$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/3f7c87a1-e13f-3226-b451-7dd90baff087.roa File: 3f7c87a1-e13f-3226-b451-7dd90baff087.roa (raw, json) Hash identifier: mfqj0nJ8vo+rU1Ar4cCBvDxoIpwRTqfRQXEdGHi5M4M= Subject key identifier: 5C:B5:E2:26:16:3D:D0:29:FB:B2:A5:60:6E:4D:53:FF:28:54:F7:16 Certificate issuer: /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Certificate serial: 010D0C9F4328584961B9A29DCB9D2F4F7F799B40 Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/3f7c87a1-e13f-3226-b451-7dd90baff087.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 26703 IP address blocks: 66.102.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a2:9d:cb:9d:2f:4f:7f:79:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=dec7d42a-f094-44d8-a484-adc09edf8314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9d:9a:8e:c2:91:5e:fe:7c:24:a9:95:7e:4f: 87:df:a0:b5:e1:2f:a0:ea:e4:22:5e:2e:22:77:ba: 59:85:e7:9f:af:6b:f9:47:0a:db:3f:c4:f7:04:b4: 84:66:b9:21:09:4e:ab:94:6a:54:c7:fe:fc:d8:60: 16:83:38:0c:ed:a6:06:23:cd:41:45:50:fd:e0:73: aa:be:57:35:e4:29:29:6c:d7:7f:81:72:8a:34:24: e7:00:92:a6:50:b7:cb:b1:a6:5c:88:0c:d3:45:f6: 43:1c:a1:09:9f:75:b1:e1:78:c4:38:d2:1f:0e:1f: 26:29:a3:18:c5:a7:05:23:5d:e9:9e:93:a5:33:2a: 40:9a:89:64:c5:63:c7:3a:fa:91:cc:63:ea:d3:5d: 90:c4:72:77:93:f2:5c:e3:de:f5:89:8a:f2:df:4a: 3c:77:0f:d9:70:3a:a2:29:12:db:61:b5:18:f8:fe: e2:0d:23:52:1e:63:08:08:ae:9d:68:d0:e9:07:b8: 3d:77:71:7a:33:ac:b6:46:b2:d8:1d:75:f2:84:ee: c2:f3:ee:0c:0c:9a:fe:63:a4:2c:b8:84:35:32:ce: 2c:6b:e5:8e:17:98:86:36:88:cd:5d:e9:6b:ad:b4: b3:93:67:b3:06:84:a1:c5:ff:0d:b9:b9:1a:93:62: f2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B5:E2:26:16:3D:D0:29:FB:B2:A5:60:6E:4D:53:FF:28:54:F7:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/3f7c87a1-e13f-3226-b451-7dd90baff087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl X509v3 Authority Key Identifier: keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer sbgp-ipAddrBlock: critical IPv4: 66.102.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b8:fb:e5:71:1b:08:cb:97:a6:1d:7c:68:d9:57:41:c7:db: c9:f6:70:b9:29:18:1e:21:ea:a7:1a:e0:74:bf:ee:3e:59:b2: dc:0b:85:8d:8e:70:e1:16:11:44:ed:30:de:f4:f9:19:be:02: d1:e0:03:7b:4f:1c:d2:77:ff:5a:b9:ca:94:0d:34:56:fb:80: 1d:e0:60:10:b8:0e:3c:51:fb:15:9b:3e:f3:51:08:30:42:a6: f8:2e:c6:4d:42:09:2c:33:65:42:2c:f2:d3:9d:3b:bc:94:31: 87:9a:49:4a:ae:60:9c:54:5d:22:78:93:a8:07:bb:19:89:0f: e0:bf:b3:01:ab:a3:96:6a:fc:e3:81:92:b4:c0:19:f7:df:fb: cf:9b:da:2b:c2:40:91:3a:5b:ef:2c:8b:ce:9b:be:81:5f:9e: f1:bf:75:de:d1:20:70:6d:92:98:54:bf:65:86:cb:6c:19:7e: 8a:1c:c7:17:d9:1a:24:12:c8:dd:9e:6c:24:68:d3:4e:59:bb: 42:59:ce:7f:38:c2:77:13:09:6b:ab:a4:6c:8b:1a:75:b8:8e: b1:31:5b:6a:f1:49:f7:ec:52:22:19:91:06:3e:23:db:25:00: 57:af:73:60:9a:a7:f7:b3:ad:5e:42:22:e7:88:4f:8b:f1:ed: be:14:0b:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuaKdy50vT395m0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ2ODNhNTQtZjhhNS00ZDRiLTg4NzgtOGE5ZWU3OGVj ZTA4MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZGVjN2Q0MmEtZjA5NC00NGQ4LWE0ODQtYWRjMDllZGY4MzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr52ajsKRXv58JKmVfk+H36C14S+g6uQiXi4i d7pZheefr2v5RwrbP8T3BLSEZrkhCU6rlGpUx/782GAWgzgM7aYGI81BRVD94HOq vlc15CkpbNd/gXKKNCTnAJKmULfLsaZciAzTRfZDHKEJn3Wx4XjEONIfDh8mKaMY xacFI13pnpOlMypAmolkxWPHOvqRzGPq012QxHJ3k/Jc4971iYry30o8dw/ZcDqi KRLbYbUY+P7iDSNSHmMICK6daNDpB7g9d3F6M6y2RrLYHXXyhO7C8+4MDJr+Y6Qs uIQ1Ms4sa+WOF5iGNojNXelrrbSzk2ezBoShxf8Nubkak2LynwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy14iYWPdAp+7KlYG5NU/8oVPcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4 M2E1NC1mOGE1LTRkNGItODg3OC04YTllZTc4ZWNlMDgvM2Y3Yzg3YTEtZTEzZi0z MjI2LWI0NTEtN2RkOTBiYWZmMDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGQ2ODNhNTQtZjhhNS00ZDRiLTg4 NzgtOGE5ZWU3OGVjZTA4LzBkNjgzYTU0LWY4YTUtNGQ0Yi04ODc4LThhOWVlNzhl Y2UwOC5jcmwwHwYDVR0jBBgwFoAUYhQJZeW4q2q2o5sGcBnKdCWTjqswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4M2E1NC1mOGE1LTRkNGItODg3OC04YTll ZTc4ZWNlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQmbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa4++VxGwjLl6YdfGjZV0HH28n2cLkpGB4h6qca4HS/7j5ZstwLhY2O cOEWEUTtMN70+Rm+AtHgA3tPHNJ3/1q5ypQNNFb7gB3gYBC4DjxR+xWbPvNRCDBC pvguxk1CCSwzZUIs8tOdO7yUMYeaSUquYJxUXSJ4k6gHuxmJD+C/swGro5Zq/OOB krTAGfff+8+b2ivCQJE6W+8si86bvoFfnvG/dd7RIHBtkphUv2WGy2wZfoocxxfZ GiQSyN2ebCRo005Zu0JZzn84wncTCWurpGyLGnW4jrExW2rxSffsUiIZkQY+I9sl AFevc2Cap/ezrV5CIueIT4vx7b4UC+k= -----END CERTIFICATE-----Generated at Sat Apr 12 07:48:15 2025 by rpki-client