$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1bcc233f-1443-3132-84ff-80e54a8703e1.roa File: 1bcc233f-1443-3132-84ff-80e54a8703e1.roa (raw, json) Hash identifier: j1lBIkN0pumphZJYhdTNmlEChO2K9zcQ9up/dHx3ZvA= Subject key identifier: E7:C2:41:4F:34:3E:E3:8F:FE:4A:6F:66:33:FC:CA:2C:44:49:D4:03 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584991B633DA72FB67D9C6EF7140 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1bcc233f-1443-3132-84ff-80e54a8703e1.roa Signing time: Fri 18 Apr 2025 17:33:09 +0000 ROA not before: Fri 18 Apr 2025 17:33:09 +0000 ROA not after: Thu 17 Jul 2025 17:33:09 +0000 asID: 401152 IP address blocks: 166.0.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:b6:33:da:72:fb:67:d9:c6:ef:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 18 17:33:09 2025 GMT Not After : Jul 17 17:33:09 2025 GMT Subject: CN=6b0d7013-e033-4a8f-921e-44777dbb8bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9a:a3:ee:5a:9f:fc:a6:68:f7:77:13:df:f0: b4:e6:3b:a4:0e:15:7c:50:aa:69:74:ff:7c:b7:82: 1f:39:f2:6c:9e:a1:4c:c9:8a:1d:96:8b:47:e5:b2: 55:b3:f2:13:57:06:70:a2:a3:3a:b9:ed:64:c6:65: f0:0b:14:da:d1:98:96:b2:0f:a5:b7:f1:3d:cd:f7: ac:0b:08:af:e1:5f:52:56:c0:bd:2f:07:9f:1a:2c: 64:55:4b:52:3a:da:a0:a1:37:ff:da:66:41:7e:da: 8c:7a:d4:04:8f:02:a1:cf:d4:6a:4b:6d:51:07:1e: cc:66:56:6a:07:96:f6:db:a1:0a:21:d7:82:31:a1: e1:29:8c:ba:39:f6:52:08:e6:58:78:16:5e:a0:73: 22:07:41:24:ff:23:64:83:7e:a8:61:1c:41:8a:f0: e0:eb:b6:09:45:22:4b:55:29:6c:1d:6a:fc:47:5b: e0:dc:ce:ab:c2:ba:2a:ea:33:88:04:cf:22:c7:35: c5:13:b4:bc:03:3b:58:b8:c3:df:e9:f2:f8:e9:fe: 39:d5:e9:f6:e2:e0:94:98:5d:8d:47:b7:1e:c7:c8: 1f:b5:35:62:f4:48:c7:00:78:89:d3:b3:b1:5b:e4: cc:7c:27:fb:d5:e6:9d:e8:65:16:3d:9f:18:65:0a: 85:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C2:41:4F:34:3E:E3:8F:FE:4A:6F:66:33:FC:CA:2C:44:49:D4:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1bcc233f-1443-3132-84ff-80e54a8703e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:34:1b:08:67:75:98:c5:51:e2:a1:5e:4a:e4:65:6f:78:ee: ef:a3:94:95:0c:3a:b5:a8:d6:c8:ed:c3:0e:e8:80:ce:99:e4: e7:a2:c9:2b:be:77:7e:31:30:69:4d:2e:38:27:57:80:4c:e9: 49:ab:9f:d4:0d:eb:ea:39:21:64:0a:c8:3e:73:00:6e:72:58: 9a:c5:8f:ee:8b:68:62:e2:b1:fc:c0:27:99:d5:10:23:5e:50: a6:d1:34:41:6f:15:a0:ee:d6:3c:73:5e:8a:52:1c:31:bc:2c: cd:07:9d:b0:27:fa:dd:ff:57:13:68:86:fc:f4:a6:f3:32:42: 3e:3e:cf:20:aa:0c:27:8a:58:9d:ea:1e:40:67:dd:16:c8:ac: 0e:8c:43:bc:73:bb:08:23:7c:6d:22:43:a4:39:2c:cc:87:4b: bc:68:9b:57:1d:01:fb:42:ae:46:b8:74:dd:76:71:d6:c4:1b: 5a:36:70:da:06:e9:a3:28:6f:64:e4:6a:b5:c7:c7:c9:a4:53: 84:62:38:78:9a:19:9f:8b:74:30:63:a0:d0:93:f5:14:ee:eb: 2b:76:62:1d:ed:fb:a0:4c:1d:41:45:cb:34:a7:c6:72:0d:71: 81:07:95:e3:a3:ff:31:f5:68:c9:59:f8:5c:41:49:ad:7b:12: da:84:37:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRtjPacvtn2cbvcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQxODE3MzMwOVoXDTI1MDcxNzE3MzMwOVowLzEtMCsGA1UEAxMk NmIwZDcwMTMtZTAzMy00YThmLTkyMWUtNDQ3NzdkYmI4YmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5qj7lqf/KZo93cT3/C05jukDhV8UKppdP98 t4IfOfJsnqFMyYodlotH5bJVs/ITVwZwoqM6ue1kxmXwCxTa0ZiWsg+lt/E9zfes Cwiv4V9SVsC9LwefGixkVUtSOtqgoTf/2mZBftqMetQEjwKhz9RqS21RBx7MZlZq B5b226EKIdeCMaHhKYy6OfZSCOZYeBZeoHMiB0Ek/yNkg36oYRxBivDg67YJRSJL VSlsHWr8R1vg3M6rwroq6jOIBM8ixzXFE7S8AztYuMPf6fL46f451en24uCUmF2N R7cex8gftTVi9EjHAHiJ07OxW+TMfCf71ead6GUWPZ8YZQqF0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfCQU80PuOP/kpvZjP8yixESdQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWJjYzIzM2YtMTQ0My0z MTMyLTg0ZmYtODBlNTRhODcwM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg0GwhndZjFUeKhXkrkZW947u+jlJUMOrWo1sjtww7ogM6Z5OeiySu+ d34xMGlNLjgnV4BM6Umrn9QN6+o5IWQKyD5zAG5yWJrFj+6LaGLisfzAJ5nVECNe UKbRNEFvFaDu1jxzXopSHDG8LM0HnbAn+t3/VxNohvz0pvMyQj4+zyCqDCeKWJ3q HkBn3RbIrA6MQ7xzuwgjfG0iQ6Q5LMyHS7xom1cdAftCrka4dN12cdbEG1o2cNoG 6aMob2TkarXHx8mkU4RiOHiaGZ+LdDBjoNCT9RTu6yt2Yh3t+6BMHUFFyzSnxnIN cYEHleOj/zH1aMlZ+FxBSa17EtqEN0o= -----END CERTIFICATE-----Generated at Sun Apr 27 03:57:40 2025 by rpki-client