$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/38b0deb3-ebb4-3576-86af-67255c5388ed.roa File: 38b0deb3-ebb4-3576-86af-67255c5388ed.roa (raw, json) Hash identifier: CTwj+TPQWL2pcPohyNqtkWXWQHtWNV3q+gdLQvqXJF4= Subject key identifier: 3A:29:D5:1E:52:89:A3:93:FF:5D:A1:97:A3:DC:7C:8F:C1:02:A1:88 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F43285849E2251E2775C867164C231EC0 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/38b0deb3-ebb4-3576-86af-67255c5388ed.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 32181 IP address blocks: 66.252.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:1e:27:75:c8:67:16:4c:23:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=1d9ee1a8-6ee6-4dbc-8184-d28364c3246e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:fe:46:e8:93:c5:98:97:17:96:7d:6d:2f: 05:1e:35:36:66:8f:79:54:fa:41:22:78:f8:4c:1c: b9:c8:25:50:5d:3c:df:04:cd:b9:db:80:a6:29:43: 41:3e:19:47:09:ff:37:8b:2d:0d:24:c7:a6:ee:9e: 14:1d:70:4c:f8:1e:07:ca:d6:a7:cf:92:c7:0a:df: 6e:c4:d0:e0:88:14:c0:78:30:8c:9c:b9:6d:ef:40: 79:43:99:ed:7c:ad:c5:ca:f6:80:91:c9:8c:b1:29: 1b:b5:a7:5e:57:c7:98:77:b8:cf:42:16:9a:68:58: 92:46:35:b2:1a:bf:9e:e6:04:f7:f0:57:89:32:43: dc:aa:b1:4b:d5:9d:82:f3:c4:6f:4a:ff:60:2b:73: ab:7e:3b:26:56:54:73:ef:c6:08:75:23:e2:e9:89: c5:d1:6f:bd:a9:61:32:1d:0e:27:eb:da:1c:95:84: ad:84:4d:82:4a:d0:dd:2f:b3:97:cd:14:7a:50:c3: bc:2f:17:5a:17:df:8c:fb:86:d1:03:2e:9c:ae:cf: 14:2d:11:76:c1:e1:55:64:3e:e9:b7:ee:99:bf:05: 2c:01:84:ec:83:8e:ec:32:16:9b:44:7f:33:fe:4c: 3c:6e:64:1a:de:c9:4a:4f:29:bd:aa:63:7f:97:72: 81:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:29:D5:1E:52:89:A3:93:FF:5D:A1:97:A3:DC:7C:8F:C1:02:A1:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/38b0deb3-ebb4-3576-86af-67255c5388ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 66.252.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:5d:02:f2:82:f8:4a:02:20:d8:67:a2:96:9b:9d:5b:f7:66: ea:b7:b2:c9:b3:eb:2d:66:79:c7:61:96:d8:c8:27:be:28:67: f4:4a:87:15:e6:a1:7a:08:d5:f4:8d:ad:a5:18:1f:6d:d0:1d: fd:07:26:e1:7e:81:59:11:ae:6e:0e:ca:f8:b6:53:28:2c:e9: 82:ca:01:1e:5f:7e:e6:c5:ce:3f:17:a1:1e:9d:ea:c7:51:08: f0:c0:d7:0f:b2:e0:05:af:d2:4f:fe:1c:8a:36:ef:72:53:9b: 5a:d6:93:e8:53:be:a1:f0:42:a1:cb:51:d1:1f:2a:12:30:9d: fc:cb:fd:56:ae:22:34:01:39:99:28:5f:c4:85:21:a6:af:96: ff:09:60:3e:4d:a9:ed:cf:15:39:ef:4a:17:ed:da:37:17:60: 26:e1:e3:94:81:ec:1a:59:47:61:8b:3b:5c:88:30:8e:a4:34: f2:7b:aa:ce:f4:60:e3:e3:db:0a:d2:0c:74:29:e7:94:57:ad: 27:87:01:0d:50:b0:bc:40:30:e8:cd:25:76:5d:1e:34:c8:8b: b3:b5:1f:71:62:c0:e0:c0:16:3d:aa:6a:25:2e:47:48:dc:5f: df:18:3b:65:50:6c:7f:2b:36:32:9c:2e:fb:68:d5:b9:c5:1c: 5a:47:46:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJR4ndchnFkwjHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk MWQ5ZWUxYTgtNmVlNi00ZGJjLTgxODQtZDI4MzY0YzMyNDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeP+RuiTxZiXF5Z9bS8FHjU2Zo95VPpBInj4 TBy5yCVQXTzfBM2524CmKUNBPhlHCf83iy0NJMem7p4UHXBM+B4Hytanz5LHCt9u xNDgiBTAeDCMnLlt70B5Q5ntfK3FyvaAkcmMsSkbtadeV8eYd7jPQhaaaFiSRjWy Gr+e5gT38FeJMkPcqrFL1Z2C88RvSv9gK3OrfjsmVlRz78YIdSPi6YnF0W+9qWEy HQ4n69oclYSthE2CStDdL7OXzRR6UMO8LxdaF9+M+4bRAy6crs8ULRF2weFVZD7p t+6ZvwUsAYTsg47sMhabRH8z/kw8bmQa3slKTym9qmN/l3KB1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDop1R5SiaOT/12hl6PcfI/BAqGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvMzhiMGRlYjMtZWJiNC0z NTc2LTg2YWYtNjcyNTVjNTM4OGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQvwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBdAvKC+EoCINhnopabnVv3Zuq3ssmz6y1mecdhltjIJ74oZ/RKhxXm oXoI1fSNraUYH23QHf0HJuF+gVkRrm4Oyvi2Uygs6YLKAR5ffubFzj8XoR6d6sdR CPDA1w+y4AWv0k/+HIo273JTm1rWk+hTvqHwQqHLUdEfKhIwnfzL/VauIjQBOZko X8SFIaavlv8JYD5Nqe3PFTnvShft2jcXYCbh45SB7BpZR2GLO1yIMI6kNPJ7qs70 YOPj2wrSDHQp55RXrSeHAQ1QsLxAMOjNJXZdHjTIi7O1H3FiwODAFj2qaiUuR0jc X98YO2VQbH8rNjKcLvto1bnFHFpHRgo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:39 2025 by rpki-client