$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d22bd671-77ad-3036-b210-ed40c60f64f2.roa File: d22bd671-77ad-3036-b210-ed40c60f64f2.roa (raw, json) Hash identifier: wQOCLbEgeIxCsQ1SHWcT0e0VKfXVdOn34HhfzaI6I9g= Subject key identifier: 71:57:3C:CF:AC:E1:49:4A:51:97:62:3B:9E:2C:13:A6:78:E6:FC:10 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849B67B4359027C0A92DB2DAC80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d22bd671-77ad-3036-b210-ed40c60f64f2.roa Signing time: Thu 01 May 2025 21:39:18 +0000 ROA not before: Thu 01 May 2025 21:39:18 +0000 ROA not after: Wed 30 Jul 2025 21:39:18 +0000 asID: 401152 IP address blocks: 166.1.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:7b:43:59:02:7c:0a:92:db:2d:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: May 1 21:39:18 2025 GMT Not After : Jul 30 21:39:18 2025 GMT Subject: CN=7dec838b-60b9-4205-9b0c-451ab509063d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c3:1b:81:7d:47:74:b8:46:c0:3a:94:6e:3f: 73:c4:58:3b:ea:5c:39:13:9c:d2:30:5a:18:11:7b: df:25:b3:3e:62:35:1b:ef:bb:4e:a7:81:5c:d8:87: e8:5c:a0:1a:1e:07:c5:f6:e0:b2:4c:21:f0:e2:f7: 96:ee:56:ff:c3:63:40:73:4c:e4:73:a3:ef:cd:eb: 27:7b:69:4e:a5:d0:34:e5:0c:cc:a4:84:49:64:46: f5:c2:2c:05:21:48:f0:a0:02:a1:8b:86:56:41:e7: 11:cb:54:41:b3:01:ce:12:f6:57:b9:5a:c0:05:eb: af:ae:9e:11:1d:5d:38:67:d4:ff:d8:3b:08:87:90: 63:52:06:e9:6a:fd:08:7e:1d:e7:a4:83:b0:0e:60: aa:74:0a:ec:16:b6:1d:7f:2b:12:b7:58:98:a1:55: 80:5d:82:2f:f5:5c:3e:55:37:76:d6:92:07:ed:26: 52:a3:7c:be:26:16:90:52:f7:75:78:2f:84:45:e5: 3a:91:9f:91:7f:64:ff:49:94:3e:3a:6f:69:ae:df: 0a:c5:d4:bc:b6:28:42:05:f9:e9:23:49:06:ba:74: b9:ed:a0:de:35:df:80:c7:49:a1:fb:8b:a4:ce:f0: 04:f2:b5:af:28:20:29:fb:04:10:c2:8d:85:4a:40: 88:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:57:3C:CF:AC:E1:49:4A:51:97:62:3B:9E:2C:13:A6:78:E6:FC:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d22bd671-77ad-3036-b210-ed40c60f64f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:dd:57:10:0c:d3:4c:52:b6:cd:2c:af:e2:01:58:0c:50:f7: 06:70:3a:c4:a0:49:9c:0e:fb:69:29:4b:71:a4:30:fb:f7:2a: 63:cf:a8:6e:44:e7:6f:26:76:a0:3f:f1:06:e1:34:0f:d6:75: 31:3c:33:8f:9a:75:dd:48:56:ed:bb:1d:a5:d6:27:cb:9c:cd: b6:4f:4f:bb:36:21:78:4b:0a:f3:1b:70:1d:fe:49:be:34:77: b9:aa:1f:6b:da:5e:03:90:4f:7d:28:fa:62:3c:a3:6c:55:ee: 65:fc:33:a4:c3:36:ae:8d:35:3c:29:7b:b8:ef:79:20:3d:e2: a0:e2:0a:6b:29:8c:65:cc:c1:40:03:37:69:b0:ac:11:04:ae: 3e:26:ec:1d:4d:8d:e0:c7:72:35:93:f2:60:b7:0a:77:d2:f0: 3c:26:c8:86:73:9d:08:9b:fb:12:8d:27:64:ac:74:e4:91:34: 2e:8c:9f:83:13:0b:b3:9a:94:d8:56:38:e3:cc:d4:57:69:23: b9:77:27:03:99:ef:c9:72:9e:24:fb:ae:9a:dd:be:19:58:3e: 09:eb:06:f4:44:4e:8f:88:14:90:89:ac:04:82:dd:c4:8c:30: d7:9e:58:d8:f9:87:14:48:d0:31:ea:67:8a:a5:91:5f:59:cb: d1:2f:b9:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm2e0NZAnwKktstrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDUwMTIxMzkxOFoXDTI1MDczMDIxMzkxOFowLzEtMCsGA1UEAxMk N2RlYzgzOGItNjBiOS00MjA1LTliMGMtNDUxYWI1MDkwNjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMMbgX1HdLhGwDqUbj9zxFg76lw5E5zSMFoY EXvfJbM+YjUb77tOp4Fc2IfoXKAaHgfF9uCyTCHw4veW7lb/w2NAc0zkc6Pvzesn e2lOpdA05QzMpIRJZEb1wiwFIUjwoAKhi4ZWQecRy1RBswHOEvZXuVrABeuvrp4R HV04Z9T/2DsIh5BjUgbpav0Ifh3npIOwDmCqdArsFrYdfysSt1iYoVWAXYIv9Vw+ VTd21pIH7SZSo3y+JhaQUvd1eC+EReU6kZ+Rf2T/SZQ+Om9prt8KxdS8tihCBfnp I0kGunS57aDeNd+Ax0mh+4ukzvAE8rWvKCAp+wQQwo2FSkCIXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFXPM+s4UlKUZdiO54sE6Z45vwQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDIyYmQ2NzEtNzdhZC0z MDM2LWIyMTAtZWQ0MGM2MGY2NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgH5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrdVxAM00xSts0sr+IBWAxQ9wZwOsSgSZwO+2kpS3GkMPv3KmPPqG5E 528mdqA/8QbhNA/WdTE8M4+add1IVu27HaXWJ8uczbZPT7s2IXhLCvMbcB3+Sb40 d7mqH2vaXgOQT30o+mI8o2xV7mX8M6TDNq6NNTwpe7jveSA94qDiCmspjGXMwUAD N2mwrBEErj4m7B1NjeDHcjWT8mC3CnfS8DwmyIZznQib+xKNJ2SsdOSRNC6Mn4MT C7OalNhWOOPM1FdpI7l3JwOZ78lyniT7rprdvhlYPgnrBvRETo+IFJCJrASC3cSM MNeeWNj5hxRI0DHqZ4qlkV9Zy9EvuVI= -----END CERTIFICATE-----Generated at Sat May 10 21:59:13 2025 by rpki-client