identifier: lyTaBFYGWo12GmIqhuM4PM8Sg7qARsK5znkoGmHRdog= Subject key identifier: F9:59:71:24:8C:9C:84:61:D8:DE:5E:AB:CF:99:85:65:E5:A2:E2:4A Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849ABB49A9286078A3100D2FE80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2b3905c-1cf9-399c-b937-9f1a7cf5e280.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 61317 IP address blocks: 108.165.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9a:92:86:07:8a:31:00:d2:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=478fd9a7-a296-4e91-9619-d5ab7e0ddfe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:08:a0:88:f0:77:65:7f:de:0a:2e:e3:13: 05:37:72:6b:dc:c3:19:f1:e9:d9:a8:e6:30:ed:63: ec:5b:f2:0b:a6:82:e2:2f:e3:de:8a:16:4e:ee:e5: 4f:2b:3c:75:64:df:9d:58:0a:14:f0:31:2e:c9:60: 0c:92:a6:f7:f0:66:b7:0e:46:e9:1f:ff:b8:14:5b: b8:f9:15:8e:60:b2:63:82:cb:76:d1:5e:0c:a3:90: fe:ae:de:6b:f3:68:2e:16:0a:bb:87:02:5c:cb:b1: 2d:ba:bb:c0:34:f9:d8:91:95:3b:7b:ad:1a:cd:fa: e3:a8:5f:90:fa:fd:31:5e:fd:97:41:f7:7c:37:a2: d2:70:8b:9b:07:63:61:57:c0:d1:ee:73:4e:60:24: 33:ef:48:49:21:96:7d:f3:c3:d7:d7:bf:ab:2b:ad: b3:17:ae:8d:4f:ce:ce:21:40:c3:e7:62:82:bf:e5: 41:b1:e7:b9:27:78:d9:81:48:4b:f4:ab:cc:78:a4: c5:94:d3:85:d0:7e:b9:b5:54:4c:4c:69:d8:28:5d: b6:38:4d:57:4d:45:a4:6e:6a:b6:dd:fc:6a:ac:76: 75:52:6e:ed:6f:dc:d7:d6:e7:82:3f:51:4d:33:6c: e4:54:8e:e5:93:30:4a:e9:46:97:c1:85:98:93:00: d0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:59:71:24:8C:9C:84:61:D8:DE:5E:AB:CF:99:85:65:E5:A2:E2:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2b3905c-1cf9-399c-b937-9f1a7cf5e280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:bc:eb:1f:cf:45:5d:1d:ff:7e:10:46:a0:77:ca:69:9f:2b: c6:da:47:15:91:3a:dc:e0:bc:f3:a1:74:55:d8:73:ff:a7:07: d6:97:5c:55:69:a5:29:00:18:91:b8:00:2e:bd:17:cb:81:ee: d3:eb:01:59:75:8f:61:ed:aa:5e:e3:0f:67:62:6c:2d:dc:80: 81:5c:fa:17:11:69:e3:8b:23:2f:e1:a3:3b:18:ef:df:e7:cb: 70:9d:b7:10:d2:19:58:17:31:9f:36:e0:e1:2c:36:8c:c2:d6: 1c:f2:a9:c2:a3:86:7f:26:81:24:73:da:0a:45:2f:87:f0:7b: d5:d8:dd:85:ce:e0:02:31:4e:2d:fd:b4:5f:ac:81:fd:b0:82: 6d:71:18:d4:5a:25:c3:a6:0b:2a:56:85:36:58:5e:9a:aa:49: bf:7a:48:16:67:7f:d4:1e:05:f3:5a:a6:35:a6:a8:bd:b6:7f: 11:27:34:b9:6b:ca:72:b6:69:3f:b6:dd:b9:6a:cb:11:97:06: b0:e9:06:07:29:b0:e4:dc:36:9e:88:c8:e9:73:d3:32:8d:15: 91:db:60:a0:0d:64:45:b0:bd:66:a3:20:d0:94:ea:fe:f5:78: f1:99:fb:2b:53:b2:8c:57:c0:c9:c3:f5:36:05:38:98:ce:00: 99:31:35:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJqShgeKMQDS/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NDc4ZmQ5YTctYTI5Ni00ZTkxLTk2MTktZDVhYjdlMGRkZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPAIoIjwd2V/3gou4xMFN3Jr3MMZ8enZqOYw 7WPsW/ILpoLiL+PeihZO7uVPKzx1ZN+dWAoU8DEuyWAMkqb38Ga3DkbpH/+4FFu4 +RWOYLJjgst20V4Mo5D+rt5r82guFgq7hwJcy7EturvANPnYkZU7e60azfrjqF+Q +v0xXv2XQfd8N6LScIubB2NhV8DR7nNOYCQz70hJIZZ988PX17+rK62zF66NT87O IUDD52KCv+VBsee5J3jZgUhL9KvMeKTFlNOF0H65tVRMTGnYKF22OE1XTUWkbmq2 3fxqrHZ1Um7tb9zX1ueCP1FNM2zkVI7lkzBK6UaXwYWYkwDQVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlZcSSMnIRh2N5eq8+ZhWXlouJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjJiMzkwNWMtMWNmOS0z OTljLWI5MzctOWYxYTdjZjVlMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJi86x/PRV0d/34QRqB3ymmfK8baRxWROtzgvPOhdFXYc/+nB9aXXFVp pSkAGJG4AC69F8uB7tPrAVl1j2Htql7jD2dibC3cgIFc+hcRaeOLIy/hozsY79/n y3CdtxDSGVgXMZ824OEsNozC1hzyqcKjhn8mgSRz2gpFL4fwe9XY3YXO4AIxTi39 tF+sgf2wgm1xGNRaJcOmCypWhTZYXpqqSb96SBZnf9QeBfNapjWmqL22fxEnNLlr ynK2aT+23blqyxGXBrDpBgcpsOTcNp6IyOlz0zKNFZHbYKANZEWwvWajINCU6v71 ePGZ+ytTsoxXwMnD9TYFOJjOAJkxNeE= -----END CERTIFICATE-----Generated at Mon May 5 20:43:31 2025 by rpki-client