$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/25e93338-0441-3306-b1a8-28fe60a47de0.roa File: 25e93338-0441-3306-b1a8-28fe60a47de0.roa (raw, json) Hash identifier: aJhKTjdzozf5o9mDV3FRvTvBoDNX+SMp4IVD7Slw044= Subject key identifier: 3A:FE:7B:2F:5C:77:C4:5A:52:F7:BE:86:2E:53:1E:FE:11:D8:09:75 Certificate issuer: /CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963 Certificate serial: 010D0C9F432858495EEEE9E8C269FFA3583B1983 Authority key identifier: E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/25e93338-0441-3306-b1a8-28fe60a47de0.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 33125 IP address blocks: 66.97.96.0/20 maxlen: 24 204.9.152.0/21 maxlen: 24 204.11.128.0/21 maxlen: 24 204.15.24.0/21 maxlen: 24 204.15.104.0/21 maxlen: 24 207.200.224.0/19 maxlen: 24 2604:9540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:e9:e8:c2:69:ff:a3:58:3b:19:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=3fa0847e-9415-4856-b6ff-119837b69550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:ed:5a:99:b4:52:e0:ca:e0:8a:d3:26:f2: d1:ab:c6:be:a0:08:26:32:6d:2c:32:13:a1:b1:5a: bf:f3:47:21:21:43:ac:e8:ea:66:3b:79:6f:d0:55: b0:1b:1a:d5:44:04:56:79:20:e2:d0:2f:86:70:0e: 05:5b:96:aa:c9:2b:b6:d4:d0:ac:43:36:94:b3:22: 2b:fb:9b:85:59:5f:9d:a1:1e:0e:f3:8a:90:04:78: f2:b3:ee:cc:59:43:97:04:f3:89:06:2a:3a:20:6e: 88:f2:1b:70:f7:39:07:ac:91:e6:1c:93:fd:cf:c3: e2:2b:db:8f:bf:b6:02:a5:f0:f3:ee:48:b7:ea:60: a3:b9:e6:5e:0a:c8:38:af:d0:85:26:dc:f4:b0:f5: c1:6e:88:40:c9:8b:5f:f9:b2:62:4c:5f:72:51:ff: 35:b1:2a:ae:cb:b7:64:e5:54:ec:07:a2:8d:7d:c7: 25:78:be:7e:67:c0:97:3c:f8:b6:1f:98:83:6a:60: 28:59:3f:c6:3b:21:a0:f2:be:e4:1f:8b:00:fe:29: 32:aa:ca:07:f1:2b:f3:21:d8:52:37:48:6a:13:e6: 48:1b:db:8a:76:90:10:d4:40:b9:80:5e:3c:bb:67: 1e:aa:c1:6b:2a:95:88:0b:69:a4:52:2d:09:58:15: ac:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FE:7B:2F:5C:77:C4:5A:52:F7:BE:86:2E:53:1E:FE:11:D8:09:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/25e93338-0441-3306-b1a8-28fe60a47de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl X509v3 Authority Key Identifier: keyid:E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer sbgp-ipAddrBlock: critical IPv4: 66.97.96.0/20 204.9.152.0/21 204.11.128.0/21 204.15.24.0/21 204.15.104.0/21 207.200.224.0/19 IPv6: 2604:9540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ce:64:49:5b:cd:0a:f9:50:33:05:81:96:5e:5f:01:73:13: 11:7c:60:3e:90:c8:e4:89:3b:ad:53:0e:dc:0f:9b:cc:5c:ec: d1:3e:69:1f:50:de:e1:3b:ce:1d:f3:8f:c4:8e:ea:54:70:7f: 96:94:de:c2:86:90:a4:f1:6f:b6:e6:fa:7f:95:6c:01:b6:26: 1d:57:3e:2b:c5:da:c7:c8:56:95:3f:da:c8:d4:7e:ad:cb:08: 78:21:c0:d0:5c:07:48:59:ab:fb:f6:b4:5e:9e:fa:7f:9d:26: 94:52:29:4d:57:51:35:d5:72:df:0d:7f:85:af:1e:58:34:6e: 06:49:64:fb:13:9c:68:56:08:50:ca:24:77:0a:8d:d0:43:f1: 50:44:98:64:f9:d7:33:13:99:62:ad:88:36:d0:b7:c6:66:fa: 80:f0:5f:f7:cf:40:ae:9a:53:5b:90:41:7d:95:9a:c2:88:2c: 15:f0:3c:d9:3b:87:1e:d5:12:66:98:48:a2:b1:b4:1d:ef:b7: 48:e3:86:55:22:97:7b:83:fd:a1:7b:77:23:02:0b:3e:ee:66: ff:2c:9d:24:97:01:8b:b4:d6:01:d2:73:43:7f:b7:bd:e0:0e: f8:98:e9:99:12:e1:39:88:f5:fa:20:e2:77:27:48:2a:32:b6: 24:dd:52:99 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEle7unowmn/o1g7GYMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg2YzM1M2QtMmFlNC00YTI4LThkZjctMGE5MDZiN2M2 OTYzMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk M2ZhMDg0N2UtOTQxNS00ODU2LWI2ZmYtMTE5ODM3YjY5NTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3PtWpm0UuDK4IrTJvLRq8a+oAgmMm0sMhOh sVq/80chIUOs6OpmO3lv0FWwGxrVRARWeSDi0C+GcA4FW5aqySu21NCsQzaUsyIr +5uFWV+doR4O84qQBHjys+7MWUOXBPOJBio6IG6I8htw9zkHrJHmHJP9z8PiK9uP v7YCpfDz7ki36mCjueZeCsg4r9CFJtz0sPXBbohAyYtf+bJiTF9yUf81sSquy7dk 5VTsB6KNfccleL5+Z8CXPPi2H5iDamAoWT/GOyGg8r7kH4sA/ikyqsoH8SvzIdhS N0hqE+ZIG9uKdpAQ1EC5gF48u2ceqsFrKpWIC2mkUi0JWBWsAwIDAQABo4IDgjCC A34wHQYDVR0OBBYEFDr+ey9cd8RaUve+hi5THv4R2Al1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jODZj MzUzZC0yYWU0LTRhMjgtOGRmNy0wYTkwNmI3YzY5NjMvMjVlOTMzMzgtMDQ0MS0z MzA2LWIxYTgtMjhmZTYwYTQ3ZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzg2YzM1M2QtMmFlNC00YTI4LThk ZjctMGE5MDZiN2M2OTYzL2M4NmMzNTNkLTJhZTQtNGEyOC04ZGY3LTBhOTA2Yjdj Njk2My5jcmwwHwYDVR0jBBgwFoAU49nhggrznCVs6xuwMmm+fyT9fvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jODZjMzUzZC0yYWU0LTRhMjgtOGRmNy0wYTkw NmI3YzY5NjMuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEQmFgAwQD zAmYAwQDzAuAAwQDzA8YAwQDzA9oAwQFz8jgMA0EAgACMAcDBQAmBJVAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAFbOZElbzQr5UDMFgZZeXwFzExF8YD6QyOSJO61TDtwPm8xc7NE+aR9Q3uE7 zh3zj8SO6lRwf5aU3sKGkKTxb7bm+n+VbAG2Jh1XPivF2sfIVpU/2sjUfq3LCHgh wNBcB0hZq/v2tF6e+n+dJpRSKU1XUTXVct8Nf4WvHlg0bgZJZPsTnGhWCFDKJHcK jdBD8VBEmGT51zMTmWKtiDbQt8Zm+oDwX/fPQK6aU1uQQX2VmsKILBXwPNk7hx7V EmaYSKKxtB3vt0jjhlUil3uD/aF7dyMCCz7uZv8snSSXAYu01gHSc0N/t73gDviY 6ZkS4TmI9fog4ncnSCoytiTdUpk= -----END CERTIFICATE-----Generated at Fri Apr 11 23:37:04 2025 by rpki-client