$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d877079-3a76-3faa-befa-a9fb6ba4b2f2.roa File: 1d877079-3a76-3faa-befa-a9fb6ba4b2f2.roa (raw, json) Hash identifier: 45AkqYYJA2EZD05I+HUJLgs8kiOpDiSY+svT6DvyTw4= Subject key identifier: A5:AA:27:8D:62:B6:3C:C6:1F:04:20:5F:83:65:18:84:39:78:92:D6 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A07D53FFBA2A48539459C7CE0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d877079-3a76-3faa-befa-a9fb6ba4b2f2.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 22168 IP address blocks: 108.165.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:3f:fb:a2:a4:85:39:45:9c:7c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=6bd3c4aa-79e2-4443-acc4-54cac2dbb5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2e:c3:3d:c1:31:90:f9:e0:13:81:7a:a7:a9: e0:f6:0a:5a:99:84:dc:49:ed:1c:ef:19:46:30:04: 99:81:18:4d:8f:2b:7d:e9:14:82:76:3a:04:cb:22: 68:88:b6:f0:d1:08:a9:ca:8c:70:94:2e:dc:15:9e: 3f:c6:82:72:f7:45:9d:0b:2e:b5:fa:4d:ac:76:77: 0c:3c:50:f3:8a:c4:fc:45:ec:89:95:06:50:19:c7: 1a:54:61:cc:54:23:94:15:fe:16:65:fb:21:07:df: 20:72:35:30:09:64:e0:25:09:a2:1b:6d:be:6b:58: 8d:56:23:50:26:7a:be:ce:c0:6a:f3:26:8e:c7:98: 6c:bf:16:0f:eb:80:0d:5f:31:2d:8b:b7:2d:08:4f: 5d:03:be:45:ef:79:a9:5d:00:3b:0f:60:41:4d:cf: 0f:c5:88:ff:11:00:ef:17:02:c3:bb:fa:59:8c:c8: fc:5a:23:48:26:0c:6d:65:9e:fb:24:af:6b:c9:c3: cd:9d:db:d4:5d:98:d5:ad:0b:d4:fe:da:87:f8:bc: e9:5a:a1:9a:b1:d8:a7:c7:4a:f1:77:99:6b:a7:87: a9:e0:0f:5d:e5:2b:18:95:b5:29:21:dd:6a:cd:36: b8:47:e5:f8:b7:af:49:f4:eb:27:c9:f2:44:ab:99: 28:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AA:27:8D:62:B6:3C:C6:1F:04:20:5F:83:65:18:84:39:78:92:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d877079-3a76-3faa-befa-a9fb6ba4b2f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:7b:43:ee:19:7a:4f:6c:70:88:04:50:ff:0c:c5:d7:be:12: 4d:9f:34:f5:22:ab:5a:76:08:c4:31:b2:ca:52:06:4a:fa:26: 75:f5:c1:67:08:0a:71:28:33:ea:d8:80:c4:18:ec:1e:b8:23: a3:aa:dd:d9:8f:90:3f:7a:89:14:48:d7:45:8e:25:5b:bf:4a: 0e:60:20:dc:6f:74:ed:19:6f:3b:84:f3:42:fd:aa:fc:4c:bb: 0d:ec:57:3c:c4:ac:5b:23:1c:eb:7c:41:c4:97:2a:35:0e:be: 38:9c:53:34:bc:d3:0d:b4:ce:9d:f3:fc:97:3b:30:08:b0:a6: 1a:33:d6:fd:b2:b3:bd:b5:a4:fa:a2:bb:b2:f9:58:01:5d:b7: f2:fc:f3:33:2a:cd:b8:61:70:99:9a:27:02:71:ec:b6:e3:65: e0:a1:7b:7a:38:da:4e:3c:53:a8:82:b4:39:4e:9e:4b:2e:18: cc:58:48:b5:82:a9:b6:43:31:b6:68:6d:18:6a:d3:2b:cf:33: b3:d9:09:83:95:30:44:59:3a:fc:ed:52:9a:f6:1c:8e:f9:bd: 69:3a:c2:d1:7e:77:36:9e:96:5e:c4:69:e0:2d:a4:1e:d0:60: 14:4b:a6:88:01:a1:e7:b7:4e:04:91:96:b7:86:24:45:89:c9: 19:02:f3:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1T/7oqSFOUWcfOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk NmJkM2M0YWEtNzllMi00NDQzLWFjYzQtNTRjYWMyZGJiNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy7DPcExkPngE4F6p6ng9gpamYTcSe0c7xlG MASZgRhNjyt96RSCdjoEyyJoiLbw0QipyoxwlC7cFZ4/xoJy90WdCy61+k2sdncM PFDzisT8ReyJlQZQGccaVGHMVCOUFf4WZfshB98gcjUwCWTgJQmiG22+a1iNViNQ Jnq+zsBq8yaOx5hsvxYP64ANXzEti7ctCE9dA75F73mpXQA7D2BBTc8PxYj/EQDv FwLDu/pZjMj8WiNIJgxtZZ77JK9rycPNndvUXZjVrQvU/tqH+LzpWqGasdinx0rx d5lrp4ep4A9d5SsYlbUpId1qzTa4R+X4t69J9OsnyfJEq5kooQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWqJ41itjzGHwQgX4NlGIQ5eJLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWQ4NzcwNzktM2E3Ni0z ZmFhLWJlZmEtYTlmYjZiYTRiMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ7Q+4Zek9scIgEUP8Mxde+Ek2fNPUiq1p2CMQxsspSBkr6JnX1wWcI CnEoM+rYgMQY7B64I6Oq3dmPkD96iRRI10WOJVu/Sg5gINxvdO0ZbzuE80L9qvxM uw3sVzzErFsjHOt8QcSXKjUOvjicUzS80w20zp3z/Jc7MAiwphoz1v2ys721pPqi u7L5WAFdt/L88zMqzbhhcJmaJwJx7LbjZeChe3o42k48U6iCtDlOnksuGMxYSLWC qbZDMbZobRhq0yvPM7PZCYOVMERZOvztUpr2HI75vWk6wtF+dzaell7EaeAtpB7Q YBRLpogBoee3TgSRlreGJEWJyRkC8/w= -----END CERTIFICATE-----Generated at Sat Jun 7 04:26:05 2025 by rpki-client