$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa2b5211-1056-3cf0-b2dc-af977b621f4c.roa File: aa2b5211-1056-3cf0-b2dc-af977b621f4c.roa (raw, json) Hash identifier: 4nLNdSUNCQrKUPDa3lD0JKWu4iaRpsqLl/8vpPpiMe8= Subject key identifier: 0A:34:F7:85:F0:ED:9D:70:06:1B:AE:E9:81:22:09:6C:4F:0A:5A:8A Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584988CF2EF42E8AD9AFBE2F70C0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa2b5211-1056-3cf0-b2dc-af977b621f4c.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 21859 IP address blocks: 108.165.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:2e:f4:2e:8a:d9:af:be:2f:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=236e73d1-bdac-49ce-b1bc-f1e5e7edf2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:00:e3:0d:2b:b3:e0:67:69:40:65:98:22:61: 34:10:b2:4c:31:e0:a2:24:91:ab:65:9a:52:00:8b: 43:a0:c6:74:21:b1:0b:1a:9c:98:fc:64:43:e1:38: 0b:ea:bf:d5:36:11:a5:86:bb:91:ee:49:88:27:bf: b3:6b:9c:53:2b:42:65:0f:14:b1:0f:df:14:c5:05: fa:54:80:71:54:3b:b8:38:93:63:3b:ec:e5:85:6e: 22:90:66:7f:16:09:a7:e5:ec:fe:b5:b7:c2:1a:2f: 8d:6c:7a:b6:95:ad:64:d7:45:ed:21:74:dc:12:49: f0:2a:01:bb:dc:d0:f3:c9:ab:cb:93:95:c4:18:34: af:4a:f5:25:2e:0c:a8:45:02:78:0c:2c:4a:65:98: e2:d5:ad:48:5c:4b:b5:d6:bf:ea:72:1a:92:fc:f9: b4:65:6a:30:48:ef:78:67:af:bc:b6:6f:2b:33:6c: 51:8c:12:5e:41:f3:58:f8:5d:4e:02:bc:24:e0:47: ad:66:69:7c:b3:29:1c:3c:2f:ac:cb:44:17:7e:af: 43:3d:bd:a6:8a:4c:0d:ab:98:dc:b7:77:66:2c:7d: 90:f4:f8:26:56:ab:d7:38:5f:78:3b:a7:13:ae:d5: d0:55:07:be:e5:75:24:6a:8c:4f:aa:c8:4c:94:96: 8b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:34:F7:85:F0:ED:9D:70:06:1B:AE:E9:81:22:09:6C:4F:0A:5A:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa2b5211-1056-3cf0-b2dc-af977b621f4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a6:b1:cb:8c:86:4e:53:d4:bf:57:24:68:0b:9c:62:1a:17: 61:14:00:c0:57:03:90:28:c7:58:e8:2b:e9:e4:46:3c:6e:9b: cd:24:87:49:5b:9b:8c:21:36:6f:bf:d4:02:b1:7e:9c:0a:ed: 9f:99:6e:f9:f8:d4:7d:89:a8:a1:93:a6:9b:00:be:79:31:ef: c4:13:93:3a:31:bc:c9:c9:21:54:a3:be:9d:b5:dc:d6:99:8c: a2:4d:99:48:44:43:78:7f:19:40:fb:91:d0:ba:c0:f7:e5:41: ea:93:f1:7e:ad:d6:09:ac:a8:62:01:90:1d:a5:17:df:91:ec: 40:94:c3:32:12:ed:23:8a:90:a9:ff:0a:bb:bd:77:9d:f9:41: 11:16:84:be:78:21:a3:0a:7d:44:e8:57:13:dc:b4:79:68:9d: 83:9f:9e:a2:38:51:44:d0:8c:e9:34:bc:86:48:40:84:3e:7a: 64:af:6d:94:f1:f1:0e:fe:e6:6a:e4:db:40:93:da:16:3b:91: e8:bb:bc:94:eb:e9:0f:15:8f:0e:e9:cd:25:a3:5b:ab:3b:c8: 9f:05:c7:e3:da:f6:3b:03:0b:a5:cc:8e:05:6f:2f:71:0b:21: 16:66:10:6c:17:c9:73:b1:81:93:e2:76:c6:9b:c9:6f:e5:78: 12:14:58:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzy70LorZr74vcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MjM2ZTczZDEtYmRhYy00OWNlLWIxYmMtZjFlNWU3ZWRmMmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjADjDSuz4GdpQGWYImE0ELJMMeCiJJGrZZpS AItDoMZ0IbELGpyY/GRD4TgL6r/VNhGlhruR7kmIJ7+za5xTK0JlDxSxD98UxQX6 VIBxVDu4OJNjO+zlhW4ikGZ/Fgmn5ez+tbfCGi+NbHq2la1k10XtIXTcEknwKgG7 3NDzyavLk5XEGDSvSvUlLgyoRQJ4DCxKZZji1a1IXEu11r/qchqS/Pm0ZWowSO94 Z6+8tm8rM2xRjBJeQfNY+F1OArwk4EetZml8sykcPC+sy0QXfq9DPb2mikwNq5jc t3dmLH2Q9PgmVqvXOF94O6cTrtXQVQe+5XUkaoxPqshMlJaLYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAo094Xw7Z1wBhuu6YEiCWxPClqKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWEyYjUyMTEtMTA1Ni0z Y2YwLWIyZGMtYWY5NzdiNjIxZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOmscuMhk5T1L9XJGgLnGIaF2EUAMBXA5Aox1joK+nkRjxum80kh0lb m4whNm+/1AKxfpwK7Z+Zbvn41H2JqKGTppsAvnkx78QTkzoxvMnJIVSjvp213NaZ jKJNmUhEQ3h/GUD7kdC6wPflQeqT8X6t1gmsqGIBkB2lF9+R7ECUwzIS7SOKkKn/ Cru9d535QREWhL54IaMKfUToVxPctHlonYOfnqI4UUTQjOk0vIZIQIQ+emSvbZTx 8Q7+5mrk20CT2hY7kei7vJTr6Q8Vjw7pzSWjW6s7yJ8Fx+Pa9jsDC6XMjgVvL3EL IRZmEGwXyXOxgZPidsabyW/leBIUWDM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:18 2025 by rpki-client