$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2720f60e-8241-3b96-b3e1-b22c546f2b88.roa File: 2720f60e-8241-3b96-b3e1-b22c546f2b88.roa (raw, json) Hash identifier: ooMOkjUgFEzG8ev3OSn/UMpNsbdbdg8NTrTi68HYp1c= Subject key identifier: 24:3F:30:27:B9:B1:0F:EA:D3:77:D9:17:B4:06:9E:4D:B6:8B:C9:15 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A2EEAC31B5A9F899553258E00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2720f60e-8241-3b96-b3e1-b22c546f2b88.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 8881 IP address blocks: 166.0.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:c3:1b:5a:9f:89:95:53:25:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=0e8af34e-6da7-4fe0-984d-5b71a860379d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a3:92:f2:cf:d7:b6:bb:6b:1b:f2:61:cf:8f: 7a:42:b9:19:68:07:65:7a:79:e9:0a:84:3a:f0:c3: ca:34:1f:78:d9:91:4a:b5:77:dc:13:b1:bf:4b:e9: 14:19:31:e4:b6:c5:6c:4f:dc:f7:a4:db:11:59:82: b3:83:8b:a4:28:21:0a:d0:62:58:e7:d1:8c:58:b7: 07:03:ce:b5:3b:3f:35:fa:ae:10:46:0e:45:30:ab: f1:27:35:7b:ba:66:00:44:9b:c4:63:29:13:38:c9: 9b:f6:32:68:27:e7:31:5b:e7:7c:4b:1d:c6:bc:9c: 6a:12:3c:d2:ae:89:50:c3:96:71:08:e7:0c:a0:52: ef:ba:63:8a:18:03:fd:aa:10:4a:e2:0d:24:95:f6: 16:7e:5f:fd:a9:e9:14:42:89:ea:10:a3:20:cc:21: 7a:53:0c:28:2a:96:2d:5c:24:bc:cb:2f:65:48:34: 43:e0:74:bc:99:3a:c9:b3:fe:0b:c6:0c:3d:9e:94: d8:3b:4d:66:b8:d6:40:4c:00:38:95:5c:73:6b:2b: 1d:76:ac:15:57:e7:84:bc:9b:2e:29:3e:95:2a:c7: fe:65:39:8a:63:96:c0:90:e0:93:ca:4b:59:95:f5: 78:ae:9b:49:86:87:54:35:a8:8e:3e:fe:60:ad:d9: 75:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3F:30:27:B9:B1:0F:EA:D3:77:D9:17:B4:06:9E:4D:B6:8B:C9:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2720f60e-8241-3b96-b3e1-b22c546f2b88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:a0:0e:90:00:7a:7f:55:7c:92:c6:16:fe:ca:5c:8f:bf:90: 86:df:e2:8f:dd:6e:ca:d2:2d:fa:66:38:6b:cb:52:1d:ca:37: 39:ac:0a:42:5d:78:31:aa:09:ee:ac:38:52:f3:99:9d:b8:7a: 7a:0e:95:55:d1:c3:8b:a8:b8:37:18:a4:cc:70:3c:06:a7:c5: 2e:43:dd:00:ce:15:fb:0b:a2:92:75:eb:8a:93:d1:35:a8:d4: 85:00:75:9f:1e:32:6d:74:3e:fe:b7:54:c7:16:65:4d:6a:4f: 23:1a:3b:b3:7c:6e:fc:87:29:3b:42:04:1b:a4:9b:87:71:44: 02:91:ce:a7:40:e4:b8:d6:1a:fa:a5:81:14:6c:a9:13:28:e8: 82:be:2f:fa:93:3c:80:98:a9:68:b7:2c:f9:78:80:9e:bb:08: 05:15:75:d0:53:9d:48:72:e3:0c:1c:92:ff:91:d0:ad:c6:0c: d6:e0:b6:9e:d5:9f:46:c8:6c:41:cd:22:7e:da:4e:9f:be:ee: 82:09:4d:05:92:34:b0:89:46:3c:de:3b:c4:b8:3d:42:25:68: 63:74:8e:00:c8:b2:25:a5:22:42:14:67:93:fb:d7:51:3b:b1: 00:a3:1c:9b:7c:e7:fe:78:36:65:d7:d5:9f:4e:a6:23:78:b6: 8d:5e:70:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6sMbWp+JlVMljgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk MGU4YWYzNGUtNmRhNy00ZmUwLTk4NGQtNWI3MWE4NjAzNzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6OS8s/XtrtrG/Jhz496QrkZaAdlennpCoQ6 8MPKNB942ZFKtXfcE7G/S+kUGTHktsVsT9z3pNsRWYKzg4ukKCEK0GJY59GMWLcH A861Oz81+q4QRg5FMKvxJzV7umYARJvEYykTOMmb9jJoJ+cxW+d8Sx3GvJxqEjzS rolQw5ZxCOcMoFLvumOKGAP9qhBK4g0klfYWfl/9qekUQonqEKMgzCF6UwwoKpYt XCS8yy9lSDRD4HS8mTrJs/4Lxgw9npTYO01muNZATAA4lVxzaysddqwVV+eEvJsu KT6VKsf+ZTmKY5bAkOCTyktZlfV4rptJhodUNaiOPv5grdl11QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQ/MCe5sQ/q03fZF7QGnk22i8kVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjcyMGY2MGUtODI0MS0z Yjk2LWIzZTEtYjIyYzU0NmYyYjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmgDpAAen9VfJLGFv7KXI+/kIbf4o/dbsrSLfpmOGvLUh3KNzmsCkJd eDGqCe6sOFLzmZ24enoOlVXRw4uouDcYpMxwPAanxS5D3QDOFfsLopJ164qT0TWo 1IUAdZ8eMm10Pv63VMcWZU1qTyMaO7N8bvyHKTtCBBukm4dxRAKRzqdA5LjWGvql gRRsqRMo6IK+L/qTPICYqWi3LPl4gJ67CAUVddBTnUhy4wwckv+R0K3GDNbgtp7V n0bIbEHNIn7aTp++7oIJTQWSNLCJRjzeO8S4PUIlaGN0jgDIsiWlIkIUZ5P711E7 sQCjHJt85/54NmXX1Z9OpiN4to1ecFo= -----END CERTIFICATE-----Generated at Sun Jun 15 23:09:43 2025 by rpki-client