$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d375e134-2ed4-32cd-8bfe-5dd523888b3c.roa File: d375e134-2ed4-32cd-8bfe-5dd523888b3c.roa (raw, json) Hash identifier: O66rmwiRWes+FGh6dUlNkx3pMVx093lgnBJSk8I0vzc= Subject key identifier: 03:5C:7C:F6:26:F5:52:7D:3C:19:04:ED:52:9E:6B:55:11:49:30:5D Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849CFFF7C3B4149A9E653DA6680 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d375e134-2ed4-32cd-8bfe-5dd523888b3c.roa Signing time: Sun 11 May 2025 01:00:47 +0000 ROA not before: Sun 11 May 2025 01:00:47 +0000 ROA not after: Sat 09 Aug 2025 01:00:47 +0000 asID: 62240 IP address blocks: 166.1.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ff:7c:3b:41:49:a9:e6:53:da:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: May 11 01:00:47 2025 GMT Not After : Aug 9 01:00:47 2025 GMT Subject: CN=0dd53fe1-2889-4b45-8b58-d29fdb93dd81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bb:45:e1:df:07:c7:a1:bd:86:e0:a8:18:37: e2:cd:18:32:9d:2a:c6:2f:12:dc:11:93:91:d6:9a: 03:77:9d:63:a2:f3:67:9c:50:1d:be:be:0f:d4:88: 79:77:cd:01:b3:7a:fa:34:a9:72:1d:a2:4f:ca:d8: 38:7b:50:f0:d2:b1:8c:9f:6f:af:71:4e:17:ab:ed: 29:74:0e:26:54:ac:eb:7c:4c:88:33:d5:ed:b7:08: d3:45:ee:eb:d4:75:6f:00:85:3d:c8:f2:c3:dd:48: b2:3c:d5:2b:8d:e7:b7:62:ba:d9:74:e9:d9:88:90: d8:dd:33:9e:3a:5a:00:7a:d8:a2:f5:d1:c7:9b:f9: 3e:90:3a:29:50:d1:2d:10:07:2e:9e:3a:d0:f6:f2: f2:91:ee:a0:aa:1d:a8:01:6e:f0:3b:a6:a0:39:67: 88:0f:1c:f0:5d:25:82:d9:9a:6c:ac:bc:7d:64:28: df:6c:02:d5:b9:13:6c:5d:a7:f8:ce:45:81:df:54: 09:ad:6e:a1:db:a6:d6:60:57:82:ec:3e:77:30:11: cf:1b:c0:68:35:c4:13:3c:51:0d:55:be:7b:6e:50: 9e:f9:9f:56:53:a4:c0:2a:6a:da:6f:55:82:e3:a5: 48:93:b1:43:31:a7:6b:aa:5a:8d:30:e5:b9:4a:52: 8d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5C:7C:F6:26:F5:52:7D:3C:19:04:ED:52:9E:6B:55:11:49:30:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d375e134-2ed4-32cd-8bfe-5dd523888b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9e:93:37:ff:9d:c7:fc:61:6c:87:0a:fe:06:06:7e:30:67: 60:5b:9d:17:dd:db:d4:28:47:28:45:84:e9:a9:d5:7c:ec:1d: e7:3e:c7:f4:6e:2b:5a:9a:40:c7:2e:c1:3d:52:05:8f:5d:52: 64:47:74:67:e2:b9:6d:a4:15:69:c5:33:29:fa:e6:11:76:dd: a2:a3:2b:eb:a5:19:9b:a3:ee:65:d4:eb:d9:be:3f:ff:08:b6: 8f:db:9c:7b:95:e1:30:18:af:03:78:60:cc:1e:20:3c:68:e4: 6a:88:91:65:84:72:22:3b:48:df:c8:67:4d:74:1d:60:53:7a: 4b:91:3f:fb:94:1f:80:c5:8b:ed:ee:92:bd:32:31:49:7e:48: 63:69:98:b3:b8:a2:8a:81:34:89:ca:87:7a:2e:38:7f:0f:cb: 5f:10:ab:ee:d4:65:65:19:b7:c9:19:f1:e5:6f:80:b1:49:56: f8:98:1b:7a:5c:2e:ee:2b:0b:72:1e:05:1c:2c:56:93:d5:8b: 87:d6:55:70:6d:d9:1e:dc:0e:c1:08:f8:c8:be:55:a2:2b:98: 06:6a:d5:01:f9:6c:9e:62:a6:d6:02:12:5d:19:0c:f3:55:9d: 03:45:57:fb:09:b7:65:a4:bd:2d:a6:02:9c:d0:b7:fb:b8:e1: a1:de:ea:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/3w7QUmp5lPaZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk MGRkNTNmZTEtMjg4OS00YjQ1LThiNTgtZDI5ZmRiOTNkZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLtF4d8Hx6G9huCoGDfizRgynSrGLxLcEZOR 1poDd51jovNnnFAdvr4P1Ih5d80Bs3r6NKlyHaJPytg4e1Dw0rGMn2+vcU4Xq+0p dA4mVKzrfEyIM9XttwjTRe7r1HVvAIU9yPLD3UiyPNUrjee3YrrZdOnZiJDY3TOe OloAetii9dHHm/k+kDopUNEtEAcunjrQ9vLyke6gqh2oAW7wO6agOWeIDxzwXSWC 2ZpsrLx9ZCjfbALVuRNsXaf4zkWB31QJrW6h26bWYFeC7D53MBHPG8BoNcQTPFEN Vb57blCe+Z9WU6TAKmrab1WC46VIk7FDMadrqlqNMOW5SlKNywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANcfPYm9VJ9PBkE7VKea1URSTBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDM3NWUxMzQtMmVkNC0z MmNkLThiZmUtNWRkNTIzODg4YjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaekzf/ncf8YWyHCv4GBn4wZ2BbnRfd29QoRyhFhOmp1XzsHec+x/Ru K1qaQMcuwT1SBY9dUmRHdGfiuW2kFWnFMyn65hF23aKjK+ulGZuj7mXU69m+P/8I to/bnHuV4TAYrwN4YMweIDxo5GqIkWWEciI7SN/IZ010HWBTekuRP/uUH4DFi+3u kr0yMUl+SGNpmLO4ooqBNInKh3ouOH8Py18Qq+7UZWUZt8kZ8eVvgLFJVviYG3pc Lu4rC3IeBRwsVpPVi4fWVXBt2R7cDsEI+Mi+VaIrmAZq1QH5bJ5iptYCEl0ZDPNV nQNFV/sJt2WkvS2mApzQt/u44aHe6gg= -----END CERTIFICATE-----Generated at Sun May 11 11:49:43 2025 by rpki-client