$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3bf29f4-b510-3aa9-a569-56467cbffd81.roa File: a3bf29f4-b510-3aa9-a569-56467cbffd81.roa (raw, json) Hash identifier: HBCs8qCVIFmjKi/XVpJmF3CS32w+itD7ra7zmLvA854= Subject key identifier: AE:A5:CF:00:D5:BF:4F:3E:E8:65:3E:8C:03:B2:05:4D:23:3D:97:AD Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858495CD6CA1DA2CAC7B11EB97AC0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3bf29f4-b510-3aa9-a569-56467cbffd81.roa Signing time: Sun 30 Mar 2025 19:00:58 +0000 ROA not before: Sun 30 Mar 2025 19:00:58 +0000 ROA not after: Sat 28 Jun 2025 19:00:58 +0000 asID: 44547 IP address blocks: 166.1.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:d6:ca:1d:a2:ca:c7:b1:1e:b9:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 30 19:00:58 2025 GMT Not After : Jun 28 19:00:58 2025 GMT Subject: CN=af143215-fb99-446f-9726-61df3e58a817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:42:7e:92:97:8e:23:67:24:df:06:06:a6: 6d:24:ed:6b:04:24:13:6f:f5:29:04:33:31:bb:45: 98:11:c6:76:11:b6:59:6e:75:2e:38:4a:c0:5e:b6: b4:b7:df:4b:4b:10:2a:6f:ae:6c:d8:50:5a:97:5f: 11:53:ba:79:a0:b1:1b:4a:4b:4f:6b:89:3a:ff:d8: f0:26:2d:0c:57:45:b9:4b:79:b8:c7:88:13:4f:c8: 4c:12:2e:0a:49:a9:45:72:4e:d8:24:91:b9:16:0d: 2d:11:92:7e:8a:4f:e7:26:12:64:4b:52:45:33:4c: 0b:5c:53:1a:44:b1:82:11:a8:b0:11:98:a4:64:4c: a2:93:50:cf:5f:2c:68:a1:c3:c7:ac:51:fd:fe:7c: 22:2a:97:ce:d5:32:f7:c4:04:dc:8b:93:3f:0d:2b: 83:3a:d5:e6:cf:95:13:2e:70:1b:04:c0:4f:80:d8: 4b:36:de:e2:ff:2a:b5:ef:bf:32:af:2e:8f:37:7f: b2:2b:63:09:64:77:ed:60:75:2a:a0:5b:63:13:60: 2d:6d:9f:6b:e8:19:90:01:64:3c:fb:33:3a:02:ab: a6:53:fd:f2:92:a2:96:4f:4c:22:bf:10:b5:a9:fa: eb:4d:14:f6:95:8e:59:e0:1a:30:a9:20:c8:ee:04: ec:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A5:CF:00:D5:BF:4F:3E:E8:65:3E:8C:03:B2:05:4D:23:3D:97:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3bf29f4-b510-3aa9-a569-56467cbffd81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:de:5a:6a:92:b6:fb:f0:08:96:3f:44:10:e6:b0:95:ec:9a: 4a:6b:1e:55:58:11:49:a0:58:d9:7d:2c:10:f1:cf:6f:e8:bd: d4:f8:26:45:c0:77:96:8c:2c:f2:5f:bf:ae:d9:99:6f:d6:b3: 5e:84:04:2d:6a:30:b2:9c:1a:97:2b:d8:c4:bd:68:5e:ba:95: 82:62:38:61:e5:8c:55:76:ac:4c:ee:b9:7e:ba:2b:9c:2d:26: e5:48:cb:34:b7:8d:36:ba:b0:c2:f1:8d:67:ba:80:9e:f1:80: 57:37:a8:8f:c0:c8:1e:a2:24:a9:66:f4:4b:c4:dd:d5:ec:44: 7a:a3:66:7a:84:1a:79:21:92:b5:46:3c:a1:d4:ef:d7:48:21: 88:58:71:ed:6c:87:69:5a:34:f3:a7:bf:00:dc:e4:2b:e7:ec: 0a:0b:1e:76:88:16:26:fc:07:94:04:07:c1:9a:07:45:35:f0: cf:c4:27:7a:4a:49:04:78:83:9d:b6:68:97:6e:df:92:82:25: 65:5e:80:bf:a3:63:93:b4:8c:2d:0f:1e:4a:ef:f5:77:7f:4f: 73:4c:19:85:40:9b:b0:06:76:45:b1:48:b5:86:7d:b7:20:7d: 13:83:a2:1e:45:77:63:0b:d9:3d:c7:24:24:40:f6:00:fc:c1: 54:00:6b:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElc1sodosrHsR65esAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDMzMDE5MDA1OFoXDTI1MDYyODE5MDA1OFowLzEtMCsGA1UEAxMk YWYxNDMyMTUtZmI5OS00NDZmLTk3MjYtNjFkZjNlNThhODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+9CfpKXjiNnJN8GBqZtJO1rBCQTb/UpBDMx u0WYEcZ2EbZZbnUuOErAXra0t99LSxAqb65s2FBal18RU7p5oLEbSktPa4k6/9jw Ji0MV0W5S3m4x4gTT8hMEi4KSalFck7YJJG5Fg0tEZJ+ik/nJhJkS1JFM0wLXFMa RLGCEaiwEZikZEyik1DPXyxoocPHrFH9/nwiKpfO1TL3xATci5M/DSuDOtXmz5UT LnAbBMBPgNhLNt7i/yq1778yry6PN3+yK2MJZHftYHUqoFtjE2AtbZ9r6BmQAWQ8 +zM6AqumU/3ykqKWT0wivxC1qfrrTRT2lY5Z4BowqSDI7gTsrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6lzwDVv08+6GU+jAOyBU0jPZetMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTNiZjI5ZjQtYjUxMC0z YWE5LWE1NjktNTY0NjdjYmZmZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELeWmqStvvwCJY/RBDmsJXsmkprHlVYEUmgWNl9LBDxz2/ovdT4JkXA d5aMLPJfv67ZmW/Ws16EBC1qMLKcGpcr2MS9aF66lYJiOGHljFV2rEzuuX66K5wt JuVIyzS3jTa6sMLxjWe6gJ7xgFc3qI/AyB6iJKlm9EvE3dXsRHqjZnqEGnkhkrVG PKHU79dIIYhYce1sh2laNPOnvwDc5Cvn7AoLHnaIFib8B5QEB8GaB0U18M/EJ3pK SQR4g522aJdu35KCJWVegL+jY5O0jC0PHkrv9Xd/T3NMGYVAm7AGdkWxSLWGfbcg fRODoh5Fd2ML2T3HJCRA9gD8wVQAazM= -----END CERTIFICATE-----Generated at Sat Apr 12 18:44:27 2025 by rpki-client