$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb63cbae-e2e0-3be3-81d9-614ddec12712.roa File: cb63cbae-e2e0-3be3-81d9-614ddec12712.roa (raw, json) Hash identifier: V5z/4COZrX30J6hlRo8NJ86tLi1dPX80ScZx9upA9dM= Subject key identifier: 36:2D:DB:C6:A0:AE:72:ED:F2:61:1F:10:F2:52:DB:7E:B8:31:66:DA Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858496A81FA4C6EE660F187C4B6B0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb63cbae-e2e0-3be3-81d9-614ddec12712.roa Signing time: Fri 04 Apr 2025 16:31:24 +0000 ROA not before: Fri 04 Apr 2025 16:31:24 +0000 ROA not after: Thu 03 Jul 2025 16:31:24 +0000 asID: 401152 IP address blocks: 166.0.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:81:fa:4c:6e:e6:60:f1:87:c4:b6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 4 16:31:24 2025 GMT Not After : Jul 3 16:31:24 2025 GMT Subject: CN=5037815d-afa7-4cd6-a8a2-9372acea02b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b0:53:4a:06:c1:32:53:97:8c:a6:d6:00:d7: 38:fc:62:85:cd:d4:7b:e7:36:1c:97:a3:43:b0:34: 7e:e0:f1:82:66:de:08:34:88:bc:42:7b:02:fd:60: c3:fc:6c:7a:6e:f5:f8:90:2f:82:84:a7:af:53:6f: 6a:41:ce:c8:d1:38:09:9e:b0:f6:70:fb:2d:d5:76: 61:50:00:71:11:ac:f3:fa:c4:7a:e2:11:1d:94:86: e7:ca:81:6d:b3:43:4b:a3:6c:e7:1f:dd:59:53:96: 14:48:3c:9b:04:53:ba:24:1c:12:d6:c0:c9:69:46: ec:37:9a:83:37:3a:9e:fc:58:51:09:3a:fe:19:81: af:e8:2c:9d:c9:3f:be:1c:3d:cd:5d:27:b5:27:1e: 9b:74:25:bd:70:69:c8:47:c1:36:10:b8:2d:f4:bb: a0:19:cc:d3:06:d8:53:1b:87:5e:33:ca:cc:c1:a2: a3:9e:fb:53:56:bc:cf:a7:5e:bb:41:d2:25:bd:f1: 71:77:67:fc:2c:d9:c1:b7:da:07:2d:7d:ec:2e:91: eb:38:65:ed:fd:c9:10:aa:92:63:86:80:bb:f4:3b: 2d:25:9b:98:6f:31:ee:eb:a7:8d:90:c6:f6:1c:32: f3:45:c5:4d:4a:9e:6c:ef:a7:67:a1:5b:73:76:d4: 91:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2D:DB:C6:A0:AE:72:ED:F2:61:1F:10:F2:52:DB:7E:B8:31:66:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cb63cbae-e2e0-3be3-81d9-614ddec12712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c6:0b:b4:9a:ef:c5:b4:e7:b7:3a:bb:8e:d3:8c:49:ad:7e: 36:68:1e:2d:d0:d5:9b:d0:88:1d:60:63:75:6a:d6:df:8c:5b: fe:e8:51:21:8e:35:23:59:84:d1:70:7a:72:b3:36:0b:9d:87: 90:d7:39:32:20:df:ed:e7:43:8c:74:45:ae:5b:72:8b:13:8d: 3a:a2:12:92:ba:fb:e6:56:0d:2f:76:eb:a1:51:d2:65:6c:ac: 37:5d:d8:c0:1c:08:d9:07:5e:20:6a:3a:92:58:88:d2:c9:00: f0:b1:fa:9a:36:d6:b4:ad:cc:b7:4b:df:ac:f7:2f:42:47:70: 5e:05:19:34:9b:66:2f:86:b7:2f:ec:f6:b6:da:c7:a5:0a:fa: 44:27:72:f6:a2:c1:80:60:67:05:ac:c8:f0:e1:7a:fd:a2:f4: d2:15:a8:7a:94:bc:8f:0d:1c:ec:0e:83:96:3d:1f:8f:bd:0a: fa:68:3d:a3:9b:b2:ee:fd:85:65:5b:c3:85:e8:33:93:eb:27: b9:30:63:e3:bb:32:c8:2e:a7:9b:b0:49:ce:07:eb:9c:f9:96: 55:85:58:52:6d:aa:64:be:7d:29:90:79:48:aa:97:70:c5:ad: 80:3e:12:70:6b:aa:7f:1b:c7:f7:bf:d6:33:b3:dc:f7:59:0e: 0c:37:4c:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqgfpMbuZg8YfEtrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDQwNDE2MzEyNFoXDTI1MDcwMzE2MzEyNFowLzEtMCsGA1UEAxMk NTAzNzgxNWQtYWZhNy00Y2Q2LWE4YTItOTM3MmFjZWEwMmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLBTSgbBMlOXjKbWANc4/GKFzdR75zYcl6ND sDR+4PGCZt4INIi8QnsC/WDD/Gx6bvX4kC+ChKevU29qQc7I0TgJnrD2cPst1XZh UABxEazz+sR64hEdlIbnyoFts0NLo2znH91ZU5YUSDybBFO6JBwS1sDJaUbsN5qD Nzqe/FhRCTr+GYGv6CydyT++HD3NXSe1Jx6bdCW9cGnIR8E2ELgt9LugGczTBthT G4deM8rMwaKjnvtTVrzPp167QdIlvfFxd2f8LNnBt9oHLX3sLpHrOGXt/ckQqpJj hoC79DstJZuYbzHu66eNkMb2HDLzRcVNSp5s76dnoVtzdtSR8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYt28agrnLt8mEfEPJS2364MWbaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvY2I2M2NiYWUtZTJlMC0z YmUzLTgxZDktNjE0ZGRlYzEyNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnGC7Sa78W057c6u47TjEmtfjZoHi3Q1ZvQiB1gY3Vq1t+MW/7oUSGO NSNZhNFwenKzNgudh5DXOTIg3+3nQ4x0Ra5bcosTjTqiEpK6++ZWDS9266FR0mVs rDdd2MAcCNkHXiBqOpJYiNLJAPCx+po21rStzLdL36z3L0JHcF4FGTSbZi+Gty/s 9rbax6UK+kQncvaiwYBgZwWsyPDhev2i9NIVqHqUvI8NHOwOg5Y9H4+9CvpoPaOb su79hWVbw4XoM5PrJ7kwY+O7Msgup5uwSc4H65z5llWFWFJtqmS+fSmQeUiql3DF rYA+EnBrqn8bx/e/1jOz3PdZDgw3TFM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:08:01 2025 by rpki-client