$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f4c68815-3d15-31ef-8c79-3e658ae8e571.roa File: f4c68815-3d15-31ef-8c79-3e658ae8e571.roa (raw, json) Hash identifier: QyS3tWFSoPmuf0ffWxrvj3O8qcjlGOo1VpEw8CUN6jg= Subject key identifier: FD:27:DC:F3:98:DB:D3:06:A7:E9:BC:2C:FC:8E:A2:04:6A:D2:4C:0E Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849A2C5E5355A3DD73139695980 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f4c68815-3d15-31ef-8c79-3e658ae8e571.roa Signing time: Thu 24 Apr 2025 20:13:31 +0000 ROA not before: Thu 24 Apr 2025 20:13:31 +0000 ROA not after: Wed 23 Jul 2025 20:13:31 +0000 asID: 197450 IP address blocks: 166.0.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:c5:e5:35:5a:3d:d7:31:39:69:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 24 20:13:31 2025 GMT Not After : Jul 23 20:13:31 2025 GMT Subject: CN=f7d44c68-1f02-467a-9c09-6275b9cf9464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:65:9a:d3:5f:ff:64:3b:cf:44:a0:b0:c8:63: ee:77:00:bb:db:f2:dc:80:10:ff:2e:5d:98:ca:73: 1b:f6:2c:ad:e9:f4:f8:b2:ba:8b:18:eb:b6:e8:82: 6c:ef:e4:2c:5b:2e:ad:64:f4:12:53:38:27:5b:b4: ef:80:e6:43:c6:96:57:3a:7c:1f:76:d2:a4:99:10: b1:ad:49:e6:20:94:82:1e:71:25:3a:2c:f1:4e:cf: b7:c5:42:09:4a:61:10:03:bd:92:ee:7e:e8:3b:72: 20:7d:90:cd:d7:73:4e:b1:73:30:89:c7:52:e5:30: 8b:d1:d8:18:c7:92:80:df:bd:29:1c:40:ad:45:d7: bc:1f:f5:f2:7c:44:d1:6f:f7:67:32:89:70:98:b6: 60:b8:42:5b:6d:48:c3:20:46:09:83:ef:94:2c:fe: 27:e6:25:9c:a8:0c:28:0d:ea:e6:b0:4e:c7:55:6e: 0e:9e:91:b8:a5:5c:bb:aa:f9:34:77:84:f1:11:a7: 14:ae:60:5a:2f:c1:1a:f8:e8:7f:95:39:45:b8:ea: 4c:84:5b:57:5c:a6:97:9c:12:34:1c:e7:ef:cd:5f: 3f:55:46:cb:b9:c3:18:41:d1:db:5e:86:73:e6:d7: 57:9f:0a:44:f9:ae:cb:01:16:7f:14:b4:69:1a:35: 82:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:27:DC:F3:98:DB:D3:06:A7:E9:BC:2C:FC:8E:A2:04:6A:D2:4C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f4c68815-3d15-31ef-8c79-3e658ae8e571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f4:51:0f:00:e9:28:8f:60:04:84:f5:a0:32:e1:49:6d:72: 05:fd:19:e0:99:f9:df:a5:11:ae:0f:32:6e:32:36:c2:d2:43: e4:11:25:47:10:1d:4f:a9:ac:80:43:16:cb:1a:07:76:cf:86: 01:11:cb:e5:e9:96:63:ef:ee:88:f3:e5:4f:fc:4b:13:f1:5f: 40:70:7b:78:e0:11:5f:6e:dd:3c:1c:f0:04:5a:ba:08:28:40: 47:12:a3:d0:4b:46:95:d1:94:f1:b6:5b:b8:3d:7a:fe:8e:73: 5e:d8:5c:19:94:8a:48:ef:6a:79:8e:41:7c:ef:6b:4b:2f:7f: dd:e7:84:49:2f:a2:d5:f0:4d:7c:1b:fb:b9:4a:1f:77:39:14: 7c:06:18:51:59:ef:22:70:9e:1a:79:65:7a:25:e0:3d:3a:cd: 60:8a:11:a8:b6:c8:1e:1f:7c:b1:82:25:3d:df:c9:5d:d9:05: af:b3:8d:2c:00:c7:cb:36:4e:da:06:09:fb:1e:1c:b2:02:73: 3e:d9:89:ed:1b:da:84:2e:5e:ce:6a:4c:05:1d:c3:51:cf:f4: 70:01:6c:76:45:ea:1c:da:ec:7c:5a:ad:80:7a:d9:bc:be:57: c9:50:4d:6d:d6:97:a3:d1:a2:13:a8:ad:ea:5d:14:b4:d3:a2: 51:13:f0:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmixeU1Wj3XMTlpWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQyNDIwMTMzMVoXDTI1MDcyMzIwMTMzMVowLzEtMCsGA1UEAxMk ZjdkNDRjNjgtMWYwMi00NjdhLTljMDktNjI3NWI5Y2Y5NDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32Wa01//ZDvPRKCwyGPudwC72/LcgBD/Ll2Y ynMb9iyt6fT4srqLGOu26IJs7+QsWy6tZPQSUzgnW7TvgOZDxpZXOnwfdtKkmRCx rUnmIJSCHnElOizxTs+3xUIJSmEQA72S7n7oO3IgfZDN13NOsXMwicdS5TCL0dgY x5KA370pHECtRde8H/XyfETRb/dnMolwmLZguEJbbUjDIEYJg++ULP4n5iWcqAwo DermsE7HVW4OnpG4pVy7qvk0d4TxEacUrmBaL8Ea+Oh/lTlFuOpMhFtXXKaXnBI0 HOfvzV8/VUbLucMYQdHbXoZz5tdXnwpE+a7LARZ/FLRpGjWCLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0n3POY29MGp+m8LPyOogRq0kwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjRjNjg4MTUtM2QxNS0z MWVmLThjNzktM2U2NThhZThlNTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGP0UQ8A6SiPYASE9aAy4UltcgX9GeCZ+d+lEa4PMm4yNsLSQ+QRJUcQ HU+prIBDFssaB3bPhgERy+XplmPv7ojz5U/8SxPxX0Bwe3jgEV9u3Twc8ARauggo QEcSo9BLRpXRlPG2W7g9ev6Oc17YXBmUikjvanmOQXzva0svf93nhEkvotXwTXwb +7lKH3c5FHwGGFFZ7yJwnhp5ZXol4D06zWCKEai2yB4ffLGCJT3fyV3ZBa+zjSwA x8s2TtoGCfseHLICcz7Zie0b2oQuXs5qTAUdw1HP9HABbHZF6hza7HxarYB62by+ V8lQTW3Wl6PRohOorepdFLTTolET8Kk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:26:35 2025 by rpki-client