$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa File: cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa (raw, json) Hash identifier: ZfKanfN1aKn8iyVSswmA+KcoSf5H/Wmp/jdiLcGhHXI= Subject key identifier: 34:6E:B7:7B:95:C7:73:9F:A1:28:AE:47:12:A9:5B:55:A7:7C:2E:ED Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A2EEAC2E8EF57C20AFF503A00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 8881 IP address blocks: 166.0.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:c2:e8:ef:57:c2:0a:ff:50:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=4228f652-47a0-4eb2-a4ad-b3b0917b11ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f4:dc:e4:f8:aa:34:98:42:7f:f3:1b:77:6e: 38:5e:31:db:a9:cf:4f:c4:59:94:b9:27:40:09:87: 40:04:d0:a5:24:5a:02:b6:04:c6:d6:1e:0c:63:7a: 36:85:02:dd:fb:10:23:90:62:d5:c0:a1:e6:88:89: 96:17:9a:e2:04:5c:10:70:1c:ee:b5:f2:12:b8:dc: a9:0b:65:bf:11:a4:f3:c8:35:a1:02:41:5e:1a:90: 53:ef:10:b1:60:2d:51:a3:22:14:66:ba:90:89:02: c5:8b:d8:ae:b0:2d:8f:96:9f:ab:79:bb:c0:c3:52: e0:76:77:0e:5d:45:b6:a3:72:72:68:1c:ff:29:12: e3:e9:89:d7:50:ba:5e:2b:8a:57:73:da:d2:4b:60: 64:3a:74:9b:37:af:ec:7b:23:ca:c4:92:43:e1:0c: 88:4f:f8:08:bf:53:cd:a3:ce:fa:48:30:93:33:e3: da:e2:26:1e:e6:18:57:81:65:ad:ca:fe:97:51:02: 32:53:f1:1b:27:e2:58:d8:aa:39:40:a8:ce:f9:1c: d3:a1:ea:74:10:aa:3f:7e:1b:49:d2:e4:34:8e:76: 81:4a:71:e9:08:a2:e1:17:13:d8:ea:41:57:c0:c2: 2a:7d:ec:b9:81:4b:9b:8f:4c:27:b1:da:b4:36:bb: 5f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6E:B7:7B:95:C7:73:9F:A1:28:AE:47:12:A9:5B:55:A7:7C:2E:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a8:1f:3e:96:56:13:b4:54:13:69:0f:6c:ba:2c:27:3b:3d: 93:84:99:88:97:39:d3:2d:a6:26:5a:ff:9d:70:d8:5b:f0:b7: 8e:91:54:d8:61:d6:92:27:07:19:6c:45:84:c2:7c:66:ae:a1: e0:cc:59:12:a5:8b:a3:bb:57:4a:1a:84:93:f3:14:66:55:bb: ad:a9:47:e7:e8:f7:75:1d:23:a9:b4:e5:2c:0b:2c:a3:e2:db: 16:0d:38:d5:dc:9d:12:18:8e:e7:3c:56:95:49:00:63:5d:04: 75:ad:12:ba:aa:fe:c5:23:02:8d:fc:1b:89:f9:c3:04:e8:7e: 45:de:c1:25:4a:97:b4:b8:b5:bd:5c:3b:1a:62:ad:26:c7:77: bb:87:7e:28:4f:69:8b:0e:56:2e:11:05:71:79:dd:63:97:c9: fe:7d:10:82:d1:b4:cd:2c:69:8e:d9:ef:05:a4:0e:01:ce:dd: a6:10:4a:af:b1:e2:17:f6:7b:00:ca:88:90:4c:72:e1:b9:cd: 24:84:e4:65:80:9a:96:9e:43:c7:34:44:86:fe:a1:35:f6:12: 84:66:8f:14:c8:eb:4b:de:03:b3:21:f2:f5:f6:bf:56:4b:c1: 80:00:f9:d0:56:35:8f:9f:e4:d8:9b:f4:dc:73:06:ed:5c:36: 6c:2d:31:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6sLo71fCCv9QOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk NDIyOGY2NTItNDdhMC00ZWIyLWE0YWQtYjNiMDkxN2IxMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/Tc5PiqNJhCf/Mbd244XjHbqc9PxFmUuSdA CYdABNClJFoCtgTG1h4MY3o2hQLd+xAjkGLVwKHmiImWF5riBFwQcBzutfISuNyp C2W/EaTzyDWhAkFeGpBT7xCxYC1RoyIUZrqQiQLFi9iusC2Plp+rebvAw1LgdncO XUW2o3JyaBz/KRLj6YnXULpeK4pXc9rSS2BkOnSbN6/seyPKxJJD4QyIT/gIv1PN o876SDCTM+Pa4iYe5hhXgWWtyv6XUQIyU/EbJ+JY2Ko5QKjO+RzToep0EKo/fhtJ 0uQ0jnaBSnHpCKLhFxPY6kFXwMIqfey5gUubj0wnsdq0NrtfiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRut3uVx3OfoSiuRxKpW1WnfC7tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvY2Q1YzRlNzEtZTI3MS0z ZDg2LWI1YmUtNGZjYjI5ZTEwNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgAjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeoHz6WVhO0VBNpD2y6LCc7PZOEmYiXOdMtpiZa/51w2Fvwt46RVNhh 1pInBxlsRYTCfGauoeDMWRKli6O7V0oahJPzFGZVu62pR+fo93UdI6m05SwLLKPi 2xYNONXcnRIYjuc8VpVJAGNdBHWtErqq/sUjAo38G4n5wwTofkXewSVKl7S4tb1c OxpirSbHd7uHfihPaYsOVi4RBXF53WOXyf59EILRtM0saY7Z7wWkDgHO3aYQSq+x 4hf2ewDKiJBMcuG5zSSE5GWAmpaeQ8c0RIb+oTX2EoRmjxTI60veA7Mh8vX2v1ZL wYAA+dBWNY+f5Nib9NxzBu1cNmwtMes= -----END CERTIFICATE-----Generated at Tue Jul 1 16:06:06 2025 by rpki-client