$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf6010d5-7d9c-3d2c-be60-6bbd55fb766a.roa File: bf6010d5-7d9c-3d2c-be60-6bbd55fb766a.roa (raw, json) Hash identifier: Xz2DMv+gdTxYo62VCUx8mE3T1kMLTxN9nMW5mj8/S40= Subject key identifier: 51:4C:79:70:8A:A0:58:F3:C2:32:AC:BC:2D:7E:66:0B:81:E6:FE:3D Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858494CC93E8F28FFF5E80447E5C0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf6010d5-7d9c-3d2c-be60-6bbd55fb766a.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 55286 IP address blocks: 108.165.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3e:8f:28:ff:f5:e8:04:47:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=c45c9e4c-fd08-4be2-af9e-8df3fb687727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:42:74:75:4e:23:ca:bb:7e:62:d8:9a:f3:fb: 36:2c:8b:05:2f:d7:25:6b:a0:33:51:e0:1d:cc:59: 98:7a:4d:df:15:39:c5:f0:87:2d:2a:5c:3c:6e:a5: 90:c6:28:81:dc:ed:38:23:02:d6:6c:65:34:01:fa: 71:3b:db:85:43:4c:5a:d1:6a:5c:33:43:00:3c:53: 1c:b6:a2:69:e6:5f:08:61:3a:cc:e6:22:d0:12:7d: dd:46:56:e9:c5:d7:21:ed:27:33:92:74:71:79:46: 64:2f:22:d3:81:18:6b:ef:ad:d8:55:20:32:b6:14: fb:1d:ba:cc:be:4a:c4:d8:22:a6:de:ee:b4:9e:02: fe:c3:1e:6c:a5:96:88:94:32:63:23:91:55:02:e4: 56:4d:64:ff:26:fa:d3:cd:fb:b2:59:87:53:46:5f: ee:86:5e:47:a9:38:0b:61:02:42:b3:7a:bc:30:01: ba:6a:d3:e6:7a:e4:75:f4:6e:10:03:cd:5f:ef:f9: 29:f2:a3:b9:8b:12:19:28:46:64:84:f4:73:b6:ad: b7:2c:cb:43:75:75:f4:73:ed:16:1e:30:64:28:7f: 1a:bf:b3:95:de:38:c7:7e:3c:7d:b4:e7:3e:ce:67: 42:a3:e1:4f:40:30:02:a9:11:8c:78:49:bb:22:e0: 40:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4C:79:70:8A:A0:58:F3:C2:32:AC:BC:2D:7E:66:0B:81:E6:FE:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf6010d5-7d9c-3d2c-be60-6bbd55fb766a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:70:29:67:98:f3:bd:23:66:21:bd:8f:a4:e1:50:ec:b9:92: ff:ac:9c:06:b3:a8:27:b3:3d:32:7c:ac:15:a1:0c:46:61:6d: 7e:8f:38:2b:d2:2f:f8:c6:81:82:54:eb:6e:c7:73:3c:a1:06: 14:97:c7:5e:c0:c4:26:ae:47:8e:51:cd:41:c4:90:c7:f2:1f: 64:f8:58:6a:2f:d0:5d:6a:29:5c:74:96:57:04:34:3e:60:a8: 3e:13:a5:9e:fc:df:eb:e6:7b:3c:7a:b4:48:7d:cd:98:12:a3: 2b:ff:b1:b7:88:11:c3:41:3c:56:49:fa:38:44:0f:9b:7b:33: 38:e7:81:30:dc:a2:d6:11:9e:ca:f2:75:0f:3e:32:69:59:51: c5:f3:08:f3:2d:c8:a6:ba:65:82:92:e0:a7:09:b9:72:02:ff: 5d:f3:78:5f:1a:be:26:73:ed:43:05:75:1c:3d:c0:b3:6d:99: e0:63:8b:83:dc:f5:1a:41:02:9b:a3:4c:4b:16:f7:91:81:f2: 5e:32:8d:2c:3c:53:c8:68:51:d3:a1:fe:78:f8:d5:a2:88:0f: 42:78:e7:a8:6b:64:f7:73:7a:71:50:33:df:e0:26:6f:bf:c5: c3:b5:38:59:e0:6a:b5:87:41:4e:b6:66:3d:4e:78:01:5a:f5: 47:d6:f2:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyT6PKP/16ARH5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YzQ1YzllNGMtZmQwOC00YmUyLWFmOWUtOGRmM2ZiNjg3NzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kJ0dU4jyrt+Ytia8/s2LIsFL9cla6AzUeAd zFmYek3fFTnF8IctKlw8bqWQxiiB3O04IwLWbGU0AfpxO9uFQ0xa0WpcM0MAPFMc tqJp5l8IYTrM5iLQEn3dRlbpxdch7SczknRxeUZkLyLTgRhr763YVSAythT7HbrM vkrE2CKm3u60ngL+wx5spZaIlDJjI5FVAuRWTWT/JvrTzfuyWYdTRl/uhl5HqTgL YQJCs3q8MAG6atPmeuR19G4QA81f7/kp8qO5ixIZKEZkhPRztq23LMtDdXX0c+0W HjBkKH8av7OV3jjHfjx9tOc+zmdCo+FPQDACqRGMeEm7IuBArwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFMeXCKoFjzwjKsvC1+ZguB5v49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmY2MDEwZDUtN2Q5Yy0z ZDJjLWJlNjAtNmJiZDU1ZmI3NjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRwKWeY870jZiG9j6ThUOy5kv+snAazqCezPTJ8rBWhDEZhbX6POCvS L/jGgYJU627HczyhBhSXx17AxCauR45RzUHEkMfyH2T4WGov0F1qKVx0llcEND5g qD4TpZ783+vmezx6tEh9zZgSoyv/sbeIEcNBPFZJ+jhED5t7MzjngTDcotYRnsry dQ8+MmlZUcXzCPMtyKa6ZYKS4KcJuXIC/13zeF8aviZz7UMFdRw9wLNtmeBji4Pc 9RpBApujTEsW95GB8l4yjSw8U8hoUdOh/nj41aKID0J456hrZPdzenFQM9/gJm+/ xcO1OFngarWHQU62Zj1OeAFa9UfW8sU= -----END CERTIFICATE-----Generated at Sat Apr 5 19:09:24 2025 by rpki-client