$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53bda88c-dc15-37d0-9fb4-a6de31f947cf.roa File: 53bda88c-dc15-37d0-9fb4-a6de31f947cf.roa (raw, json) Hash identifier: pYOQAxtgYVZXnudxXJs/bDCFtISbgdtnl7Zmv/uvOwM= Subject key identifier: 03:FE:27:37:E7:01:D2:A9:34:4F:1C:3F:0C:67:14:AE:D4:DF:6E:00 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584849456A92D8588DD37D357300 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53bda88c-dc15-37d0-9fb4-a6de31f947cf.roa Signing time: Sun 22 Dec 2024 02:00:39 +0000 ROA not before: Sun 22 Dec 2024 02:00:39 +0000 ROA not after: Sat 22 Mar 2025 01:00:39 +0000 asID: 62579 IP address blocks: 166.0.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:49:45:6a:92:d8:58:8d:d3:7d:35:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Dec 22 02:00:39 2024 GMT Not After : Mar 22 01:00:39 2025 GMT Subject: CN=77bca1d3-1a1d-45ee-8238-74c3ad3a2fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:32:da:43:f3:bf:45:b0:80:2a:52:19:91: ed:4c:c9:44:d5:d0:53:51:76:55:e7:74:fb:06:b1: ab:81:bf:c9:52:c0:6b:c1:ef:16:d6:de:21:7e:19: 29:ea:f8:a2:c6:22:30:1f:99:fe:a8:b5:fe:a8:45: 60:18:e0:33:21:e3:5b:39:54:4c:15:f2:4a:f7:f6: 5f:93:85:4c:14:72:f4:45:67:6a:54:5b:1b:0c:39: 28:c0:00:b7:fc:34:3d:d1:8f:a4:1e:35:74:27:f8: 16:63:f8:aa:1a:83:9e:d2:f2:9d:71:d4:88:6d:ee: 71:a9:44:22:6e:cf:c1:0f:bb:58:d3:bf:e9:6b:0f: 93:b7:22:5b:ae:37:57:27:0b:91:16:d9:f3:6d:15: ce:d4:25:d7:56:27:89:07:e8:df:3a:51:60:22:7c: a8:e5:9d:1c:4c:71:77:a7:35:c9:c0:4e:fc:f5:7f: d8:25:bf:37:17:29:47:c8:56:a0:27:7d:1b:48:e6: 05:9a:70:5d:a3:36:39:a3:83:47:f2:c0:0a:d6:57: e3:21:74:27:8e:d1:43:6a:36:6d:af:c4:6d:59:90: 7a:7f:9b:b1:79:cc:d5:ef:af:c2:fc:29:65:ef:50: 42:f0:c1:66:90:bd:7c:0d:d5:f7:2e:4d:f0:05:d5: f6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FE:27:37:E7:01:D2:A9:34:4F:1C:3F:0C:67:14:AE:D4:DF:6E:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53bda88c-dc15-37d0-9fb4-a6de31f947cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:64:7e:4a:6e:46:33:22:01:0c:80:07:52:49:ac:d7:c6:79: 8d:e8:1b:a4:ac:3f:fa:d2:97:96:40:79:fc:67:af:a0:84:e7: e4:32:f5:8c:24:09:d4:dc:a3:df:9e:14:43:6d:cd:50:48:93: e7:95:44:3f:5e:9f:cd:02:3e:a4:60:53:3b:ef:f8:3c:1a:2c: a9:3e:7c:c7:00:4f:21:e6:14:2f:8b:3e:1b:de:5c:de:8d:ab: 13:17:54:26:ab:3c:6a:d8:a9:0e:7d:5d:4d:f4:65:59:b6:38: f2:37:8f:66:1e:54:3d:18:8d:a6:e0:e0:1c:2d:7a:f7:20:db: de:26:12:19:b3:0d:ef:44:b2:a4:72:dc:00:3c:50:6a:6f:85: d7:ea:2c:3b:72:97:2c:9b:0f:3c:ab:0f:22:3f:84:d9:bb:58: 6c:9d:ee:2f:f9:1c:48:58:95:f5:51:7d:19:d2:c0:89:93:c7: 5a:b8:f2:3c:f6:e4:11:de:55:90:e9:0a:63:fd:25:68:4a:ed: ee:60:ba:cc:83:3c:6c:01:6b:c3:9e:56:8c:c7:f5:7e:b7:8e: aa:55:b7:af:74:68:60:e5:31:b5:16:78:02:e7:05:4a:f1:b3: 72:79:f7:85:1a:fc:24:89:2c:2b:ce:a3:8d:26:40:d1:17:2c: 8f:33:d1:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhJRWqS2FiN0301cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk NzdiY2ExZDMtMWExZC00NWVlLTgyMzgtNzRjM2FkM2EyZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi8y2kPzv0WwgCpSGZHtTMlE1dBTUXZV53T7 BrGrgb/JUsBrwe8W1t4hfhkp6viixiIwH5n+qLX+qEVgGOAzIeNbOVRMFfJK9/Zf k4VMFHL0RWdqVFsbDDkowAC3/DQ90Y+kHjV0J/gWY/iqGoOe0vKdcdSIbe5xqUQi bs/BD7tY07/paw+TtyJbrjdXJwuRFtnzbRXO1CXXVieJB+jfOlFgInyo5Z0cTHF3 pzXJwE789X/YJb83FylHyFagJ30bSOYFmnBdozY5o4NH8sAK1lfjIXQnjtFDajZt r8RtWZB6f5uxeczV76/C/Cll71BC8MFmkL18DdX3Lk3wBdX2bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP+JzfnAdKpNE8cPwxnFK7U324AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTNiZGE4OGMtZGMxNS0z N2QwLTlmYjQtYTZkZTMxZjk0N2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5kfkpuRjMiAQyAB1JJrNfGeY3oG6SsP/rSl5ZAefxnr6CE5+Qy9Ywk CdTco9+eFENtzVBIk+eVRD9en80CPqRgUzvv+DwaLKk+fMcATyHmFC+LPhveXN6N qxMXVCarPGrYqQ59XU30ZVm2OPI3j2YeVD0Yjabg4Bwtevcg294mEhmzDe9EsqRy 3AA8UGpvhdfqLDtylyybDzyrDyI/hNm7WGyd7i/5HEhYlfVRfRnSwImTx1q48jz2 5BHeVZDpCmP9JWhK7e5gusyDPGwBa8OeVozH9X63jqpVt690aGDlMbUWeALnBUrx s3J594Ua/CSJLCvOo40mQNEXLI8z0cE= -----END CERTIFICATE-----Generated at Fri Feb 7 11:11:07 2025 by rpki-client