$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0a7e8a4-eaa5-3136-a7dc-4fa9e85fb38f.roa File: c0a7e8a4-eaa5-3136-a7dc-4fa9e85fb38f.roa (raw, json) Hash identifier: kVRQKDEtVUFFmDaRiU9Kcg6Mty5pSi/bTdKPEYAoQMg= Subject key identifier: 6D:73:99:91:18:A9:E4:C0:4E:78:7E:66:DF:05:D1:DF:80:36:94:DD Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584961B9996B77BC64E07967AD40 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0a7e8a4-eaa5-3136-a7dc-4fa9e85fb38f.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 61112 IP address blocks: 166.0.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:99:6b:77:bc:64:e0:79:67:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=67ac7289-0ae6-4241-bd78-842743028df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4d:8e:ea:9a:ca:f3:46:21:6b:c5:67:5c:16: 74:96:7e:66:0e:4a:e7:c7:69:be:48:a1:33:d3:90: c4:c0:6b:56:a3:70:43:a5:4a:e6:26:43:99:44:75: a1:21:52:ee:73:ba:12:b5:1d:91:ac:a5:8f:bd:f0: 3d:62:9b:54:e6:44:94:aa:f8:08:fa:f5:8e:5e:4a: 48:d5:19:18:a6:43:5f:78:e4:e1:34:36:9a:28:e5: a0:fe:d0:87:db:0d:6e:7a:da:ef:45:a9:7e:22:1f: 24:6f:2e:5d:b8:a7:8a:9f:9d:e0:35:29:c5:23:e5: 59:cf:49:a1:65:1f:1d:74:f6:42:fb:67:9b:d2:21: 39:d7:14:16:df:b8:f1:80:6a:57:17:b4:56:68:dd: 59:48:77:d8:74:5a:6c:07:fd:22:97:5f:44:51:b9: 37:9f:2b:ab:01:cc:ec:59:f8:f1:3d:a9:60:3e:b2: f9:3f:2a:17:cb:e7:a4:5f:b7:30:4f:c5:4f:09:81: 90:26:d7:06:0c:5e:e2:4c:ec:a7:41:8a:38:1a:e7: e1:bc:b5:b7:d7:dc:e7:e8:c3:c7:de:16:79:02:c9: 75:08:c4:a0:b0:78:0c:2a:4c:0f:29:f4:6d:48:06: 9d:53:ae:8d:ba:a4:3f:92:a8:c2:a6:9a:fd:1d:42: 3e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:73:99:91:18:A9:E4:C0:4E:78:7E:66:DF:05:D1:DF:80:36:94:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0a7e8a4-eaa5-3136-a7dc-4fa9e85fb38f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:f5:2c:a9:61:4e:f2:43:56:be:cf:3d:88:52:5d:1a:30:77: 7b:84:64:97:b1:d0:a9:7e:80:b7:d4:e7:5b:d7:0e:03:0a:9a: 30:b8:75:4b:80:97:5c:dd:3e:79:32:d9:8a:0e:d9:8d:2a:25: 73:fa:51:fc:5c:e6:42:16:c7:74:6c:ce:0b:ee:27:7b:22:ca: e7:ad:04:20:ed:0c:11:1c:9e:e7:d5:96:4b:4a:bb:7d:64:67: 90:7e:7f:da:84:16:11:9d:75:15:a6:2c:3f:d3:04:9c:ab:33: 32:41:2e:ef:4d:48:cd:ef:ff:2d:ad:49:75:2d:6d:d1:57:0a: ff:95:24:39:bc:a1:8a:79:ca:04:f4:7d:84:72:7f:ab:f6:f2: 87:05:5a:d0:07:4a:0b:b6:89:90:35:3b:8a:56:8b:e5:fd:95: 5e:9b:97:4d:6a:8d:08:4b:a7:a1:d8:45:ff:12:72:0f:76:07: da:cd:e6:c2:d0:dc:c8:62:56:a2:92:78:56:0e:4b:35:b6:88: 72:05:a1:df:ad:e0:db:58:90:aa:e2:00:a7:e7:e5:36:17:66: e9:ee:29:8b:83:42:e8:8b:5c:62:c3:20:08:c1:41:2d:06:7c: a0:95:af:46:bc:a4:ff:1e:ac:10:f1:fc:68:50:20:4a:9b:65: 47:30:ed:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZlrd7xk4HlnrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NjdhYzcyODktMGFlNi00MjQxLWJkNzgtODQyNzQzMDI4ZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn02O6prK80Yha8VnXBZ0ln5mDkrnx2m+SKEz 05DEwGtWo3BDpUrmJkOZRHWhIVLuc7oStR2RrKWPvfA9YptU5kSUqvgI+vWOXkpI 1RkYpkNfeOThNDaaKOWg/tCH2w1uetrvRal+Ih8kby5duKeKn53gNSnFI+VZz0mh ZR8ddPZC+2eb0iE51xQW37jxgGpXF7RWaN1ZSHfYdFpsB/0il19EUbk3nyurAczs WfjxPalgPrL5PyoXy+ekX7cwT8VPCYGQJtcGDF7iTOynQYo4GufhvLW319zn6MPH 3hZ5Asl1CMSgsHgMKkwPKfRtSAadU66NuqQ/kqjCppr9HUI+VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1zmZEYqeTATnh+Zt8F0d+ANpTdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzBhN2U4YTQtZWFhNS0z MTM2LWE3ZGMtNGZhOWU4NWZiMzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpgDGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK71LKlhTvJDVr7PPYhSXRowd3uEZJex0Kl+gLfU51vXDgMKmjC4dUuA l1zdPnky2YoO2Y0qJXP6Ufxc5kIWx3RszgvuJ3siyuetBCDtDBEcnufVlktKu31k Z5B+f9qEFhGddRWmLD/TBJyrMzJBLu9NSM3v/y2tSXUtbdFXCv+VJDm8oYp5ygT0 fYRyf6v28ocFWtAHSgu2iZA1O4pWi+X9lV6bl01qjQhLp6HYRf8Scg92B9rN5sLQ 3MhiVqKSeFYOSzW2iHIFod+t4NtYkKriAKfn5TYXZunuKYuDQuiLXGLDIAjBQS0G fKCVr0a8pP8erBDx/GhQIEqbZUcw7bc= -----END CERTIFICATE-----Generated at Sat Apr 5 12:14:42 2025 by rpki-client