$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa File: 8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa (raw, json) Hash identifier: egpl5IyAyGu42Y4/VX4PT1tyHaG8czgckB+N0fM3UEA= Subject key identifier: B9:02:34:94:DF:27:4F:B9:BE:A9:A0:9C:6E:B2:45:CE:FF:7C:75:AD Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F432858492E13BF3035D6A2ED61889500 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 36352 IP address blocks: 66.248.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:bf:30:35:d6:a2:ed:61:88:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=81773a83-4384-4de3-b227-3f16f78050df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ca:b0:a8:86:56:64:df:59:f7:12:76:f4:fc: e0:ea:df:5d:2e:12:8c:08:30:8b:e0:6d:99:aa:25: 12:b0:30:7a:91:dd:51:9c:91:cc:32:c4:5f:b8:f4: 59:db:78:11:18:74:3e:87:51:61:ab:57:5d:de:5c: 49:98:ef:64:17:d2:a2:a5:bd:12:1c:8f:c8:d1:b5: 22:79:34:02:1c:e8:c8:4f:7c:1a:94:51:ad:d1:17: 84:08:e7:0e:a5:bb:c9:19:ed:13:18:e8:e1:8d:29: 61:00:e0:50:40:89:a8:7e:7e:04:f1:fd:38:0f:1e: 44:d1:9b:4d:06:c9:f8:fc:4a:26:e8:3e:2b:e2:df: f8:74:ca:5b:f5:a1:c1:4d:00:b6:60:b1:ec:b5:ac: 95:c1:25:60:d4:fd:c4:6c:b2:d1:69:ae:5f:59:b6: d8:9c:50:5e:bc:47:af:e2:a6:c2:73:96:5e:14:e7: a7:fb:cf:00:88:21:0e:66:1a:0a:b4:86:68:43:27: 91:d9:4e:2a:13:66:cc:52:61:a1:fd:28:4e:5e:71: c3:78:0a:7d:6b:65:86:5a:3a:b2:91:5c:02:d6:99: 48:09:27:02:41:19:b5:c2:d9:d8:34:ea:3c:87:bb: 7b:5e:90:87:b6:34:54:93:15:01:74:13:0a:5e:c0: 9d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:02:34:94:DF:27:4F:B9:BE:A9:A0:9C:6E:B2:45:CE:FF:7C:75:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 66.248.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d5:a1:dd:fb:43:55:72:fd:1b:98:a4:dc:63:31:60:98:8b: 66:39:71:84:46:6c:9a:71:72:fa:29:22:db:ba:e1:9c:54:f3: ee:c6:a3:ef:f1:cb:12:2e:30:25:99:f8:5a:d6:c1:d2:17:f1: f8:d3:87:f5:c4:6c:51:63:c4:8c:0b:b9:c4:99:30:49:ed:77: 58:4a:90:a7:a3:d9:09:96:17:17:ed:09:aa:13:ac:5b:dd:51: 02:05:7e:bc:dc:83:42:39:55:9f:1c:9b:e1:d3:0f:3b:7c:a3: 1a:24:32:50:0b:3f:d0:d4:ad:49:e7:66:9a:f2:99:91:5b:93: 27:3c:3e:94:36:ee:87:ad:c6:43:f7:0e:2e:6c:02:b3:08:5c: b9:60:ac:68:ca:21:ad:2e:d8:75:3a:b9:00:a7:64:02:02:d3: 6a:bf:c0:ff:e7:03:15:0d:32:67:80:0b:30:b9:e5:98:bf:c9: 86:bb:e0:d7:58:c9:a4:e9:74:2c:f9:74:82:8c:f6:29:99:b6: 56:29:df:bf:3f:87:fd:a6:dd:d1:a2:90:ff:aa:8b:10:05:e9: 13:86:ad:54:42:1f:17:a6:b9:2f:46:9e:88:a6:c2:63:54:ee: 06:11:79:71:99:04:09:23:ef:e0:c8:71:66:61:2d:6d:35:62: 88:31:85:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE78wNdai7WGIlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk ODE3NzNhODMtNDM4NC00ZGUzLWIyMjctM2YxNmY3ODA1MGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sqwqIZWZN9Z9xJ29Pzg6t9dLhKMCDCL4G2Z qiUSsDB6kd1RnJHMMsRfuPRZ23gRGHQ+h1Fhq1dd3lxJmO9kF9Kipb0SHI/I0bUi eTQCHOjIT3walFGt0ReECOcOpbvJGe0TGOjhjSlhAOBQQImofn4E8f04Dx5E0ZtN Bsn4/Eom6D4r4t/4dMpb9aHBTQC2YLHstayVwSVg1P3EbLLRaa5fWbbYnFBevEev 4qbCc5ZeFOen+88AiCEOZhoKtIZoQyeR2U4qE2bMUmGh/ShOXnHDeAp9a2WGWjqy kVwC1plICScCQRm1wtnYNOo8h7t7XpCHtjRUkxUBdBMKXsCdYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkCNJTfJ0+5vqmgnG6yRc7/fHWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvOGJiNTRmOGMtNGMwMS0z Y2U2LTllZGQtYmFmZDdhMDNiNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrVod37Q1Vy/RuYpNxjMWCYi2Y5cYRGbJpxcvopItu64ZxU8+7Go+/x yxIuMCWZ+FrWwdIX8fjTh/XEbFFjxIwLucSZMEntd1hKkKej2QmWFxftCaoTrFvd UQIFfrzcg0I5VZ8cm+HTDzt8oxokMlALP9DUrUnnZprymZFbkyc8PpQ27oetxkP3 Di5sArMIXLlgrGjKIa0u2HU6uQCnZAIC02q/wP/nAxUNMmeACzC55Zi/yYa74NdY yaTpdCz5dIKM9imZtlYp378/h/2m3dGikP+qixAF6ROGrVRCHxemuS9GnoimwmNU 7gYReXGZBAkj7+DIcWZhLW01YogxhWk= -----END CERTIFICATE-----Generated at Sat Apr 5 09:50:02 2025 by rpki-client