$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa File: dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa (raw, json) Hash identifier: 5F/B8j6lbsZhYjVZad6A59C28qsxDdvI9FcF4vv2kfc= Subject key identifier: AB:FE:5F:B8:7D:B3:13:61:D6:27:C5:51:5B:B9:94:22:04:B7:C7:AE Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849B414996AA9DF650B1D4F0300 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa Signing time: Thu 01 May 2025 01:00:46 +0000 ROA not before: Thu 01 May 2025 01:00:46 +0000 ROA not after: Wed 30 Jul 2025 01:00:46 +0000 asID: 6939 IP address blocks: 166.0.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b4:14:99:6a:a9:df:65:0b:1d:4f:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: May 1 01:00:46 2025 GMT Not After : Jul 30 01:00:46 2025 GMT Subject: CN=8a1e9780-c62e-4f74-a629-a35b60a5cf54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a6:7e:01:43:c0:7b:93:32:d0:db:2a:08:35: 5a:d9:86:5f:9f:6a:6f:4c:d6:b6:bf:2a:83:b7:14: 34:4a:23:0b:50:cb:5c:80:40:e0:9c:0b:59:9e:f0: 41:bd:9a:00:a2:b0:bd:08:f1:c5:e0:41:f7:15:89: 02:8f:92:c2:9a:42:c2:94:1e:e8:d3:a2:60:8b:e0: 2b:11:a7:56:05:f5:1f:d3:bb:52:17:2b:3c:76:d7: 78:ce:0d:09:b7:47:dd:7e:0e:fb:ae:1f:1e:7a:9a: 73:6f:36:fc:96:59:15:1e:92:5e:7b:bc:53:c9:59: 8c:3e:76:af:ad:d9:22:07:70:63:ac:1f:87:82:1b: f9:e2:66:3a:87:a8:2a:02:14:ec:23:f1:fd:55:22: 39:08:fd:a5:ad:1c:8f:22:d4:7c:34:2c:a1:6b:94: 85:8e:6e:1c:a2:fd:05:c3:29:18:e2:51:49:0a:e9: 72:f9:de:1f:18:50:d6:99:77:1b:c2:3f:a7:2f:c4: e2:28:32:1a:ee:f3:66:2b:46:f0:20:09:f7:2f:a1: 37:2d:21:50:9e:8a:f1:8f:e7:a8:14:e1:f0:68:f6: ad:4f:3f:50:4d:c6:4e:c4:24:0e:ee:22:87:80:79: 3b:0f:c5:96:ad:11:b9:e3:18:5d:11:8b:e1:9c:07: 30:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FE:5F:B8:7D:B3:13:61:D6:27:C5:51:5B:B9:94:22:04:B7:C7:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:43:59:21:04:7e:56:6a:ec:24:c4:53:ab:8b:54:2c:8e:a2: 67:7f:99:d2:35:6e:b8:29:a1:a9:95:ea:ad:5a:a5:76:bf:77: 81:82:75:73:f1:22:72:f6:94:26:5b:20:ac:c7:e2:4d:5b:0c: 83:92:f2:3a:d6:0b:a7:39:d3:69:79:36:ae:11:7d:7c:23:6d: 82:29:ed:8b:72:7c:a9:80:3c:7b:8f:a2:75:1f:33:1a:f3:32: f6:f4:95:01:1e:9a:51:b2:d2:66:60:2b:f0:1e:25:f6:97:ae: 15:0c:a6:10:01:d1:c8:c3:f8:36:40:4f:93:88:c5:65:2b:27: b3:c9:46:77:f4:47:21:e9:e6:ad:ce:71:44:a5:ac:9e:a0:7c: ef:8c:ab:3c:1a:03:c2:a5:66:d3:51:16:6c:9b:fc:9a:52:68: 53:a9:18:2f:3d:47:16:04:df:11:72:4d:5c:9a:49:1d:bb:9f: 8a:88:42:65:83:45:09:e7:1b:01:b5:e8:7e:f0:5c:62:eb:80: d8:f3:ff:bc:3f:3e:a8:25:d2:2e:3a:4f:b9:fa:9c:52:2a:94: 7f:35:d5:d8:01:cd:98:13:f3:bf:03:cf:df:3c:84:a8:ca:79: 64:ca:cc:20:ab:7f:a4:83:19:52:e0:57:89:ad:87:27:20:15: f9:2f:69:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm0FJlqqd9lCx1PAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDUwMTAxMDA0NloXDTI1MDczMDAxMDA0NlowLzEtMCsGA1UEAxMk OGExZTk3ODAtYzYyZS00Zjc0LWE2MjktYTM1YjYwYTVjZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KZ+AUPAe5My0NsqCDVa2YZfn2pvTNa2vyqD txQ0SiMLUMtcgEDgnAtZnvBBvZoAorC9CPHF4EH3FYkCj5LCmkLClB7o06Jgi+Ar EadWBfUf07tSFys8dtd4zg0Jt0fdfg77rh8eeppzbzb8llkVHpJee7xTyVmMPnav rdkiB3BjrB+Hghv54mY6h6gqAhTsI/H9VSI5CP2lrRyPItR8NCyha5SFjm4cov0F wykY4lFJCuly+d4fGFDWmXcbwj+nL8TiKDIa7vNmK0bwIAn3L6E3LSFQnorxj+eo FOHwaPatTz9QTcZOxCQO7iKHgHk7D8WWrRG54xhdEYvhnAcwjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKv+X7h9sxNh1ifFUVu5lCIEt8euMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGZhOWVjMTQtZjhlNi0z NzVlLWEwNGQtZDc2NjRmZGZmZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRDWSEEflZq7CTEU6uLVCyOomd/mdI1brgpoamV6q1apXa/d4GCdXPx InL2lCZbIKzH4k1bDIOS8jrWC6c502l5Nq4RfXwjbYIp7YtyfKmAPHuPonUfMxrz Mvb0lQEemlGy0mZgK/AeJfaXrhUMphAB0cjD+DZAT5OIxWUrJ7PJRnf0RyHp5q3O cUSlrJ6gfO+MqzwaA8KlZtNRFmyb/JpSaFOpGC89RxYE3xFyTVyaSR27n4qIQmWD RQnnGwG16H7wXGLrgNjz/7w/Pqgl0i46T7n6nFIqlH811dgBzZgT878Dz988hKjK eWTKzCCrf6SDGVLgV4mthycgFfkvaYU= -----END CERTIFICATE-----Generated at Sun Jun 15 17:58:31 2025 by rpki-client