$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0a22cbc-4317-3be5-834f-3d7116d02be4.roa File: d0a22cbc-4317-3be5-834f-3d7116d02be4.roa (raw, json) Hash identifier: zCqJjCmLLX9R7uTwXXPxIMgYZVPwRn5hgQ9NmUDR9GE= Subject key identifier: 2E:45:7C:1F:06:52:86:20:3A:15:CE:B1:6D:38:D4:42:E2:7F:3E:CB Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848A9962E8FFF8D7047B6B63840 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0a22cbc-4317-3be5-834f-3d7116d02be4.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 21859 IP address blocks: 108.165.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:2e:8f:ff:8d:70:47:b6:b6:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=9d8a1244-e6a8-423e-ae2d-5c52cf1dacfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:13:89:ad:38:d3:2a:28:71:7b:8a:fe:31:a3: e5:fa:32:05:bd:b0:cd:a7:bc:d0:32:43:7f:56:a6: 62:9d:21:72:68:0a:e9:4c:43:21:48:35:9f:db:e0: cf:e0:a2:da:2f:6f:4f:b9:cf:b8:f4:57:67:47:ad: e3:b3:bf:c5:a1:29:bc:74:34:7e:dd:5c:31:b8:15: 8a:21:ce:71:64:77:57:b2:64:da:ca:46:b3:20:8d: c7:2a:19:06:e4:0a:49:4b:f4:c9:87:2a:c1:85:4d: 76:6e:37:ad:21:e9:d2:64:9f:ff:bf:35:9a:50:d0: 40:23:f7:ec:e1:8b:b1:62:c3:10:ae:fe:47:b9:d7: 75:13:de:e9:39:ea:0b:59:f4:99:37:e9:bb:23:2d: c9:97:4e:18:ca:1d:db:4f:d8:c1:21:03:d5:fe:54: 3a:9e:d1:87:88:ea:f1:0c:57:59:9e:19:58:68:af: 50:6f:02:41:3a:43:b8:68:34:00:a2:69:b8:db:a1: c3:8d:19:da:5b:57:53:86:d9:78:a7:0b:27:87:97: e5:be:ef:4a:80:ad:21:51:47:f1:e5:d8:d0:fb:66: f8:69:ea:14:a7:83:50:c6:b1:e5:45:97:a7:86:3c: b2:d2:86:01:b7:f2:b5:67:59:5d:16:0c:10:87:b6: e9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:45:7C:1F:06:52:86:20:3A:15:CE:B1:6D:38:D4:42:E2:7F:3E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0a22cbc-4317-3be5-834f-3d7116d02be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c0:94:10:cc:36:72:8a:94:f3:bc:db:9a:d2:22:79:33:a7: 01:ba:a7:5d:ea:a6:34:89:93:58:6b:c6:b2:9f:9c:24:6a:35: 99:73:45:86:a0:53:be:d8:64:1c:52:0c:18:66:ff:d2:5b:66: 86:2e:ae:6e:5a:4c:19:41:87:d6:a4:71:da:a6:68:ae:9b:55: 53:80:50:ff:33:f4:9f:e5:c3:1b:96:73:2d:7d:e9:9b:ae:bf: d3:33:7f:c1:5b:41:17:f0:88:01:2a:92:ce:ef:ca:75:0c:56: da:e3:36:6d:bd:94:80:69:a4:14:97:b6:02:7e:b5:ce:b0:1e: 3e:42:f1:36:91:c1:84:07:4c:33:05:85:eb:f3:13:33:6e:0d: 58:c5:e7:63:c4:0d:8f:45:04:e5:9d:39:81:26:3d:40:2c:fa: c3:e6:3b:8a:c7:49:a7:c1:7f:ba:6c:66:be:e0:54:24:91:ec: 9a:c4:8b:cb:1d:51:c7:d0:ed:54:ad:e2:c9:30:fe:d7:88:3f: 79:d6:03:1f:53:1d:fe:b9:fc:01:90:73:dc:2a:20:59:5b:d5: 7f:76:35:83:80:ec:17:ac:eb:55:cc:54:f2:52:84:a9:f6:27: 56:3b:6c:a6:58:8b:eb:1f:32:30:f5:c9:a0:35:e3:7b:e2:ba: 7f:80:b0:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipli6P/41wR7a2OEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk OWQ4YTEyNDQtZTZhOC00MjNlLWFlMmQtNWM1MmNmMWRhY2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxOJrTjTKihxe4r+MaPl+jIFvbDNp7zQMkN/ VqZinSFyaArpTEMhSDWf2+DP4KLaL29Puc+49FdnR63js7/FoSm8dDR+3VwxuBWK Ic5xZHdXsmTaykazII3HKhkG5ApJS/TJhyrBhU12bjetIenSZJ//vzWaUNBAI/fs 4YuxYsMQrv5Hudd1E97pOeoLWfSZN+m7Iy3Jl04Yyh3bT9jBIQPV/lQ6ntGHiOrx DFdZnhlYaK9QbwJBOkO4aDQAomm426HDjRnaW1dThtl4pwsnh5flvu9KgK0hUUfx 5djQ+2b4aeoUp4NQxrHlRZenhjyy0oYBt/K1Z1ldFgwQh7bpXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5FfB8GUoYgOhXOsW041ELifz7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDBhMjJjYmMtNDMxNy0z YmU1LTgzNGYtM2Q3MTE2ZDAyYmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELAlBDMNnKKlPO825rSInkzpwG6p13qpjSJk1hrxrKfnCRqNZlzRYag U77YZBxSDBhm/9JbZoYurm5aTBlBh9akcdqmaK6bVVOAUP8z9J/lwxuWcy196Zuu v9Mzf8FbQRfwiAEqks7vynUMVtrjNm29lIBppBSXtgJ+tc6wHj5C8TaRwYQHTDMF hevzEzNuDVjF52PEDY9FBOWdOYEmPUAs+sPmO4rHSafBf7psZr7gVCSR7JrEi8sd UcfQ7VSt4skw/teIP3nWAx9THf65/AGQc9wqIFlb1X92NYOA7Bes61XMVPJShKn2 J1Y7bKZYi+sfMjD1yaA143viun+AsK0= -----END CERTIFICATE-----Generated at Sat Apr 12 07:54:26 2025 by rpki-client