$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f899c8de-acb8-3838-b603-e048941918eb.roa File: f899c8de-acb8-3838-b603-e048941918eb.roa (raw, json) Hash identifier: MFPfnm/SoGnPeq3AyXdrWDcXJCqcWorTcXmnc9ZgVkA= Subject key identifier: 64:59:28:ED:96:A4:2F:5F:28:F0:B1:0B:B0:75:5E:77:0C:73:3D:60 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584988CF2E4D36DF17C5FF481180 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f899c8de-acb8-3838-b603-e048941918eb.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 21859 IP address blocks: 108.165.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:2e:4d:36:df:17:c5:ff:48:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=85d45354-d938-4b9e-9991-ab9a2a63ffc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f2:f8:13:a6:2c:cd:ac:95:10:06:0d:54:94: 7b:e7:f5:dc:72:a8:85:f0:58:80:a2:74:1f:68:8f: b1:db:70:d3:16:70:b9:35:ef:25:b3:10:c7:0f:05: 31:92:ff:3a:50:a2:ab:07:af:0a:6e:17:95:0d:a3: 7d:09:e1:c9:8c:e4:80:10:c1:ae:64:16:10:c2:b5: d2:ba:09:2b:ac:31:ac:51:66:b2:cf:76:dd:aa:c6: c3:d0:ab:0a:69:f6:f0:75:dd:90:99:c7:b5:14:84: 0a:72:6a:fc:b2:b2:c0:7b:d3:46:00:18:f6:42:53: 8b:2e:7a:2b:3d:3e:05:e6:3d:c0:6d:ae:d1:63:12: df:62:9d:36:08:72:b0:5d:09:4e:9e:d7:d0:c3:b4: 89:be:5c:a8:62:31:42:bb:30:be:e4:8a:e5:a3:d6: 5e:65:9f:e7:9d:4d:01:bf:cf:7b:db:0b:60:36:d5: b4:aa:0a:7a:b2:a2:d5:0f:04:3c:5f:c7:78:60:28: 08:9f:ba:13:d9:b5:7f:83:30:10:d2:be:38:95:9a: fb:c1:44:34:24:ba:f3:7b:36:33:01:b6:f5:fc:d0: 37:96:6c:aa:bf:20:f0:9f:25:aa:c8:d6:42:9d:2a: 61:a8:35:20:4e:19:2f:33:bf:fd:f1:10:18:6b:39: 6c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:59:28:ED:96:A4:2F:5F:28:F0:B1:0B:B0:75:5E:77:0C:73:3D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f899c8de-acb8-3838-b603-e048941918eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:93:c2:1b:a9:db:1c:ba:98:76:b2:d3:bb:93:6e:4b:72:c6: 4a:44:d1:2c:09:87:00:3c:5e:6d:e8:a5:9c:d5:31:22:fb:15: e3:3d:53:c8:49:74:03:3b:15:09:08:e3:76:07:bb:06:d1:6d: ae:f1:b4:7e:47:68:96:35:af:a1:d9:01:e8:e7:b6:28:ec:6c: 7e:b7:aa:6a:5f:1a:d3:71:0e:cb:17:04:06:85:4e:9b:d9:db: eb:1a:5d:60:a1:aa:fe:5a:2b:86:ad:39:41:c3:40:9d:c9:36: fa:f7:7e:c7:5a:f7:05:fb:3c:9a:52:5f:ba:a5:86:cb:b2:35: b3:4a:8e:c5:bb:11:4d:aa:df:32:e7:9d:05:93:03:2c:a6:22: 2c:4c:f7:47:e1:51:15:2a:a8:cf:55:0c:cb:f8:a2:93:48:a0: 65:aa:d2:67:48:c4:29:a5:a5:29:b0:ac:e9:26:eb:f0:3f:65: 71:3d:d7:f2:b4:ba:a4:0d:aa:13:32:6c:75:04:a3:13:87:ec: 20:2c:f1:08:f6:02:be:08:b1:5a:6f:f1:cf:99:74:b6:da:06: db:53:0c:ef:88:98:92:b7:b7:66:b9:db:e8:01:10:56:42:0e: 15:18:96:8a:9b:d8:b3:8a:9f:53:82:70:ba:13:63:ee:0b:2f: 63:c3:d9:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzy5NNt8Xxf9IEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ODVkNDUzNTQtZDkzOC00YjllLTk5OTEtYWI5YTJhNjNmZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfL4E6YszayVEAYNVJR75/XccqiF8FiAonQf aI+x23DTFnC5Ne8lsxDHDwUxkv86UKKrB68KbheVDaN9CeHJjOSAEMGuZBYQwrXS ugkrrDGsUWayz3bdqsbD0KsKafbwdd2Qmce1FIQKcmr8srLAe9NGABj2QlOLLnor PT4F5j3Aba7RYxLfYp02CHKwXQlOntfQw7SJvlyoYjFCuzC+5Irlo9ZeZZ/nnU0B v8972wtgNtW0qgp6sqLVDwQ8X8d4YCgIn7oT2bV/gzAQ0r44lZr7wUQ0JLrzezYz Abb1/NA3lmyqvyDwnyWqyNZCnSphqDUgThkvM7/98RAYazlsVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRZKO2WpC9fKPCxC7B1XncMcz1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjg5OWM4ZGUtYWNiOC0z ODM4LWI2MDMtZTA0ODk0MTkxOGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOTwhup2xy6mHay07uTbktyxkpE0SwJhwA8Xm3opZzVMSL7FeM9U8hJ dAM7FQkI43YHuwbRba7xtH5HaJY1r6HZAejntijsbH63qmpfGtNxDssXBAaFTpvZ 2+saXWChqv5aK4atOUHDQJ3JNvr3fsda9wX7PJpSX7qlhsuyNbNKjsW7EU2q3zLn nQWTAyymIixM90fhURUqqM9VDMv4opNIoGWq0mdIxCmlpSmwrOkm6/A/ZXE91/K0 uqQNqhMybHUEoxOH7CAs8Qj2Ar4IsVpv8c+ZdLbaBttTDO+ImJK3t2a52+gBEFZC DhUYloqb2LOKn1OCcLoTY+4LL2PD2eg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:05 2025 by rpki-client