$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff87295b-4cac-3f7f-b7b5-da1faa650d0d.roa File: ff87295b-4cac-3f7f-b7b5-da1faa650d0d.roa (raw, json) Hash identifier: Brrjr0h7nddBNY4Jok1tWZVmMD9sXMxf06CjIi1XNHw= Subject key identifier: 48:9B:7F:85:85:6E:9D:77:5B:73:62:3E:EA:F0:C6:66:14:BF:90:C1 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848CBAFED285F55499531EC7C20 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff87295b-4cac-3f7f-b7b5-da1faa650d0d.roa Signing time: Thu 06 Feb 2025 19:10:27 +0000 ROA not before: Thu 06 Feb 2025 19:10:27 +0000 ROA not after: Wed 07 May 2025 18:10:27 +0000 asID: 401152 IP address blocks: 166.0.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:af:ed:28:5f:55:49:95:31:ec:7c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 6 19:10:27 2025 GMT Not After : May 7 18:10:27 2025 GMT Subject: CN=653e4304-e2e7-4cf8-b894-2f97f771d2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b5:d5:ed:4f:06:ce:88:81:dd:25:18:1c:2b: 8c:49:b9:10:68:fd:49:a2:38:91:de:d9:25:e7:28: d5:7c:84:0a:07:b3:e0:e3:5d:07:40:1f:1c:37:fc: 83:14:51:0f:30:84:22:b9:05:d1:79:43:b3:b3:7f: 60:09:e0:32:82:5a:11:4d:18:8c:1a:38:43:a8:40: 7f:a4:da:da:53:d6:aa:8f:f5:b3:53:9b:50:39:8b: b0:12:59:ac:21:12:95:7d:b9:be:a2:17:80:cb:67: d7:aa:82:c0:b8:ae:3c:1e:0b:1c:db:8a:03:70:e8: 07:b1:4b:c3:81:1b:14:3f:2d:70:c7:6a:93:32:c5: 3a:5b:51:c5:e7:0c:d7:c3:40:b4:7d:b2:36:ca:1e: 95:93:00:6e:08:77:89:d8:64:33:3c:71:db:37:18: 9d:2f:af:a3:4d:dd:02:d1:0b:92:15:12:ed:ff:5f: 9a:76:48:95:5a:df:e8:74:e8:97:07:4d:8b:11:09: 5b:78:ea:b9:ae:4d:08:3d:b7:84:33:38:31:a1:1f: a0:cb:31:9f:15:6e:2e:0d:84:7d:c3:ac:da:97:5b: 25:d9:8d:4b:c1:d8:19:e2:d6:17:b4:88:c5:4a:c9: 9f:f7:0d:a7:64:5b:09:bd:41:b5:23:74:a4:3a:5b: 64:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9B:7F:85:85:6E:9D:77:5B:73:62:3E:EA:F0:C6:66:14:BF:90:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff87295b-4cac-3f7f-b7b5-da1faa650d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:81:bd:ef:bf:b6:b8:f4:ae:e0:13:28:94:37:7f:ae:b3:a5: 54:0a:58:83:28:35:e4:99:b1:c9:0a:3f:63:f0:e1:6f:31:4f: 76:d8:6c:19:87:0b:04:7f:87:72:b8:77:f4:7c:f8:66:18:a7: 00:57:6c:a6:e7:81:a2:a1:83:62:94:1b:96:41:dd:d3:ee:17: 07:61:8e:bc:5d:d4:8f:c4:4a:8b:39:e2:d5:fd:11:d3:2e:bd: f6:88:99:50:83:a9:92:1d:60:4d:4b:f1:03:76:bc:c3:e6:f2: 3f:a6:d0:f2:9d:07:88:a4:a4:cc:83:22:e3:5e:8d:19:f1:42: f6:91:f4:69:3a:12:71:20:36:16:bc:10:fe:3c:f6:a3:ce:f7: 83:fc:a1:30:73:49:78:11:3d:dd:5e:e1:2d:3c:c6:24:2d:28: 69:d3:f5:65:44:dc:e6:28:a3:96:13:5b:a3:99:55:1b:05:ed: ed:7b:30:a9:d0:86:b1:89:c9:10:05:60:0a:fd:73:bf:09:18: 94:33:76:f0:4e:06:8b:f5:6b:30:98:30:41:0e:74:41:68:3c: 69:4c:37:8f:6d:bf:12:80:48:06:a1:3e:ca:fd:e1:12:2a:98: 97:95:38:44:1d:fd:2c:91:0c:ac:05:bb:f1:60:8f:6d:75:10: 81:18:04:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLr+0oX1VJlTHsfCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIwNjE5MTAyN1oXDTI1MDUwNzE4MTAyN1owLzEtMCsGA1UEAxMk NjUzZTQzMDQtZTJlNy00Y2Y4LWI4OTQtMmY5N2Y3NzFkMmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7XV7U8GzoiB3SUYHCuMSbkQaP1JojiR3tkl 5yjVfIQKB7Pg410HQB8cN/yDFFEPMIQiuQXReUOzs39gCeAygloRTRiMGjhDqEB/ pNraU9aqj/WzU5tQOYuwElmsIRKVfbm+oheAy2fXqoLAuK48Hgsc24oDcOgHsUvD gRsUPy1wx2qTMsU6W1HF5wzXw0C0fbI2yh6VkwBuCHeJ2GQzPHHbNxidL6+jTd0C 0QuSFRLt/1+adkiVWt/odOiXB02LEQlbeOq5rk0IPbeEMzgxoR+gyzGfFW4uDYR9 w6zal1sl2Y1LwdgZ4tYXtIjFSsmf9w2nZFsJvUG1I3SkOltknQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEibf4WFbp13W3NiPurwxmYUv5DBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmY4NzI5NWItNGNhYy0z ZjdmLWI3YjUtZGExZmFhNjUwZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSBve+/trj0ruATKJQ3f66zpVQKWIMoNeSZsckKP2Pw4W8xT3bYbBmH CwR/h3K4d/R8+GYYpwBXbKbngaKhg2KUG5ZB3dPuFwdhjrxd1I/ESos54tX9EdMu vfaImVCDqZIdYE1L8QN2vMPm8j+m0PKdB4ikpMyDIuNejRnxQvaR9Gk6EnEgNha8 EP489qPO94P8oTBzSXgRPd1e4S08xiQtKGnT9WVE3OYoo5YTW6OZVRsF7e17MKnQ hrGJyRAFYAr9c78JGJQzdvBOBov1azCYMEEOdEFoPGlMN49tvxKASAahPsr94RIq mJeVOEQd/SyRDKwFu/Fgj211EIEYBEc= -----END CERTIFICATE-----Generated at Sat Apr 5 09:50:19 2025 by rpki-client