$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f0be3c13-0542-389c-8826-980eaf9212d9.roa File: f0be3c13-0542-389c-8826-980eaf9212d9.roa (raw, json) Hash identifier: QIQviIkRQpXxhGnoRfg9qgDuFWzz3JJwOCDUmZ6vFaU= Subject key identifier: 28:87:86:1B:C3:7E:E4:14:AC:45:9B:27:AE:ED:3A:F5:71:40:3F:92 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584930DE7BE5CCA49FF7D11AEDE0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f0be3c13-0542-389c-8826-980eaf9212d9.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 148996 IP address blocks: 108.165.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:7b:e5:cc:a4:9f:f7:d1:1a:ed:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=171f4d21-c74b-4c44-a832-27d00f54b8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2c:f4:da:af:c9:2d:d1:5b:11:76:65:26:04: 14:3d:7b:05:58:9e:62:5d:34:81:54:1b:b9:37:b5: 73:cf:ae:13:c6:69:fd:82:8e:fe:ec:66:f4:82:4c: a7:81:2e:4e:d0:41:5d:1f:54:e4:1c:25:ad:c2:43: f6:7d:b9:64:1a:6b:4b:32:ca:be:e1:cf:51:7f:61: a4:5e:e9:dc:ca:e1:4e:dc:07:f1:d6:ed:b6:11:36: 5b:69:74:db:95:50:9a:68:59:78:6e:e3:92:a2:a0: 32:9c:3d:21:27:9b:8c:c6:24:51:38:d2:49:df:68: 25:e9:11:12:33:52:2f:d5:c2:10:9c:18:7d:93:d2: 00:13:31:2d:12:d7:18:c0:c1:1d:28:90:f6:7e:d9: 8e:6b:56:73:b1:f5:67:f0:56:1d:21:65:59:20:23: 0a:64:32:99:8b:6c:1f:4c:ba:26:90:0a:f1:0c:05: d9:df:55:09:83:76:a9:8e:a7:e3:4a:4d:bb:d1:90: 9d:97:0c:80:13:2f:03:42:90:e1:86:41:4c:a1:56: 1d:87:68:59:92:82:db:21:b5:cd:77:b9:c2:58:9a: 4a:1a:8f:bb:56:4d:88:b5:10:f6:09:2c:e6:a1:06: b9:a2:b5:fe:02:18:b9:52:77:07:ac:9d:7d:ca:19: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:87:86:1B:C3:7E:E4:14:AC:45:9B:27:AE:ED:3A:F5:71:40:3F:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f0be3c13-0542-389c-8826-980eaf9212d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d5:9c:c2:6c:2f:19:1d:ce:ca:fc:7f:c1:91:bc:ec:40:2c: 5d:65:77:33:c9:64:bc:29:ed:54:46:3d:18:37:29:08:f9:8e: 16:e1:15:72:65:89:e7:13:54:bc:45:b5:76:22:ad:22:29:26: 40:86:ff:9c:a4:2a:95:5e:f0:3e:95:62:cd:42:e8:52:da:84: 4a:0b:4c:6d:fc:fe:2a:6b:8f:a7:c2:12:92:57:f0:da:fb:14: 3f:e5:aa:b3:9c:2c:7b:41:17:ad:24:d9:e4:8b:ee:27:99:b9: 00:fa:2b:d1:3f:46:71:1d:c0:58:5f:ba:ba:27:92:05:d3:11: b7:5a:ef:d2:97:91:fb:41:54:05:5b:f9:79:a5:4a:b7:70:11: f4:10:55:2f:ca:b0:f8:6d:7d:81:20:d7:f3:bf:1d:d9:63:d4: 61:c5:e3:5b:37:83:3b:03:26:fb:1c:cc:ff:49:9b:bd:3b:01: fd:b5:49:ff:a8:25:37:8f:c8:da:b2:68:be:b5:2e:3b:e4:bc: 8a:e5:9f:96:21:fd:74:da:3b:a0:9c:92:f2:08:92:2e:95:b4: 7b:8a:ce:23:39:4c:6c:93:66:6d:3c:ad:eb:12:70:f7:08:59: 73:9d:ef:23:a7:fd:c9:8c:42:63:ec:51:46:7e:b5:6e:e2:f1: 4d:8b:0d:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nvlzKSf99Ea7eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk MTcxZjRkMjEtYzc0Yi00YzQ0LWE4MzItMjdkMDBmNTRiOGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyz02q/JLdFbEXZlJgQUPXsFWJ5iXTSBVBu5 N7Vzz64Txmn9go7+7Gb0gkyngS5O0EFdH1TkHCWtwkP2fblkGmtLMsq+4c9Rf2Gk XuncyuFO3Afx1u22ETZbaXTblVCaaFl4buOSoqAynD0hJ5uMxiRRONJJ32gl6RES M1Iv1cIQnBh9k9IAEzEtEtcYwMEdKJD2ftmOa1ZzsfVn8FYdIWVZICMKZDKZi2wf TLomkArxDAXZ31UJg3apjqfjSk270ZCdlwyAEy8DQpDhhkFMoVYdh2hZkoLbIbXN d7nCWJpKGo+7Vk2ItRD2CSzmoQa5orX+Ahi5UncHrJ19yhnFZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiHhhvDfuQUrEWbJ67tOvVxQD+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjBiZTNjMTMtMDU0Mi0z ODljLTg4MjYtOTgwZWFmOTIxMmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnVnMJsLxkdzsr8f8GRvOxALF1ldzPJZLwp7VRGPRg3KQj5jhbhFXJl iecTVLxFtXYirSIpJkCG/5ykKpVe8D6VYs1C6FLahEoLTG38/iprj6fCEpJX8Nr7 FD/lqrOcLHtBF60k2eSL7ieZuQD6K9E/RnEdwFhfuronkgXTEbda79KXkftBVAVb +XmlSrdwEfQQVS/KsPhtfYEg1/O/Hdlj1GHF41s3gzsDJvsczP9Jm707Af21Sf+o JTePyNqyaL61LjvkvIrln5Yh/XTaO6CckvIIki6VtHuKziM5TGyTZm08resScPcI WXOd7yOn/cmMQmPsUUZ+tW7i8U2LDYw= -----END CERTIFICATE-----Generated at Mon Apr 7 15:45:47 2025 by rpki-client