$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7d41cee-6c33-3ece-a1b8-255484ad8e40.roa File: b7d41cee-6c33-3ece-a1b8-255484ad8e40.roa (raw, json) Hash identifier: xRQZ5uXBcWSS65a2Sr36CjxI8X7NQiRq2dy3bVwZAJY= Subject key identifier: DF:75:B5:41:E0:12:B8:0C:FC:9C:23:A0:D7:29:70:97:27:F6:79:E6 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849F346FEF09E136792FA901700 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7d41cee-6c33-3ece-a1b8-255484ad8e40.roa Signing time: Fri 23 May 2025 16:18:18 +0000 ROA not before: Fri 23 May 2025 16:18:18 +0000 ROA not after: Thu 21 Aug 2025 16:18:18 +0000 asID: 16509 IP address blocks: 108.165.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f3:46:fe:f0:9e:13:67:92:fa:90:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: May 23 16:18:18 2025 GMT Not After : Aug 21 16:18:18 2025 GMT Subject: CN=b3d2681c-8ac4-4b20-9ab1-b38fcc8de197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:43:72:52:6b:e5:2e:c4:f0:65:3b:9e:f3:0f: 10:f1:fc:4c:9e:3e:20:e3:e3:4f:53:5d:81:44:3f: 8e:fd:a0:dd:b2:13:5f:7e:b1:db:d4:13:ab:60:1f: 8c:d7:fb:e5:8f:ac:a2:80:9a:a3:29:fb:b1:f6:4a: 40:4b:20:58:0f:ea:10:6c:eb:63:20:ee:d9:c0:ae: 4f:af:12:74:27:b4:e6:06:1c:db:b6:00:00:b6:2c: 60:ae:57:f4:42:c7:71:d3:f7:30:2c:74:c0:e1:52: cd:38:16:69:41:2c:9a:47:a0:a2:06:79:60:21:b4: ca:93:2a:7a:a0:a2:7f:8a:37:13:7c:29:b0:d7:61: 3a:33:b4:c1:1f:cf:94:22:ff:8f:34:5c:63:75:53: 28:4f:f2:f1:d7:33:9b:42:24:1a:4a:57:c4:88:db: 3d:0f:46:7b:53:38:dd:8e:70:1a:d1:12:fd:48:2d: 4e:02:42:85:80:62:3a:5f:d2:98:e1:39:d1:66:f4: 1b:2f:b7:33:5f:1d:4f:07:53:14:31:99:d9:8d:7d: 91:41:85:7f:7f:89:19:7b:2b:79:7a:be:9a:89:6f: 9d:dc:17:0f:0e:c9:01:34:8e:b2:df:ae:dd:f8:54: 4a:1c:fd:1a:50:b8:8d:19:9e:d8:ff:bf:e7:72:9e: fc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:75:B5:41:E0:12:B8:0C:FC:9C:23:A0:D7:29:70:97:27:F6:79:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7d41cee-6c33-3ece-a1b8-255484ad8e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:88:f8:91:a3:74:3e:b0:40:a6:94:e2:5e:9c:dc:06:a5:58: f6:83:fa:20:aa:a0:ef:87:02:8f:89:29:0b:8f:b3:fa:6c:53: 0f:a1:29:47:d8:20:4f:68:c3:25:c9:7b:30:de:f3:fd:4e:77: 4e:b3:5d:08:e0:6b:1f:80:2f:86:21:df:fa:f0:dc:a8:79:6c: 2b:e9:fc:76:f7:8f:ee:86:3e:f2:49:ff:c0:46:18:af:52:bb: 2f:37:8e:df:bc:c6:fb:06:7a:7c:55:09:6b:1f:84:b8:33:67: 73:e5:f3:24:d4:39:e8:27:92:88:3d:65:ad:c7:5c:d2:0f:83: a1:97:a2:83:42:aa:0b:01:76:b7:d2:b6:94:b0:e1:16:ad:8b: 77:67:21:ee:42:03:91:89:46:73:ca:10:36:13:c3:13:b4:7d: 73:eb:eb:ce:9c:1a:2e:76:9a:29:b2:18:c3:27:71:25:31:b7: 63:3d:91:88:45:48:d0:33:86:43:bf:a9:10:79:d2:c9:66:c4: b8:fb:e4:b9:57:94:dd:1a:d2:bd:1d:1c:9c:c9:0f:ce:d1:81: 09:35:a8:37:bc:0d:99:89:00:65:d3:82:10:11:5b:5e:fc:59: 83:f9:2f:e5:bd:64:fb:23:a1:7e:9d:61:a2:b7:f7:97:69:ce: 84:da:e2:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnzRv7wnhNnkvqQFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDUyMzE2MTgxOFoXDTI1MDgyMTE2MTgxOFowLzEtMCsGA1UEAxMk YjNkMjY4MWMtOGFjNC00YjIwLTlhYjEtYjM4ZmNjOGRlMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kNyUmvlLsTwZTue8w8Q8fxMnj4g4+NPU12B RD+O/aDdshNffrHb1BOrYB+M1/vlj6yigJqjKfux9kpASyBYD+oQbOtjIO7ZwK5P rxJ0J7TmBhzbtgAAtixgrlf0Qsdx0/cwLHTA4VLNOBZpQSyaR6CiBnlgIbTKkyp6 oKJ/ijcTfCmw12E6M7TBH8+UIv+PNFxjdVMoT/Lx1zObQiQaSlfEiNs9D0Z7Uzjd jnAa0RL9SC1OAkKFgGI6X9KY4TnRZvQbL7czXx1PB1MUMZnZjX2RQYV/f4kZeyt5 er6aiW+d3BcPDskBNI6y367d+FRKHP0aULiNGZ7Y/7/ncp78uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN91tUHgErgM/JwjoNcpcJcn9nnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjdkNDFjZWUtNmMzMy0z ZWNlLWExYjgtMjU1NDg0YWQ4ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaI+JGjdD6wQKaU4l6c3AalWPaD+iCqoO+HAo+JKQuPs/psUw+hKUfY IE9owyXJezDe8/1Od06zXQjgax+AL4Yh3/rw3Kh5bCvp/Hb3j+6GPvJJ/8BGGK9S uy83jt+8xvsGenxVCWsfhLgzZ3Pl8yTUOegnkog9Za3HXNIPg6GXooNCqgsBdrfS tpSw4Rati3dnIe5CA5GJRnPKEDYTwxO0fXPr686cGi52mimyGMMncSUxt2M9kYhF SNAzhkO/qRB50slmxLj75LlXlN0a0r0dHJzJD87RgQk1qDe8DZmJAGXTghARW178 WYP5L+W9ZPsjoX6dYaK395dpzoTa4no= -----END CERTIFICATE-----Generated at Fri Jun 6 04:40:18 2025 by rpki-client