$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd005e06-3e2e-3129-8a92-12bc5da79f59.roa File: cd005e06-3e2e-3129-8a92-12bc5da79f59.roa (raw, json) Hash identifier: euXmd4cmmsWJqAZCy9JD/M+A2hGSlNohQRIfHFhOF8c= Subject key identifier: 5C:E0:5B:C9:CD:31:E2:2D:9E:F0:00:57:70:86:F8:60:69:09:86:15 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848F22C25AA9C6ABEEDA97EAFC8 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd005e06-3e2e-3129-8a92-12bc5da79f59.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 58061 IP address blocks: 166.0.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:25:aa:9c:6a:be:ed:a9:7e:af:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=5327814f-9d1c-40a8-af93-f76782c269cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:43:25:68:8a:50:75:7a:b4:bd:c2:88:2f:fd: 8a:8d:4b:ca:15:54:d4:3b:44:33:56:70:04:a8:2f: fa:d4:13:a9:d9:32:19:c6:a4:31:e5:38:5b:94:96: c4:9f:9e:1d:e7:0e:ac:83:f8:66:6d:a3:26:06:a2: 88:de:9b:88:44:3d:03:b2:ed:44:f0:83:36:7b:3f: 9e:57:9e:57:ee:db:a8:cf:19:ce:99:71:eb:0c:85: 79:fa:09:56:51:7c:ee:b4:56:ee:21:8d:a9:e6:f5: 76:83:b0:f0:af:f9:e4:d7:77:be:46:6b:b7:60:94: 22:26:c0:0d:23:e1:3d:e0:b7:c7:fd:be:39:ca:f1: 01:e0:09:d5:58:b0:9a:b6:89:18:0d:e5:f9:26:73: 0d:08:0d:53:c7:aa:85:f0:c3:63:7d:53:21:06:55: d3:6f:fb:0d:07:d4:5a:78:07:76:4b:f0:0c:bf:07: 50:7e:73:46:9d:5e:2f:6d:c0:00:f1:6b:35:28:66: 97:f3:cf:90:e2:f8:d2:85:59:89:52:4f:ef:09:15: bd:97:85:3a:e2:46:7b:e5:80:91:cd:52:ac:43:92: ba:b7:dc:35:d7:3f:fb:1e:3e:7b:ae:78:e9:0e:35: 27:e0:d9:77:2a:c6:a6:a5:c3:14:f6:a6:79:f6:da: ef:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E0:5B:C9:CD:31:E2:2D:9E:F0:00:57:70:86:F8:60:69:09:86:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd005e06-3e2e-3129-8a92-12bc5da79f59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c2:df:3e:6a:11:af:c5:c0:5a:ab:f9:44:4d:04:9c:3d:03: 0b:78:de:d7:08:ba:f6:c1:0e:d0:8a:0a:ad:2d:d0:77:43:76: e4:d5:95:ae:e9:6f:1f:0f:a3:f9:b2:bb:f3:07:6e:fd:98:57: 64:1a:ff:43:ea:be:72:82:c1:a6:e2:82:15:6b:33:80:53:e0: 92:18:0c:17:33:e3:01:70:42:90:0e:84:6a:1b:b7:f5:87:08: 43:47:d4:b5:6f:07:96:2d:4b:0f:71:94:7c:2b:b8:0c:88:50: 17:ee:e6:66:e7:44:08:1b:17:bb:45:8c:7a:9c:86:e4:2c:7a: e3:d4:5a:5a:65:3c:3c:82:72:4f:fb:7b:54:0f:71:24:ba:76: a2:66:61:d9:7f:ce:28:3e:fc:08:c8:28:52:59:e9:7e:21:ae: 03:cc:a8:26:5b:d0:54:60:76:db:e8:db:90:6a:99:46:12:3f: 0a:7c:bf:ab:82:64:52:97:f3:97:a5:bd:24:f3:77:4c:ca:17: fd:74:21:e9:c7:96:a4:61:62:fa:d0:2d:d7:cd:f1:40:b3:03: ea:2d:36:4c:98:fa:85:0d:df:48:b2:c6:5b:2b:86:08:69:f0: 98:e5:d1:d8:09:fe:71:4a:69:6a:bb:4c:0d:7f:63:bd:2f:a1: cc:d5:e1:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLCWqnGq+7al+r8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NTMyNzgxNGYtOWQxYy00MGE4LWFmOTMtZjc2NzgyYzI2OWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEMlaIpQdXq0vcKIL/2KjUvKFVTUO0QzVnAE qC/61BOp2TIZxqQx5ThblJbEn54d5w6sg/hmbaMmBqKI3puIRD0Dsu1E8IM2ez+e V55X7tuozxnOmXHrDIV5+glWUXzutFbuIY2p5vV2g7Dwr/nk13e+Rmu3YJQiJsAN I+E94LfH/b45yvEB4AnVWLCatokYDeX5JnMNCA1Tx6qF8MNjfVMhBlXTb/sNB9Ra eAd2S/AMvwdQfnNGnV4vbcAA8Ws1KGaX88+Q4vjShVmJUk/vCRW9l4U64kZ75YCR zVKsQ5K6t9w11z/7Hj57rnjpDjUn4Nl3KsampcMU9qZ59trvjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzgW8nNMeItnvAAV3CG+GBpCYYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvY2QwMDVlMDYtM2UyZS0z MTI5LThhOTItMTJiYzVkYTc5ZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDC3z5qEa/FwFqr+URNBJw9Awt43tcIuvbBDtCKCq0t0HdDduTVla7p bx8Po/myu/MHbv2YV2Qa/0PqvnKCwabighVrM4BT4JIYDBcz4wFwQpAOhGobt/WH CENH1LVvB5YtSw9xlHwruAyIUBfu5mbnRAgbF7tFjHqchuQseuPUWlplPDyCck/7 e1QPcSS6dqJmYdl/zig+/AjIKFJZ6X4hrgPMqCZb0FRgdtvo25BqmUYSPwp8v6uC ZFKX85elvSTzd0zKF/10IenHlqRhYvrQLdfN8UCzA+otNkyY+oUN30iyxlsrhghp 8Jjl0dgJ/nFKaWq7TA1/Y70voczV4SM= -----END CERTIFICATE-----Generated at Sat Apr 5 16:04:16 2025 by rpki-client