$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/764a6e9a-be88-367c-96ad-34dac58cb3d1.roa File: 764a6e9a-be88-367c-96ad-34dac58cb3d1.roa (raw, json) Hash identifier: ESPEzqaYSSCUT8PGVR4o5qdkp7qeLTEMNkWKbTZqBn4= Subject key identifier: A3:F6:0E:88:42:9A:1A:7D:E4:EA:EF:7A:DA:CF:0D:33:6D:E7:A1:B2 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848F00C76764AD0359AFF0C2480 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/764a6e9a-be88-367c-96ad-34dac58cb3d1.roa Signing time: Wed 19 Feb 2025 19:46:00 +0000 ROA not before: Wed 19 Feb 2025 19:46:00 +0000 ROA not after: Tue 20 May 2025 18:46:00 +0000 asID: 62240 IP address blocks: 166.1.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:0c:76:76:4a:d0:35:9a:ff:0c:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 19 19:46:00 2025 GMT Not After : May 20 18:46:00 2025 GMT Subject: CN=6fcea02a-d004-4bfb-8ddf-b1baefa2a5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:94:63:21:ad:2c:92:90:12:28:88:82:c4:c1: cf:25:95:3f:26:f5:8b:73:4a:cd:37:f7:9e:07:44: 23:f1:ff:10:0b:82:8f:4b:a0:36:f6:6f:84:54:f4: 46:9e:84:7e:6e:b0:03:5a:a3:53:36:ad:af:24:b7: 42:95:e8:a4:d7:2d:ff:20:7a:5c:1b:b3:b2:21:e8: 93:b9:3f:d9:f6:93:84:b9:d8:56:d5:35:ae:e5:40: 97:fa:b8:b5:3e:85:a4:8d:cd:5a:96:67:8e:23:d3: c6:43:d5:03:2a:ea:db:16:08:18:6e:19:6b:05:30: 34:ea:ef:3e:26:e2:6f:bc:2c:60:1a:89:62:ea:10: fd:64:1e:17:75:27:57:1e:92:a2:d7:5c:27:d2:8e: 76:f7:99:80:33:6f:23:64:03:42:c6:c6:6f:b1:fb: ec:9c:04:1a:68:35:c5:26:93:55:92:8f:50:42:62: 42:9b:5a:c4:89:22:71:17:f6:d3:23:b2:c4:93:01: 0c:01:13:85:9e:73:64:f7:52:d4:d1:64:e9:c6:21: f4:d0:0e:90:1d:e6:dd:f5:53:90:59:f8:00:81:c2: bb:0f:3e:91:69:2e:dd:e7:e4:ec:91:cc:fa:50:23: 24:f6:e5:db:e6:bf:f7:c6:21:7a:ac:17:f6:c8:6d: d0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F6:0E:88:42:9A:1A:7D:E4:EA:EF:7A:DA:CF:0D:33:6D:E7:A1:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/764a6e9a-be88-367c-96ad-34dac58cb3d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:6c:8d:d1:31:f4:52:99:e4:66:6d:a3:d2:eb:5e:fd:ad:ba: 58:83:c3:50:52:6f:f0:ba:d8:4c:f4:2c:0c:43:91:64:4d:8b: 8e:a9:c0:5b:e6:99:e9:bc:6d:ee:be:65:51:9e:dc:ef:5c:9b: 22:0e:0a:5b:e2:8b:a2:aa:f0:ca:be:3e:a2:97:8b:b8:fb:14: 2d:1f:da:bc:9b:b8:5c:36:5e:66:4b:35:39:94:b2:9d:0a:5f: 6b:d9:7e:bc:bb:16:51:46:a0:b4:83:14:ce:61:0e:0c:9e:0a: a5:76:3d:c4:e2:7c:a5:c3:4b:e1:99:e9:b2:3d:ad:c7:3f:58: 3a:ac:72:db:ad:9c:a5:65:40:94:6b:9b:2e:68:91:5f:aa:0d: 9d:ae:ab:15:dc:d6:54:c7:8b:4e:db:c7:55:07:10:df:02:48: b1:cd:c5:53:60:00:ae:6a:d1:9d:96:96:42:9f:5a:8f:d3:81: 1a:18:b8:df:c9:a0:cb:6e:88:17:78:e4:71:ae:09:5f:ef:49: 39:45:3f:e5:17:70:13:68:a2:8e:50:96:73:46:d3:21:96:80: 88:ad:b3:54:ea:3b:5a:55:cb:1f:de:be:30:ea:1c:7d:0f:65: 39:9a:65:70:cf:03:69:54:81:aa:15:e5:8f:51:42:c8:1c:2d: 84:4d:7f:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwDHZ2StA1mv8MJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIxOTE5NDYwMFoXDTI1MDUyMDE4NDYwMFowLzEtMCsGA1UEAxMk NmZjZWEwMmEtZDAwNC00YmZiLThkZGYtYjFiYWVmYTJhNWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZRjIa0skpASKIiCxMHPJZU/JvWLc0rNN/ee B0Qj8f8QC4KPS6A29m+EVPRGnoR+brADWqNTNq2vJLdCleik1y3/IHpcG7OyIeiT uT/Z9pOEudhW1TWu5UCX+ri1PoWkjc1almeOI9PGQ9UDKurbFggYbhlrBTA06u8+ JuJvvCxgGoli6hD9ZB4XdSdXHpKi11wn0o5295mAM28jZANCxsZvsfvsnAQaaDXF JpNVko9QQmJCm1rEiSJxF/bTI7LEkwEMAROFnnNk91LU0WTpxiH00A6QHebd9VOQ WfgAgcK7Dz6RaS7d5+Tskcz6UCMk9uXb5r/3xiF6rBf2yG3QVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP2DohCmhp95OrvetrPDTNt56GyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzY0YTZlOWEtYmU4OC0z NjdjLTk2YWQtMzRkYWM1OGNiM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlsjdEx9FKZ5GZto9LrXv2tuliDw1BSb/C62Ez0LAxDkWRNi46pwFvm mem8be6+ZVGe3O9cmyIOClvii6Kq8Mq+PqKXi7j7FC0f2rybuFw2XmZLNTmUsp0K X2vZfry7FlFGoLSDFM5hDgyeCqV2PcTifKXDS+GZ6bI9rcc/WDqsctutnKVlQJRr my5okV+qDZ2uqxXc1lTHi07bx1UHEN8CSLHNxVNgAK5q0Z2WlkKfWo/TgRoYuN/J oMtuiBd45HGuCV/vSTlFP+UXcBNooo5QlnNG0yGWgIits1TqO1pVyx/evjDqHH0P ZTmaZXDPA2lUgaoV5Y9RQsgcLYRNf80= -----END CERTIFICATE-----Generated at Thu Apr 3 22:24:32 2025 by rpki-client