$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1c2b535-256a-3adc-ae8e-04d4530da1fc.roa File: e1c2b535-256a-3adc-ae8e-04d4530da1fc.roa (raw, json) Hash identifier: pHX8s6QtfECxlvMC7LW8EkDIElyjeCdOxjouq3myWyo= Subject key identifier: 58:E4:DB:4C:56:C6:80:0D:5D:C3:E3:92:9B:A8:FF:41:68:01:37:41 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849865816D99727FFE3BA79A800 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1c2b535-256a-3adc-ae8e-04d4530da1fc.roa Signing time: Mon 14 Apr 2025 15:49:38 +0000 ROA not before: Mon 14 Apr 2025 15:49:38 +0000 ROA not after: Sun 13 Jul 2025 15:49:38 +0000 asID: 401152 IP address blocks: 108.165.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:58:16:d9:97:27:ff:e3:ba:79:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 14 15:49:38 2025 GMT Not After : Jul 13 15:49:38 2025 GMT Subject: CN=cbca9a41-f52c-4cec-8d86-51c391e8d448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:a1:28:c5:96:8e:fc:d9:6b:41:62:6e:b0: da:24:79:ab:17:95:64:32:01:35:9c:9f:09:8f:f6: bf:1b:18:ab:db:e8:38:a9:29:56:2f:2c:2f:b4:13: 2f:08:44:95:cd:8b:7b:0a:4b:78:04:46:9e:79:ed: b1:db:2c:82:3d:b2:bc:3d:24:42:50:8b:18:ba:8a: b7:f1:9c:90:93:39:a9:24:b7:dc:3b:67:f3:77:1f: ca:36:71:c9:0e:30:9c:4e:6f:43:08:b7:3f:d6:ec: 14:29:a8:ed:86:bb:97:b6:60:18:19:cd:3e:7e:fd: 91:12:51:21:4e:d2:fe:18:24:16:cc:e0:49:91:23: 98:73:bd:a8:92:8a:4a:37:db:f9:8e:d5:2a:94:92: a8:ca:92:11:11:8a:ef:44:9f:9b:83:89:b6:0f:4e: 9e:eb:b7:bd:99:0f:a9:1f:d1:04:2c:68:a2:0e:5d: 04:b6:b1:76:a7:af:bf:0c:5f:00:c4:49:9d:ec:17: 9a:5e:31:9b:89:78:7d:e7:64:b2:c0:4c:66:63:2b: 73:58:01:d3:8d:a1:54:dd:72:1c:dd:4b:bb:af:f8: 01:10:9c:03:3b:57:ed:ab:35:18:fd:c6:e9:8b:73: 48:6c:cd:4b:db:40:a0:d3:82:21:70:9d:83:d6:50: f7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E4:DB:4C:56:C6:80:0D:5D:C3:E3:92:9B:A8:FF:41:68:01:37:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1c2b535-256a-3adc-ae8e-04d4530da1fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:61:ea:5e:a4:5a:78:06:0e:cb:1a:23:9b:e7:5c:f1:e8:cb: cf:80:48:e0:01:d2:29:a0:6c:b5:bc:33:1d:10:86:7c:65:79: b1:a0:2f:26:06:f6:86:97:01:47:0a:0f:51:48:ee:29:f3:5f: fe:cf:e5:e4:d1:30:9e:7f:8a:8e:8b:fa:73:74:0a:1e:0a:0b: 1e:fa:85:da:c6:30:17:8a:63:84:3a:43:9a:f4:52:91:a4:46: b8:52:5a:f2:50:19:f1:e4:ad:6e:c1:1f:46:06:19:b3:c1:ba: 39:99:cc:c3:8d:60:8c:62:0d:eb:77:e2:f2:5f:83:d8:dd:7d: f6:2e:57:ce:c0:93:27:b7:7f:f1:40:e7:13:4f:35:47:fd:e5: c7:19:02:d9:76:5a:88:3d:6b:c9:55:1f:7c:b6:9e:39:7a:78: 81:3b:d6:c5:77:1d:a6:ac:b7:09:dc:f2:60:fc:2e:e9:76:c9: ab:af:a4:82:5e:a3:d2:9d:eb:fe:90:0d:57:97:44:c8:2a:03: c6:f8:87:cb:d6:6a:4d:3a:35:9f:36:a6:2c:9c:75:f8:27:82: f6:9e:61:c7:02:4d:8a:bb:85:7b:4d:30:e8:26:17:b3:e8:d8: 8b:cd:d6:72:89:1a:cf:de:34:ed:6e:9d:2f:bf:73:dc:4a:c1: bc:0f:e2:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGWBbZlyf/47p5qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQxNDE1NDkzOFoXDTI1MDcxMzE1NDkzOFowLzEtMCsGA1UEAxMk Y2JjYTlhNDEtZjUyYy00Y2VjLThkODYtNTFjMzkxZThkNDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu96hKMWWjvzZa0FibrDaJHmrF5VkMgE1nJ8J j/a/Gxir2+g4qSlWLywvtBMvCESVzYt7Ckt4BEaeee2x2yyCPbK8PSRCUIsYuoq3 8ZyQkzmpJLfcO2fzdx/KNnHJDjCcTm9DCLc/1uwUKajthruXtmAYGc0+fv2RElEh TtL+GCQWzOBJkSOYc72okopKN9v5jtUqlJKoypIREYrvRJ+bg4m2D06e67e9mQ+p H9EELGiiDl0EtrF2p6+/DF8AxEmd7BeaXjGbiXh952SywExmYytzWAHTjaFU3XIc 3Uu7r/gBEJwDO1ftqzUY/cbpi3NIbM1L20Cg04IhcJ2D1lD3/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjk20xWxoANXcPjkpuo/0FoATdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTFjMmI1MzUtMjU2YS0z YWRjLWFlOGUtMDRkNDUzMGRhMWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhh6l6kWngGDssaI5vnXPHoy8+ASOAB0imgbLW8Mx0QhnxlebGgLyYG 9oaXAUcKD1FI7inzX/7P5eTRMJ5/io6L+nN0Ch4KCx76hdrGMBeKY4Q6Q5r0UpGk RrhSWvJQGfHkrW7BH0YGGbPBujmZzMONYIxiDet34vJfg9jdffYuV87Akye3f/FA 5xNPNUf95ccZAtl2Wog9a8lVH3y2njl6eIE71sV3Haastwnc8mD8Lul2yauvpIJe o9Kd6/6QDVeXRMgqA8b4h8vWak06NZ82piycdfgngvaeYccCTYq7hXtNMOgmF7Po 2IvN1nKJGs/eNO1unS+/c9xKwbwP4sA= -----END CERTIFICATE-----Generated at Sat May 10 17:46:51 2025 by rpki-client