$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21ab0b51-5bbb-3222-8153-53e7e0d36152.roa File: 21ab0b51-5bbb-3222-8153-53e7e0d36152.roa (raw, json) Hash identifier: vR2FqtJc8VaAoNAWUhTGUCc+JXlOoXVWI9Gj6MN9R1g= Subject key identifier: EC:E1:37:2A:44:0F:D3:A9:3A:1D:1C:35:04:6A:FE:6D:58:5C:7F:FB Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849115E1A595C93E9BF32735C80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21ab0b51-5bbb-3222-8153-53e7e0d36152.roa Signing time: Mon 03 Mar 2025 18:12:10 +0000 ROA not before: Mon 03 Mar 2025 18:12:10 +0000 ROA not after: Sun 01 Jun 2025 17:12:10 +0000 asID: 401152 IP address blocks: 108.165.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:11:5e:1a:59:5c:93:e9:bf:32:73:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 3 18:12:10 2025 GMT Not After : Jun 1 17:12:10 2025 GMT Subject: CN=4abdeec7-40e1-4773-ad87-219d6142ea4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:49:c9:14:f9:0a:0c:88:cf:e2:80:0f:8b:13: e2:17:58:75:ec:5f:a3:85:65:c3:d0:cd:a9:80:99: 92:93:0c:8c:40:23:3e:b3:7b:9a:5b:9c:86:5c:6b: ec:de:6b:4b:b2:ff:65:42:0e:48:53:64:bd:69:8e: d4:36:69:f1:ce:b0:7c:38:82:4a:d8:a0:03:06:d5: 8a:7b:8c:45:bb:63:95:19:32:24:3e:79:bd:37:b1: da:e9:36:4c:dc:ad:fd:ed:40:a1:8d:78:85:ea:46: 37:c2:46:19:55:78:8d:52:92:19:00:1d:7c:0f:ac: f5:7a:f1:d6:d9:07:e7:33:94:79:db:0d:6d:bf:b4: b3:06:3b:95:2e:bc:e0:c5:7b:cd:b7:18:8a:53:59: 92:5d:2c:f5:79:a0:e7:0d:a7:b6:38:68:7d:da:b7: 9f:c3:8d:fd:ad:28:ad:60:50:1b:49:18:38:ba:80: 1a:e6:b7:6d:0e:3d:e9:3f:dd:11:77:88:50:6c:23: 59:8d:0d:b4:5a:8e:7d:79:34:43:d9:c3:5f:22:8d: 1a:4c:85:0c:62:6b:c5:d4:b3:0b:19:0a:47:89:60: f0:82:7c:75:a0:40:ca:0f:50:44:ea:6c:20:83:4d: 16:7f:b0:82:64:53:80:f6:8a:8c:b2:35:32:28:62: 00:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E1:37:2A:44:0F:D3:A9:3A:1D:1C:35:04:6A:FE:6D:58:5C:7F:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21ab0b51-5bbb-3222-8153-53e7e0d36152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:24:e4:8d:26:b9:58:5e:15:3e:0c:77:bb:0a:3d:27:36:55: e6:af:d3:29:7d:aa:1e:99:a1:7e:a5:47:48:eb:08:fb:86:94: da:9d:3e:2f:3f:69:44:b9:39:68:0a:f2:4f:4e:f1:61:86:e2: ae:b3:1d:1e:41:9f:98:d1:1b:75:dd:88:4f:fb:a0:55:cf:d6: dd:6c:e1:a2:d4:35:32:06:c9:de:56:0e:47:ea:8e:f6:44:55: 18:19:ab:a9:39:de:ee:40:48:48:96:f5:5c:4d:4d:95:74:ea: 15:ca:5b:63:de:ca:24:90:19:28:78:e9:62:bf:1d:9f:36:8d: 31:03:29:eb:e0:1a:bd:3e:d0:d6:77:ff:cd:ed:c4:b6:b0:c9: 53:7a:d7:fe:3d:51:07:e6:d7:6f:40:01:ec:fa:63:dd:ee:06: 4f:0d:16:6a:b8:01:68:7f:73:17:12:12:9b:25:e4:9d:74:22: ce:ea:38:9c:bb:37:69:e6:a8:0a:87:57:40:08:20:df:85:1c: 7d:29:9c:4b:2c:8a:33:6b:c5:b6:af:35:72:8f:44:96:c6:fc: 2e:9b:d5:96:56:e9:bb:d0:2e:6c:ab:80:9b:ef:0c:f3:b8:0f: 0f:08:cf:71:be:fe:1c:a1:4c:15:5c:be:29:6b:a0:fd:3e:f1: 84:ed:d1:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkRXhpZXJPpvzJzXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDMwMzE4MTIxMFoXDTI1MDYwMTE3MTIxMFowLzEtMCsGA1UEAxMk NGFiZGVlYzctNDBlMS00NzczLWFkODctMjE5ZDYxNDJlYTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEnJFPkKDIjP4oAPixPiF1h17F+jhWXD0M2p gJmSkwyMQCM+s3uaW5yGXGvs3mtLsv9lQg5IU2S9aY7UNmnxzrB8OIJK2KADBtWK e4xFu2OVGTIkPnm9N7Ha6TZM3K397UChjXiF6kY3wkYZVXiNUpIZAB18D6z1evHW 2QfnM5R52w1tv7SzBjuVLrzgxXvNtxiKU1mSXSz1eaDnDae2OGh92refw439rSit YFAbSRg4uoAa5rdtDj3pP90Rd4hQbCNZjQ20Wo59eTRD2cNfIo0aTIUMYmvF1LML GQpHiWDwgnx1oEDKD1BE6mwgg00Wf7CCZFOA9oqMsjUyKGIA7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzhNypED9OpOh0cNQRq/m1YXH/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjFhYjBiNTEtNWJiYi0z MjIyLTgxNTMtNTNlN2UwZDM2MTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKX6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIk5I0muVheFT4Md7sKPSc2Veav0yl9qh6ZoX6lR0jrCPuGlNqdPi8/ aUS5OWgK8k9O8WGG4q6zHR5Bn5jRG3XdiE/7oFXP1t1s4aLUNTIGyd5WDkfqjvZE VRgZq6k53u5ASEiW9VxNTZV06hXKW2PeyiSQGSh46WK/HZ82jTEDKevgGr0+0NZ3 /83txLawyVN61/49UQfm129AAez6Y93uBk8NFmq4AWh/cxcSEpsl5J10Is7qOJy7 N2nmqAqHV0AIIN+FHH0pnEssijNrxbavNXKPRJbG/C6b1ZZW6bvQLmyrgJvvDPO4 Dw8Iz3G+/hyhTBVcvilroP0+8YTt0RQ= -----END CERTIFICATE-----Generated at Wed Apr 9 08:04:22 2025 by rpki-client