$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c444c46b-4ce7-3de2-bc2a-f18b16b93c29.roa File: c444c46b-4ce7-3de2-bc2a-f18b16b93c29.roa (raw, json) Hash identifier: 1gNHy0en9jJrhJCINWwChP6gPWEBrFRHDjS8PxgeSZ4= Subject key identifier: 3B:1C:0E:64:C2:B0:9F:94:0D:FC:B5:BD:2D:5F:CE:C9:C9:25:EF:4A Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A30502F094A69FB397BFE2D40 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c444c46b-4ce7-3de2-bc2a-f18b16b93c29.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 20473 IP address blocks: 108.165.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:2f:09:4a:69:fb:39:7b:fe:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=4d8b4605-db45-403e-804f-995942c6b66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9d:e5:23:b3:e7:ae:84:d4:66:37:b1:09:6a: 67:91:7d:de:53:4a:5e:42:85:f9:15:29:84:8a:de: e3:13:64:d2:da:30:13:65:4f:c3:f2:b6:bd:fe:d9: 09:fa:6a:8a:3a:68:54:73:1c:6e:79:8b:6d:ea:bf: 27:f0:11:ac:a0:96:2c:4f:b2:ab:32:45:a3:30:ad: f8:9a:75:43:b1:7d:8b:a9:b8:1d:67:18:21:36:66: 54:c6:df:13:66:40:22:aa:bf:87:71:51:3d:8f:58: d5:bf:22:39:51:17:f1:e3:33:17:45:5f:53:c3:64: 4f:49:16:ca:41:9a:0f:c9:36:1f:62:cb:01:53:66: af:27:a8:f0:25:f4:f7:77:32:1b:2c:21:9e:e7:e8: da:b4:ac:93:ff:51:2b:90:99:ae:f4:10:bb:67:a9: 78:41:c4:10:e1:04:bc:b8:8e:12:39:40:90:fb:71: 85:c9:86:a6:38:38:d4:5c:5a:4d:d9:3c:e0:61:a0: c4:52:54:f0:ae:46:0e:23:52:ac:55:56:88:0b:a8: d9:70:e3:ef:90:ca:2e:15:73:b7:a7:48:be:52:e9: 49:ea:6f:64:5f:62:db:c0:eb:55:13:2c:52:85:03: 5c:86:98:a6:70:fe:98:99:59:f1:21:e3:65:6f:83: 1b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1C:0E:64:C2:B0:9F:94:0D:FC:B5:BD:2D:5F:CE:C9:C9:25:EF:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c444c46b-4ce7-3de2-bc2a-f18b16b93c29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:fb:20:aa:a5:8e:88:c0:4c:73:c4:6a:e6:69:2d:7b:26:b8: 89:8b:2a:87:50:58:97:43:0b:bc:2d:16:88:fc:d3:15:9c:cf: 21:f5:e8:5a:61:74:f7:cf:b6:c0:19:ac:8b:99:3d:f5:8a:ad: f4:a0:e3:f1:f6:dc:2d:23:99:3d:8d:e9:32:b1:6e:dd:7f:81: 75:77:95:1e:eb:78:af:bb:a4:2d:b8:39:54:77:c9:bb:06:e9: 33:9e:bd:04:3e:4f:74:3a:1b:0d:a5:90:49:ab:13:53:a4:c9: 7b:a1:fd:d5:bc:36:ef:11:35:4d:e7:e5:df:6d:f3:8f:29:6b: 72:eb:4c:1d:92:2a:c8:5e:5a:6c:c9:e3:24:c9:94:18:e2:e0: ed:3f:92:61:11:98:e6:31:df:36:c8:79:dd:53:35:26:ea:24: 9b:5c:25:1d:3f:32:a6:e5:bf:1c:48:30:38:06:08:51:42:b2: 5e:94:67:58:07:d2:3e:9a:f6:71:a6:e4:ab:45:ce:06:a4:65: 39:86:92:77:9a:01:ea:40:f0:1a:83:ba:99:16:98:78:39:29: 73:85:8a:c5:85:bb:ef:48:14:70:9f:06:3b:91:75:43:78:2a: e0:71:b1:29:8f:46:22:ba:9b:0e:0d:45:c2:c6:23:c6:fa:b2: 92:b2:d4:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUC8JSmn7OXv+LUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk NGQ4YjQ2MDUtZGI0NS00MDNlLTgwNGYtOTk1OTQyYzZiNjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm53lI7PnroTUZjexCWpnkX3eU0peQoX5FSmE it7jE2TS2jATZU/D8ra9/tkJ+mqKOmhUcxxueYtt6r8n8BGsoJYsT7KrMkWjMK34 mnVDsX2LqbgdZxghNmZUxt8TZkAiqr+HcVE9j1jVvyI5URfx4zMXRV9Tw2RPSRbK QZoPyTYfYssBU2avJ6jwJfT3dzIbLCGe5+jatKyT/1ErkJmu9BC7Z6l4QcQQ4QS8 uI4SOUCQ+3GFyYamODjUXFpN2TzgYaDEUlTwrkYOI1KsVVaIC6jZcOPvkMouFXO3 p0i+UulJ6m9kX2LbwOtVEyxShQNchpimcP6YmVnxIeNlb4MbQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDscDmTCsJ+UDfy1vS1fzsnJJe9KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzQ0NGM0NmItNGNlNy0z ZGUyLWJjMmEtZjE4YjE2YjkzYzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGr7IKqljojATHPEauZpLXsmuImLKodQWJdDC7wtFoj80xWczyH16Fph dPfPtsAZrIuZPfWKrfSg4/H23C0jmT2N6TKxbt1/gXV3lR7reK+7pC24OVR3ybsG 6TOevQQ+T3Q6Gw2lkEmrE1OkyXuh/dW8Nu8RNU3n5d9t848pa3LrTB2SKsheWmzJ 4yTJlBji4O0/kmERmOYx3zbIed1TNSbqJJtcJR0/MqblvxxIMDgGCFFCsl6UZ1gH 0j6a9nGm5KtFzgakZTmGkneaAepA8BqDupkWmHg5KXOFisWFu+9IFHCfBjuRdUN4 KuBxsSmPRiK6mw4NRcLGI8b6spKy1C8= -----END CERTIFICATE-----Generated at Sun Jun 15 04:44:15 2025 by rpki-client