$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/820c3470-ae66-3ec2-9e91-8dda015233cd.roa File: 820c3470-ae66-3ec2-9e91-8dda015233cd.roa (raw, json) Hash identifier: PW+RQ1gKYZyTcEVt91naSjrd+0fJjAqvxl2gWUr72ls= Subject key identifier: 80:67:05:F8:B6:87:F6:82:A3:7F:B1:7B:28:2C:0E:C8:BF:10:3E:1B Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849ABB4966F3C1DD59FEBBD6AC0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/820c3470-ae66-3ec2-9e91-8dda015233cd.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 401152 IP address blocks: 166.0.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:96:6f:3c:1d:d5:9f:eb:bd:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=b71b0314-6d69-471d-be12-43ddc471a4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7e:1a:aa:e5:ae:a1:4e:09:52:80:bd:a6:a2: d8:54:2c:0b:d2:0b:59:62:94:c4:2b:37:b2:bc:de: 3f:fb:58:a7:2f:b8:a6:f1:f0:22:75:f0:e7:6c:96: 09:76:c7:fc:ca:5d:21:85:32:08:ad:09:24:4c:20: 8f:56:e2:57:63:83:58:91:5a:6c:3c:d9:3f:14:cd: ea:9f:47:91:cc:06:cc:b2:a0:3d:22:25:15:be:ab: e0:3b:b4:22:d3:5d:59:72:ac:aa:93:7f:be:11:ff: 8b:f4:db:0f:34:36:97:63:ee:46:aa:42:77:90:3e: b8:3e:d0:14:5b:ab:33:dc:f1:3b:ca:8b:0b:26:b1: 6e:62:06:41:5f:ea:7c:60:15:25:21:13:18:08:89: b8:33:d9:af:83:3a:b6:3a:dc:76:9a:7a:0c:29:b1: 10:e0:0e:1b:55:f3:c2:53:ef:a6:c5:ef:df:d2:d8: 1a:39:bb:3d:0c:93:32:f8:3c:64:7a:64:c7:ec:af: f9:47:1e:22:a3:7c:ad:02:83:45:8e:75:4d:25:50: 5b:2c:97:a2:3b:dd:39:19:b3:a1:4c:fd:2a:de:32: cc:21:d0:37:65:cf:46:e9:be:c5:30:ab:7c:f7:0e: 0e:ef:46:d6:cc:13:99:c6:a8:6b:fe:99:d2:ae:cd: 30:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:67:05:F8:B6:87:F6:82:A3:7F:B1:7B:28:2C:0E:C8:BF:10:3E:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/820c3470-ae66-3ec2-9e91-8dda015233cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e2:3a:cf:9c:72:87:cd:e6:9c:72:15:69:2f:06:5b:5d:f7: fe:44:20:fb:31:4b:09:c2:c6:b4:ec:da:74:f4:da:dc:0c:f0: 81:14:77:1c:79:c2:d4:dd:cd:f4:ee:a1:ca:eb:d1:bf:49:79: 1f:15:93:b7:35:92:c3:82:c3:6f:b7:00:51:cd:51:d6:61:4c: ae:bd:d1:4d:19:2e:97:d8:e7:8d:33:27:55:1a:9a:9a:db:18: 3e:80:59:63:4f:9f:9c:3e:f1:ae:97:6c:43:ac:80:cd:32:ad: f5:48:24:40:33:8d:05:7c:d5:27:72:c5:66:e6:31:17:08:40: ee:8c:31:9f:3f:7c:3a:1d:96:e4:e1:9a:06:9e:db:f1:63:9c: f7:cf:b9:47:3c:30:e4:d7:70:56:cc:6c:5c:30:98:a0:ae:4d: 43:9c:5d:82:fe:9c:a8:d6:ff:76:79:c0:c3:4e:e0:73:40:ff: 66:32:9c:a9:f0:c2:33:62:8e:a4:79:4d:10:e8:87:1b:9f:14: 02:61:a3:48:7f:7f:e4:f6:ee:32:63:24:f0:02:95:ee:81:93: 05:32:17:d0:43:fb:13:00:4f:87:ec:d9:ee:8d:ae:75:11:15: 57:8e:f1:a8:b7:20:0d:f9:86:36:57:78:49:4e:3c:f5:57:76: 1c:62:d4:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJZvPB3Vn+u9asAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YjcxYjAzMTQtNmQ2OS00NzFkLWJlMTItNDNkZGM0NzFhNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH4aquWuoU4JUoC9pqLYVCwL0gtZYpTEKzey vN4/+1inL7im8fAidfDnbJYJdsf8yl0hhTIIrQkkTCCPVuJXY4NYkVpsPNk/FM3q n0eRzAbMsqA9IiUVvqvgO7Qi011Zcqyqk3++Ef+L9NsPNDaXY+5GqkJ3kD64PtAU W6sz3PE7yosLJrFuYgZBX+p8YBUlIRMYCIm4M9mvgzq2Otx2mnoMKbEQ4A4bVfPC U++mxe/f0tgaObs9DJMy+DxkemTH7K/5Rx4io3ytAoNFjnVNJVBbLJeiO905GbOh TP0q3jLMIdA3Zc9G6b7FMKt89w4O70bWzBOZxqhr/pnSrs0wjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBnBfi2h/aCo3+xeygsDsi/ED4bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODIwYzM0NzAtYWU2Ni0z ZWMyLTllOTEtOGRkYTAxNTIzM2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgBvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADiOs+ccofN5pxyFWkvBltd9/5EIPsxSwnCxrTs2nT02twM8IEUdxx5 wtTdzfTuocrr0b9JeR8Vk7c1ksOCw2+3AFHNUdZhTK690U0ZLpfY540zJ1Uamprb GD6AWWNPn5w+8a6XbEOsgM0yrfVIJEAzjQV81SdyxWbmMRcIQO6MMZ8/fDodluTh mgae2/FjnPfPuUc8MOTXcFbMbFwwmKCuTUOcXYL+nKjW/3Z5wMNO4HNA/2YynKnw wjNijqR5TRDohxufFAJho0h/f+T27jJjJPACle6BkwUyF9BD+xMAT4fs2e6NrnUR FVeO8ai3IA35hjZXeElOPPVXdhxi1E0= -----END CERTIFICATE-----Generated at Fri May 9 06:08:38 2025 by rpki-client