$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa File: dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa (raw, json) Hash identifier: JzSq4GpSIYzcp/6WZ9BmJq3HJxZI/BJ/vz3X7EYfVNc= Subject key identifier: DC:60:DD:C7:E2:33:F3:B6:8A:AD:F6:C0:E7:BD:7D:09:2A:05:CA:DE Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848D4DB933801635080656FC9A0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa Signing time: Mon 10 Feb 2025 02:00:38 +0000 ROA not before: Mon 10 Feb 2025 02:00:38 +0000 ROA not after: Sun 11 May 2025 01:00:38 +0000 asID: 6939 IP address blocks: 166.0.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d4:db:93:38:01:63:50:80:65:6f:c9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 10 02:00:38 2025 GMT Not After : May 11 01:00:38 2025 GMT Subject: CN=de7c39f4-27bf-443f-a95c-1fec6778f7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:40:1c:dd:9f:bd:d9:ab:ca:b9:b6:ea:f2:5f: 8a:95:a1:af:bf:b8:f3:43:ae:63:6a:6e:4c:3f:20: 28:3a:ce:19:00:8e:fe:19:8a:03:6b:92:32:54:db: 21:4b:97:a6:e0:ae:0b:1c:c8:a8:2e:d2:96:9e:cc: 30:ad:eb:4b:fc:66:45:c4:52:2d:f4:e2:24:84:8c: 61:26:d0:fa:f8:2e:d8:ac:46:f8:29:b2:4a:4b:52: a4:fe:db:de:14:c7:34:93:92:83:c6:e1:7a:2f:bd: 46:4f:48:1d:b8:85:32:a2:32:cb:1e:f8:43:17:5e: 06:2c:9b:0b:69:1a:ba:31:c9:37:e1:e3:69:e8:09: 0a:86:e6:e3:28:03:d2:d0:82:0e:e4:eb:49:53:25: 62:ec:02:bd:5c:dc:00:cb:b1:ef:d3:a9:18:f4:d2: c0:19:93:39:95:33:90:6e:69:76:5b:04:3a:11:db: f3:68:10:54:5a:97:fe:07:b5:5a:1f:49:13:79:e9: cb:57:98:12:16:1f:33:23:33:d5:30:de:1d:e0:86: c5:fe:54:a7:36:a9:ab:ac:66:7e:eb:8b:bb:56:97: 6a:c6:0e:c4:d6:4c:19:08:1d:bc:d2:15:0a:f8:a3: 89:9f:31:8e:b4:ad:01:2a:d2:2a:ea:02:0e:37:5d: bf:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:60:DD:C7:E2:33:F3:B6:8A:AD:F6:C0:E7:BD:7D:09:2A:05:CA:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:da:96:80:e0:8f:9a:04:c2:10:f8:f6:8e:63:f0:4b:be:92: 8e:dc:70:93:9d:eb:e5:1e:a5:5f:9b:19:b8:58:f1:e0:f4:bc: be:c0:a2:38:ca:cc:dc:8d:31:4f:8a:cb:f3:c5:da:58:59:91: 39:05:5f:c9:94:56:71:17:55:6e:f5:5d:f9:0a:19:a3:1d:47: a8:6a:85:48:9a:86:9e:25:47:4e:80:47:41:bc:d0:30:55:89: 1b:f7:74:80:c9:2b:c0:c2:be:40:af:1a:8d:80:f8:b1:fa:e4: a7:c6:88:2e:41:32:4d:14:da:5b:5f:c2:cc:b2:19:19:7e:f1: 97:04:39:75:d7:a7:80:0a:16:a8:ad:d8:c4:57:b5:70:eb:8a: 8f:3e:75:fd:5d:51:54:79:01:0a:c4:75:7a:20:42:1c:c1:98: 3e:51:f4:20:dc:64:a3:3b:1b:cb:8d:90:23:20:15:66:05:54: f9:c2:76:49:31:cf:3d:6c:b1:eb:86:61:fb:a4:63:1f:62:42: 85:ed:b6:5b:1b:11:72:f5:85:e0:70:5b:15:e6:2a:22:49:82: db:fd:d6:77:76:2f:3c:ed:93:d8:ac:46:02:a3:6e:6b:16:06: 91:f7:fd:72:01:f0:10:10:17:b8:b8:a0:85:1d:7d:55:26:3c: 12:46:81:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjU25M4AWNQgGVvyaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIxMDAyMDAzOFoXDTI1MDUxMTAxMDAzOFowLzEtMCsGA1UEAxMk ZGU3YzM5ZjQtMjdiZi00NDNmLWE5NWMtMWZlYzY3NzhmN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UAc3Z+92avKubbq8l+KlaGvv7jzQ65jam5M PyAoOs4ZAI7+GYoDa5IyVNshS5em4K4LHMioLtKWnswwretL/GZFxFIt9OIkhIxh JtD6+C7YrEb4KbJKS1Kk/tveFMc0k5KDxuF6L71GT0gduIUyojLLHvhDF14GLJsL aRq6Mck34eNp6AkKhubjKAPS0IIO5OtJUyVi7AK9XNwAy7Hv06kY9NLAGZM5lTOQ bml2WwQ6EdvzaBBUWpf+B7VaH0kTeenLV5gSFh8zIzPVMN4d4IbF/lSnNqmrrGZ+ 64u7Vpdqxg7E1kwZCB280hUK+KOJnzGOtK0BKtIq6gION12/MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxg3cfiM/O2iq32wOe9fQkqBcreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGZhOWVjMTQtZjhlNi0z NzVlLWEwNGQtZDc2NjRmZGZmZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPaloDgj5oEwhD49o5j8Eu+ko7ccJOd6+UepV+bGbhY8eD0vL7AojjK zNyNMU+Ky/PF2lhZkTkFX8mUVnEXVW71XfkKGaMdR6hqhUiahp4lR06AR0G80DBV iRv3dIDJK8DCvkCvGo2A+LH65KfGiC5BMk0U2ltfwsyyGRl+8ZcEOXXXp4AKFqit 2MRXtXDrio8+df1dUVR5AQrEdXogQhzBmD5R9CDcZKM7G8uNkCMgFWYFVPnCdkkx zz1sseuGYfukYx9iQoXttlsbEXL1heBwWxXmKiJJgtv91nd2Lzztk9isRgKjbmsW BpH3/XIB8BAQF7i4oIUdfVUmPBJGgS8= -----END CERTIFICATE-----Generated at Sat Apr 12 15:21:17 2025 by rpki-client