$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/920637bb-df7d-3d84-9521-aa07d0bf2e1d.roa File: 920637bb-df7d-3d84-9521-aa07d0bf2e1d.roa (raw, json) Hash identifier: 4c66X4qUiCEr+BdMz4a+TF47BldE7ZbqD31tS48Doz4= Subject key identifier: C5:11:61:D0:C5:B4:9B:7C:D0:EA:55:68:3F:3A:71:AD:36:ED:50:FB Certificate issuer: /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb Certificate serial: 010D0C9F432858499DBF32598916C239D4E2C900 Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/920637bb-df7d-3d84-9521-aa07d0bf2e1d.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 14618 IP address blocks: 166.98.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:32:59:89:16:c2:39:d4:e2:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=59f252a8-1884-4154-ac61-59614dc883b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:51:7c:4e:ae:4d:2f:9a:df:fb:53:b0:51:d1: 92:a8:d1:d7:48:a7:83:8a:16:2b:1b:a3:17:8a:51: a9:d2:56:60:cb:44:67:92:60:67:61:a1:15:88:14: 31:7b:92:3b:16:62:f6:e1:cc:17:5e:9e:c5:ed:67: 37:85:19:93:c8:65:ca:c9:93:80:3b:97:47:68:bf: 56:d5:1d:07:54:17:ea:08:79:f3:e1:56:e0:be:50: f9:9a:47:c2:75:f0:64:c2:c9:17:37:48:ef:c5:1b: 55:91:48:17:4a:a3:51:26:3c:21:08:ab:39:ba:36: 46:d3:8c:b0:bd:fc:7f:08:f6:18:01:cf:f4:10:fd: ef:28:97:a1:d2:8d:25:c2:66:13:38:6a:c3:12:7c: 4b:2c:14:bd:36:69:fa:95:dd:22:e7:1b:64:0e:78: c6:66:a1:19:ab:04:d6:b5:6a:0d:bf:4a:fd:fc:47: 0e:16:f2:ef:b7:53:09:9b:17:e1:06:c0:b0:f3:26: 65:a3:89:c4:2d:b6:de:57:a9:70:cf:58:66:6e:22: 36:bc:7d:e6:d5:3b:ac:07:86:4b:b1:df:25:f8:9c: 31:2b:7e:25:29:01:84:60:ba:aa:62:6c:af:14:1b: 41:68:e6:ae:93:06:22:cf:e7:ff:27:48:c8:10:4c: 27:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:11:61:D0:C5:B4:9B:7C:D0:EA:55:68:3F:3A:71:AD:36:ED:50:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/920637bb-df7d-3d84-9521-aa07d0bf2e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl X509v3 Authority Key Identifier: keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer sbgp-ipAddrBlock: critical IPv4: 166.98.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f8:49:da:02:70:33:d3:c8:a7:c6:16:ef:ab:a6:3d:3e:6e: f5:be:2c:4d:ac:ae:2d:35:3f:5f:ef:25:e4:f9:fb:6f:a1:d7: ec:30:37:02:cc:c1:a4:0c:7c:df:73:f5:07:27:fa:73:36:00: 12:1e:5c:68:b9:7f:3f:a4:ee:5f:e4:20:23:95:7d:eb:a2:d0: b7:12:33:3e:92:de:cd:b6:95:2b:dc:d9:7d:78:9c:f0:fc:24: ec:a4:fe:97:2b:8e:b1:8e:b5:f6:1b:f4:a6:c6:41:a9:6b:15: 24:b7:f3:e2:38:86:a4:4b:34:4d:64:a4:b2:75:78:27:c1:99: bb:58:db:c4:12:99:2b:4d:73:74:8a:bd:90:2a:75:b9:06:37: 6f:48:f2:3b:5f:a4:78:94:3f:b5:62:71:f7:87:35:49:c7:be: 9d:b9:74:9b:ed:a5:ab:94:39:98:60:f1:37:21:07:64:11:ef: da:2e:8c:cf:46:89:ab:21:11:16:ba:54:9c:40:81:2d:b7:0c: 9c:49:f0:bf:4a:66:9d:e9:d8:85:11:0f:e2:77:e5:5b:33:8b: bd:34:b4:ac:fd:c2:34:0d:ee:17:6a:37:f8:0b:fa:c2:c3:0e: 94:fc:f8:50:15:e5:dd:23:e6:6e:10:49:61:99:e2:29:62:64: 55:ec:9f:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzJZiRbCOdTiyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRkN2NiMmUtMTE3Yy00MzFlLTk1YWEtYTBjYzRjMmQ4 OWJiMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NTlmMjUyYTgtMTg4NC00MTU0LWFjNjEtNTk2MTRkYzg4M2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVF8Tq5NL5rf+1OwUdGSqNHXSKeDihYrG6MX ilGp0lZgy0RnkmBnYaEViBQxe5I7FmL24cwXXp7F7Wc3hRmTyGXKyZOAO5dHaL9W 1R0HVBfqCHnz4VbgvlD5mkfCdfBkwskXN0jvxRtVkUgXSqNRJjwhCKs5ujZG04yw vfx/CPYYAc/0EP3vKJeh0o0lwmYTOGrDEnxLLBS9Nmn6ld0i5xtkDnjGZqEZqwTW tWoNv0r9/EcOFvLvt1MJmxfhBsCw8yZlo4nELbbeV6lwz1hmbiI2vH3m1TusB4ZL sd8l+JwxK34lKQGEYLqqYmyvFBtBaOaukwYiz+f/J0jIEEwnEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMURYdDFtJt80OpVaD86ca027VD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NGQ3 Y2IyZS0xMTdjLTQzMWUtOTVhYS1hMGNjNGMyZDg5YmIvOTIwNjM3YmItZGY3ZC0z ZDg0LTk1MjEtYWEwN2QwYmYyZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjRkN2NiMmUtMTE3Yy00MzFlLTk1 YWEtYTBjYzRjMmQ4OWJiLzY0ZDdjYjJlLTExN2MtNDMxZS05NWFhLWEwY2M0YzJk ODliYi5jcmwwHwYDVR0jBBgwFoAUNOK4lHuW1cAacPIenc2r2/XuqzcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NGQ3Y2IyZS0xMTdjLTQzMWUtOTVhYS1hMGNj NGMyZDg5YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApmIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz4SdoCcDPTyKfGFu+rpj0+bvW+LE2sri01P1/vJeT5+2+h1+wwNwLM waQMfN9z9Qcn+nM2ABIeXGi5fz+k7l/kICOVfeui0LcSMz6S3s22lSvc2X14nPD8 JOyk/pcrjrGOtfYb9KbGQalrFSS38+I4hqRLNE1kpLJ1eCfBmbtY28QSmStNc3SK vZAqdbkGN29I8jtfpHiUP7VicfeHNUnHvp25dJvtpauUOZhg8TchB2QR79oujM9G iashERa6VJxAgS23DJxJ8L9KZp3p2IURD+J35Vszi700tKz9wjQN7hdqN/gL+sLD DpT8+FAV5d0j5m4QSWGZ4iliZFXsn3k= -----END CERTIFICATE-----Generated at Mon May 5 02:21:09 2025 by rpki-client