$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6278ed56-2d53-3122-a6c4-ccd704b0862e.roa File: 6278ed56-2d53-3122-a6c4-ccd704b0862e.roa (raw, json) Hash identifier: Su8yQSv+1JdochBfGvJ54UPWoeIOcC/9+x2vQqRjvH8= Subject key identifier: D2:CE:F4:24:D4:B4:A4:2C:5A:75:D8:94:F7:A9:A2:A6:30:F5:2F:E1 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858489F218A56A4630DFA8F2D6A80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6278ed56-2d53-3122-a6c4-ccd704b0862e.roa Signing time: Tue 21 Jan 2025 20:08:00 +0000 ROA not before: Tue 21 Jan 2025 20:08:00 +0000 ROA not after: Mon 21 Apr 2025 19:08:00 +0000 asID: 401152 IP address blocks: 166.0.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:21:8a:56:a4:63:0d:fa:8f:2d:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jan 21 20:08:00 2025 GMT Not After : Apr 21 19:08:00 2025 GMT Subject: CN=ecbffa4b-0724-401c-9a42-7b3b0024d5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:66:9f:69:13:29:39:b4:56:a1:51:6e:8e: 21:9e:67:0f:4c:d4:38:ef:85:09:f5:58:19:95:6d: ce:65:c6:4f:d8:cb:b7:56:2d:d0:af:e6:7c:1a:15: 84:fb:44:8c:d3:0c:cf:c7:f2:d0:5f:3e:66:4c:54: 51:45:f6:c5:53:35:bc:0a:47:65:73:83:fd:b6:4a: 7b:43:39:e8:79:39:cb:96:51:9d:d7:3f:18:a3:b7: 47:8a:0a:e9:30:16:f2:15:ff:ce:65:eb:a6:1d:ab: d3:47:05:17:65:85:4a:4a:74:49:77:92:e6:54:9d: 78:d9:87:88:ec:81:f2:5e:ca:86:55:6d:8f:aa:eb: 40:93:b9:5f:cb:a0:b3:46:7c:34:aa:2b:78:91:b5: 15:d1:53:75:87:cc:13:8e:e4:a9:cc:11:3f:ce:0b: 05:32:1b:96:50:7d:77:5c:72:8b:a6:36:b8:ce:fa: 5f:75:60:c9:f5:9c:c7:c0:e9:d5:09:82:90:5e:46: 1b:fc:37:a6:ab:d4:9c:59:06:c4:4b:e4:62:7e:00: c1:ea:45:62:2a:0a:21:90:5a:4e:46:6f:d7:4d:c0: f0:5d:34:d2:86:2d:06:c1:71:d6:56:f7:d2:47:8a: 10:ab:62:e0:e0:4d:94:72:e7:e7:f2:21:89:9e:3e: 21:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CE:F4:24:D4:B4:A4:2C:5A:75:D8:94:F7:A9:A2:A6:30:F5:2F:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6278ed56-2d53-3122-a6c4-ccd704b0862e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e2:85:04:78:3d:b8:7f:2c:3c:eb:05:b7:2b:a4:8d:f5:0c: fa:e4:6a:fe:9d:29:9c:98:ae:81:6a:82:aa:e6:bc:f4:57:15: 04:c4:bc:99:87:a6:89:a5:30:54:36:f0:82:7b:cd:6e:cc:27: af:72:80:b4:81:b4:16:b9:db:08:0a:41:8b:b5:18:9f:c2:71: 6a:7a:ce:9c:cf:69:3e:f7:ae:d2:41:1d:b2:92:44:b4:67:61: f5:2c:63:10:60:b0:5c:e7:17:8b:bc:fa:52:72:03:44:56:d5: 6b:c5:a7:e8:e2:00:50:71:1a:4e:38:98:fb:b1:2d:ab:0f:de: 5f:3e:1c:cb:57:51:48:4a:86:75:b8:93:05:cf:a2:97:ab:6f: b4:31:70:63:40:84:b9:31:c4:78:18:8e:5e:34:4d:18:44:be: 6a:7f:fe:f7:6c:ca:3f:b7:66:2a:65:d9:ca:73:88:f0:29:55: d1:d4:6e:a0:e3:a5:a2:1f:7a:31:6c:8a:28:46:a9:7e:66:4d: 4e:d8:70:70:08:bc:99:0a:ff:0e:da:48:75:d5:07:c9:a7:c1: 32:14:42:a7:b4:ca:f0:52:68:82:58:97:84:27:69:06:cb:cf: 83:15:92:7f:65:49:f7:00:bf:67:51:7b:4b:7b:0a:8e:a3:c8: d6:8a:40:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifIYpWpGMN+o8taoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDEyMTIwMDgwMFoXDTI1MDQyMTE5MDgwMFowLzEtMCsGA1UEAxMk ZWNiZmZhNGItMDcyNC00MDFjLTlhNDItN2IzYjAwMjRkNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmtmn2kTKTm0VqFRbo4hnmcPTNQ474UJ9VgZ lW3OZcZP2Mu3Vi3Qr+Z8GhWE+0SM0wzPx/LQXz5mTFRRRfbFUzW8Ckdlc4P9tkp7 QznoeTnLllGd1z8Yo7dHigrpMBbyFf/OZeumHavTRwUXZYVKSnRJd5LmVJ142YeI 7IHyXsqGVW2PqutAk7lfy6CzRnw0qit4kbUV0VN1h8wTjuSpzBE/zgsFMhuWUH13 XHKLpja4zvpfdWDJ9ZzHwOnVCYKQXkYb/Demq9ScWQbES+RifgDB6kViKgohkFpO Rm/XTcDwXTTShi0GwXHWVvfSR4oQq2Lg4E2Ucufn8iGJnj4hzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLO9CTUtKQsWnXYlPepoqYw9S/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjI3OGVkNTYtMmQ1My0z MTIyLWE2YzQtY2NkNzA0YjA4NjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpgAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPihQR4Pbh/LDzrBbcrpI31DPrkav6dKZyYroFqgqrmvPRXFQTEvJmH pomlMFQ28IJ7zW7MJ69ygLSBtBa52wgKQYu1GJ/CcWp6zpzPaT73rtJBHbKSRLRn YfUsYxBgsFznF4u8+lJyA0RW1WvFp+jiAFBxGk44mPuxLasP3l8+HMtXUUhKhnW4 kwXPoperb7QxcGNAhLkxxHgYjl40TRhEvmp//vdsyj+3Zipl2cpziPApVdHUbqDj paIfejFsiihGqX5mTU7YcHAIvJkK/w7aSHXVB8mnwTIUQqe0yvBSaIJYl4QnaQbL z4MVkn9lSfcAv2dRe0t7Co6jyNaKQBo= -----END CERTIFICATE-----Generated at Wed Feb 5 09:47:53 2025 by rpki-client