$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3725b52d-21b1-360d-acbc-9771dcda46e5.roa File: 3725b52d-21b1-360d-acbc-9771dcda46e5.roa (raw, json) Hash identifier: 1PSptB2AGXaqh0XX/PGTxIlhnxcSJTxY1XS2qYCIgRY= Subject key identifier: 5A:02:7A:7B:8B:08:C3:3B:45:F8:34:BB:41:D5:E1:FC:A0:63:F8:90 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858492CAE83D1346340675145A080 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3725b52d-21b1-360d-acbc-9771dcda46e5.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 19437 IP address blocks: 108.165.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:83:d1:34:63:40:67:51:45:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=94f5c567-3f14-4deb-8e05-336e910e0afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1d:82:ca:5e:cf:6d:08:d5:9e:86:2a:4e:1b: 4e:a2:51:15:5a:2c:33:e4:73:8a:6f:e7:51:2c:49: 79:24:de:18:86:a7:92:fa:ca:5a:ef:49:30:c4:97: 0b:5b:b4:77:a1:b3:f6:ef:c6:a3:bb:f8:ec:34:9b: 27:ff:ce:93:6c:74:6e:c7:07:e0:15:be:fc:bf:7c: ca:8a:03:70:8a:9a:f3:f5:48:dc:c6:41:31:4b:31: 23:cd:58:a8:9d:54:82:10:bd:e5:a4:4a:7c:d0:cc: 78:8f:5e:e2:5e:f1:18:a1:fd:28:2f:07:ac:61:72: 75:3b:71:61:01:ee:54:3c:39:ab:dd:ff:1f:02:37: 60:cb:9e:2b:da:27:80:55:b5:75:87:74:3d:7c:0e: 72:ef:13:92:33:38:e7:d6:0d:43:78:89:41:d6:64: d4:04:61:24:db:e2:76:66:57:db:9a:4d:d3:c9:ec: 7a:ba:08:bf:53:ad:f5:52:63:98:7a:0f:0d:13:70: 5c:38:f2:a0:93:0e:f0:49:39:4b:e5:f9:cc:27:d2: 93:85:20:ed:3a:77:f1:8e:70:bf:4e:6f:4e:81:85: 7b:39:bd:d6:f9:bf:6b:f9:81:8f:6c:98:66:e7:54: 7d:f1:bd:4b:f7:44:50:32:0e:6e:76:53:1d:8d:fc: bb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:02:7A:7B:8B:08:C3:3B:45:F8:34:BB:41:D5:E1:FC:A0:63:F8:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3725b52d-21b1-360d-acbc-9771dcda46e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:9c:3b:4f:2d:54:39:c1:89:1f:60:d2:22:2e:5f:38:13:86: ba:f0:16:18:6f:98:e6:2f:04:07:d6:b8:55:a0:1f:48:ef:b9: fe:c8:ff:6b:32:73:ae:63:74:dc:c5:1c:90:33:16:dc:71:71: 22:65:c0:a3:bb:c8:d2:77:86:47:5d:4c:6b:51:6e:3e:f7:7a: 24:63:63:a3:be:74:7b:d8:a2:09:9c:10:f9:7c:ec:b1:f3:fb: 2d:2a:3a:54:e8:88:d1:1f:6a:0b:b4:51:fe:e9:c9:f1:35:0d: 7b:6e:6f:ec:27:40:13:97:03:8d:2a:51:e7:eb:94:19:c9:a5: 9a:ca:8a:b3:8d:7d:50:09:90:48:44:32:fc:79:22:73:0d:f4: 93:8f:43:90:d9:51:79:51:1e:b0:3a:ba:60:ec:cc:ab:40:16: 1a:d9:eb:03:51:8d:66:54:f2:7e:6f:4c:eb:6b:92:ae:b6:d7: 52:79:10:15:45:08:5e:7f:e1:e4:67:20:53:d2:3d:9f:33:9d: c5:bf:e2:3d:55:0c:df:6d:48:d0:bd:c0:12:e4:ad:23:a9:45: 17:9b:b6:37:81:08:93:85:17:e4:34:d2:8a:f8:48:c5:70:9c: 39:98:63:cd:25:d9:ed:e8:8c:25:c7:99:c3:62:57:75:d0:e8: 48:9a:4e:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksroPRNGNAZ1FFoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OTRmNWM1NjctM2YxNC00ZGViLThlMDUtMzM2ZTkxMGUwYWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR2Cyl7PbQjVnoYqThtOolEVWiwz5HOKb+dR LEl5JN4YhqeS+spa70kwxJcLW7R3obP278aju/jsNJsn/86TbHRuxwfgFb78v3zK igNwiprz9UjcxkExSzEjzVionVSCEL3lpEp80Mx4j17iXvEYof0oLwesYXJ1O3Fh Ae5UPDmr3f8fAjdgy54r2ieAVbV1h3Q9fA5y7xOSMzjn1g1DeIlB1mTUBGEk2+J2 Zlfbmk3Tyex6ugi/U631UmOYeg8NE3BcOPKgkw7wSTlL5fnMJ9KThSDtOnfxjnC/ Tm9OgYV7Ob3W+b9r+YGPbJhm51R98b1L90RQMg5udlMdjfy7kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoCenuLCMM7Rfg0u0HV4fygY/iQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzcyNWI1MmQtMjFiMS0z NjBkLWFjYmMtOTc3MWRjZGE0NmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCcO08tVDnBiR9g0iIuXzgThrrwFhhvmOYvBAfWuFWgH0jvuf7I/2sy c65jdNzFHJAzFtxxcSJlwKO7yNJ3hkddTGtRbj73eiRjY6O+dHvYogmcEPl87LHz +y0qOlToiNEfagu0Uf7pyfE1DXtub+wnQBOXA40qUefrlBnJpZrKirONfVAJkEhE Mvx5InMN9JOPQ5DZUXlRHrA6umDszKtAFhrZ6wNRjWZU8n5vTOtrkq6211J5EBVF CF5/4eRnIFPSPZ8zncW/4j1VDN9tSNC9wBLkrSOpRRebtjeBCJOFF+Q00or4SMVw nDmYY80l2e3ojCXHmcNiV3XQ6EiaTtY= -----END CERTIFICATE-----Generated at Sun Apr 27 03:58:09 2025 by rpki-client