$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/cbf8ced4-b50c-3c68-8095-663e97478832.roa File: cbf8ced4-b50c-3c68-8095-663e97478832.roa (raw, json) Hash identifier: R1a0otACM+qyvLwZtlQm3SmrkLIYByGTxHfZp9WoQlc= Subject key identifier: 7A:A3:0E:59:14:6A:C0:14:E8:1B:A7:A8:34:EF:A4:48:4D:6E:51:04 Certificate issuer: /CN=fc9e4738-7902-435b-802c-f37dc4b25f95 Certificate serial: 010D0C9F432858495632E42550802F7571409D80 Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/cbf8ced4-b50c-3c68-8095-663e97478832.roa Signing time: Fri 28 Mar 2025 09:55:53 +0000 ROA not before: Fri 28 Mar 2025 09:55:53 +0000 ROA not after: Thu 26 Jun 2025 09:55:53 +0000 asID: 199527 IP address blocks: 66.227.4.0/22 maxlen: 24 66.227.8.0/23 maxlen: 24 66.227.11.0/24 maxlen: 24 66.227.12.0/22 maxlen: 24 66.227.16.0/24 maxlen: 24 66.227.19.0/24 maxlen: 24 66.227.20.0/22 maxlen: 24 66.227.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:56:32:e4:25:50:80:2f:75:71:40:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95 Validity Not Before: Mar 28 09:55:53 2025 GMT Not After : Jun 26 09:55:53 2025 GMT Subject: CN=aefcfba3-a132-4a5a-97d6-d3d558a3cd5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:09:d7:97:68:5d:e3:07:9e:fe:4f:20:e6:35: 05:d7:2e:5c:80:c4:21:29:e5:e2:f9:c7:6d:73:58: 91:df:ca:e1:e9:f5:d5:db:67:8d:4b:25:8f:a7:6d: 0c:e7:63:c1:08:96:e8:2d:5e:24:a9:62:09:ad:58: 11:0c:4a:b3:9a:bf:b7:48:4a:ba:4e:1e:de:66:90: f9:aa:19:8b:ba:41:4c:af:b2:44:2e:0d:85:b3:57: 35:d0:27:d0:23:97:85:98:5e:d3:92:76:64:15:bd: 5a:61:66:85:9d:a1:23:20:76:d4:38:6b:82:fd:97: 48:9a:6d:48:f1:39:e9:3a:b9:52:57:85:b1:44:16: e6:d9:2e:95:17:a4:f8:84:6f:fc:5f:ef:07:43:63: e3:7e:e4:b7:be:72:62:f1:e2:b9:5a:60:96:6b:be: 02:0a:2a:95:d3:5f:ea:c4:ba:bf:1b:c4:1d:ab:58: 4a:9c:5a:db:81:70:31:e6:ca:f8:fd:5d:06:b4:56: d7:fa:0d:fe:56:8a:64:2d:a2:e0:cb:67:1a:64:c0: d7:d4:71:b0:fc:55:32:9a:dd:c4:86:bc:6e:fe:77: 4b:ff:61:d8:6e:d4:de:1f:6e:eb:57:c9:4a:be:ff: e3:f6:39:c1:9b:1e:52:b8:d5:4e:90:1d:e4:78:81: 80:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A3:0E:59:14:6A:C0:14:E8:1B:A7:A8:34:EF:A4:48:4D:6E:51:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/cbf8ced4-b50c-3c68-8095-663e97478832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl X509v3 Authority Key Identifier: keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer sbgp-ipAddrBlock: critical IPv4: 66.227.4.0-66.227.9.255 66.227.11.0-66.227.16.255 66.227.19.0-66.227.24.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:5b:21:f1:bd:c6:16:e4:4a:27:74:57:bb:4e:86:f7:37:4c: 8e:ce:ed:d9:64:01:42:9b:8a:b9:32:1b:d1:eb:c6:e6:b0:7b: 5c:02:77:09:47:00:f0:1f:dc:ad:43:4c:cd:d5:11:6d:72:91: ef:e0:ec:6a:c6:89:db:b2:39:1b:f1:c3:e5:ff:7f:4a:50:d4: 13:fc:51:fd:78:bf:3d:43:23:4c:2b:95:e2:98:e6:50:a0:cc: ba:10:b7:00:96:cf:61:71:eb:e0:87:46:c4:72:f1:a8:34:af: 2a:16:a3:44:31:2e:f9:53:ce:f5:b8:be:79:3b:01:43:73:22: ef:e7:10:e3:aa:9a:f2:00:9d:36:7e:9c:8f:d2:d2:34:3e:a4: 0f:de:da:d0:2a:81:ac:42:fc:27:7c:d8:ec:22:c7:7f:e1:bd: bb:3e:10:55:e9:c2:1a:22:e9:28:58:b8:98:91:23:96:87:b7: 9f:d0:25:c3:c8:b1:13:c4:08:52:da:71:5e:40:c0:a1:78:fd: 3e:38:59:af:71:df:14:0d:d0:92:f3:ef:4a:f3:0d:e0:39:5f: 33:2f:2e:cf:84:f7:0b:33:c4:fa:b7:b4:d3:37:f4:e5:c5:1a: e6:46:44:c9:a5:c9:2f:49:9f:3d:48:85:c3:d7:df:44:a2:f6: 09:28:a7:88 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWElWMuQlUIAvdXFAnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM5ZTQ3MzgtNzkwMi00MzViLTgwMmMtZjM3ZGM0YjI1 Zjk1MB4XDTI1MDMyODA5NTU1M1oXDTI1MDYyNjA5NTU1M1owLzEtMCsGA1UEAxMk YWVmY2ZiYTMtYTEzMi00YTVhLTk3ZDYtZDNkNTU4YTNjZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwnXl2hd4wee/k8g5jUF1y5cgMQhKeXi+cdt c1iR38rh6fXV22eNSyWPp20M52PBCJboLV4kqWIJrVgRDEqzmr+3SEq6Th7eZpD5 qhmLukFMr7JELg2Fs1c10CfQI5eFmF7TknZkFb1aYWaFnaEjIHbUOGuC/ZdImm1I 8TnpOrlSV4WxRBbm2S6VF6T4hG/8X+8HQ2PjfuS3vnJi8eK5WmCWa74CCiqV01/q xLq/G8Qdq1hKnFrbgXAx5sr4/V0GtFbX+g3+VopkLaLgy2caZMDX1HGw/FUymt3E hrxu/ndL/2HYbtTeH27rV8lKvv/j9jnBmx5SuNVOkB3keIGAqQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFHqjDlkUasAU6BunqDTvpEhNblEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzll NDczOC03OTAyLTQzNWItODAyYy1mMzdkYzRiMjVmOTUvY2JmOGNlZDQtYjUwYy0z YzY4LTgwOTUtNjYzZTk3NDc4ODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmM5ZTQ3MzgtNzkwMi00MzViLTgw MmMtZjM3ZGM0YjI1Zjk1L2ZjOWU0NzM4LTc5MDItNDM1Yi04MDJjLWYzN2RjNGIy NWY5NS5jcmwwHwYDVR0jBBgwFoAUNOuS0gTb0TO8bP11PzY75DvgQ74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzllNDczOC03OTAyLTQzNWItODAyYy1mMzdk YzRiMjVmOTUuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBAJC4wQD BAFC4wgwDAMEAELjCwMEAELjEDAMAwQAQuMTAwQAQuMYMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEpbIfG9 xhbkSid0V7tOhvc3TI7O7dlkAUKbirkyG9Hrxuawe1wCdwlHAPAf3K1DTM3VEW1y ke/g7GrGiduyORvxw+X/f0pQ1BP8Uf14vz1DI0wrleKY5lCgzLoQtwCWz2Fx6+CH RsRy8ag0ryoWo0QxLvlTzvW4vnk7AUNzIu/nEOOqmvIAnTZ+nI/S0jQ+pA/e2tAq gaxC/Cd82Owix3/hvbs+EFXpwhoi6ShYuJiRI5aHt5/QJcPIsRPECFLacV5AwKF4 /T44Wa9x3xQN0JLz70rzDeA5XzMvLs+E9wszxPq3tNM39OXFGuZGRMmlyS9Jnz1I hcPX30Si9gkop4g= -----END CERTIFICATE-----Generated at Tue Apr 8 17:04:18 2025 by rpki-client