$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a692d24-ad5f-3784-9115-4b303c27f7a2.roa File: 3a692d24-ad5f-3784-9115-4b303c27f7a2.roa (raw, json) Hash identifier: 6QDGjSUetSybwTl1j6n6Zmxz1V0WAMNTMEijU9CXG3M= Subject key identifier: 30:F4:EE:54:30:A4:1F:DA:DF:0B:4E:0C:4E:C3:FB:84:9E:91:2B:E6 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849287E5C1BA6D49118E146B380 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a692d24-ad5f-3784-9115-4b303c27f7a2.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 213690 IP address blocks: 166.0.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:5c:1b:a6:d4:91:18:e1:46:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=ad78feb6-d7e6-455a-8680-743634c3de99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ba:ad:2a:45:57:78:7e:c4:2d:df:3a:a2:a6: 83:f6:a7:bb:19:20:bd:52:e9:56:8a:a1:2d:f0:f8: ff:d6:11:00:ca:02:c5:4e:73:52:e0:36:88:a7:a6: 38:a2:b6:62:3d:e2:4d:11:b3:c2:5b:26:9e:3e:bb: e2:75:df:af:12:8d:72:a5:5a:f5:af:d8:c8:2d:65: 55:e9:1b:6e:29:8e:c8:b9:f3:97:fb:f4:71:9c:9c: 02:eb:bf:37:87:17:f0:a4:f2:aa:b2:b3:b6:2a:8d: 3e:57:10:55:f2:06:41:0a:01:c6:19:6f:ac:97:18: 61:4e:5f:8a:e6:81:9e:ad:44:08:14:0c:63:85:e9: 33:97:b7:77:8d:5e:48:9e:1c:52:61:1b:b7:21:b7: ed:95:49:35:6c:6d:ab:8c:9a:df:29:48:f3:c2:fd: 79:ae:c4:a0:50:a1:e0:ef:c2:3e:c4:b3:3b:1a:d4: 03:40:fd:56:87:ab:81:2c:e9:e4:1a:da:3a:13:3d: c9:cf:f1:6d:93:06:3e:e5:cb:f5:7a:c5:4a:a3:77: 8b:31:d0:8d:4b:5e:3d:ee:47:12:e6:0f:45:f6:fb: ab:30:38:63:36:92:9e:4a:1b:2c:a7:ac:64:3f:b4: 56:04:ab:8c:ef:a0:19:b4:d1:2a:d5:79:d4:32:36: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F4:EE:54:30:A4:1F:DA:DF:0B:4E:0C:4E:C3:FB:84:9E:91:2B:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a692d24-ad5f-3784-9115-4b303c27f7a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:85:2d:36:8d:d8:38:3c:16:e2:42:6f:dc:dc:55:28:e2:54: bb:09:4f:74:d6:5b:eb:61:86:d0:60:e6:8b:a3:45:95:ca:46: f7:7e:b0:62:17:ee:c4:bd:ec:fd:42:3a:7b:f2:84:36:c5:a7: 43:84:7d:e0:57:29:92:c9:92:89:29:6b:78:05:a4:18:c6:4e: 2a:85:ae:c2:36:bd:30:fd:a0:4a:ad:1b:fc:89:b5:d1:31:cb: 31:cf:5e:e5:a4:0d:b6:39:6e:82:bb:9a:8f:1a:7b:99:f9:8f: 10:1b:9b:9d:18:75:2d:5d:76:00:bc:6d:47:13:2c:da:f3:3d: a6:0d:29:dd:48:c6:7b:5a:9b:69:70:d2:a7:61:f5:79:59:b6: a7:3c:d3:92:f4:ae:6a:de:3f:13:3d:18:de:44:97:24:51:fd: 69:b3:5f:13:4b:6d:bf:02:88:03:32:17:52:02:76:0d:34:f6: 34:f9:6d:e9:f9:f4:e9:5d:1e:d7:44:8b:20:a6:4e:60:cf:e7: 8a:d1:d6:49:16:d0:5b:ae:68:2f:a2:06:a8:6b:13:0a:46:e8: 95:d7:76:db:7c:a8:64:47:21:66:a5:2f:bb:e6:ca:5c:fa:5d: af:6a:52:1e:20:87:98:8c:ac:29:48:80:04:21:18:39:44:2b: a4:24:e4:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkoflwbptSRGOFGs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk YWQ3OGZlYjYtZDdlNi00NTVhLTg2ODAtNzQzNjM0YzNkZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLqtKkVXeH7ELd86oqaD9qe7GSC9UulWiqEt 8Pj/1hEAygLFTnNS4DaIp6Y4orZiPeJNEbPCWyaePrvidd+vEo1ypVr1r9jILWVV 6RtuKY7IufOX+/RxnJwC6783hxfwpPKqsrO2Ko0+VxBV8gZBCgHGGW+slxhhTl+K 5oGerUQIFAxjhekzl7d3jV5InhxSYRu3IbftlUk1bG2rjJrfKUjzwv15rsSgUKHg 78I+xLM7GtQDQP1Wh6uBLOnkGto6Ez3Jz/FtkwY+5cv1esVKo3eLMdCNS1497kcS 5g9F9vurMDhjNpKeShssp6xkP7RWBKuM76AZtNEq1XnUMjZVRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDD07lQwpB/a3wtODE7D+4SekSvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2E2OTJkMjQtYWQ1Zi0z Nzg0LTkxMTUtNGIzMDNjMjdmN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2FLTaN2Dg8FuJCb9zcVSjiVLsJT3TWW+thhtBg5oujRZXKRvd+sGIX 7sS97P1COnvyhDbFp0OEfeBXKZLJkokpa3gFpBjGTiqFrsI2vTD9oEqtG/yJtdEx yzHPXuWkDbY5boK7mo8ae5n5jxAbm50YdS1ddgC8bUcTLNrzPaYNKd1Ixntam2lw 0qdh9XlZtqc805L0rmrePxM9GN5ElyRR/WmzXxNLbb8CiAMyF1ICdg009jT5ben5 9OldHtdEiyCmTmDP54rR1kkW0FuuaC+iBqhrEwpG6JXXdtt8qGRHIWalL7vmylz6 Xa9qUh4gh5iMrClIgAQhGDlEK6Qk5NY= -----END CERTIFICATE-----Generated at Mon Apr 28 01:21:48 2025 by rpki-client