$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d653528-7718-39b0-9ccf-7955d59466dc.roa File: 3d653528-7718-39b0-9ccf-7955d59466dc.roa (raw, json) Hash identifier: 6o6Fg0bAuiLT6lckZW112U2MwSB5eWtg4VI5osqQ9hw= Subject key identifier: 29:18:CF:EA:9B:93:C4:C9:83:3E:DB:13:7D:C0:A2:4C:2E:21:D1:1D Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848F00C787E292D183FD8E0AB00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d653528-7718-39b0-9ccf-7955d59466dc.roa Signing time: Wed 19 Feb 2025 19:46:01 +0000 ROA not before: Wed 19 Feb 2025 19:46:01 +0000 ROA not after: Tue 20 May 2025 18:46:01 +0000 asID: 62240 IP address blocks: 166.1.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:0c:78:7e:29:2d:18:3f:d8:e0:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 19 19:46:01 2025 GMT Not After : May 20 18:46:01 2025 GMT Subject: CN=a987b34a-edd1-4909-ab2e-b4c0744d6c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a9:49:74:05:2b:f7:32:4e:cc:89:e3:35:d9: 95:58:11:17:e7:10:0b:a7:27:74:df:58:1c:59:61: e3:b5:61:51:eb:49:f4:c4:00:37:b5:9f:73:75:cd: 2f:c0:03:eb:bd:14:85:63:da:b4:54:66:ae:f9:86: f0:84:61:a4:7d:7f:86:96:82:99:9c:5a:7f:3b:c2: a0:fa:82:fb:68:c7:3a:4c:f4:d0:5c:2f:76:fb:f2: b8:c9:63:83:6d:ef:54:f9:0b:1b:2a:63:55:fd:e1: 7e:f9:41:86:ac:d2:ab:37:47:85:4f:16:a9:c3:4c: 1f:bc:ed:bd:48:41:72:17:53:bd:23:bd:44:87:22: 66:87:12:68:5d:0b:66:bd:a1:55:6c:36:f4:e5:77: a6:25:7c:96:a8:ca:44:a5:9b:d6:c5:ad:6a:c1:0c: 7c:5e:ad:5f:51:4a:29:4a:71:a5:6d:5c:cf:79:55: c8:a5:ce:56:b2:40:60:77:b0:39:23:b6:d1:d7:34: 72:fd:a1:79:69:9e:e9:19:80:09:6c:f8:ab:fa:d6: fe:c9:bf:29:7e:86:8d:e8:f2:83:a8:8f:01:5a:35: 3f:2f:55:a7:db:f6:9f:5c:af:ba:ee:b2:74:86:d3: 6d:a8:4c:53:c1:bb:a5:a0:23:5b:58:62:45:0e:31: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:18:CF:EA:9B:93:C4:C9:83:3E:DB:13:7D:C0:A2:4C:2E:21:D1:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d653528-7718-39b0-9ccf-7955d59466dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a9:ec:c1:c8:56:7d:6d:b6:f9:0e:a5:f8:c1:aa:e1:37:50: 2d:bd:53:62:ef:5d:f5:57:d5:44:49:33:c6:24:4c:6f:08:dc: 01:b4:e8:21:f8:30:04:0b:5a:d9:30:a2:9d:68:f8:9e:14:e3: a8:99:91:f0:18:cc:7e:24:48:f4:23:f1:9e:96:5f:25:06:74: cf:5e:a9:ba:a6:8e:d9:dd:15:79:62:a5:64:d6:30:8a:ac:eb: e8:54:25:c9:72:fb:15:b4:c1:56:a0:78:74:4f:78:a9:17:a1: 80:3f:09:5a:ca:33:e5:aa:1e:c9:f6:78:eb:7c:b8:db:1c:cd: bd:91:c1:12:9d:6c:dc:03:ef:c9:4e:a8:c3:4f:00:44:eb:d9: ea:80:33:3d:66:49:bb:a1:e6:cc:80:31:1c:53:cb:de:1a:a9: 9f:09:c0:ae:16:af:a2:24:92:f2:23:a2:5f:e7:e4:91:50:3f: 40:9c:f0:10:31:d6:99:7d:20:73:2a:e5:fb:8c:7a:ad:98:0b: cb:bf:73:34:d5:a4:15:a9:28:33:81:ad:68:ee:2e:62:9b:b9: 62:47:1a:5b:37:cd:5a:b0:20:9a:53:0d:b7:5b:81:85:60:2e: ea:cf:2c:fd:d4:cd:88:46:d4:cf:c7:ac:20:3e:49:f9:1d:e7: 47:20:07:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwDHh+KS0YP9jgqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIxOTE5NDYwMVoXDTI1MDUyMDE4NDYwMVowLzEtMCsGA1UEAxMk YTk4N2IzNGEtZWRkMS00OTA5LWFiMmUtYjRjMDc0NGQ2YzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6lJdAUr9zJOzInjNdmVWBEX5xALpyd031gc WWHjtWFR60n0xAA3tZ9zdc0vwAPrvRSFY9q0VGau+YbwhGGkfX+GloKZnFp/O8Kg +oL7aMc6TPTQXC92+/K4yWODbe9U+QsbKmNV/eF++UGGrNKrN0eFTxapw0wfvO29 SEFyF1O9I71EhyJmhxJoXQtmvaFVbDb05XemJXyWqMpEpZvWxa1qwQx8Xq1fUUop SnGlbVzPeVXIpc5WskBgd7A5I7bR1zRy/aF5aZ7pGYAJbPir+tb+yb8pfoaN6PKD qI8BWjU/L1Wn2/afXK+67rJ0htNtqExTwbuloCNbWGJFDjHB2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkYz+qbk8TJgz7bE33AokwuIdEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2Q2NTM1MjgtNzcxOC0z OWIwLTljY2YtNzk1NWQ1OTQ2NmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIap7MHIVn1ttvkOpfjBquE3UC29U2LvXfVX1URJM8YkTG8I3AG06CH4 MAQLWtkwop1o+J4U46iZkfAYzH4kSPQj8Z6WXyUGdM9eqbqmjtndFXlipWTWMIqs 6+hUJcly+xW0wVageHRPeKkXoYA/CVrKM+WqHsn2eOt8uNsczb2RwRKdbNwD78lO qMNPAETr2eqAMz1mSbuh5syAMRxTy94aqZ8JwK4Wr6IkkvIjol/n5JFQP0Cc8BAx 1pl9IHMq5fuMeq2YC8u/czTVpBWpKDOBrWjuLmKbuWJHGls3zVqwIJpTDbdbgYVg LurPLP3UzYhG1M/HrCA+Sfkd50cgB9A= -----END CERTIFICATE-----Generated at Thu Apr 3 22:27:04 2025 by rpki-client