$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/170133e5-6c73-36ae-aa8b-154d2f59b2ad.roa File: 170133e5-6c73-36ae-aa8b-154d2f59b2ad.roa (raw, json) Hash identifier: UuD9ck0CVixwdqcZtvqqUn/hvommXFV24+BA7Yozo30= Subject key identifier: 6B:07:1D:99:8A:21:60:87:10:AE:A7:04:F5:AD:6A:3C:EE:D7:C6:9A Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848A99630940F8FE3789764B8D3 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/170133e5-6c73-36ae-aa8b-154d2f59b2ad.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 21859 IP address blocks: 108.165.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:30:94:0f:8f:e3:78:97:64:b8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=4d7203bd-26d1-4f16-a081-554566e5b5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:9d:4b:fd:74:45:48:51:cf:62:12:8f:cd:80: 34:10:12:40:ce:c8:3f:86:1c:68:85:77:ee:fb:2d: 8b:a5:67:71:89:71:57:45:bc:a6:b0:ec:34:49:f2: 26:25:6b:8c:7f:f9:09:df:9c:29:06:bb:15:fd:76: 08:77:7e:66:6c:f0:58:71:6a:80:0c:1c:d3:87:1a: 61:0a:eb:19:a4:ee:df:cf:68:8a:82:d0:de:56:06: 72:c9:7c:9b:8e:1d:52:0c:2d:44:51:e4:9a:91:c1: 1a:c6:a6:21:2d:d0:82:b1:b9:88:0d:aa:fb:65:39: bf:7a:b9:54:27:66:00:5c:d0:e3:47:0f:6e:23:61: f5:24:88:a3:5a:26:c1:6b:11:9a:71:41:51:3c:7f: c5:fe:0e:7a:fc:74:b6:da:c9:42:1b:6d:e7:fb:b5: 2e:37:60:f3:57:cc:69:a7:86:77:d5:e5:8a:c7:94: 68:d4:39:cb:05:5f:83:cd:bd:1f:56:ec:88:c3:d6: 91:20:b3:5a:8e:44:8a:78:94:1a:48:3c:5d:f7:37: 3d:95:db:bf:a5:c5:f7:d2:81:05:ec:f2:b9:f2:39: ac:26:da:0b:aa:10:00:2f:22:a5:da:d8:26:2b:b9: 57:3f:68:fb:06:a9:61:40:1f:de:f2:fe:69:01:c5: ee:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:07:1D:99:8A:21:60:87:10:AE:A7:04:F5:AD:6A:3C:EE:D7:C6:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/170133e5-6c73-36ae-aa8b-154d2f59b2ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:20:3e:1e:9f:e2:fd:da:ba:24:e0:27:38:ad:1a:2c:fb:b5: 13:04:79:64:3d:97:54:6b:59:39:5d:c8:4c:16:60:93:dd:cf: 6f:e9:03:0b:c3:3e:55:ea:46:b5:db:82:06:03:49:27:47:0e: 75:a0:83:af:cd:e6:6a:8d:f8:e8:25:89:8a:e7:2e:89:52:ae: 5b:b8:b9:db:4b:b5:c9:a5:3c:d3:ba:d2:5e:de:62:73:2a:b7: 38:2a:d5:64:c2:be:88:fe:b5:24:75:c5:c5:67:0b:0e:ce:33: 21:b6:8b:85:54:7b:2a:ac:e7:f3:1f:05:fa:f2:89:51:33:9b: d0:c7:d0:3c:98:84:77:76:4e:27:08:06:94:05:ad:6c:39:17: ad:4c:37:15:1a:1c:da:70:3e:c2:39:1a:22:97:d6:63:24:fb: b6:18:71:40:ef:85:aa:a1:71:ca:ec:68:3b:95:f4:fa:ad:ee: 38:fe:fe:1d:68:25:c3:eb:4e:17:6e:15:d7:7f:1e:1e:02:05: 0b:68:78:42:9d:21:3e:96:af:1c:34:36:ad:b9:02:a7:33:7a: 04:1b:b7:c7:ba:3b:32:4c:5e:92:0e:23:16:a8:63:52:83:09: 27:7a:77:de:79:55:a9:f7:48:c7:16:f3:d9:76:12:4a:85:b1: e9:c4:9d:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljCUD4/jeJdkuNMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGQ3MjAzYmQtMjZkMS00ZjE2LWEwODEtNTU0NTY2ZTViNWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Z1L/XRFSFHPYhKPzYA0EBJAzsg/hhxohXfu +y2LpWdxiXFXRbymsOw0SfImJWuMf/kJ35wpBrsV/XYId35mbPBYcWqADBzThxph CusZpO7fz2iKgtDeVgZyyXybjh1SDC1EUeSakcEaxqYhLdCCsbmIDar7ZTm/erlU J2YAXNDjRw9uI2H1JIijWibBaxGacUFRPH/F/g56/HS22slCG23n+7UuN2DzV8xp p4Z31eWKx5Ro1DnLBV+Dzb0fVuyIw9aRILNajkSKeJQaSDxd9zc9ldu/pcX30oEF 7PK58jmsJtoLqhAALyKl2tgmK7lXP2j7BqlhQB/e8v5pAcXu+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsHHZmKIWCHEK6nBPWtajzu18aaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTcwMTMzZTUtNmM3My0z NmFlLWFhOGItMTU0ZDJmNTliMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUgPh6f4v3auiTgJzitGiz7tRMEeWQ9l1RrWTldyEwWYJPdz2/pAwvD PlXqRrXbggYDSSdHDnWgg6/N5mqN+OgliYrnLolSrlu4udtLtcmlPNO60l7eYnMq tzgq1WTCvoj+tSR1xcVnCw7OMyG2i4VUeyqs5/MfBfryiVEzm9DH0DyYhHd2TicI BpQFrWw5F61MNxUaHNpwPsI5GiKX1mMk+7YYcUDvhaqhccrsaDuV9Pqt7jj+/h1o JcPrThduFdd/Hh4CBQtoeEKdIT6Wrxw0Nq25AqczegQbt8e6OzJMXpIOIxaoY1KD CSd6d955Van3SMcW89l2EkqFsenEndA= -----END CERTIFICATE-----Generated at Sat Apr 12 07:54:28 2025 by rpki-client