$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a877d6f2-3c37-3899-b61c-2ec3b4f2156e.roa File: a877d6f2-3c37-3899-b61c-2ec3b4f2156e.roa (raw, json) Hash identifier: +6DhvrybszFA8lEi35mWFU4d63N1WeQ5kkTfnrIoMyM= Subject key identifier: B9:E3:CB:A5:24:E4:4F:9E:75:55:2F:BD:7E:35:89:81:98:55:B9:18 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848CBAFEBAD74F177C29BD6E580 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a877d6f2-3c37-3899-b61c-2ec3b4f2156e.roa Signing time: Thu 06 Feb 2025 19:10:26 +0000 ROA not before: Thu 06 Feb 2025 19:10:26 +0000 ROA not after: Wed 07 May 2025 18:10:26 +0000 asID: 401152 IP address blocks: 108.165.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:af:eb:ad:74:f1:77:c2:9b:d6:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 6 19:10:26 2025 GMT Not After : May 7 18:10:26 2025 GMT Subject: CN=51941a70-d524-44d5-bd04-0ac0609b534b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d7:bb:8a:e9:e4:5a:f3:33:9b:cd:b0:8b:b7: 4a:76:aa:16:17:3c:4d:cc:ff:6f:11:a4:e5:69:96: c9:49:d6:95:e4:13:9e:2f:c6:0f:31:27:6d:85:96: 5c:12:16:45:11:0e:35:90:7c:4a:7f:be:c2:82:97: b4:fe:77:7e:88:b5:b5:1b:85:c7:92:ad:fe:40:db: 70:95:ac:38:cd:f4:5c:87:40:86:fd:ba:05:bd:05: fb:ee:8e:f9:c7:e7:46:72:a0:b8:af:93:46:6d:61: 99:23:8b:13:86:19:52:36:a2:b7:1d:61:19:89:5f: b5:51:09:46:cf:ab:73:9b:f2:89:d8:3c:81:ff:9e: 80:ce:60:d7:96:44:81:38:87:db:fd:d6:b4:a0:68: ea:0a:5a:db:63:3e:09:56:3a:3f:e4:e1:3c:8c:e7: d7:bd:43:3c:6d:aa:a2:28:2d:8b:f7:e9:cf:59:f1: 83:c7:19:df:fc:20:a5:4d:2a:8d:a1:da:87:72:a6: ef:cd:e2:96:81:f3:04:f3:0b:24:eb:1c:a1:47:83: 14:27:50:d7:10:96:47:cb:8d:1d:d9:0f:71:30:d0: 0d:a7:6a:a2:97:3c:5f:a8:02:5b:9d:5c:99:aa:90: a6:a6:3a:e3:85:1c:f2:d2:7b:10:8b:78:16:fb:ab: aa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E3:CB:A5:24:E4:4F:9E:75:55:2F:BD:7E:35:89:81:98:55:B9:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a877d6f2-3c37-3899-b61c-2ec3b4f2156e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:88:79:51:b8:6f:21:be:af:e5:b4:d2:85:04:71:88:71:4d: d3:ed:74:e1:84:44:91:5f:68:72:bc:b5:f2:86:3a:7d:53:5b: 22:a5:6d:36:e1:34:e0:a8:28:c7:9e:0d:9f:a8:c9:75:4a:3b: f8:da:c6:28:7c:80:00:65:d1:78:1e:3b:29:95:1b:7b:18:14: 0a:e4:8b:8b:61:bd:05:b4:ba:61:a5:5c:cb:de:41:84:c0:50: 3c:8a:b1:aa:d4:75:1f:a6:05:a1:cf:83:8c:43:d3:db:b9:7b: 62:46:5d:09:d4:06:61:cc:47:de:4e:ec:33:b5:42:a7:d5:30: 42:69:3a:1c:4b:b9:f9:b1:9e:5e:ee:1f:02:04:b0:84:5b:b7: b7:75:76:a0:c0:4f:d3:9a:17:24:f1:7e:18:af:33:aa:45:46: 03:65:98:9b:06:7c:8c:c3:79:70:72:5e:f5:4e:88:87:64:e9: 16:55:d3:14:73:13:b5:eb:2a:b8:47:9c:27:bb:8a:2b:74:5c: ed:51:01:98:28:88:0e:6b:b6:ed:1f:2a:e6:71:ed:91:db:86: 9e:90:a0:22:90:bc:ed:10:90:c3:b1:19:ea:d7:b8:44:5b:7d: 51:e1:e6:95:bd:4a:80:ef:8d:c2:aa:04:03:cb:8d:39:8e:8d: 07:ec:ba:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLr+utdPF3wpvW5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIwNjE5MTAyNloXDTI1MDUwNzE4MTAyNlowLzEtMCsGA1UEAxMk NTE5NDFhNzAtZDUyNC00NGQ1LWJkMDQtMGFjMDYwOWI1MzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9e7iunkWvMzm82wi7dKdqoWFzxNzP9vEaTl aZbJSdaV5BOeL8YPMSdthZZcEhZFEQ41kHxKf77Cgpe0/nd+iLW1G4XHkq3+QNtw law4zfRch0CG/boFvQX77o75x+dGcqC4r5NGbWGZI4sThhlSNqK3HWEZiV+1UQlG z6tzm/KJ2DyB/56AzmDXlkSBOIfb/da0oGjqClrbYz4JVjo/5OE8jOfXvUM8baqi KC2L9+nPWfGDxxnf/CClTSqNodqHcqbvzeKWgfME8wsk6xyhR4MUJ1DXEJZHy40d 2Q9xMNANp2qilzxfqAJbnVyZqpCmpjrjhRzy0nsQi3gW+6uqoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnjy6Uk5E+edVUvvX41iYGYVbkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTg3N2Q2ZjItM2MzNy0z ODk5LWI2MWMtMmVjM2I0ZjIxNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuIeVG4byG+r+W00oUEcYhxTdPtdOGERJFfaHK8tfKGOn1TWyKlbTbh NOCoKMeeDZ+oyXVKO/jaxih8gABl0XgeOymVG3sYFArki4thvQW0umGlXMveQYTA UDyKsarUdR+mBaHPg4xD09u5e2JGXQnUBmHMR95O7DO1QqfVMEJpOhxLufmxnl7u HwIEsIRbt7d1dqDAT9OaFyTxfhivM6pFRgNlmJsGfIzDeXByXvVOiIdk6RZV0xRz E7XrKrhHnCe7iit0XO1RAZgoiA5rtu0fKuZx7ZHbhp6QoCKQvO0QkMOxGerXuERb fVHh5pW9SoDvjcKqBAPLjTmOjQfsuo4= -----END CERTIFICATE-----Generated at Sun Apr 27 02:18:55 2025 by rpki-client