$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/140177d9-4785-361a-8ed9-7f2ef0d09070.roa File: 140177d9-4785-361a-8ed9-7f2ef0d09070.roa (raw, json) Hash identifier: 54Oi10g4c+HxH7gb4+fI3BI//Dn/Vv2KKNtQKqGrIt4= Subject key identifier: 5A:7F:75:26:88:49:9A:40:62:AC:4B:31:88:92:B9:68:AE:6C:2C:57 Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F432858494CC94EB879FF3F95C75C1D00 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/140177d9-4785-361a-8ed9-7f2ef0d09070.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 396026 IP address blocks: 66.249.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4e:b8:79:ff:3f:95:c7:5c:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=9291e329-982b-479f-b85c-22f53dd55f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:62:84:c2:8e:9c:a6:03:61:08:1e:36:7b: 80:6b:90:c9:23:72:fc:fe:ff:35:2e:12:d9:e4:06: f3:75:43:ea:8d:2f:16:7a:ef:4b:8c:08:00:d3:c2: 14:4f:83:4e:52:6d:4c:d1:3a:ad:e7:aa:f2:ca:59: 3d:0c:04:14:f4:a0:66:a0:a4:e3:e7:fd:30:b7:e5: 89:af:41:59:ab:80:5f:16:88:a3:0a:f6:df:36:c3: 4e:dd:d5:51:da:87:c4:38:fc:7e:62:36:6c:f8:7c: 28:01:03:7b:67:a2:2a:f4:52:4c:d6:db:0f:17:c7: cf:64:cb:f5:44:60:18:31:cc:70:86:b6:65:c2:18: de:df:ae:f1:93:3e:60:76:92:b6:45:e6:22:68:3b: 9f:6c:0d:ef:eb:c4:85:b3:5a:cc:74:16:af:97:9f: 51:d9:ef:aa:3a:2f:4e:e9:f8:0c:0a:c7:51:7e:e3: 3c:d7:e5:69:1c:80:4d:bd:b8:a0:85:d8:76:ad:1e: 56:25:bc:f4:be:33:3b:f7:cf:4c:49:41:27:92:30: 51:e1:bf:62:ec:95:86:e4:72:fb:80:ff:fb:e4:85: f1:18:03:0c:71:75:92:f0:c3:0c:71:7f:be:8a:d0: a2:1a:b9:1c:be:31:2e:7d:5a:32:21:33:72:89:a2: b5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7F:75:26:88:49:9A:40:62:AC:4B:31:88:92:B9:68:AE:6C:2C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/140177d9-4785-361a-8ed9-7f2ef0d09070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f1:46:17:f3:f0:49:67:0e:3f:31:d0:ca:b6:85:9d:e1:a7: 92:2d:a4:c5:26:56:71:d9:49:e2:ec:a4:c1:42:23:2f:fd:4c: 6f:48:25:e8:8d:83:70:83:48:1c:44:92:ad:78:ff:88:a4:50: e9:b6:a4:86:a0:06:2a:cf:b4:cb:41:6b:d7:2b:11:c6:51:b9: e7:a9:2c:98:47:f4:21:fa:c6:e9:f2:6b:58:03:60:16:3e:41: f7:56:6e:f1:59:01:eb:66:83:68:85:6b:0d:aa:d2:99:5b:97: 3f:e7:15:5b:f9:ed:8d:e4:db:9d:39:bc:a2:c2:69:1d:4c:cc: 8e:12:1c:dc:a3:f9:44:21:9f:0a:85:08:a6:4e:3f:1c:12:88: d0:f6:34:6a:78:c0:f2:ae:d0:81:38:1e:a0:b1:42:66:c4:08: 3b:6e:19:fe:0a:16:70:b9:52:01:99:5f:95:a5:25:79:3f:b4: a8:46:61:8a:51:90:a7:14:d9:90:c0:92:69:5d:af:37:0f:96: 37:8a:dc:9a:bc:a8:ef:5b:f7:6c:0e:bd:e9:31:73:5a:ee:f4: 50:b2:74:6a:36:b9:04:f5:e5:c1:ad:4a:b4:b1:46:ef:f3:c1: 65:55:1a:08:47:94:31:df:f2:cc:31:89:9d:b9:39:eb:fa:88: e5:65:a6:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyU64ef8/lcdcHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk OTI5MWUzMjktOTgyYi00NzlmLWI4NWMtMjJmNTNkZDU1ZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPdihMKOnKYDYQgeNnuAa5DJI3L8/v81LhLZ 5AbzdUPqjS8Weu9LjAgA08IUT4NOUm1M0Tqt56ryylk9DAQU9KBmoKTj5/0wt+WJ r0FZq4BfFoijCvbfNsNO3dVR2ofEOPx+YjZs+HwoAQN7Z6Iq9FJM1tsPF8fPZMv1 RGAYMcxwhrZlwhje367xkz5gdpK2ReYiaDufbA3v68SFs1rMdBavl59R2e+qOi9O 6fgMCsdRfuM81+VpHIBNvbighdh2rR5WJbz0vjM7989MSUEnkjBR4b9i7JWG5HL7 gP/75IXxGAMMcXWS8MMMcX++itCiGrkcvjEufVoyITNyiaK1qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp/dSaISZpAYqxLMYiSuWiubCxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvMTQwMTc3ZDktNDc4NS0z NjFhLThlZDktN2YyZWYwZDA5MDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7xRhfz8ElnDj8x0Mq2hZ3hp5ItpMUmVnHZSeLspMFCIy/9TG9IJeiN g3CDSBxEkq14/4ikUOm2pIagBirPtMtBa9crEcZRueepLJhH9CH6xunya1gDYBY+ QfdWbvFZAetmg2iFaw2q0plblz/nFVv57Y3k2505vKLCaR1MzI4SHNyj+UQhnwqF CKZOPxwSiND2NGp4wPKu0IE4HqCxQmbECDtuGf4KFnC5UgGZX5WlJXk/tKhGYYpR kKcU2ZDAkmldrzcPljeK3Jq8qO9b92wOvekxc1ru9FCydGo2uQT15cGtSrSxRu/z wWVVGghHlDHf8swxiZ25Oev6iOVlpj0= -----END CERTIFICATE-----Generated at Sun Apr 6 20:41:57 2025 by rpki-client