$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38c2c61a-fdaa-38e1-8c90-2d8bcf1da436.roa File: 38c2c61a-fdaa-38e1-8c90-2d8bcf1da436.roa (raw, json) Hash identifier: vQmxFsancP8PfdwehnFO6e8+Z7f1uc3jvwoXlQH9tV0= Subject key identifier: 87:B9:4A:C6:4E:B3:C1:57:27:20:BC:F1:07:F3:7E:3C:2B:85:B9:5C Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848F00C7A353B9907A411683350 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38c2c61a-fdaa-38e1-8c90-2d8bcf1da436.roa Signing time: Wed 19 Feb 2025 19:46:02 +0000 ROA not before: Wed 19 Feb 2025 19:46:02 +0000 ROA not after: Tue 20 May 2025 18:46:02 +0000 asID: 62240 IP address blocks: 166.1.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:0c:7a:35:3b:99:07:a4:11:68:33:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 19 19:46:02 2025 GMT Not After : May 20 18:46:02 2025 GMT Subject: CN=59989e31-a693-4d8d-8acc-183f70672ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:a2:d7:59:af:4b:33:a9:75:5e:0b:a1:2d: c2:bc:61:ab:89:c0:98:f3:1b:f9:53:56:92:41:b5: 31:a9:fc:db:c5:ef:2e:63:bd:cb:04:34:e2:19:19: cc:24:44:09:d3:c1:83:4b:56:f8:e9:ed:1c:ad:c2: 8c:e0:2c:03:12:ae:a9:82:41:fd:e5:ae:f3:2f:7d: 9b:3d:3c:54:22:77:0c:c4:f0:14:9d:4a:3c:13:6f: 61:66:96:d3:aa:db:9d:55:7b:66:2f:b2:0d:24:57: 1b:e6:16:1d:dd:95:cb:9d:f5:a5:37:e8:66:6c:d4: 63:04:12:41:d9:4a:36:04:ee:2e:0e:85:6b:9a:e8: e8:f1:a0:1f:cd:28:9a:24:ee:57:1d:e9:e8:9f:4f: c9:93:e6:a0:57:65:83:ce:55:54:fc:d0:93:95:46: ba:1a:8f:1d:aa:b9:1c:40:13:19:07:d6:20:96:ae: 0f:64:98:1f:b0:89:dd:ca:18:9d:99:f4:2a:0d:cc: f7:fd:c6:4f:a1:01:19:94:a9:ce:89:d5:b2:61:c0: 7e:63:db:b3:b6:d0:4c:b0:e4:c9:06:af:a5:99:0d: cd:2c:67:b9:79:0c:1e:56:92:96:21:ad:53:8e:19: ad:d8:36:31:f3:e4:91:a6:51:e6:dd:1c:ab:56:b2: 53:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B9:4A:C6:4E:B3:C1:57:27:20:BC:F1:07:F3:7E:3C:2B:85:B9:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38c2c61a-fdaa-38e1-8c90-2d8bcf1da436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:eb:4e:ca:a0:9c:53:d7:f3:0d:66:e4:fd:85:b2:ca:35:9f: 3e:95:c8:f5:91:dd:74:e6:3b:51:21:fd:cc:e0:57:2c:22:bc: cb:75:b4:55:85:0e:07:45:f7:a9:7d:83:08:a0:b1:d7:6e:4e: 98:b2:1f:36:84:0f:05:b1:23:49:d0:eb:8c:84:82:ed:88:e0: 86:4a:90:34:c9:5c:26:ea:0f:21:6d:f2:db:74:2a:11:f8:56: 6d:94:70:c6:62:09:62:52:5b:7f:9b:c4:d3:24:41:d6:75:55: 24:e4:29:a7:7d:2a:93:bd:b5:cb:8a:7d:c1:d0:06:da:d5:ef: f7:14:ae:a8:bd:e7:a7:cf:79:90:03:15:26:fb:89:43:bc:14: b9:7a:89:33:ee:35:6b:13:d3:35:41:35:1c:bc:3d:0d:ec:b4: 4d:11:92:07:1f:bb:18:c4:a5:a5:a4:7c:6b:ce:77:91:72:ce: 45:98:18:81:c3:de:45:5f:ff:9b:4f:6a:2e:73:12:b0:a7:ac: 3f:46:ca:3e:33:86:ad:28:6c:f2:50:9a:8c:4a:de:07:70:1c: 9e:e0:e8:b8:6b:f8:46:b9:a3:a9:e9:65:21:b8:0d:e4:11:87: 7d:e6:e7:8e:00:c2:dc:22:a0:04:10:5a:83:86:53:d4:8f:1f: c1:8d:12:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwDHo1O5kHpBFoM1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIxOTE5NDYwMloXDTI1MDUyMDE4NDYwMlowLzEtMCsGA1UEAxMk NTk5ODllMzEtYTY5My00ZDhkLThhY2MtMTgzZjcwNjcyZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB6i11mvSzOpdV4LoS3CvGGricCY8xv5U1aS QbUxqfzbxe8uY73LBDTiGRnMJEQJ08GDS1b46e0crcKM4CwDEq6pgkH95a7zL32b PTxUIncMxPAUnUo8E29hZpbTqtudVXtmL7INJFcb5hYd3ZXLnfWlN+hmbNRjBBJB 2Uo2BO4uDoVrmujo8aAfzSiaJO5XHenon0/Jk+agV2WDzlVU/NCTlUa6Go8dqrkc QBMZB9Yglq4PZJgfsIndyhidmfQqDcz3/cZPoQEZlKnOidWyYcB+Y9uzttBMsOTJ Bq+lmQ3NLGe5eQweVpKWIa1Tjhmt2DYx8+SRplHm3RyrVrJTvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIe5SsZOs8FXJyC88QfzfjwrhblcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzhjMmM2MWEtZmRhYS0z OGUxLThjOTAtMmQ4YmNmMWRhNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLrTsqgnFPX8w1m5P2Fsso1nz6VyPWR3XTmO1Eh/czgVywivMt1tFWF DgdF96l9gwigsdduTpiyHzaEDwWxI0nQ64yEgu2I4IZKkDTJXCbqDyFt8tt0KhH4 Vm2UcMZiCWJSW3+bxNMkQdZ1VSTkKad9KpO9tcuKfcHQBtrV7/cUrqi956fPeZAD FSb7iUO8FLl6iTPuNWsT0zVBNRy8PQ3stE0RkgcfuxjEpaWkfGvOd5FyzkWYGIHD 3kVf/5tPai5zErCnrD9Gyj4zhq0obPJQmoxK3gdwHJ7g6Lhr+Ea5o6npZSG4DeQR h33m544AwtwioAQQWoOGU9SPH8GNEtM= -----END CERTIFICATE-----Generated at Thu Apr 3 22:24:29 2025 by rpki-client