$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d500dd3-2d39-3070-8ae4-006b17215c32.roa File: 4d500dd3-2d39-3070-8ae4-006b17215c32.roa (raw, json) Hash identifier: tIK4HDhTIizV9GKyMhqxopPbkXGa/zVMf7V22DnXMXc= Subject key identifier: 68:1D:4E:61:51:F8:5D:E2:B1:A2:06:D7:B6:23:18:A9:A6:42:A8:A1 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584902EC2F6AC86380B1C41A1000 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d500dd3-2d39-3070-8ae4-006b17215c32.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 30633 IP address blocks: 108.165.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:2f:6a:c8:63:80:b1:c4:1a:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=3700e1c0-5fb4-418a-be25-a16d83916740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:42:e7:c8:cb:85:f4:95:13:7d:5d:9f:c4:b0: 41:55:77:b8:b2:01:6c:73:66:b4:9e:57:56:83:79: 07:5c:c2:8c:ba:f6:e9:33:46:f5:dd:fd:92:44:22: 3b:5c:6f:48:0b:e2:fe:62:fb:57:fa:d2:ab:bb:29: f9:1d:15:4b:2d:6c:32:56:3e:36:96:47:e3:74:ec: d4:be:39:8c:e5:83:3a:ab:76:5b:f5:dc:7b:96:56: 34:ce:22:5e:79:59:8c:cc:93:77:20:01:b7:f6:56: 0f:2a:dd:9f:13:f9:96:ec:2c:96:43:09:7c:5d:7f: c8:9c:c0:fa:91:1b:5c:c8:63:ba:5b:ad:e1:17:19: 6a:94:24:3b:b4:ab:cb:d2:e3:48:67:86:38:7f:c8: 88:40:57:49:28:ef:e1:4a:76:e0:09:97:bd:f3:5b: a5:7e:d7:89:45:53:15:9a:e7:0b:28:b4:bd:00:77: 5c:40:6a:47:e3:d5:ef:f2:5b:14:98:79:76:41:24: 41:ff:b4:46:2c:39:4d:de:e9:87:37:a6:9c:0a:d4: ff:9b:7e:fe:35:f7:06:79:d4:5c:d5:8b:c4:f4:be: 9e:1c:07:5b:b2:d5:7b:0d:c2:cd:1b:d8:48:a6:4b: 94:2b:2a:50:90:c3:2e:80:2b:95:64:5d:77:7b:fe: 0d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1D:4E:61:51:F8:5D:E2:B1:A2:06:D7:B6:23:18:A9:A6:42:A8:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d500dd3-2d39-3070-8ae4-006b17215c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f6:86:91:50:f7:ea:23:e5:d5:c5:92:35:dc:70:d0:69:24: e9:5a:92:8a:67:f0:2e:df:a0:d0:3e:c3:59:ee:d8:ba:9b:d5: 6a:32:97:30:a6:5e:bc:ce:eb:18:6a:ee:52:ab:80:3a:4d:a9: aa:6d:c1:a3:8a:14:c8:23:3d:a2:9b:4f:63:ae:07:14:df:50: 90:b5:dd:63:4c:c7:ab:32:59:89:c5:bd:ac:87:99:d9:83:2c: 63:97:b5:68:42:d6:5f:8d:7a:9e:0f:0d:5b:ab:d5:e4:ff:5e: 20:eb:eb:71:77:31:72:a1:5f:e6:2d:27:63:8a:f1:0b:19:65: c9:21:94:a5:fc:37:78:76:a7:57:4c:64:1c:ec:80:1e:8e:e5: 1c:6d:24:98:74:db:0f:11:b8:98:a0:c6:c2:3d:26:36:4a:75: 76:45:db:2b:fe:57:ef:41:0d:a3:8e:84:5b:80:fa:0d:35:49: 5c:c4:7e:40:90:a6:e2:74:fc:e6:68:e6:35:a7:61:2f:23:18: 7f:af:66:ea:59:ec:fc:de:40:ee:c8:7e:ec:54:4c:58:9b:26: 50:20:14:5a:77:65:45:16:cf:db:05:2b:44:f8:8e:31:44:17: c9:91:dc:54:2d:bc:c3:c4:86:37:78:6d:8a:3a:42:55:d7:79: 06:ee:bf:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7C9qyGOAscQaEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MzcwMGUxYzAtNWZiNC00MThhLWJlMjUtYTE2ZDgzOTE2NzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkLnyMuF9JUTfV2fxLBBVXe4sgFsc2a0nldW g3kHXMKMuvbpM0b13f2SRCI7XG9IC+L+YvtX+tKruyn5HRVLLWwyVj42lkfjdOzU vjmM5YM6q3Zb9dx7llY0ziJeeVmMzJN3IAG39lYPKt2fE/mW7CyWQwl8XX/InMD6 kRtcyGO6W63hFxlqlCQ7tKvL0uNIZ4Y4f8iIQFdJKO/hSnbgCZe981ulfteJRVMV mucLKLS9AHdcQGpH49Xv8lsUmHl2QSRB/7RGLDlN3umHN6acCtT/m37+NfcGedRc 1YvE9L6eHAdbstV7DcLNG9hIpkuUKypQkMMugCuVZF13e/4NswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgdTmFR+F3isaIG17YjGKmmQqihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGQ1MDBkZDMtMmQzOS0z MDcwLThhZTQtMDA2YjE3MjE1YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJL2hpFQ9+oj5dXFkjXccNBpJOlakopn8C7foNA+w1nu2Lqb1WoylzCm XrzO6xhq7lKrgDpNqaptwaOKFMgjPaKbT2OuBxTfUJC13WNMx6syWYnFvayHmdmD LGOXtWhC1l+Nep4PDVur1eT/XiDr63F3MXKhX+YtJ2OK8QsZZckhlKX8N3h2p1dM ZBzsgB6O5RxtJJh02w8RuJigxsI9JjZKdXZF2yv+V+9BDaOOhFuA+g01SVzEfkCQ puJ0/OZo5jWnYS8jGH+vZupZ7PzeQO7IfuxUTFibJlAgFFp3ZUUWz9sFK0T4jjFE F8mR3FQtvMPEhjd4bYo6QlXXeQbuv1c= -----END CERTIFICATE-----Generated at Tue Apr 29 15:13:58 2025 by rpki-client