$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/512a0f75-5356-3f01-98d7-3d8042f1ab8b.roa File: 512a0f75-5356-3f01-98d7-3d8042f1ab8b.roa (raw, json) Hash identifier: YpRzgeWg1xoNxy4S++qp2kR6z0RFdmx89Jw+5n0EJAU= Subject key identifier: 02:58:2B:B2:BF:7B:5E:F4:30:8A:1F:EF:5C:86:5A:C6:2E:89:F1:90 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858494733FA8F926F9C619F62D700 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/512a0f75-5356-3f01-98d7-3d8042f1ab8b.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 214483 IP address blocks: 108.165.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:fa:8f:92:6f:9c:61:9f:62:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=1aec9000-aad1-402d-b086-82549e3a052b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:05:4c:15:14:b9:77:5b:7d:3f:d0:c5:2f:07: 9b:57:28:94:ec:75:6f:49:6c:64:c8:5c:1a:5a:66: 7a:e0:84:00:1b:6f:fd:e1:24:1e:d7:14:26:bc:58: 43:a4:18:b7:99:63:ed:ec:9c:5f:eb:04:19:7f:08: 28:53:fd:38:37:f9:06:df:da:15:05:4d:25:35:5c: 83:e3:19:16:5d:2c:03:46:3d:5b:aa:50:f0:10:58: de:8e:3b:7a:2d:9d:72:fe:c6:ae:a6:62:e1:7f:24: 01:41:ce:29:e9:1d:40:18:8d:33:72:95:6d:bb:0f: 29:22:bd:fc:24:63:1f:49:88:6c:59:c0:05:5a:a8: 70:89:f7:e3:3d:91:73:9d:4b:4c:41:9e:fd:94:cc: 1c:f8:c1:f7:f5:16:28:36:c8:74:ae:c7:7b:5f:30: d8:e3:b5:9f:72:d7:16:50:3d:c2:ba:c1:7d:dd:17: 9f:cc:99:87:8d:ae:be:ee:b8:f2:ee:9d:31:03:6a: 0a:58:53:b6:a4:2d:0b:08:d3:37:aa:1d:e9:58:cd: fd:bf:90:f2:d8:dc:07:36:4a:92:e0:3f:a0:1f:1f: f4:67:43:2b:d8:92:80:3d:4a:33:e8:b0:74:7f:2b: d6:73:e4:a7:e3:e1:c9:34:6f:b5:34:e1:cd:50:75: 05:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:58:2B:B2:BF:7B:5E:F4:30:8A:1F:EF:5C:86:5A:C6:2E:89:F1:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/512a0f75-5356-3f01-98d7-3d8042f1ab8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:4d:b0:3b:d0:08:99:bf:f9:ce:c1:74:e6:d2:79:13:db:03: f2:31:38:83:d9:98:bd:43:13:fb:86:79:5c:35:1f:2b:f1:bb: 8a:c1:90:c9:97:fd:64:d8:2e:e9:ce:91:4b:53:63:f2:2f:81: 29:10:46:ea:dc:7f:a3:3a:b3:15:a4:f8:20:c5:c5:0b:82:40: 63:f8:34:1c:7c:40:35:20:64:4a:82:19:2d:8f:6e:0e:ed:2b: b0:c3:ab:15:eb:4c:8f:12:b4:82:9a:19:0e:e5:db:8a:d2:8a: f2:06:7d:54:86:77:62:2b:22:54:40:e8:33:51:05:d8:eb:b3: 87:ef:10:b4:c0:6a:e5:8d:cf:ee:c2:9f:68:2d:36:53:4d:ef: bb:b6:79:0c:d3:f3:3f:0b:36:11:2e:b8:73:cc:98:7c:40:5b: 07:3d:95:b8:87:a1:a4:df:b6:2e:39:72:29:55:db:a7:1d:d8: aa:b3:15:75:45:37:74:53:2d:73:99:32:bc:d7:03:d6:2d:19: 65:b9:14:98:20:7b:71:a1:09:09:ad:17:9c:09:ef:20:77:74: d8:73:0d:91:ff:ca:e3:ed:be:ad:d6:ae:3a:cc:be:21:9d:e2: 07:25:2f:e5:3e:bd:91:71:05:f5:a9:5c:ec:1c:3c:02:b8:2c: 7b:9d:05:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM/qPkm+cYZ9i1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk MWFlYzkwMDAtYWFkMS00MDJkLWIwODYtODI1NDllM2EwNTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QVMFRS5d1t9P9DFLwebVyiU7HVvSWxkyFwa WmZ64IQAG2/94SQe1xQmvFhDpBi3mWPt7Jxf6wQZfwgoU/04N/kG39oVBU0lNVyD 4xkWXSwDRj1bqlDwEFjejjt6LZ1y/saupmLhfyQBQc4p6R1AGI0zcpVtuw8pIr38 JGMfSYhsWcAFWqhwiffjPZFznUtMQZ79lMwc+MH39RYoNsh0rsd7XzDY47WfctcW UD3CusF93RefzJmHja6+7rjy7p0xA2oKWFO2pC0LCNM3qh3pWM39v5Dy2NwHNkqS 4D+gHx/0Z0Mr2JKAPUoz6LB0fyvWc+Sn4+HJNG+1NOHNUHUFawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJYK7K/e170MIof71yGWsYuifGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTEyYTBmNzUtNTM1Ni0z ZjAxLTk4ZDctM2Q4MDQyZjFhYjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBNsDvQCJm/+c7BdObSeRPbA/IxOIPZmL1DE/uGeVw1Hyvxu4rBkMmX /WTYLunOkUtTY/IvgSkQRurcf6M6sxWk+CDFxQuCQGP4NBx8QDUgZEqCGS2Pbg7t K7DDqxXrTI8StIKaGQ7l24rSivIGfVSGd2IrIlRA6DNRBdjrs4fvELTAauWNz+7C n2gtNlNN77u2eQzT8z8LNhEuuHPMmHxAWwc9lbiHoaTfti45cilV26cd2KqzFXVF N3RTLXOZMrzXA9YtGWW5FJgge3GhCQmtF5wJ7yB3dNhzDZH/yuPtvq3WrjrMviGd 4gclL+U+vZFxBfWpXOwcPAK4LHudBZA= -----END CERTIFICATE-----Generated at Sun Apr 27 10:36:02 2025 by rpki-client