$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2d8b628-ecb9-3f6c-860d-4018879be580.roa File: d2d8b628-ecb9-3f6c-860d-4018879be580.roa (raw, json) Hash identifier: Rol9AiLNl9I5wp55XISy5r0jP7eCZB1Eml+R1pjEvz4= Subject key identifier: A5:41:FE:76:78:04:E6:20:AA:F9:8F:A7:5B:47:81:C9:D0:41:7B:6E Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849D80535EA98D0B1C70FBB3A80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2d8b628-ecb9-3f6c-860d-4018879be580.roa Signing time: Tue 13 May 2025 21:58:56 +0000 ROA not before: Tue 13 May 2025 21:58:56 +0000 ROA not after: Mon 11 Aug 2025 21:58:56 +0000 asID: 7385 IP address blocks: 166.0.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:05:35:ea:98:d0:b1:c7:0f:bb:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: May 13 21:58:56 2025 GMT Not After : Aug 11 21:58:56 2025 GMT Subject: CN=c7e7a0e9-95f5-401d-aaf0-ed3e8df9c23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:98:ba:67:bd:9c:39:b1:35:3a:21:41:5d:68: f4:a3:1c:cb:4d:65:09:83:d5:90:fd:c2:17:45:f4: ff:c5:d9:31:bb:19:01:92:d5:25:be:3c:f4:ac:99: 1a:ee:9c:30:b5:f7:d8:de:16:ec:64:58:65:cb:12: 58:db:75:d4:3b:70:cf:5f:e3:2e:2d:ee:69:71:8a: 4a:46:04:30:54:5b:d7:c6:e3:60:e9:ad:5d:4d:db: 4f:67:4e:56:58:99:31:ab:3a:fd:ad:0d:28:2b:63: ed:a4:73:82:93:d7:42:33:54:92:6e:f0:fa:5c:bf: c6:cd:cd:95:c4:54:74:cf:81:9a:38:80:1d:b2:b0: 2f:09:9a:e1:6b:0c:90:77:16:97:6d:c6:ea:bb:2d: 16:21:c4:a0:3d:da:51:5f:19:a9:e7:17:9d:52:97: 01:5f:66:a6:99:3e:00:51:9d:e3:77:49:c8:8f:d4: 38:16:95:ef:71:f2:9e:48:29:3f:65:dc:97:3d:f2: 66:fd:0b:24:58:b9:af:cc:81:7a:e1:d7:74:12:89: a0:85:aa:82:fa:75:98:b9:2f:3a:f4:0e:25:d3:8f: 66:ad:c8:bc:85:1d:0a:f7:c9:d8:4b:25:e2:71:f2: 62:39:b3:71:b6:e5:c8:85:22:8c:c1:71:58:f6:6c: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:41:FE:76:78:04:E6:20:AA:F9:8F:A7:5B:47:81:C9:D0:41:7B:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d2d8b628-ecb9-3f6c-860d-4018879be580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:24:3c:91:c4:05:75:70:db:af:79:fb:aa:4d:0f:ca:66:af: 22:e1:a2:5d:ad:93:e4:f6:d6:d2:10:cf:b4:e4:b0:7f:e9:51: 3d:b1:88:5b:76:33:1a:38:6d:b2:85:61:6e:77:ae:37:37:4c: 5b:69:74:8f:f0:a8:14:94:b0:66:31:da:31:8f:50:a0:6f:30: 65:87:ea:fe:51:fc:64:38:4b:07:4c:59:ce:73:84:b1:e2:4a: 99:6c:ca:c7:d2:e6:ac:dc:43:ca:ca:80:67:27:f2:d0:ce:88: 80:ec:f3:92:fa:4b:63:bd:16:6f:d4:fc:70:aa:5c:8f:66:1d: f2:fe:1b:7b:34:a8:dd:b7:ef:6e:18:c3:c0:62:c9:0d:87:aa: fe:9c:b4:11:91:e8:b1:6a:20:ac:ac:a0:26:e2:ea:a3:67:e8: 59:56:c1:a5:35:25:95:0e:69:da:79:8d:ed:3c:9c:35:f3:03: 58:6c:34:84:3b:4c:aa:a6:28:36:23:99:c0:90:25:c1:5d:ee: 80:44:8a:a0:74:02:3f:04:18:67:48:57:86:72:9f:14:28:65: dd:1c:20:43:28:9f:ce:7c:de:fe:9f:50:d4:9a:56:72:96:16: d6:af:1f:ea:fe:bb:53:f3:02:8c:36:4d:22:ff:78:b3:e4:a5: 05:15:68:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYBTXqmNCxxw+7OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDUxMzIxNTg1NloXDTI1MDgxMTIxNTg1NlowLzEtMCsGA1UEAxMk YzdlN2EwZTktOTVmNS00MDFkLWFhZjAtZWQzZThkZjljMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5i6Z72cObE1OiFBXWj0oxzLTWUJg9WQ/cIX RfT/xdkxuxkBktUlvjz0rJka7pwwtffY3hbsZFhlyxJY23XUO3DPX+MuLe5pcYpK RgQwVFvXxuNg6a1dTdtPZ05WWJkxqzr9rQ0oK2PtpHOCk9dCM1SSbvD6XL/Gzc2V xFR0z4GaOIAdsrAvCZrhawyQdxaXbcbquy0WIcSgPdpRXxmp5xedUpcBX2ammT4A UZ3jd0nIj9Q4FpXvcfKeSCk/ZdyXPfJm/QskWLmvzIF64dd0EomghaqC+nWYuS86 9A4l049mrci8hR0K98nYSyXicfJiObNxtuXIhSKMwXFY9mybUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVB/nZ4BOYgqvmPp1tHgcnQQXtuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDJkOGI2MjgtZWNiOS0z ZjZjLTg2MGQtNDAxODg3OWJlNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFskPJHEBXVw2695+6pND8pmryLhol2tk+T21tIQz7TksH/pUT2xiFt2 Mxo4bbKFYW53rjc3TFtpdI/wqBSUsGYx2jGPUKBvMGWH6v5R/GQ4SwdMWc5zhLHi SplsysfS5qzcQ8rKgGcn8tDOiIDs85L6S2O9Fm/U/HCqXI9mHfL+G3s0qN23724Y w8BiyQ2Hqv6ctBGR6LFqIKysoCbi6qNn6FlWwaU1JZUOadp5je08nDXzA1hsNIQ7 TKqmKDYjmcCQJcFd7oBEiqB0Aj8EGGdIV4ZynxQoZd0cIEMon8583v6fUNSaVnKW FtavH+r+u1PzAow2TSL/eLPkpQUVaOY= -----END CERTIFICATE-----Generated at Sun Jun 8 06:02:27 2025 by rpki-client