$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d68d6d32-c5a9-3ff8-9e1b-fc1ec5d3fb01.roa File: d68d6d32-c5a9-3ff8-9e1b-fc1ec5d3fb01.roa (raw, json) Hash identifier: qgM73K7jMgLZVBJZbyi8w/vCOPgspSm9gs3+JJC71Rw= Subject key identifier: 3F:B2:97:9C:67:1B:74:4E:21:52:7D:4B:8C:87:9D:36:7E:CF:1F:32 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858494F93EFB569AA2767740CD000 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d68d6d32-c5a9-3ff8-9e1b-fc1ec5d3fb01.roa Signing time: Wed 26 Mar 2025 01:00:40 +0000 ROA not before: Wed 26 Mar 2025 01:00:40 +0000 ROA not after: Tue 24 Jun 2025 01:00:40 +0000 asID: 8881 IP address blocks: 166.0.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:93:ef:b5:69:aa:27:67:74:0c:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 26 01:00:40 2025 GMT Not After : Jun 24 01:00:40 2025 GMT Subject: CN=d2552ecb-39d2-4771-9bb8-ab4eaa6d4f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:82:b1:e5:25:a6:8e:0e:db:9b:82:06:9f: 9d:bc:c0:0c:e5:f9:fc:1c:ab:f7:c9:62:f9:a7:92: 65:b4:74:7f:cc:54:7b:51:7a:48:74:9c:13:6f:d4: c6:c4:47:11:f2:e2:9c:9a:de:e6:03:07:85:d8:82: f4:cb:a9:e7:b3:67:41:4a:3d:44:9f:25:5f:36:57: 01:6e:65:54:66:d6:ce:15:d9:65:1c:e9:81:0e:56: 77:6d:25:db:0e:7e:4c:4c:fe:47:43:9f:f1:b9:55: c7:99:8f:3e:71:9d:df:7b:b0:2b:ac:d4:9a:08:83: 57:c4:bb:04:05:d6:c2:eb:54:6e:25:8a:91:96:36: 4c:d7:8b:cf:47:e1:01:23:f1:b4:b1:df:6d:f3:9d: f6:1a:68:9b:ee:dc:4e:61:ec:c8:3b:61:78:22:ed: 2e:a1:59:cb:22:2f:94:9e:f4:2e:49:06:9f:5b:48: 0a:cb:1e:5b:9b:21:00:f7:1f:b1:d6:2d:4f:40:ff: 06:e9:69:a6:21:42:3b:88:b4:52:60:bc:b0:aa:5b: 86:d7:db:d2:f0:98:c5:bf:92:54:6e:cd:ad:24:51: 70:8d:9b:dd:e2:f6:5f:74:cd:2b:a2:0c:77:22:5e: dc:5a:b1:c4:c3:8b:d2:18:37:70:f7:85:0e:24:5a: f7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B2:97:9C:67:1B:74:4E:21:52:7D:4B:8C:87:9D:36:7E:CF:1F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d68d6d32-c5a9-3ff8-9e1b-fc1ec5d3fb01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b0:e7:1b:1d:da:4c:2a:41:11:8e:15:98:6b:4b:c2:46:80: 1b:9b:0b:aa:5f:08:35:bc:5d:f7:7c:51:f6:61:db:a1:f8:5b: 71:63:b1:ab:45:db:4e:30:5d:7e:3a:00:de:6f:76:08:1a:fd: 49:87:5f:50:37:3e:03:ba:d6:38:76:e0:ba:6f:f7:2a:a6:07: 0a:c9:ac:86:1f:82:0b:ed:03:7c:05:0a:ce:23:d1:c8:9f:18: 53:dd:77:2c:cb:5c:44:41:23:0a:31:30:d1:7f:84:6c:72:d2: 29:05:f7:09:f8:e9:ff:f0:be:c0:fa:f2:f1:0b:68:a3:57:95: 85:0d:39:3c:25:7e:8d:c2:d5:cd:b6:83:62:a9:40:db:2f:9d: 10:64:f7:ef:b7:23:68:a2:49:c3:17:4a:82:f3:26:40:f5:97: 1d:8e:b2:55:bf:d6:d1:d8:c1:b9:97:2f:e5:97:b2:a5:04:ad: f3:76:10:04:0d:ee:31:c7:02:f0:19:f4:fa:77:d4:76:e4:2a: 01:41:d1:b6:77:71:0d:70:b8:eb:b2:dd:2b:66:7d:1e:97:fa: 51:16:a7:c4:df:32:63:78:4a:5a:87:71:5e:42:9d:6b:20:73: b8:bd:e7:8d:a6:53:b9:64:f0:aa:47:93:9f:ff:2f:f2:90:8c: cb:c3:5f:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPk++1aaonZ3QM0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk ZDI1NTJlY2ItMzlkMi00NzcxLTliYjgtYWI0ZWFhNmQ0ZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO6CseUlpo4O25uCBp+dvMAM5fn8HKv3yWL5 p5JltHR/zFR7UXpIdJwTb9TGxEcR8uKcmt7mAweF2IL0y6nns2dBSj1EnyVfNlcB bmVUZtbOFdllHOmBDlZ3bSXbDn5MTP5HQ5/xuVXHmY8+cZ3fe7ArrNSaCINXxLsE BdbC61RuJYqRljZM14vPR+EBI/G0sd9t8532Gmib7txOYezIO2F4Iu0uoVnLIi+U nvQuSQafW0gKyx5bmyEA9x+x1i1PQP8G6WmmIUI7iLRSYLywqluG19vS8JjFv5JU bs2tJFFwjZvd4vZfdM0rogx3Il7cWrHEw4vSGDdw94UOJFr3RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+yl5xnG3ROIVJ9S4yHnTZ+zx8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDY4ZDZkMzItYzVhOS0z ZmY4LTllMWItZmMxZWM1ZDNmYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6w5xsd2kwqQRGOFZhrS8JGgBubC6pfCDW8Xfd8UfZh26H4W3FjsatF 204wXX46AN5vdgga/UmHX1A3PgO61jh24Lpv9yqmBwrJrIYfggvtA3wFCs4j0cif GFPddyzLXERBIwoxMNF/hGxy0ikF9wn46f/wvsD68vELaKNXlYUNOTwlfo3C1c22 g2KpQNsvnRBk9++3I2iiScMXSoLzJkD1lx2OslW/1tHYwbmXL+WXsqUErfN2EAQN 7jHHAvAZ9Pp31HbkKgFB0bZ3cQ1wuOuy3StmfR6X+lEWp8TfMmN4SlqHcV5CnWsg c7i9542mU7lk8KpHk5//L/KQjMvDX8Q= -----END CERTIFICATE-----Generated at Sat Apr 12 15:07:02 2025 by rpki-client