$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9dc220f3-6e66-36c0-be39-587b3d5cc69e.roa File: 9dc220f3-6e66-36c0-be39-587b3d5cc69e.roa (raw, json) Hash identifier: oCoO9VCrwCCG7kxR7akpN/y0neFud4GoNH7ucsQ5bCU= Subject key identifier: D8:9B:CC:38:8B:B1:F3:DF:5E:EF:E5:F9:2C:E4:3D:5C:5D:A3:CD:97 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848F00C6EF402C8AA851CC77D00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9dc220f3-6e66-36c0-be39-587b3d5cc69e.roa Signing time: Wed 19 Feb 2025 19:45:57 +0000 ROA not before: Wed 19 Feb 2025 19:45:57 +0000 ROA not after: Tue 20 May 2025 18:45:57 +0000 asID: 62240 IP address blocks: 166.1.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:0c:6e:f4:02:c8:aa:85:1c:c7:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 19 19:45:57 2025 GMT Not After : May 20 18:45:57 2025 GMT Subject: CN=0a7c6459-d50c-4228-8a29-5fcf1cce51c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:82:19:d5:b5:a3:82:7a:16:70:23:84:6a: a4:81:81:29:86:c0:ca:25:f3:5b:d9:b4:7b:c7:df: b7:39:3e:30:fd:df:1c:c0:41:fb:48:e6:f9:d0:71: cd:c0:d7:a6:0a:4d:2f:28:ee:1c:75:f5:a1:8a:9c: 20:f6:d6:b9:63:63:65:70:45:d4:4b:ba:cc:99:0a: 97:fa:34:87:52:02:2a:8d:f2:f5:cb:08:d8:e4:ba: ab:c7:a2:48:ec:51:2a:a8:78:ea:dd:72:8e:d2:64: ce:5a:11:a4:54:fb:b8:6a:fc:a9:68:ec:86:74:af: fe:df:74:d7:ff:e4:1f:75:1e:f2:5e:67:06:fd:7c: f7:b2:9c:53:bc:7b:0e:e0:88:06:d7:b1:fe:7b:67: 79:ad:4b:73:25:99:50:9c:02:f0:b4:7b:45:7a:86: 9d:8d:8b:19:91:5a:47:30:63:84:64:7d:25:5e:a9: 70:55:ac:62:03:63:69:32:81:89:d8:cb:56:af:6b: 2c:ad:59:25:af:a0:aa:3b:fd:b2:75:82:0e:1a:69: 55:e2:41:6c:7f:14:2d:38:f0:90:b8:2c:f3:3c:80: 5b:74:7a:25:83:62:7f:3f:94:c4:dd:0c:a0:c4:7e: 99:8e:0b:bb:6b:35:7d:f2:a7:c0:9e:28:94:08:2f: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9B:CC:38:8B:B1:F3:DF:5E:EF:E5:F9:2C:E4:3D:5C:5D:A3:CD:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9dc220f3-6e66-36c0-be39-587b3d5cc69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:65:e7:8d:a9:90:e1:75:4f:77:ae:fb:04:6c:19:8c:b4:2a: e8:3b:d7:63:62:02:6a:74:13:e3:79:4e:31:75:77:ed:87:87: 24:1c:3f:78:1a:33:2f:8a:27:63:c2:10:f0:22:40:57:19:8e: dc:c5:b1:26:70:5a:0d:1d:8b:7f:88:c2:ac:be:0f:98:2c:15: 4a:e9:65:45:57:c4:d3:12:5d:aa:7c:9c:04:52:45:c9:66:b1: a8:20:84:0c:b5:8d:e5:51:ed:f5:01:4a:2a:28:74:b3:a2:fc: 1a:33:7a:8c:d1:98:20:a1:96:54:8b:b0:a1:15:ac:df:be:84: 5b:81:40:9f:2a:0a:a8:49:de:55:4b:5c:a4:f4:31:2b:7f:a6: cd:56:b2:0e:c8:99:fb:77:10:cf:ab:bb:23:17:18:8f:fc:8b: 7b:33:bd:de:08:f0:fd:e8:fd:03:1f:00:9e:21:cf:ca:2f:8d: 3b:3d:c4:58:f8:c5:e4:b6:65:f6:f7:f3:b0:bb:bb:ff:79:b7: fc:3a:33:4a:43:7f:e0:ca:42:d3:f3:b9:b7:20:21:cd:ca:3b: dd:49:0c:8c:3f:e8:53:ae:2b:a5:36:af:38:ca:0c:11:0a:f8: 78:9f:c4:b8:07:7e:3e:dd:0c:88:c8:25:2a:23:a7:d9:2e:ef: 21:19:eb:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwDG70AsiqhRzHfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIxOTE5NDU1N1oXDTI1MDUyMDE4NDU1N1owLzEtMCsGA1UEAxMk MGE3YzY0NTktZDUwYy00MjI4LThhMjktNWZjZjFjY2U1MWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCeCGdW1o4J6FnAjhGqkgYEphsDKJfNb2bR7 x9+3OT4w/d8cwEH7SOb50HHNwNemCk0vKO4cdfWhipwg9ta5Y2NlcEXUS7rMmQqX +jSHUgIqjfL1ywjY5Lqrx6JI7FEqqHjq3XKO0mTOWhGkVPu4avypaOyGdK/+33TX /+QfdR7yXmcG/Xz3spxTvHsO4IgG17H+e2d5rUtzJZlQnALwtHtFeoadjYsZkVpH MGOEZH0lXqlwVaxiA2NpMoGJ2MtWr2ssrVklr6CqO/2ydYIOGmlV4kFsfxQtOPCQ uCzzPIBbdHolg2J/P5TE3QygxH6Zjgu7azV98qfAniiUCC/nEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNibzDiLsfPfXu/l+SzkPVxdo82XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOWRjMjIwZjMtNmU2Ni0z NmMwLWJlMzktNTg3YjNkNWNjNjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFl542pkOF1T3eu+wRsGYy0Kug712NiAmp0E+N5TjF1d+2HhyQcP3ga My+KJ2PCEPAiQFcZjtzFsSZwWg0di3+Iwqy+D5gsFUrpZUVXxNMSXap8nARSRclm sagghAy1jeVR7fUBSioodLOi/BozeozRmCChllSLsKEVrN++hFuBQJ8qCqhJ3lVL XKT0MSt/ps1Wsg7Imft3EM+ruyMXGI/8i3szvd4I8P3o/QMfAJ4hz8ovjTs9xFj4 xeS2Zfb387C7u/95t/w6M0pDf+DKQtPzubcgIc3KO91JDIw/6FOuK6U2rzjKDBEK +HifxLgHfj7dDIjIJSojp9ku7yEZ6z8= -----END CERTIFICATE-----Generated at Sun Apr 27 10:19:34 2025 by rpki-client