$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/623ef321-54f7-3178-9d59-485bd9873a14.roa File: 623ef321-54f7-3178-9d59-485bd9873a14.roa (raw, json) Hash identifier: XxGdxN6L56OVGPzxQReYiNlt2hWFVr5is3Zrl4jZu+g= Subject key identifier: 11:84:F3:25:54:E1:8D:07:5D:33:29:EF:0D:5F:97:C2:08:16:62:75 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849D85F910A9FBEF3C9E98820F0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/623ef321-54f7-3178-9d59-485bd9873a14.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 26383 IP address blocks: 166.1.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:91:0a:9f:be:f3:c9:e9:88:20:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=4eacd173-4950-41fd-ad0d-2541ff7aa87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fe:8b:f5:f1:d7:06:bc:61:ba:a4:a5:49:2d: 9e:09:f4:cc:fc:f2:61:a5:54:52:88:96:ce:e8:8c: 7b:a5:45:09:7e:69:ad:ed:6c:29:b2:ea:a3:a0:3c: f8:fb:d2:07:6f:d4:9e:74:6f:ac:4f:61:e2:01:cd: 71:f2:9a:a4:0d:8d:1f:7d:0d:90:23:5b:cd:8e:83: b0:f3:b8:58:92:4d:ee:41:d4:fa:5e:4a:00:74:ac: 97:53:6d:f9:18:90:31:40:4e:48:76:09:66:9d:1e: 76:54:15:d9:b5:e0:8f:9d:3e:be:97:98:7d:33:14: 4d:19:9c:9f:54:e9:d3:4e:37:96:66:ce:fa:62:28: b7:91:7c:2b:c8:84:61:16:d7:a7:59:44:33:ad:c5: cb:95:63:98:46:60:f5:ab:d8:3b:eb:e3:f7:13:5f: c7:77:a2:e8:6c:fa:54:5c:b7:c9:4f:d1:b0:7a:d1: 72:d1:94:a1:22:fa:ab:cf:74:ac:84:52:17:33:e1: 31:63:0b:6f:e8:ec:4a:46:11:25:44:94:33:ce:de: 5b:d9:70:59:fd:62:93:9f:75:c3:02:fe:1d:6e:d2: 60:03:f6:64:82:bd:65:7c:cf:06:ec:cd:1e:19:79: 24:45:71:5f:e5:b7:ea:2b:a5:8a:f9:7a:2f:8a:95: 84:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:84:F3:25:54:E1:8D:07:5D:33:29:EF:0D:5F:97:C2:08:16:62:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/623ef321-54f7-3178-9d59-485bd9873a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3d:fd:ba:80:f3:f4:b3:79:08:aa:e3:4b:e3:66:03:db:38: 67:bc:7e:c6:5f:e5:56:82:d6:e0:f5:c8:53:8d:68:c4:81:fb: 09:d0:2b:46:02:f8:b8:db:4c:90:09:07:80:f4:6b:ba:4e:99: a6:54:29:2c:76:f2:fe:64:69:6b:be:28:4d:b3:f3:33:c9:04: 16:ea:35:63:05:bc:bc:65:43:c6:f1:20:a8:be:b8:5d:ee:a1: ea:bd:5b:56:8f:42:f4:40:4f:57:5d:5d:dc:d0:51:d0:35:02: 93:11:c2:27:2e:98:d8:7e:3b:13:8c:73:81:cc:b7:96:ea:59: 45:5f:24:41:50:f8:09:e6:0a:c7:20:18:2c:9d:c7:0d:a0:c5: 80:ed:da:2d:b4:a3:e1:e0:4f:dc:24:5c:32:05:11:1b:90:2d: 52:52:f8:de:b0:87:aa:b9:14:0b:28:68:44:95:fe:55:4e:bc: 0e:ba:24:8e:69:2e:85:88:62:12:10:86:aa:43:e8:d3:89:f9: b8:0b:12:f0:0b:9f:c4:59:8d:8f:80:a0:c9:25:b8:c0:61:5b: 9e:90:38:31:ab:3c:1e:4a:e4:8d:c2:f3:cd:05:58:6f:34:69: 60:ad:d8:49:c6:a6:8b:87:f3:38:31:2e:c5:cb:1d:09:a2:82: c0:fb:40:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5EKn77zyemIIPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NGVhY2QxNzMtNDk1MC00MWZkLWFkMGQtMjU0MWZmN2FhODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv6L9fHXBrxhuqSlSS2eCfTM/PJhpVRSiJbO 6Ix7pUUJfmmt7WwpsuqjoDz4+9IHb9SedG+sT2HiAc1x8pqkDY0ffQ2QI1vNjoOw 87hYkk3uQdT6XkoAdKyXU235GJAxQE5IdglmnR52VBXZteCPnT6+l5h9MxRNGZyf VOnTTjeWZs76Yii3kXwryIRhFtenWUQzrcXLlWOYRmD1q9g76+P3E1/Hd6LobPpU XLfJT9GwetFy0ZShIvqrz3SshFIXM+ExYwtv6OxKRhElRJQzzt5b2XBZ/WKTn3XD Av4dbtJgA/Zkgr1lfM8G7M0eGXkkRXFf5bfqK6WK+XovipWE3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGE8yVU4Y0HXTMp7w1fl8IIFmJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjIzZWYzMjEtNTRmNy0z MTc4LTlkNTktNDg1YmQ5ODczYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg9/bqA8/SzeQiq40vjZgPbOGe8fsZf5VaC1uD1yFONaMSB+wnQK0YC +LjbTJAJB4D0a7pOmaZUKSx28v5kaWu+KE2z8zPJBBbqNWMFvLxlQ8bxIKi+uF3u oeq9W1aPQvRAT1ddXdzQUdA1ApMRwicumNh+OxOMc4HMt5bqWUVfJEFQ+AnmCscg GCydxw2gxYDt2i20o+HgT9wkXDIFERuQLVJS+N6wh6q5FAsoaESV/lVOvA66JI5p LoWIYhIQhqpD6NOJ+bgLEvALn8RZjY+AoMkluMBhW56QODGrPB5K5I3C880FWG80 aWCt2EnGpouH8zgxLsXLHQmigsD7QNI= -----END CERTIFICATE-----Generated at Wed Jun 4 11:20:53 2025 by rpki-client