$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c22ab13b-d75b-3bcb-acee-974feaf8a876.roa File: c22ab13b-d75b-3bcb-acee-974feaf8a876.roa (raw, json) Hash identifier: 5uv/PCDOJcCQV6+31BF6Q0CFWAeJ1nDE+vJwgBCA/Hk= Subject key identifier: 8B:A1:E8:54:F2:39:CF:AA:C5:99:FB:5E:42:0E:02:CD:EF:80:B4:37 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849BC74A5260EBAC1AD8F77BA00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c22ab13b-d75b-3bcb-acee-974feaf8a876.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 36352 IP address blocks: 108.165.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:a5:26:0e:ba:c1:ad:8f:77:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=1f6ec145-df73-44fd-913f-3d6d4c2c2d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:3c:b4:c3:d4:37:87:1b:c0:eb:98:f3:3a: 15:f5:ee:47:12:e2:ea:3f:27:d8:22:9a:c1:3d:ff: ac:1a:88:5d:d3:cc:d6:f2:4b:c7:8a:28:fb:f8:46: 3a:a1:01:a0:cf:0c:9f:5f:c9:e8:6e:65:5d:87:84: 04:2e:70:84:c1:d9:95:c4:24:75:60:3f:e8:cb:f4: 96:3b:8f:50:73:6b:d1:b1:83:22:bf:c0:23:72:3c: 9e:aa:60:9a:c5:32:57:c8:b4:f8:16:2d:fe:e2:96: d2:ed:ac:76:da:58:16:14:5d:bf:46:82:b1:b4:a2: fb:ac:a3:97:76:77:09:1f:9b:a4:66:46:86:d9:5f: a6:90:56:59:d8:64:d6:b6:7a:be:22:7c:28:7e:79: 6f:ae:7b:09:39:84:3c:3d:07:47:4e:c7:58:1f:e0: 3a:fa:be:59:f0:59:b1:8b:3a:17:57:78:49:88:ab: 02:1a:81:28:4f:76:dc:44:5b:b1:42:0d:0d:dc:8d: f5:1c:f5:a5:50:b4:f8:e1:a4:51:96:ef:11:5a:83: dd:ba:70:12:2e:a5:ff:83:24:bb:a1:07:c1:a6:ae: 52:e6:0e:ad:0c:74:21:f8:40:20:99:b5:ef:73:01: 37:df:a0:a6:23:5d:f9:2e:43:2e:80:de:e5:9b:4a: 5b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A1:E8:54:F2:39:CF:AA:C5:99:FB:5E:42:0E:02:CD:EF:80:B4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c22ab13b-d75b-3bcb-acee-974feaf8a876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:19:8b:42:4c:3d:db:26:8a:35:e1:16:1f:d5:90:65:4e:b2: 77:86:28:8f:12:f4:34:88:c6:cf:bf:b7:20:43:96:fa:e9:35: 56:c1:26:be:61:95:1f:15:e9:d5:5b:0b:4f:86:f1:e0:70:a0: af:36:14:0f:33:f1:77:e1:b7:bf:1d:53:3f:82:e8:a2:de:35: 09:c7:1c:7e:a0:55:67:1a:f8:40:03:26:7c:d2:d8:e4:f8:b0: b6:42:5c:8b:f7:29:6e:c4:2d:95:81:fb:29:be:83:f3:32:f9: 80:ac:0c:ad:c9:37:44:12:5f:54:90:24:e3:18:74:b6:e0:78: 6d:7d:b3:e5:d7:b8:20:d0:61:11:42:6d:2d:ca:56:8d:cc:eb: 61:50:45:7f:78:ec:89:e2:b1:4f:c4:e9:09:14:6e:3a:da:9c: 2e:47:9c:e2:c5:23:bf:e3:63:c6:92:d0:20:1d:60:92:30:c3: 14:90:51:d8:e0:4e:90:c2:93:c6:c3:43:0b:f9:56:4a:0d:b5: 2c:ce:ec:18:c3:51:bd:5a:0f:f3:d9:7e:04:43:ce:d2:0f:1f: 25:a5:12:7a:c0:7e:29:e4:0a:a5:0f:d4:0a:97:af:91:68:ae: 24:29:ae:6c:03:7d:50:4a:12:4d:49:e7:ac:e9:4b:16:6d:f2: fc:8a:25:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dKUmDrrBrY93ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk MWY2ZWMxNDUtZGY3My00NGZkLTkxM2YtM2Q2ZDRjMmMyZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUo8tMPUN4cbwOuY8zoV9e5HEuLqPyfYIprB Pf+sGohd08zW8kvHiij7+EY6oQGgzwyfX8nobmVdh4QELnCEwdmVxCR1YD/oy/SW O49Qc2vRsYMiv8AjcjyeqmCaxTJXyLT4Fi3+4pbS7ax22lgWFF2/RoKxtKL7rKOX dncJH5ukZkaG2V+mkFZZ2GTWtnq+InwofnlvrnsJOYQ8PQdHTsdYH+A6+r5Z8Fmx izoXV3hJiKsCGoEoT3bcRFuxQg0N3I31HPWlULT44aRRlu8RWoPdunASLqX/gyS7 oQfBpq5S5g6tDHQh+EAgmbXvcwE336CmI135LkMugN7lm0pbfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuh6FTyOc+qxZn7XkIOAs3vgLQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzIyYWIxM2ItZDc1Yi0z YmNiLWFjZWUtOTc0ZmVhZjhhODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkZi0JMPdsmijXhFh/VkGVOsneGKI8S9DSIxs+/tyBDlvrpNVbBJr5h lR8V6dVbC0+G8eBwoK82FA8z8Xfht78dUz+C6KLeNQnHHH6gVWca+EADJnzS2OT4 sLZCXIv3KW7ELZWB+ym+g/My+YCsDK3JN0QSX1SQJOMYdLbgeG19s+XXuCDQYRFC bS3KVo3M62FQRX947InisU/E6QkUbjranC5HnOLFI7/jY8aS0CAdYJIwwxSQUdjg TpDCk8bDQwv5VkoNtSzO7BjDUb1aD/PZfgRDztIPHyWlEnrAfinkCqUP1AqXr5Fo riQprmwDfVBKEk1J56zpSxZt8vyKJYg= -----END CERTIFICATE-----Generated at Fri May 9 02:35:11 2025 by rpki-client