$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/410b3cdb-3a07-3dc5-8a74-f8c91c3a906e.roa File: 410b3cdb-3a07-3dc5-8a74-f8c91c3a906e.roa (raw, json) Hash identifier: dQpecEeviSbC2JP9Ue6bucpZwinIcIbwMYAFbR18kfo= Subject key identifier: AB:15:41:E3:71:07:91:78:70:31:85:B6:E8:95:16:90:EC:26:EC:AA Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849DB2A326C72165D683EDE8380 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/410b3cdb-3a07-3dc5-8a74-f8c91c3a906e.roa Signing time: Thu 15 May 2025 01:00:47 +0000 ROA not before: Thu 15 May 2025 01:00:47 +0000 ROA not after: Wed 13 Aug 2025 01:00:47 +0000 asID: 134351 IP address blocks: 108.165.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:db:2a:32:6c:72:16:5d:68:3e:de:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: May 15 01:00:47 2025 GMT Not After : Aug 13 01:00:47 2025 GMT Subject: CN=3ed7a99b-c4e3-42c3-89d7-5a309f6ad28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:41:8a:c4:3b:73:14:a9:08:9d:1b:85:24:21: 49:9f:69:54:31:11:95:44:12:03:1d:72:24:34:52: 3d:e5:87:dd:59:ec:70:77:6b:3d:8a:fb:94:98:16: 3d:bb:88:71:30:03:36:76:d4:b0:10:36:dd:f2:b4: 21:c3:aa:c1:a6:14:b1:9d:a5:b1:8b:8c:f1:eb:9e: ad:63:85:2f:86:38:5c:75:b3:0f:c7:f2:51:fe:c4: 57:30:2e:85:ef:13:f4:0e:70:28:83:0b:a1:e9:36: 87:40:f0:ba:c5:11:7e:81:6e:15:b4:5d:e8:40:f0: e1:49:ae:1d:19:c8:f9:c2:fb:a9:e3:34:01:8a:8a: 13:76:69:fb:9e:53:c9:bb:83:3f:a6:32:6e:a6:7b: 06:dc:b3:db:63:83:98:a6:1b:c0:82:52:0c:dd:74: 0e:80:8d:f2:6e:87:84:3b:09:6e:e9:ec:ee:f6:8f: c3:c4:e5:10:8c:3f:1f:37:df:a3:70:1f:9e:99:0c: af:31:49:93:4d:06:ab:2d:0b:eb:36:63:e5:3e:3d: a4:23:c8:2c:54:7d:6d:a9:17:12:7c:82:4a:9a:11: 4d:c8:a1:bd:6a:2b:53:ee:df:d4:67:81:ad:a6:98: 25:5e:f3:23:e0:84:4e:2e:1e:97:d5:15:22:b2:61: c1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:15:41:E3:71:07:91:78:70:31:85:B6:E8:95:16:90:EC:26:EC:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/410b3cdb-3a07-3dc5-8a74-f8c91c3a906e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:29:62:de:5b:c3:c2:46:1f:0d:eb:d9:50:7f:73:df:40:f0: e9:11:76:51:93:f0:b7:fa:e1:f0:6e:30:d8:51:73:2c:9f:8d: 80:4a:3b:83:dc:49:18:99:30:a5:23:18:79:39:2f:9d:a1:89: 25:1a:db:8e:38:11:ff:4d:11:f6:28:44:08:de:86:59:b2:ca: 5a:ee:da:77:26:c5:f8:39:42:9c:d1:7f:33:a8:b3:df:e1:7f: 67:87:70:c1:3d:9b:8b:38:70:be:e7:1e:2d:c9:f9:51:78:13: 61:3e:4d:cd:bb:12:ca:02:d5:d9:d0:13:d8:d9:bf:52:bf:25: f0:9f:81:ed:37:20:c7:e6:25:9a:4b:03:54:21:c0:de:f4:dc: 84:a0:50:4e:7e:df:11:07:1f:f5:41:8e:f4:36:1e:fc:af:8e: d4:e9:ef:14:88:55:d6:99:c7:78:53:a4:77:58:b0:a4:88:99: 88:0a:7f:b1:1c:90:60:61:4b:81:78:e7:35:02:4c:ba:b4:37: f1:e0:2e:dd:bc:48:f1:f7:44:7f:21:76:e8:fb:96:86:c9:32: 0c:81:a6:bf:6b:30:06:6a:08:df:7e:0d:fa:e4:01:44:11:54: 99:b9:cb:e1:0c:70:34:b4:e1:f1:0a:10:18:c4:40:82:a5:ef: b8:a1:97:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnbKjJschZdaD7eg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDUxNTAxMDA0N1oXDTI1MDgxMzAxMDA0N1owLzEtMCsGA1UEAxMk M2VkN2E5OWItYzRlMy00MmMzLTg5ZDctNWEzMDlmNmFkMjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUGKxDtzFKkInRuFJCFJn2lUMRGVRBIDHXIk NFI95YfdWexwd2s9ivuUmBY9u4hxMAM2dtSwEDbd8rQhw6rBphSxnaWxi4zx656t Y4UvhjhcdbMPx/JR/sRXMC6F7xP0DnAogwuh6TaHQPC6xRF+gW4VtF3oQPDhSa4d Gcj5wvup4zQBiooTdmn7nlPJu4M/pjJupnsG3LPbY4OYphvAglIM3XQOgI3yboeE Owlu6ezu9o/DxOUQjD8fN9+jcB+emQyvMUmTTQarLQvrNmPlPj2kI8gsVH1tqRcS fIJKmhFNyKG9aitT7t/UZ4GtppglXvMj4IROLh6X1RUismHBPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsVQeNxB5F4cDGFtuiVFpDsJuyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDEwYjNjZGItM2EwNy0z ZGM1LThhNzQtZjhjOTFjM2E5MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIpYt5bw8JGHw3r2VB/c99A8OkRdlGT8Lf64fBuMNhRcyyfjYBKO4Pc SRiZMKUjGHk5L52hiSUa2444Ef9NEfYoRAjehlmyylru2ncmxfg5QpzRfzOos9/h f2eHcME9m4s4cL7nHi3J+VF4E2E+Tc27EsoC1dnQE9jZv1K/JfCfge03IMfmJZpL A1QhwN703ISgUE5+3xEHH/VBjvQ2HvyvjtTp7xSIVdaZx3hTpHdYsKSImYgKf7Ec kGBhS4F45zUCTLq0N/HgLt28SPH3RH8hduj7lobJMgyBpr9rMAZqCN9+DfrkAUQR VJm5y+EMcDS04fEKEBjEQIKl77ihl1s= -----END CERTIFICATE-----Generated at Sat Jun 7 04:10:42 2025 by rpki-client