$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3725b52d-21b1-360d-acbc-9771dcda46e5.roa File: 3725b52d-21b1-360d-acbc-9771dcda46e5.roa (raw, json) Hash identifier: 8mNxWaCg0c1FpEKlM0dnCDtPubCTj6sqviM+oUJXjnU= Subject key identifier: 48:14:37:D8:63:04:ED:1F:74:79:38:6F:25:84:94:07:D9:95:8C:9D Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A0C05580636D2FB17A0A64D80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3725b52d-21b1-360d-acbc-9771dcda46e5.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 19437 IP address blocks: 108.165.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:58:06:36:d2:fb:17:a0:a6:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=bac88b76-4992-4304-bfcc-04a54c71afeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:d6:23:5c:47:f0:64:9e:84:91:d4:2a:f7: 61:ae:b7:14:6e:20:d6:ac:5f:f1:86:5e:e4:bf:33: eb:e1:25:61:fe:71:4b:d3:fe:23:b9:8c:ac:8b:c8: d5:6a:71:90:13:b1:18:03:6f:9b:6d:84:13:8f:29: f5:d7:a0:02:c0:69:1a:f4:55:b2:16:10:88:d0:d4: 60:ad:60:f2:e4:2c:e8:fe:73:44:fe:9a:b4:f5:e0: ca:87:7c:f3:47:26:4e:51:56:89:d7:4e:6a:89:11: f5:0b:e4:7a:a3:a9:90:e5:27:ff:3b:24:73:8a:52: a8:f4:ff:b6:45:8a:be:9a:dd:07:4e:d7:c9:89:53: 8e:00:39:5d:63:c2:ff:26:04:79:5b:15:74:21:62: d7:92:c1:b6:bc:2b:0e:99:b3:6c:e3:4b:46:cf:e2: cd:8c:93:6a:fe:93:00:0f:d7:82:68:30:92:79:94: b9:2c:d7:0d:10:22:4b:b7:e8:69:36:fb:c9:b5:e0: 56:32:89:7d:e2:57:f8:f8:cf:96:4d:8c:3c:a5:1e: 88:ad:62:f3:dc:92:9e:70:38:96:83:c4:03:68:46: 60:8d:34:28:78:09:5d:94:34:00:ed:9e:61:e4:1a: cc:85:89:e3:97:b0:db:ab:89:d0:68:9b:12:89:32: 51:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:14:37:D8:63:04:ED:1F:74:79:38:6F:25:84:94:07:D9:95:8C:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3725b52d-21b1-360d-acbc-9771dcda46e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c2:8a:3f:96:80:5b:54:4c:08:88:63:d5:ad:4a:8b:3e:2e: b8:ec:ba:8c:62:2e:61:43:e7:32:66:64:47:af:97:49:4b:93: ac:45:f7:b6:9c:81:0f:cf:69:9e:0a:1e:d1:1c:ba:f1:84:9d: b5:3c:34:ea:8d:99:85:d4:eb:51:1b:dd:53:a7:53:ad:de:e4: 67:2e:90:0a:15:d1:88:13:5f:0c:bc:3d:4f:d1:4b:ce:4d:ed: ea:d9:96:88:65:55:0a:06:08:e5:df:5e:25:20:56:50:7b:d2: 07:27:3d:44:60:0d:28:74:cb:9d:ef:2c:a0:a5:3e:3a:ef:21: 0b:33:d5:24:ae:92:11:99:f0:22:ef:03:b9:f5:12:3e:57:6c: 58:dd:90:7c:42:ec:4d:f0:d9:bd:2e:bb:a5:96:64:56:72:3d: 68:fe:36:8e:68:72:ba:f6:69:28:b7:4b:ff:83:58:3a:9b:31: 82:9d:9f:92:a0:61:24:2f:4f:7a:d4:fa:a6:01:30:89:b9:db: f2:92:cc:a0:4e:5b:85:e8:2d:82:6a:30:a8:4a:35:3f:19:e9: 4c:88:69:3a:91:d9:e8:35:60:f1:e3:4c:3e:c0:0e:35:e8:9b: e4:e3:8e:77:24:9c:97:32:e5:14:b1:15:04:12:e9:33:4f:1c: 50:f3:cf:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVgGNtL7F6CmTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YmFjODhiNzYtNDk5Mi00MzA0LWJmY2MtMDRhNTRjNzFhZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZXWI1xH8GSehJHUKvdhrrcUbiDWrF/xhl7k vzPr4SVh/nFL0/4juYysi8jVanGQE7EYA2+bbYQTjyn116ACwGka9FWyFhCI0NRg rWDy5Czo/nNE/pq09eDKh3zzRyZOUVaJ105qiRH1C+R6o6mQ5Sf/OyRzilKo9P+2 RYq+mt0HTtfJiVOOADldY8L/JgR5WxV0IWLXksG2vCsOmbNs40tGz+LNjJNq/pMA D9eCaDCSeZS5LNcNECJLt+hpNvvJteBWMol94lf4+M+WTYw8pR6IrWLz3JKecDiW g8QDaEZgjTQoeAldlDQA7Z5h5BrMhYnjl7Dbq4nQaJsSiTJRywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgUN9hjBO0fdHk4byWElAfZlYydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzcyNWI1MmQtMjFiMS0z NjBkLWFjYmMtOTc3MWRjZGE0NmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDCij+WgFtUTAiIY9WtSos+LrjsuoxiLmFD5zJmZEevl0lLk6xF97ac gQ/PaZ4KHtEcuvGEnbU8NOqNmYXU61Eb3VOnU63e5GcukAoV0YgTXwy8PU/RS85N 7erZlohlVQoGCOXfXiUgVlB70gcnPURgDSh0y53vLKClPjrvIQsz1SSukhGZ8CLv A7n1Ej5XbFjdkHxC7E3w2b0uu6WWZFZyPWj+No5ocrr2aSi3S/+DWDqbMYKdn5Kg YSQvT3rU+qYBMIm52/KSzKBOW4XoLYJqMKhKNT8Z6UyIaTqR2eg1YPHjTD7ADjXo m+TjjncknJcy5RSxFQQS6TNPHFDzz8A= -----END CERTIFICATE-----Generated at Fri Jun 6 14:04:22 2025 by rpki-client