$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/928c7549-a0f8-3fe3-81e3-22490af1bc0b.roa File: 928c7549-a0f8-3fe3-81e3-22490af1bc0b.roa (raw, json) Hash identifier: 9UW2l7PlkFicUDdiGg+d8A0wsnzuOewz+fWF2usQ+qs= Subject key identifier: 6C:1B:9E:D7:B5:3D:65:C6:24:9A:C9:D3:07:48:5B:D8:0A:DB:73:A6 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584940BD0F1B1B251C42EBD67F00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/928c7549-a0f8-3fe3-81e3-22490af1bc0b.roa Signing time: Thu 20 Mar 2025 17:26:29 +0000 ROA not before: Thu 20 Mar 2025 17:26:29 +0000 ROA not after: Wed 18 Jun 2025 17:26:29 +0000 asID: 401152 IP address blocks: 108.165.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:bd:0f:1b:1b:25:1c:42:eb:d6:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 20 17:26:29 2025 GMT Not After : Jun 18 17:26:29 2025 GMT Subject: CN=378a7277-34ce-4fc7-bd0c-545a1966c8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:eb:a2:f6:84:01:ab:39:62:f2:7b:5f:a5: 49:29:39:bd:84:2b:1d:62:6e:d9:1d:a7:04:62:3a: 7e:fe:55:0a:ea:a3:d6:0e:6e:71:e2:d8:b6:09:24: b2:4e:76:8a:a4:22:5c:0f:f3:e5:ff:e9:7b:19:2a: bb:42:11:10:55:c5:0b:5c:1d:bd:e9:b4:d2:dd:c6: ed:c6:2e:80:83:c8:b0:8d:de:13:e8:f0:fd:ac:76: 1b:a4:f8:b0:06:cb:bb:bd:26:0b:3f:05:15:dc:f5: b9:c8:0f:21:c5:32:e3:98:af:47:bb:dc:31:f4:69: 88:91:72:a0:ad:d9:36:96:c5:96:9f:a2:03:65:1b: 03:e5:d3:a0:95:de:24:3b:18:3f:79:11:50:6d:45: 46:d7:98:a4:1c:34:8c:66:c5:cc:72:77:c7:75:43: f5:78:e1:bc:cd:f4:af:f7:2d:ca:83:a2:b3:d6:86: 5e:23:8c:d3:cd:4d:74:0f:88:ad:0f:ae:e8:fa:55: 63:6c:4f:87:89:7d:fb:50:41:35:5f:3a:66:9d:51: 01:72:a6:60:98:aa:64:5e:ba:6a:98:2e:77:da:1c: ae:2b:14:cc:1d:05:3d:8c:b6:04:01:05:70:4c:7a: 02:02:1b:7d:2b:40:31:01:85:f9:57:fe:63:7e:a6: 79:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1B:9E:D7:B5:3D:65:C6:24:9A:C9:D3:07:48:5B:D8:0A:DB:73:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/928c7549-a0f8-3fe3-81e3-22490af1bc0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:46:2b:97:04:2b:99:b7:41:8e:31:68:39:fc:3f:33:8c:dc: 3f:a3:c5:e7:35:e3:5f:ac:97:16:3b:d6:4a:8b:ec:b2:f4:78: 93:ca:eb:55:e6:68:49:d4:13:ae:a0:6d:d9:c2:13:8b:09:8d: a5:d3:9e:f9:4e:26:a8:8e:e0:87:99:85:6e:03:ac:79:cb:e6: ee:d6:36:ea:04:b2:4b:37:89:63:c0:5d:6b:4d:d8:41:b3:72: ed:6d:7e:4b:9f:b0:40:e8:b1:6c:47:25:4f:e2:c5:52:78:b1: bf:94:c3:bb:bf:4e:d3:8b:7f:48:20:6c:ac:c8:4e:42:fd:97: 50:6c:54:b7:27:b4:9c:96:f2:31:53:6a:53:46:26:e6:fe:94: d9:81:b6:b6:1b:dc:dd:0e:36:34:00:2b:3b:06:ff:84:d9:7a: f1:07:ba:fc:02:d0:76:28:bd:cf:a3:b9:f4:a1:1a:66:01:4a: 8f:9f:3e:45:9e:f0:62:44:2f:9d:69:00:2a:4b:7f:70:65:d1: a3:3c:36:f0:be:ed:0d:17:f1:2f:48:d1:f9:4d:93:c5:34:b3: 2b:91:63:43:af:48:40:ee:01:bf:d9:0d:8d:e2:29:ea:01:92: eb:50:f6:25:7b:ae:ee:42:1b:23:4b:cf:b6:eb:95:a8:41:c4: 72:03:36:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAvQ8bGyUcQuvWfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDMyMDE3MjYyOVoXDTI1MDYxODE3MjYyOVowLzEtMCsGA1UEAxMk Mzc4YTcyNzctMzRjZS00ZmM3LWJkMGMtNTQ1YTE5NjZjOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJvrovaEAas5YvJ7X6VJKTm9hCsdYm7ZHacE Yjp+/lUK6qPWDm5x4ti2CSSyTnaKpCJcD/Pl/+l7GSq7QhEQVcULXB296bTS3cbt xi6Ag8iwjd4T6PD9rHYbpPiwBsu7vSYLPwUV3PW5yA8hxTLjmK9Hu9wx9GmIkXKg rdk2lsWWn6IDZRsD5dOgld4kOxg/eRFQbUVG15ikHDSMZsXMcnfHdUP1eOG8zfSv 9y3Kg6Kz1oZeI4zTzU10D4itD67o+lVjbE+HiX37UEE1XzpmnVEBcqZgmKpkXrpq mC532hyuKxTMHQU9jLYEAQVwTHoCAht9K0AxAYX5V/5jfqZ5WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwbnte1PWXGJJrJ0wdIW9gK23OmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTI4Yzc1NDktYTBmOC0z ZmUzLTgxZTMtMjI0OTBhZjFiYzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRGK5cEK5m3QY4xaDn8PzOM3D+jxec141+slxY71kqL7LL0eJPK61Xm aEnUE66gbdnCE4sJjaXTnvlOJqiO4IeZhW4DrHnL5u7WNuoEsks3iWPAXWtN2EGz cu1tfkufsEDosWxHJU/ixVJ4sb+Uw7u/TtOLf0ggbKzITkL9l1BsVLcntJyW8jFT alNGJub+lNmBtrYb3N0ONjQAKzsG/4TZevEHuvwC0HYovc+jufShGmYBSo+fPkWe 8GJEL51pACpLf3Bl0aM8NvC+7Q0X8S9I0flNk8U0syuRY0OvSEDuAb/ZDY3iKeoB kutQ9iV7ru5CGyNLz7brlahBxHIDNvQ= -----END CERTIFICATE-----Generated at Sun Apr 27 10:32:58 2025 by rpki-client