$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53d1b730-5c0a-3be3-a28e-d5a2dea3d7b7.roa File: 53d1b730-5c0a-3be3-a28e-d5a2dea3d7b7.roa (raw, json) Hash identifier: oOV8i0sLNb0SPuJtULdRKfotl95v4tW9ahqWpgMSS1U= Subject key identifier: AC:B1:D9:CC:6E:79:C4:57:14:52:45:A9:64:28:2C:1D:42:2D:22:8B Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584940BD0F3FF2D3867EEAB2DD80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53d1b730-5c0a-3be3-a28e-d5a2dea3d7b7.roa Signing time: Thu 20 Mar 2025 17:26:29 +0000 ROA not before: Thu 20 Mar 2025 17:26:29 +0000 ROA not after: Wed 18 Jun 2025 17:26:29 +0000 asID: 401152 IP address blocks: 108.165.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:bd:0f:3f:f2:d3:86:7e:ea:b2:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 20 17:26:29 2025 GMT Not After : Jun 18 17:26:29 2025 GMT Subject: CN=d6b17968-1468-404e-ad86-7c5675cf09f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:bc:5e:a2:1f:84:23:03:a2:0d:d2:96:b7: c9:ec:f3:a3:b0:58:a1:ae:cf:12:17:7f:65:9c:64: f1:8e:26:cb:de:0b:35:ea:92:73:13:74:7d:fd:70: 04:78:17:66:eb:c5:23:f5:71:0d:b7:70:f2:65:55: cf:40:89:21:bf:ef:f8:22:38:a6:37:ec:9b:6f:5b: c1:05:57:91:7c:bd:0d:7a:84:9c:5e:cb:1c:df:72: 1a:30:ff:30:0c:b9:92:6c:8d:48:71:4d:40:fb:e7: b9:02:3a:f5:92:32:2a:06:8c:b5:91:26:4d:c7:b6: 95:34:60:3f:d9:7d:7f:da:59:16:74:7a:1f:bd:9a: e8:fa:14:65:59:7b:c5:38:e9:da:52:86:4e:6f:b9: b9:c5:84:59:c3:d9:c2:33:ae:cb:c7:d9:cf:1a:9c: 88:94:69:ff:b9:8e:de:d1:b7:1d:60:1f:71:b6:91: 53:b5:74:4f:3b:82:83:1e:9e:e0:af:a9:2d:19:df: 12:9a:f0:ea:ed:ca:80:1e:54:14:99:1e:0a:e3:6c: a3:b7:7f:6a:aa:55:b4:1d:2d:68:ab:bb:5f:1b:61: 14:8c:cc:0a:2d:3c:8e:2d:0f:86:f3:a5:a6:71:75: 16:a8:2b:b4:34:94:b6:43:b3:6b:2e:f9:ac:b9:90: c5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B1:D9:CC:6E:79:C4:57:14:52:45:A9:64:28:2C:1D:42:2D:22:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53d1b730-5c0a-3be3-a28e-d5a2dea3d7b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a5:a1:c0:c9:62:2b:bc:89:09:d1:4d:70:54:e8:ae:0f:9f: 2d:64:6f:8d:a1:81:23:91:b1:77:8e:a4:a5:a0:fb:15:93:db: 4a:04:02:95:0d:9f:87:65:ca:bd:21:0e:69:30:c6:cf:13:97: 74:dd:3d:b8:ca:44:99:2f:6c:f7:93:57:e1:50:80:da:bb:f3: a8:e6:a9:5c:38:08:06:64:2b:c7:0e:43:4e:41:c4:49:cb:a6: 2b:f0:40:97:a4:40:b9:41:20:db:7d:0a:b1:e6:9d:ad:a3:d3: b0:43:97:d6:9a:04:e7:b9:aa:53:04:45:02:b9:0f:bf:2d:8a: 6f:f6:0f:25:2d:69:04:aa:83:f5:27:ed:ed:39:16:49:72:b3: 60:30:58:88:e1:06:85:ed:c1:1a:64:62:67:66:ad:51:e2:e6: e9:b9:e0:15:02:4f:58:1d:be:8a:8f:ba:8c:61:3e:2d:a4:88: 97:68:ce:4b:50:c5:4c:9c:4a:8a:ce:11:e9:af:60:82:b4:7e: 7c:24:b9:90:ba:14:09:f3:a7:64:ac:4e:3a:fc:08:84:b8:6b: ff:b5:72:08:d3:21:0c:c8:85:8d:44:4f:68:f7:e6:43:dc:64: cd:e0:88:7e:9a:26:4d:f2:ac:80:21:f1:85:a5:75:77:e7:b8: e4:d9:cd:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAvQ8/8tOGfuqy3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDMyMDE3MjYyOVoXDTI1MDYxODE3MjYyOVowLzEtMCsGA1UEAxMk ZDZiMTc5NjgtMTQ2OC00MDRlLWFkODYtN2M1Njc1Y2YwOWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPi8XqIfhCMDog3SlrfJ7POjsFihrs8SF39l nGTxjibL3gs16pJzE3R9/XAEeBdm68Uj9XENt3DyZVXPQIkhv+/4IjimN+ybb1vB BVeRfL0NeoScXssc33IaMP8wDLmSbI1IcU1A++e5Ajr1kjIqBoy1kSZNx7aVNGA/ 2X1/2lkWdHofvZro+hRlWXvFOOnaUoZOb7m5xYRZw9nCM67Lx9nPGpyIlGn/uY7e 0bcdYB9xtpFTtXRPO4KDHp7gr6ktGd8SmvDq7cqAHlQUmR4K42yjt39qqlW0HS1o q7tfG2EUjMwKLTyOLQ+G86WmcXUWqCu0NJS2Q7NrLvmsuZDFkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyx2cxuecRXFFJFqWQoLB1CLSKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTNkMWI3MzAtNWMwYS0z YmUzLWEyOGUtZDVhMmRlYTNkN2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWlocDJYiu8iQnRTXBU6K4Pny1kb42hgSORsXeOpKWg+xWT20oEApUN n4dlyr0hDmkwxs8Tl3TdPbjKRJkvbPeTV+FQgNq786jmqVw4CAZkK8cOQ05BxEnL pivwQJekQLlBINt9CrHmna2j07BDl9aaBOe5qlMERQK5D78tim/2DyUtaQSqg/Un 7e05Fklys2AwWIjhBoXtwRpkYmdmrVHi5um54BUCT1gdvoqPuoxhPi2kiJdozktQ xUycSorOEemvYIK0fnwkuZC6FAnzp2SsTjr8CIS4a/+1cgjTIQzIhY1ET2j35kPc ZM3giH6aJk3yrIAh8YWldXfnuOTZzSs= -----END CERTIFICATE-----Generated at Sat Apr 5 09:45:11 2025 by rpki-client