$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a692d24-ad5f-3784-9115-4b303c27f7a2.roa File: 3a692d24-ad5f-3784-9115-4b303c27f7a2.roa (raw, json) Hash identifier: qbQy4W5DUMJexCK/bLNdUkcMPdVfSGaeJVQp/3SqJ54= Subject key identifier: F5:95:7F:45:A4:9F:4B:50:9F:D0:6C:2B:F1:E1:A2:00:3F:52:57:38 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848481DEC17831C3669EC0AF2C0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a692d24-ad5f-3784-9115-4b303c27f7a2.roa Signing time: Sat 21 Dec 2024 16:05:23 +0000 ROA not before: Sat 21 Dec 2024 16:05:23 +0000 ROA not after: Fri 21 Mar 2025 15:05:23 +0000 asID: 213690 IP address blocks: 166.0.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:48:1d:ec:17:83:1c:36:69:ec:0a:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Dec 21 16:05:23 2024 GMT Not After : Mar 21 15:05:23 2025 GMT Subject: CN=f251ede7-9d0a-48f6-955e-44d67166b6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4c:74:ca:5b:9b:98:be:aa:b5:d1:3c:a3:56: 6d:58:49:a5:b3:7a:1d:39:f0:a7:d7:ae:d1:dd:50: ea:d4:14:3a:db:ef:8a:a9:cd:b1:98:bf:dd:26:70: cf:d5:43:62:90:bf:ab:a4:c2:99:ad:1e:7b:89:6b: 92:fc:95:00:79:49:6e:63:8b:f9:79:b2:b4:cc:e1: cb:e7:1e:19:0c:bb:ad:3b:a0:06:33:00:ec:c1:97: 8b:ca:d4:a0:54:02:c3:6f:40:ae:07:24:7c:0d:5f: 82:27:65:9e:84:3f:1b:31:32:93:a9:90:96:3e:41: 64:34:22:ca:c9:4a:5e:f1:12:12:36:c7:8f:60:7c: 91:ac:94:cf:02:c8:5e:32:6b:c7:b0:29:45:bc:f1: 4b:82:40:be:76:09:1e:ff:3b:4c:27:54:f2:d1:61: 29:26:ad:5f:70:a2:6c:72:f5:ee:2e:30:47:a3:58: b6:32:f4:b2:01:ff:80:e9:b4:e5:64:24:8e:d3:14: ac:ad:8b:d5:c8:aa:85:e8:f1:51:72:a3:c4:7c:1b: fb:bb:25:fc:b9:59:b2:b9:0e:8e:35:35:7f:01:4e: bb:cb:c0:a7:9f:64:16:da:4d:f1:5b:01:2a:40:97: cd:2b:de:71:d9:d7:e7:d0:49:ad:01:7d:80:f5:de: 04:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:95:7F:45:A4:9F:4B:50:9F:D0:6C:2B:F1:E1:A2:00:3F:52:57:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a692d24-ad5f-3784-9115-4b303c27f7a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:6d:d1:6c:47:c4:39:f7:a3:26:d5:66:db:d4:e4:42:aa:d7: f0:86:fc:57:18:5f:97:03:44:d2:66:ec:c5:cd:d9:6f:2f:4f: 2f:57:3d:41:54:de:a3:9c:cf:e3:b4:eb:8d:9e:aa:d8:9c:da: 9c:44:a0:3c:3b:02:90:2d:51:13:cc:38:a3:d3:5b:92:2c:3f: 63:4c:3c:f6:1a:8c:71:78:ca:d7:bd:a2:e1:1f:6e:fe:63:6e: 73:40:fa:71:0b:c8:4b:ea:5c:06:ef:6c:c5:0a:62:7b:d7:0b: b1:ee:a9:60:9e:1b:14:25:e4:b1:f9:ea:6e:97:57:50:70:9a: fa:83:db:ad:e9:29:e7:01:e8:97:19:fa:44:17:ac:5a:92:50: f9:47:c4:11:70:eb:5d:b7:7a:b4:c3:d6:eb:7d:5f:40:95:0b: ea:a0:ee:88:9f:9e:92:2d:b5:48:f4:96:1b:e6:08:5a:cb:0b: 81:30:a5:9b:d5:59:e1:16:e5:30:7b:57:ff:42:83:5c:89:b4: 09:23:62:7b:ad:39:b0:5a:8b:b5:c9:e8:6e:8c:12:49:88:df: 96:63:12:7e:39:d0:cf:3a:54:6f:b5:4a:00:29:74:fe:89:e8: 18:6b:ef:ca:e5:4b:28:c8:ab:29:2e:d9:1d:68:40:c3:e6:74: 20:06:01:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhIHewXgxw2aewK8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI0MTIyMTE2MDUyM1oXDTI1MDMyMTE1MDUyM1owLzEtMCsGA1UEAxMk ZjI1MWVkZTctOWQwYS00OGY2LTk1NWUtNDRkNjcxNjZiNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEx0ylubmL6qtdE8o1ZtWEmls3odOfCn167R 3VDq1BQ62++Kqc2xmL/dJnDP1UNikL+rpMKZrR57iWuS/JUAeUluY4v5ebK0zOHL 5x4ZDLutO6AGMwDswZeLytSgVALDb0CuByR8DV+CJ2WehD8bMTKTqZCWPkFkNCLK yUpe8RISNsePYHyRrJTPAsheMmvHsClFvPFLgkC+dgke/ztMJ1Ty0WEpJq1fcKJs cvXuLjBHo1i2MvSyAf+A6bTlZCSO0xSsrYvVyKqF6PFRcqPEfBv7uyX8uVmyuQ6O NTV/AU67y8Cnn2QW2k3xWwEqQJfNK95x2dfn0EmtAX2A9d4E/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWVf0Wkn0tQn9BsK/HhogA/Ulc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2E2OTJkMjQtYWQ1Zi0z Nzg0LTkxMTUtNGIzMDNjMjdmN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVt0WxHxDn3oybVZtvU5EKq1/CG/FcYX5cDRNJm7MXN2W8vTy9XPUFU 3qOcz+O0642eqtic2pxEoDw7ApAtURPMOKPTW5IsP2NMPPYajHF4yte9ouEfbv5j bnNA+nELyEvqXAbvbMUKYnvXC7HuqWCeGxQl5LH56m6XV1BwmvqD263pKecB6JcZ +kQXrFqSUPlHxBFw6123erTD1ut9X0CVC+qg7oifnpIttUj0lhvmCFrLC4EwpZvV WeEW5TB7V/9Cg1yJtAkjYnutObBai7XJ6G6MEkmI35ZjEn450M86VG+1SgApdP6J 6Bhr78rlSyjIqyku2R1oQMPmdCAGASg= -----END CERTIFICATE-----Generated at Wed Feb 5 10:00:57 2025 by rpki-client