$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/aa17d820-7b12-31f4-9e2c-68bad6f9d183.roa File: aa17d820-7b12-31f4-9e2c-68bad6f9d183.roa (raw, json) Hash identifier: zPBdWgpG+/5ucUOT2k8F35R8mSIk+2hpScRo0r8Igws= Subject key identifier: 33:DC:72:74:2F:38:3D:A2:6F:B0:7F:C8:02:B0:10:B5:46:79:35:A1 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584A0C0561C9496F06B4725BFA00 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/aa17d820-7b12-31f4-9e2c-68bad6f9d183.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 15092 IP address blocks: 66.43.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:61:c9:49:6f:06:b4:72:5b:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=a4bb00a0-72c4-4715-92d6-0c0f8bddcfb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7d:63:65:43:e0:98:97:ba:2a:42:38:f1:c1: 51:af:25:69:b1:ce:31:23:b0:da:ed:c4:ec:ef:1a: 76:a5:aa:d8:77:41:7e:22:47:3f:a0:37:93:bf:c0: 2a:84:b7:ad:e1:69:86:2e:b2:ba:99:0b:99:48:8c: 3f:54:98:0d:ae:30:da:42:bc:a4:f9:a8:d2:fe:46: 02:f3:73:ce:8e:2d:d7:55:d9:b3:5c:a0:1f:12:c5: 04:ab:69:ca:c6:f0:32:0e:a7:83:1e:8c:7e:5c:c0: 12:77:cb:6a:52:06:df:b3:b1:1a:78:e2:84:8f:df: 0d:94:bc:1e:05:fb:0e:55:47:50:e7:45:b8:79:85: 70:00:eb:87:64:0a:4a:a4:4d:b2:24:27:1e:a0:4a: 9d:53:94:47:b0:cf:71:56:40:59:78:71:15:60:87: 6b:41:05:c4:9d:08:3b:58:6c:c7:44:e6:fb:ea:06: 34:5d:c5:e8:f2:05:04:1c:c0:7f:6a:b5:d7:fa:b0: 81:30:2d:09:3b:54:fd:ab:c0:7d:c6:0b:e3:3a:94: bd:f2:b7:10:d4:85:a6:97:8b:ec:ae:cd:88:db:1b: 7c:ce:51:29:53:a9:b3:e5:56:82:c5:17:0f:93:12: 9f:c3:3b:ae:f0:1e:d7:79:ce:e2:e9:d5:65:03:1f: b2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DC:72:74:2F:38:3D:A2:6F:B0:7F:C8:02:B0:10:B5:46:79:35:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/aa17d820-7b12-31f4-9e2c-68bad6f9d183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 66.43.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f7:73:d1:26:70:ac:d5:a6:fc:fa:ca:3c:9d:25:74:be:d2: 1b:69:24:e7:2a:44:c1:11:9f:16:d1:00:19:53:f8:53:8f:6a: 9d:1f:73:05:a8:e9:81:c7:ce:76:73:df:0e:48:f3:c6:7d:1e: dc:09:da:29:f8:5c:49:3b:8f:e6:67:b0:1e:44:e2:47:5a:fe: c4:5d:93:60:0b:32:9b:4c:86:d6:61:c9:1d:6a:bb:56:68:dc: b0:ce:11:36:9b:0f:c0:40:59:4c:99:cb:b7:cb:0e:4e:03:28: ac:a4:c5:95:67:75:17:71:af:5a:18:ed:e5:d9:b2:b7:36:80: 5e:c1:5d:e6:85:e8:4b:62:09:b7:9e:9a:6f:24:19:20:a8:c0: 76:71:2c:77:6b:e3:c2:a6:5c:6d:8e:e0:4e:f0:8b:ec:4d:7b: 9b:97:d6:3e:88:af:e0:ad:bd:fc:59:a4:2b:5c:11:96:10:3a: 8b:a9:ff:24:3f:c4:73:50:96:c8:29:d4:96:15:fc:cc:4c:de: 34:d6:ae:9c:6d:e1:b5:a8:0e:02:24:3d:b1:f5:0b:d0:01:83: df:90:ca:0e:61:4e:a9:44:ee:98:54:62:31:e8:48:f9:44:d2: c0:c6:05:17:c6:ec:45:02:ef:a7:3d:18:e5:5d:70:48:79:4e: 4f:2c:f2:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWHJSW8GtHJb+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YTRiYjAwYTAtNzJjNC00NzE1LTkyZDYtMGMwZjhiZGRjZmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj31jZUPgmJe6KkI48cFRryVpsc4xI7Da7cTs 7xp2parYd0F+Ikc/oDeTv8AqhLet4WmGLrK6mQuZSIw/VJgNrjDaQryk+ajS/kYC 83POji3XVdmzXKAfEsUEq2nKxvAyDqeDHox+XMASd8tqUgbfs7EaeOKEj98NlLwe BfsOVUdQ50W4eYVwAOuHZApKpE2yJCceoEqdU5RHsM9xVkBZeHEVYIdrQQXEnQg7 WGzHROb76gY0XcXo8gUEHMB/arXX+rCBMC0JO1T9q8B9xgvjOpS98rcQ1IWml4vs rs2I2xt8zlEpU6mz5VaCxRcPkxKfwzuu8B7Xec7i6dVlAx+y9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPccnQvOD2ib7B/yAKwELVGeTWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvYWExN2Q4MjAtN2IxMi0z MWY0LTllMmMtNjhiYWQ2ZjlkMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQitpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP3c9EmcKzVpvz6yjydJXS+0htpJOcqRMERnxbRABlT+FOPap0fcwWo 6YHHznZz3w5I88Z9HtwJ2in4XEk7j+ZnsB5E4kda/sRdk2ALMptMhtZhyR1qu1Zo 3LDOETabD8BAWUyZy7fLDk4DKKykxZVndRdxr1oY7eXZsrc2gF7BXeaF6EtiCbee mm8kGSCowHZxLHdr48KmXG2O4E7wi+xNe5uX1j6Ir+CtvfxZpCtcEZYQOoup/yQ/ xHNQlsgp1JYV/MxM3jTWrpxt4bWoDgIkPbH1C9ABg9+Qyg5hTqlE7phUYjHoSPlE 0sDGBRfG7EUC76c9GOVdcEh5Tk8s8gA= -----END CERTIFICATE-----Generated at Sun Jun 8 18:33:35 2025 by rpki-client