$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2881a4da-ae08-39ce-a86f-5d82f6749409.roa File: 2881a4da-ae08-39ce-a86f-5d82f6749409.roa (raw, json) Hash identifier: yDK2qACiM2nCvJ/fdD8oabHCJQOOmlOFOE73yQh0/PQ= Subject key identifier: 9D:4D:44:BD:7C:55:B0:78:53:C7:DA:26:FB:89:72:C2:8D:8C:F9:7A Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848F00C7A61262151B02B441CA0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2881a4da-ae08-39ce-a86f-5d82f6749409.roa Signing time: Wed 19 Feb 2025 19:46:02 +0000 ROA not before: Wed 19 Feb 2025 19:46:02 +0000 ROA not after: Tue 20 May 2025 18:46:02 +0000 asID: 62240 IP address blocks: 166.1.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:0c:7a:61:26:21:51:b0:2b:44:1c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 19 19:46:02 2025 GMT Not After : May 20 18:46:02 2025 GMT Subject: CN=69c9121d-5f44-4aee-8826-a5ee027d4f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:46:b1:73:44:12:9b:13:57:53:79:2a:55: ee:f5:82:3d:a8:61:1a:5a:ab:68:ec:f9:ac:26:fe: c4:a3:5d:0f:7d:37:30:79:6e:c7:46:1d:47:a1:78: ca:26:d7:ac:00:35:8c:55:ec:2e:28:ae:a8:99:7f: 7b:fd:a2:a0:bd:1b:19:35:f0:83:e4:d7:13:7c:9e: 92:b4:09:2c:16:a9:57:91:d7:b9:25:12:9c:24:ec: df:22:96:8d:5a:95:a5:d3:5c:4c:2c:d8:aa:63:7f: 9e:ec:85:0b:6d:65:59:83:f8:61:1c:e0:00:d9:53: 66:26:13:e7:12:06:23:07:06:20:6d:df:ca:ea:08: 3d:7a:93:a4:5a:ca:9f:aa:e8:dc:b7:1e:9e:37:65: 0b:23:f2:3e:53:98:fc:3f:c7:7f:ba:66:90:aa:e9: 84:20:08:e3:e1:b2:6b:5e:2b:d6:1a:11:68:77:dd: 4f:4c:5b:0d:1f:f0:2d:b4:93:d3:cd:f7:6b:76:39: f8:e6:c6:b1:a6:a2:6d:44:6d:44:22:07:fd:ce:73: 8b:c3:a8:4e:7e:16:4d:c3:0b:2c:14:d1:8b:40:68: d4:46:18:d5:06:fc:2a:36:c4:92:60:cf:76:cd:d5: bd:a0:04:d7:aa:94:2e:9a:16:58:6b:a2:60:82:c0: 0c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4D:44:BD:7C:55:B0:78:53:C7:DA:26:FB:89:72:C2:8D:8C:F9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2881a4da-ae08-39ce-a86f-5d82f6749409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e9:01:1e:9b:09:4a:18:03:7f:1e:43:36:5a:ed:7c:c1:02: 5e:03:b8:22:f6:f6:e5:83:2d:06:67:7e:45:ac:ff:81:01:e9: 27:50:69:20:48:3a:1d:35:7a:4d:78:d2:52:28:28:20:17:31: 72:ab:1f:8e:69:06:21:b1:67:7c:ca:75:36:c4:84:a0:1d:89: b7:ea:9e:d5:d4:dc:dc:24:a0:5e:55:81:07:b5:78:3b:3a:32: 56:ab:3b:a1:9c:97:b7:ca:14:c4:af:3c:ac:fe:88:06:c4:ed: 95:5d:98:d5:97:93:ab:5e:b6:f3:4c:aa:90:1d:9a:0d:93:a3: 5f:48:61:43:0e:56:f8:5a:70:50:5f:44:91:b1:76:3f:a2:46: 2a:70:cc:cc:54:d9:cb:f2:c7:fd:ed:e2:43:af:95:69:33:d7: 58:88:4a:a0:73:e7:3e:a6:3a:cc:bf:71:d0:ef:46:55:dc:8b: 0a:4e:df:e8:c2:07:f6:e7:95:be:a8:02:15:02:f6:a6:76:9e: e7:68:97:6b:42:22:58:77:4f:4a:5a:02:2c:c6:99:cb:99:71: cd:fa:eb:a7:80:f1:1a:ee:33:64:3e:18:ed:27:61:54:00:d7: aa:0d:36:7b:fb:7c:1e:8e:c0:d4:2e:cd:95:36:48:6d:75:d8: 7b:14:aa:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwDHphJiFRsCtEHKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIxOTE5NDYwMloXDTI1MDUyMDE4NDYwMlowLzEtMCsGA1UEAxMk NjljOTEyMWQtNWY0NC00YWVlLTg4MjYtYTVlZTAyN2Q0ZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKJGsXNEEpsTV1N5KlXu9YI9qGEaWqto7Pms Jv7Eo10PfTcweW7HRh1HoXjKJtesADWMVewuKK6omX97/aKgvRsZNfCD5NcTfJ6S tAksFqlXkde5JRKcJOzfIpaNWpWl01xMLNiqY3+e7IULbWVZg/hhHOAA2VNmJhPn EgYjBwYgbd/K6gg9epOkWsqfqujctx6eN2ULI/I+U5j8P8d/umaQqumEIAjj4bJr XivWGhFod91PTFsNH/AttJPTzfdrdjn45saxpqJtRG1EIgf9znOLw6hOfhZNwwss FNGLQGjURhjVBvwqNsSSYM92zdW9oATXqpQumhZYa6JggsAMiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1NRL18VbB4U8faJvuJcsKNjPl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjg4MWE0ZGEtYWUwOC0z OWNlLWE4NmYtNWQ4MmY2NzQ5NDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgH1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjpAR6bCUoYA38eQzZa7XzBAl4DuCL29uWDLQZnfkWs/4EB6SdQaSBI Oh01ek140lIoKCAXMXKrH45pBiGxZ3zKdTbEhKAdibfqntXU3NwkoF5VgQe1eDs6 MlarO6Gcl7fKFMSvPKz+iAbE7ZVdmNWXk6tetvNMqpAdmg2To19IYUMOVvhacFBf RJGxdj+iRipwzMxU2cvyx/3t4kOvlWkz11iISqBz5z6mOsy/cdDvRlXciwpO3+jC B/bnlb6oAhUC9qZ2nudol2tCIlh3T0paAizGmcuZcc3666eA8RruM2Q+GO0nYVQA 16oNNnv7fB6OwNQuzZU2SG112HsUqjE= -----END CERTIFICATE-----Generated at Sun Apr 27 02:37:59 2025 by rpki-client