$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f21161fa-38e1-35b2-9a66-343c5977ffd5.roa File: f21161fa-38e1-35b2-9a66-343c5977ffd5.roa (raw, json) Hash identifier: j4EuVAnjpCzHl2zOHBu2w2x4oXfaXrEjJ8igmb3geCE= Subject key identifier: F9:30:1B:84:AE:70:AF:D9:27:4C:2C:FE:7F:2F:AF:92:2E:5F:AB:1D Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584988CF2E87C22D1CAE32C83E00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f21161fa-38e1-35b2-9a66-343c5977ffd5.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 21859 IP address blocks: 108.165.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:2e:87:c2:2d:1c:ae:32:c8:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=11f7bc82-f74a-4a88-b588-aa7822e865ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f2:6c:40:f1:76:bb:1e:a9:a8:40:25:2b:08: 51:1b:86:b4:47:3f:d7:76:86:91:e8:bb:cc:3f:de: 93:69:7f:a5:f8:8b:f0:a7:b8:fc:02:a3:1e:39:45: 45:f6:13:fd:a2:56:08:78:76:b9:ce:06:1d:87:87: fb:dd:b3:a7:21:c6:54:dc:70:2d:15:b6:ef:b9:12: f9:e0:6f:de:4b:bf:33:f2:90:25:dc:06:f2:3d:7b: 22:41:8f:e7:a5:bc:0a:5b:47:28:6c:bb:cf:74:35: 66:e1:98:d1:f2:8b:06:a8:1a:a5:f0:a0:28:b5:1e: e3:66:6b:2d:78:c3:ca:18:c3:6d:90:26:63:3e:f0: a0:e9:75:3e:67:a8:c7:b0:cf:f0:0c:fc:b7:90:61: 4c:0a:93:e4:b5:7e:47:f4:7f:67:c0:e5:bd:78:00: 96:5d:70:ab:eb:bd:48:6f:c2:4f:be:39:3d:0c:cf: d1:79:c3:5b:a6:37:7d:24:31:4c:8e:92:99:7d:52: 4d:5a:17:39:b8:8e:b8:39:56:86:51:39:8f:d5:9d: 3f:d0:d2:56:4a:7d:fc:07:88:4d:e1:13:d9:96:b2: 84:aa:49:96:74:8c:6b:84:61:d3:7e:ed:8e:ae:0d: 86:94:36:37:79:57:79:a1:d6:1f:8e:1d:de:c0:3c: e9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:30:1B:84:AE:70:AF:D9:27:4C:2C:FE:7F:2F:AF:92:2E:5F:AB:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f21161fa-38e1-35b2-9a66-343c5977ffd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:1d:a0:bd:95:d7:20:14:e3:5c:5a:85:8c:72:04:bc:bb:c9: 5e:cc:93:2b:62:df:0f:8d:96:ae:e3:69:ee:65:b7:c1:97:bf: aa:bc:e8:f3:cf:82:ce:88:7a:b6:db:b6:44:e4:b8:e7:17:33: 0e:5c:51:b0:24:82:93:7b:72:ad:fc:4d:37:2a:39:c2:5e:7d: 79:54:fe:0f:1c:13:46:2a:80:a1:9d:a7:cb:54:bd:61:69:30: 56:15:a4:8d:06:83:99:b3:fb:f7:fd:07:91:53:5e:08:59:ba: ec:a8:0c:16:6a:ae:f7:44:bb:1b:42:d2:84:29:14:35:e0:9a: b3:61:c2:66:b5:1f:85:43:28:b3:c8:d1:a2:bb:9c:f8:87:44: a4:28:df:15:9d:bf:f8:30:b9:b0:4e:32:fd:54:99:f3:06:50: 60:94:36:94:19:4f:51:8b:e0:00:37:e1:fc:e5:be:11:09:d3: 10:a6:ff:5d:b0:ee:90:bf:72:d9:2e:73:97:c4:92:45:8b:50: cb:e0:08:85:e6:44:bd:ca:bb:86:13:2b:eb:9b:ba:2d:a8:3f: 83:be:32:50:c4:d5:f3:db:b1:55:1c:9b:f2:d7:49:6d:30:cb: fb:bc:06:88:9b:ff:72:90:68:f7:29:1f:83:a4:bd:1f:91:08: f3:af:7b:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzy6Hwi0crjLIPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MTFmN2JjODItZjc0YS00YTg4LWI1ODgtYWE3ODIyZTg2NWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifJsQPF2ux6pqEAlKwhRG4a0Rz/XdoaR6LvM P96TaX+l+Ivwp7j8AqMeOUVF9hP9olYIeHa5zgYdh4f73bOnIcZU3HAtFbbvuRL5 4G/eS78z8pAl3AbyPXsiQY/npbwKW0cobLvPdDVm4ZjR8osGqBql8KAotR7jZmst eMPKGMNtkCZjPvCg6XU+Z6jHsM/wDPy3kGFMCpPktX5H9H9nwOW9eACWXXCr671I b8JPvjk9DM/RecNbpjd9JDFMjpKZfVJNWhc5uI64OVaGUTmP1Z0/0NJWSn38B4hN 4RPZlrKEqkmWdIxrhGHTfu2Org2GlDY3eVd5odYfjh3ewDzpFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkwG4SucK/ZJ0ws/n8vr5IuX6sdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjIxMTYxZmEtMzhlMS0z NWIyLTlhNjYtMzQzYzU5NzdmZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKodoL2V1yAU41xahYxyBLy7yV7Mkyti3w+Nlq7jae5lt8GXv6q86PPP gs6IerbbtkTkuOcXMw5cUbAkgpN7cq38TTcqOcJefXlU/g8cE0YqgKGdp8tUvWFp MFYVpI0Gg5mz+/f9B5FTXghZuuyoDBZqrvdEuxtC0oQpFDXgmrNhwma1H4VDKLPI 0aK7nPiHRKQo3xWdv/gwubBOMv1UmfMGUGCUNpQZT1GL4AA34fzlvhEJ0xCm/12w 7pC/ctkuc5fEkkWLUMvgCIXmRL3Ku4YTK+ubui2oP4O+MlDE1fPbsVUcm/LXSW0w y/u8Boib/3KQaPcpH4OkvR+RCPOvezI= -----END CERTIFICATE-----Generated at Sat Apr 26 12:57:26 2025 by rpki-client