$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f84b647-2982-34b8-981f-f3b58a18470d.roa File: 5f84b647-2982-34b8-981f-f3b58a18470d.roa (raw, json) Hash identifier: +xdbiRZ+1++3/M3ziZU+qAz/3ySW5gMpoWko/L9BST0= Subject key identifier: FB:DA:7F:0D:04:1C:6C:72:C6:51:6C:7B:61:B5:CE:58:67:42:77:0C Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584988CF3012FBD81C730A277D80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f84b647-2982-34b8-981f-f3b58a18470d.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 21859 IP address blocks: 108.165.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:30:12:fb:d8:1c:73:0a:27:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=ac2a328b-f12d-4674-b809-4052b21c8b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:e7:24:57:7f:2d:0a:06:17:49:ee:91:20: 0c:23:b4:8f:95:e8:43:aa:d4:e5:bb:a3:84:8c:14: e7:3b:39:3b:29:d5:12:d8:99:85:f5:8b:86:e0:58: e7:75:44:2a:09:8a:38:30:db:34:c8:cb:29:2d:28: e5:9f:67:04:02:a5:30:cc:8d:d4:86:29:ee:22:52: 11:27:1a:af:a9:2e:ca:e0:07:42:be:c8:bf:82:73: 49:ea:c8:ea:41:eb:1c:f7:1b:68:21:7d:8d:07:94: 70:18:98:2c:f3:9a:37:9e:c4:a6:f6:ec:39:53:6d: d7:f7:db:b2:b3:d5:c9:e8:f5:2f:52:1b:f7:b1:9b: 1b:08:4f:09:23:5d:96:db:90:72:8b:cb:29:cb:af: f0:ab:90:88:3d:e9:83:84:e2:02:6c:80:34:38:0c: 58:2f:e6:72:5d:66:52:47:d2:de:b8:20:f7:5a:56: 5f:98:92:63:56:2b:00:4a:87:63:7b:d2:17:49:1e: 81:29:f4:29:f7:ff:6d:22:26:ea:5f:a9:c3:5a:7b: c7:6b:48:60:55:cf:a0:b0:70:6e:06:41:b9:b2:79: 8b:03:28:fc:ac:d6:71:d3:91:e7:44:c7:21:8e:36: eb:95:8b:c1:07:12:b9:0d:58:2a:d9:0d:3e:b6:86: 3e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DA:7F:0D:04:1C:6C:72:C6:51:6C:7B:61:B5:CE:58:67:42:77:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f84b647-2982-34b8-981f-f3b58a18470d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:ca:82:74:6f:9b:00:da:29:b3:f9:fa:63:54:02:a8:0f:02: da:32:6b:c4:d8:44:5b:bd:c4:ee:af:0c:af:7b:e4:d6:54:a0: d1:02:37:1a:95:c5:53:db:d9:ba:bb:39:a7:a6:ec:8b:0d:36: 25:1b:92:8b:97:96:49:b5:57:df:bf:3e:94:de:46:bd:7e:df: 07:65:a1:9d:e4:91:37:37:81:f2:9a:8e:24:81:ba:67:8c:5d: e8:e2:f5:68:74:d1:78:25:cb:64:ca:14:b4:9b:51:92:c7:a3: cf:99:6a:a2:1c:b2:6b:11:c6:60:0e:b9:46:47:cd:32:f4:48: 72:52:ca:22:52:fd:e5:bc:bc:6c:77:db:ca:16:6b:da:8e:5e: 4c:01:02:a9:1d:b3:2b:65:38:e3:e6:94:39:fc:2f:9c:41:a0: bd:e4:63:2b:92:e0:6d:bf:e7:bf:e9:7b:bf:60:f6:53:f1:c5: de:84:71:40:68:bf:7c:ce:0e:c0:ab:cc:a0:4d:20:e9:81:ae: 7a:dd:7f:49:29:68:d0:28:57:07:80:94:c2:5a:0e:c1:8c:33: 80:6c:2c:1e:d4:05:ce:ef:01:67:a2:a9:63:57:6b:9e:86:8e: 12:79:43:9e:a0:9b:57:ac:55:fa:5d:09:f2:db:0f:2f:25:42: f2:ae:93:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzAS+9gccwonfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YWMyYTMyOGItZjEyZC00Njc0LWI4MDktNDA1MmIyMWM4YjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoLnJFd/LQoGF0nukSAMI7SPlehDqtTlu6OE jBTnOzk7KdUS2JmF9YuG4FjndUQqCYo4MNs0yMspLSjln2cEAqUwzI3UhinuIlIR JxqvqS7K4AdCvsi/gnNJ6sjqQesc9xtoIX2NB5RwGJgs85o3nsSm9uw5U23X99uy s9XJ6PUvUhv3sZsbCE8JI12W25Byi8spy6/wq5CIPemDhOICbIA0OAxYL+ZyXWZS R9LeuCD3WlZfmJJjVisASodje9IXSR6BKfQp9/9tIibqX6nDWnvHa0hgVc+gsHBu BkG5snmLAyj8rNZx05HnRMchjjbrlYvBBxK5DVgq2Q0+toY+lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvafw0EHGxyxlFse2G1zlhnQncMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNWY4NGI2NDctMjk4Mi0z NGI4LTk4MWYtZjNiNThhMTg0NzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLKgnRvmwDaKbP5+mNUAqgPAtoya8TYRFu9xO6vDK975NZUoNECNxqV xVPb2bq7Oaem7IsNNiUbkouXlkm1V9+/PpTeRr1+3wdloZ3kkTc3gfKajiSBumeM Xeji9Wh00Xgly2TKFLSbUZLHo8+ZaqIcsmsRxmAOuUZHzTL0SHJSyiJS/eW8vGx3 28oWa9qOXkwBAqkdsytlOOPmlDn8L5xBoL3kYyuS4G2/57/pe79g9lPxxd6EcUBo v3zODsCrzKBNIOmBrnrdf0kpaNAoVweAlMJaDsGMM4BsLB7UBc7vAWeiqWNXa56G jhJ5Q56gm1esVfpdCfLbDy8lQvKuk84= -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:16 2025 by rpki-client