$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c1f8a41-3833-384c-9ecc-66d3a47f3f24.roa File: 9c1f8a41-3833-384c-9ecc-66d3a47f3f24.roa (raw, json) Hash identifier: w7qeOMR71bJvZVw1W2mONxTSCm4R/WE6gEiVLy9X0/k= Subject key identifier: 44:7A:7D:B9:2B:EA:88:F7:9C:07:6E:C9:7A:11:EE:46:E7:BB:AB:16 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858496A81FA14983ECBDC5E1EE6BF Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c1f8a41-3833-384c-9ecc-66d3a47f3f24.roa Signing time: Fri 04 Apr 2025 16:31:24 +0000 ROA not before: Fri 04 Apr 2025 16:31:24 +0000 ROA not after: Thu 03 Jul 2025 16:31:24 +0000 asID: 401152 IP address blocks: 166.0.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:81:fa:14:98:3e:cb:dc:5e:1e:e6:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 4 16:31:24 2025 GMT Not After : Jul 3 16:31:24 2025 GMT Subject: CN=136e7716-e162-4176-adb6-3dc4a13c7a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:20:81:0e:a7:c8:e2:8d:a0:8e:80:46:95:2e: da:85:70:55:48:b5:d9:12:c1:b0:6c:2b:d8:87:59: 30:f8:e1:38:46:1e:ca:ef:23:af:8b:43:ca:8a:66: a3:58:b2:42:8e:1d:5b:6f:70:1b:b4:59:29:ac:9c: 98:a3:83:99:16:36:c2:9e:c7:e5:1b:8d:d5:f3:7b: 7a:14:17:4f:d8:86:de:5d:b8:d2:05:cb:33:0a:18: 6d:cc:40:c3:98:dd:21:03:b5:63:d9:01:42:b7:31: b4:16:b5:1f:72:2e:36:cd:1b:f7:15:29:5b:f0:d2: 44:c8:12:0f:e2:50:43:02:73:ad:18:95:01:6e:43: 0e:8e:c8:1a:be:6c:89:cb:af:90:12:97:28:40:bf: 78:5a:29:70:38:a5:45:68:dd:a6:88:39:81:6b:b7: b8:88:93:1c:a3:26:78:fa:53:e9:82:d9:3a:5b:9c: a3:37:8e:be:c1:ce:55:09:e6:00:a2:96:0a:c4:be: 0a:74:d4:fa:a3:4e:5c:be:98:fe:98:e1:24:62:6f: 50:5c:f4:69:e3:69:c6:cb:63:55:c6:a8:68:e2:13: 7e:0a:18:d7:ce:0f:06:58:3e:83:9c:71:c9:df:e7: b9:44:e1:2f:6e:c2:85:65:ff:6a:0f:54:76:e2:5e: 48:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7A:7D:B9:2B:EA:88:F7:9C:07:6E:C9:7A:11:EE:46:E7:BB:AB:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c1f8a41-3833-384c-9ecc-66d3a47f3f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:7f:93:1c:d2:d7:78:94:e3:c3:f7:5b:30:ff:e0:a4:cd:a3: 8c:7e:64:2a:9b:cb:59:57:a9:24:89:50:a4:32:3c:ce:ed:84: 9d:b0:5d:d9:33:38:78:fa:dc:80:32:b6:a5:1d:ed:72:5a:ba: fb:d1:36:cb:49:4b:8c:68:b2:4b:ba:b2:5b:5a:74:e0:cf:26: f1:2a:4d:fc:fc:7a:80:55:08:b6:c4:45:a3:fe:ed:d5:85:a9: a4:e8:93:2b:0a:23:1e:36:a7:9c:07:a1:dd:59:f0:28:dc:f8: 63:40:77:0c:98:bd:0a:5f:87:46:7e:53:d7:e3:3c:e4:67:04: eb:7f:8b:2d:b6:60:98:cf:40:fc:1d:fa:30:f8:02:74:1e:9d: e0:1f:60:7a:fe:0b:ef:44:d5:ea:1a:66:1f:fb:52:ea:88:c2: 29:df:01:51:42:50:b4:af:11:d9:e5:6b:68:9e:5a:34:af:1f: a4:40:f6:54:00:f5:15:91:04:35:e6:5c:c5:03:5f:99:4a:53: 50:a6:03:9e:bc:a5:21:2f:a9:66:d2:12:3d:8e:3e:42:8f:a2: ae:da:d5:5a:ef:36:1d:2f:35:7b:ec:50:00:e7:8b:36:9d:dc: ba:97:55:df:be:73:1c:80:61:17:02:9b:c0:b3:49:a8:6d:5d: b5:cd:d0:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqgfoUmD7L3F4e5r8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQwNDE2MzEyNFoXDTI1MDcwMzE2MzEyNFowLzEtMCsGA1UEAxMk MTM2ZTc3MTYtZTE2Mi00MTc2LWFkYjYtM2RjNGExM2M3YTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SCBDqfI4o2gjoBGlS7ahXBVSLXZEsGwbCvY h1kw+OE4Rh7K7yOvi0PKimajWLJCjh1bb3AbtFkprJyYo4OZFjbCnsflG43V83t6 FBdP2IbeXbjSBcszChhtzEDDmN0hA7Vj2QFCtzG0FrUfci42zRv3FSlb8NJEyBIP 4lBDAnOtGJUBbkMOjsgavmyJy6+QEpcoQL94WilwOKVFaN2miDmBa7e4iJMcoyZ4 +lPpgtk6W5yjN46+wc5VCeYAopYKxL4KdNT6o05cvpj+mOEkYm9QXPRp42nGy2NV xqho4hN+ChjXzg8GWD6DnHHJ3+e5ROEvbsKFZf9qD1R24l5ItQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFER6fbkr6oj3nAduyXoR7kbnu6sWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOWMxZjhhNDEtMzgzMy0z ODRjLTllY2MtNjZkM2E0N2YzZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ/kxzS13iU48P3WzD/4KTNo4x+ZCqby1lXqSSJUKQyPM7thJ2wXdkz OHj63IAytqUd7XJauvvRNstJS4xosku6sltadODPJvEqTfz8eoBVCLbERaP+7dWF qaTokysKIx42p5wHod1Z8Cjc+GNAdwyYvQpfh0Z+U9fjPORnBOt/iy22YJjPQPwd +jD4AnQeneAfYHr+C+9E1eoaZh/7UuqIwinfAVFCULSvEdnla2ieWjSvH6RA9lQA 9RWRBDXmXMUDX5lKU1CmA568pSEvqWbSEj2OPkKPoq7a1VrvNh0vNXvsUADnizad 3LqXVd++cxyAYRcCm8CzSahtXbXN0As= -----END CERTIFICATE-----Generated at Sat Apr 5 10:13:13 2025 by rpki-client